Privacy notice

Controller: Real Energy Holding Limited (Office 1, 91 Market Street, Hoylake, United Kingdom, CH47 5AA). Representative of the controller in the European Union (Article 27 GDPR): Real Energy Enterprises Kft. (1139 Budapest, Frangepán utca 28-32. A épület, 7. emelet, 702.)

Contact: info@realenergy.group

Website visitors

1. When you view the website, the hosting provider (Cloudflare) keeps a technical log (IP address, time, requested page, browser). Purpose: secure operation of the site.

2. If you e-mail us, we process the data in your message in order to reply to you and handle your request.

3. The website uses no cookies and no advertising tracking. To measure visitor numbers we use Cloudflare Web Analytics, which records aggregated visit and performance data (for example the page viewed, the referring page, browser and device type, country and load time); according to Cloudflare it uses no cookies and no identifier stored in the browser, and it does not identify visitors. Purpose: measuring the site's visitor numbers and performance. Only your chosen language is stored persistently in your browser (localStorage); you set this yourself, and it is not sent to us. When you use the THE CAN data request form, a local copy of your entries and the login session identifier are also kept in the temporary storage of the browser tab (sessionStorage) and are deleted when the tab is closed.

4. The site serves its fonts itself; the only external script loaded is the Cloudflare Web Analytics measurement code.

5. When you visit the root address, a one-time language selection is made based on the country code passed on by Cloudflare (CF-IPCountry); the IP address is not stored and is used only for the redirect.

Admin and ERP users

6. Data processing on the admin and ERP interface (admin.realenergy.group) applies only to people who are given access by invitation; it does not concern visitors of the website. This also covers requesting an invitation and checking an invitation code on the Login page: the request and the status of the code (time, successful or unsuccessful attempt, IP fingerprint) are logged on the server. For login, the admin interface uses the security session cookies of Cloudflare Access; these are created only when the admin interface is opened, not for visitors of the website.

Users of the data request form

7. The data request form and document downloads are opened with a single-use code sent to your e-mail address and valid for 15 minutes. A data request form you have started is stored on the server, linked to your verified e-mail address (Cloudflare D1 database; uploaded files in Cloudflare R2 storage, under European Union jurisdiction). Data request forms that have been started but not finally submitted, together with the related documents, are stored for no more than 30 days and are then deleted automatically; we send you a single e-mail reminder 5 days before deletion. While you use the form, the temporary storage of the browser tab (sessionStorage) keeps a local copy of your entries and a session identifier valid for no more than 12 hours; both are deleted when the tab is closed.

8. We may process submitted project data, in particular the project name, technical parameters, energy use, consumption and metering data, for the purpose of technical, energy and business evaluation and the preparation of offers. Where possible, project and technical data are analysed in a form that does not identify individuals or in aggregated form.

9. We process personal data only to the extent necessary to handle the data request, to keep in contact and to fulfil legal obligations. We do not use personal data for project, technology or business analysis. Only authorised persons have access to personal data contained in uploaded documents. Logins, code requests, downloads and submissions are logged to control access and prevent misuse (time, e-mail address, name, telephone number and a keyed, non-reversible fingerprint of the IP address).

10. A submitted data request form is subject to final registration and to verification by the designated legal representative; this must be acknowledged on submission, and we record the time of acknowledgement. After submission, or when the first document is uploaded, we send a single registration invitation to the verified e-mail address. If registration is not completed within 14 days of submission, the submission expires and no indicative offer can be sent for it. Verification can be approved only by the designated legal representative.

Processors and recipients: Cloudflare (hosting, network, country code, visitor statistics: Cloudflare Web Analytics, protection of the admin login: Cloudflare Access, and outgoing notification e-mails: Cloudflare Email Service), Microsoft (staff mailboxes and incoming e-mail, as long as the MX record of realenergy.group points to Microsoft 365).

Your rights: access, rectification, erasure, restriction, objection, portability, complaint to the supervisory authority.

China: separate rules may apply to users in China (PIPL, cross-border data transfer).