Legal

Privacy policy

Last updated 29 October 2026

1. Who we are

Great Energy ApS is the data controller for personal data processed through greatenergy.io (the “website”).

Company
Great Energy ApS
Address
Gammel Kongevej 60, 1850 Frederiksberg C, Denmark
CVR
26598613
Contact
Contact form

This policy covers the website, its contact form and the video link page at greatenergy.io/video. The investor portal at investor.greatenergy.io is a separate service with its own terms and privacy information.

2. What we collect

When you use the contact form, we receive the details you enter: your name, email address and message, and, if you choose to add them, your company and the role you are reaching out in.

To protect the contact form against spam, Cloudflare Turnstile checks whether the form is used by a person or a bot. To do this, Cloudflare processes technical information such as your IP address and characteristics of your browser and device.

When you visit the website, our hosting provider Cloudflare processes the technical data needed to deliver the pages and keep them secure, such as your IP address, the pages requested, the time of the request and your browser’s user agent.

When you open our video link at greatenergy.io/video, the page loads the Google tag from Google Ads and then sends you on to the video on YouTube. If you are outside the EU/EEA, the United Kingdom and Switzerland, the tag stores Google Ads cookies in your browser that record that you followed the link and, if you came from a Google ad, which ad you clicked. Google uses this to measure our campaigns and to let us show our ads again to people who opened the link. Inside those regions the tag sets no cookies, and Google receives only a cookieless signal with basic technical information, such as the time of the visit and your browser type, which it uses for aggregated measurement.

The video itself plays on YouTube, which Google operates under its own privacy policy.

No other page on the website uses analytics, advertising or tracking tools.

3. Why we process it, and on what legal basis

  • Answering your enquiry and any follow-up correspondence. Legal basis: our legitimate interest in responding to people who contact us (GDPR Art. 6(1)(f)) or, where your enquiry concerns entering into an agreement with us, steps taken at your request before such an agreement (Art. 6(1)(b)).
  • Keeping the website and contact form secure, including preventing spam and abuse. Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f)).
  • Measuring our advertising and showing our ads again to people who opened the video link, through Google Ads on the video link page. Legal basis: our legitimate interest in measuring and marketing our business (Art. 6(1)(f)).
  • Complying with legal obligations where a law requires us to keep or disclose information. Legal basis: Art. 6(1)(c).

4. Cookies

Apart from the video link page, the website does not set cookies and does not store information in your browser for analytics, advertising or tracking. Fonts, images and video are served from our own domain. The only third-party services a page loads are Cloudflare Turnstile on the contact page and the Google tag on the video link page.

On the video link page, visitors outside the EU/EEA, the United Kingdom and Switzerland receive these Google Ads cookies on greatenergy.io:

  • _gcl_au links your visit to our advertising. It expires after 90 days.
  • _gcl_aw stores the ad click when you arrive from a Google ad. It expires after 90 days.

Google may also read or set its own advertising cookies on Google domains, as described in Google’s advertising policy. Visitors in the EU/EEA, the United Kingdom and Switzerland receive no cookies from the page. You can delete cookies in your browser at any time, and you can manage the ads Google shows you in My Ad Center.

5. Who receives your data

We do not sell personal data. We use the following service providers, which process data on our behalf under data processing agreements:

  • Cloudflare, Inc. provides website hosting, network security, Turnstile spam protection and delivery of contact form messages to our inboxes.
  • Google provides Google Workspace, where contact form messages are received and stored in our email.

Google Ireland Limited receives the data from the Google tag on the video link page. For advertising, Google acts as an independent controller under the Google Ads Controller-Controller Data Protection Terms and processes the data under its own privacy policy.

We may also disclose data to public authorities or professional advisers where the law requires it, or where it is necessary to establish, exercise or defend legal claims.

6. Transfers outside the EU/EEA

Cloudflare and Google are US companies and may process data outside the EU/EEA, including in the United States. Both participate in the EU–U.S. Data Privacy Framework, and transfers are covered by the European Commission’s adequacy decision for that framework or by the Commission’s standard contractual clauses.

7. How long we keep it

We keep contact form messages and related correspondence for up to 12 months after your enquiry has been concluded. We keep them longer only where we need to for an ongoing relationship with you, to comply with the law, or to establish, exercise or defend legal claims. Technical data processed by Cloudflare is kept only as long as needed for delivery and security.

8. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased;
  • have the processing of your data restricted;
  • object to processing based on our legitimate interests;
  • receive data you have given us in a structured, machine-readable format.

To exercise your rights, write to us through the contact form. We may ask you to confirm your identity, and we respond within one month.

9. Complaints

If you believe we process your personal data unlawfully, you can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, datatilsynet.dk. We would appreciate the chance to address your concerns first.

10. Security

The website is served over HTTPS only, the contact form is protected against automated abuse, and access to messages is limited to the people who need it. No system is completely secure, but we take reasonable measures to protect your data.

11. Children

The website is aimed at businesses and professionals and is not intended for children under 18.

12. Changes to this policy

We may update this policy, for example if we change service providers. The date at the top shows when it was last updated.