1.0 Data controller

Elekt AS Org. no.: 920 766 854 Vestre Kanalkai 24 7010 Trondheim privacy@elekt.no

2.0 Processing of personal data

We process personal data in connection with:

• Our apps, including user behaviour and user identification.
• Registration of customers, as well as initiation, performance and termination of customer relationships.
• Delivery of services (see specification in section 3 below).
• Newsletters and interest lists.
• Communication and marketing.
• Incoming and outgoing customer support.
• Analysis of user behaviour, logging and compilation of statistics (see our Cookie policy for more information).

We collect the personal data either directly from you in connection with, for example, registration for one of our services, or we collect it from third parties. Such third parties may, for example, be Elhub, provided we deliver a service to you that allows us to retrieve such information. Below we have described in more detail which personal data we process and why and how we do so for the individual services.

3.0 General information about personal data we process to deliver our services

When you use Elekt's services, we collect personal data about you that helps us identify you as a user. This includes, among other things, device identifiers, which give us information about which device you use when you use our services.

In order to improve your user experience and increase the relevance of tips, advice and marketing, we will also request consent to provide you with information tailored to you. We may also process such information based on a so-called legitimate interest. Read more about this in the sections below.

When you continue to use Elekt's services, you have the opportunity to upload more information about yourself and register as a user. The information collected depends on which services you use. This may be electricity data, name, metering point ID and more. In such cases, we will inform you when data is collected.

A more detailed description of the processing of personal data, purpose and legal basis for collection of information in connection with our services follows below.

3.1 Registering a user profile

If you choose to register as a user in one of our services, we create a profile that collects your information in one place, enabling you to log in across devices and access all the information we have registered about you.

To create a user profile, we process the personal data you provide upon registration. The information is collected via one of the authentication solutions we use to verify that you are you (registration with «Google sign in», «Apple ID», Vipps or BankID). In connection with the user profile, we process information such as first name, last name, phone number, national identity number, email, address, photo (if you have added this), Customer ID from iOS/Google, Device ID.

The processing of personal data mentioned in this section is based on it being necessary to perform an agreement with you to deliver the relevant service for which you create a user profile and has basis in GDPR Article 6 (1)(b).

3.2 Use of electricity data

When using our services, you have the opportunity to share your electricity data via Elhub (meter number, metering point ID, metering point address, electricity consumption hour by hour) or via a real-time meter, also called HAN port (real-time electricity consumption and last hour, voltage level and surplus power).

We process this data to visualise services related to insight into electricity consumption, grid tariffs and electricity costs. In addition, we may provide you with tips and advice based on this information, which also includes recommendations for electricity contracts and notifications when there is suspicion of errors in invoicing from your electricity supplier.

To retrieve information from Elhub, we must both have an agreement with you and you must have shared the information with us via Elhub. The processing is necessary to perform an agreement and has basis in GDPR Article 6 (1)(b).

Certain functionalities, such as recommendations for electricity contracts, will take place in combination with invoice information collected separately with your consent. This processing has basis in GDPR Article 6 (1)(a) and you may withdraw your consent at any time.

When you use our service for a detailed overview of what uses electricity in your home, we will also collect information about your household to improve the quality of these analyses. This may be information about, for example, size of residence, number of household members, year of construction and similar. Our subcontractor for detailed overview of electricity consumption is the company Eliq AB.

To perform an analysis of electricity consumption based on the area's temperature and weather conditions, we also share information about the location of your electricity meters with Eliq.

Information about your electricity data is stored in your user profile if you have created one.

The processing is necessary for us to be able to deliver the best possible analysis to you, and is based on our legitimate interest in offering good services. The processing has basis in GDPR Article 6 (1)(f).

3.3 Analysis of your electricity contract and display of invoice in app

When you ask us to perform an analysis of your electricity contract by using our invoice check service, we use your national identity number to retrieve information from the eInvoice platform. This happens after you have authenticated yourself using Vipps or BankID. Via the eInvoice platform, we gain access to electricity-related invoices up to 16 months back in time. When we retrieve invoices, these will contain personal data related to your electricity or grid tariff agreement depending on what is stated on the invoice. In connection with the authentication, we also process other information about you as a person (first name, last name, email, address and device identifiers that tell us which device you are on).

To keep you informed about analysis results, we will use notifications in the app, email or SMS.

Elekt AS holds a licence as a payment institution from the Financial Supervisory Authority of Norway, which means we are subject to a high degree of security in connection with retrieval of this type of information. We will always request consent from you before retrieval takes place.

If you wish us to display your electricity and grid tariff invoices in the app, we use the same method as for analysis of electricity invoices. The processing is based on your consent pursuant to GDPR Article 6 (1)(a).

3.4 Family sharing

If you give other persons access to your electricity meters in the app, Elekt will share personal data with these persons. However, it is your responsibility to ensure that you do not share information with anyone other than those you wish to have insight into your electricity consumption. Personal data we share is your name, email address, phone number, meter number/metering point ID, metering point address, as well as detailed overview of your electricity consumption, electricity and grid tariff invoices.

Access is maintained until you yourself withdraw it. The processing is based on your consent pursuant to GDPR Article 6 (1)(a).

3.5 Notification services in the app

If you enable notifications about, for example, electricity prices in the app, we will use device identifiers to send the correct notification to the correct device. If you have added locations in the app, either manually or this has been retrieved in connection with your use of one of our other services (e.g. analysis of your electricity contract), we may also process your address to send you notifications for relevant price areas.

You can choose to turn notifications on and off in your app settings. The processing is based on your consent pursuant to GDPR Article 6 (1)(a).

3.6 Upgrade to Elekt+ or purchase in Elekt Shop

If you have chosen to upgrade to an Elekt+ subscription through so-called «in-app purchase» via Google Play or App Store, we will process information about your chosen payment method.

If you purchase something in Elekt Shop, we will process personal data about you in connection with delivery of the products (name, address and similar) in addition to processing information about your chosen payment method. The processing is necessary to perform the purchase agreement and has basis in GDPR Article 6 (1)(b).

3.7 Feedback in the app

If you choose to give us feedback in the app, we use device identifiers to be able to respond to you via a notification. In this context, we also collect information about which type of device you use when you give us feedback. This may, for example, be operating system, type of phone, which version of the app you have and similar information that can help us detect any errors more quickly.

In cases where you fill in your contact information in the optional fields for feedback (such as name and email address), the information will only be used to contact you and improve our services. We will never use such information for other purposes, such as to market our products further, or to disclose your personal information to a third party for commercial gain. The processing is based on our legitimate interest pursuant to GDPR Article 6 (1)(f). Our legitimate interest is to be able to offer good customer service in connection with responses to enquiries.