Privacy Policy

eWatt Smart Power Systems Oy (business ID 3321142-9), Kympinkatu 3 C, 40320 Jyväskylä, Finland. For data protection matters, contact info@ewatt.fi, +358 50 387 3277.

This policy describes the processing of personal data for which eWatt is the controller: website visitors, online shop customers, users of the service named by our customers, and recipients of customer and marketing communications. The service is intended for companies and organisations – we do not offer it to consumers.

Measurement data on a property’s electricity consumption is, as a rule, not personal data. To the extent that a natural person can exceptionally be identified from the measurement data (for example in very small premises), eWatt processes it on behalf of the customer as a processor in accordance with Annex 1 to the terms of service (the data processing agreement) – such processing is not covered by this policy.

• User data: the name, email address, phone number and role in the customer’s organisation of the users of the service, and the login and log data related to their user account.
• Customer and order data: company name, business ID, contact person’s details, delivery and billing address, order and contract details, the accepted version of the terms of service, and billing and payment details.
• Communications: support requests, recipients of alert and report subscriptions (email addresses and phone numbers set by the customer), and other dealings with us.
• Website technical data: IP address and browser and device information in the server logs, and data collected with cookies or similar technologies; cookies are described in section 9.
• Marketing data: the name, position and contact details of company contact persons, and objections and consents to marketing.

We do not collect any personal data in the service database other than that described above. The data is mainly received from the customer when ordering and using the service; marketing data may also be collected from public sources and business information services.

• Providing the service, managing user accounts, support and delivering devices – legal basis: contract or steps prior to entering into it (GDPR 6(1)(b)).
• Invoicing, payment monitoring and accounting – legal basis: legal obligation (GDPR 6(1)(c), including the Finnish Accounting Act).
• Delivering alerts, reports and service notices to recipients set by the customer – legal basis: contract and legitimate interest (GDPR 6(1)(b) and (f)).
• Developing the service, information security and preventing misuse – legal basis: legitimate interest (GDPR 6(1)(f)). Measurement data used in development is anonymised.
• Marketing to businesses and customer communications – legal basis: legitimate interest (GDPR 6(1)(f)); electronic direct marketing to corporate recipients in accordance with the marketing rules. A recipient can always object to marketing.
• Establishing and defending legal claims – legal basis: legitimate interest (GDPR 6(1)(f)).

We do not carry out automated decision-making or profiling within the meaning of Article 22 GDPR that would have legal effects on the data subject. The service’s AI analyses the property’s electricity consumption, not people.

• Customer and contract data: for the duration of the customer relationship and 3 years after it ends (to handle any claims).
• User accounts and user data: deleted within 90 days of the end of the agreement or when the customer removes the user.
• Accounting records (invoices and vouchers): 6 years from the end of the calendar year in which the financial year ended (Finnish Accounting Act).
• Measurement data: in accordance with the terms of service for the term of the agreement; deleted or anonymised within 90 days of the end of the agreement.
• Marketing data: until the recipient objects to marketing or the data is found to be out of date.

We do not sell or disclose personal data to third parties for marketing purposes. In providing the service we use carefully selected subcontractors who process the data on our behalf in accordance with our agreements and instructions:

• cloud and data centre services (service platform and databases, located in the EU/EEA)
• financial administration and invoicing services, and payment service providers
• logistics and postal services for devices (name and address for delivery)
• email, text message and communication services for delivering alerts and reports
• analytics and marketing tools on the website and in the service, based on your consent (section 9)
• up-to-date list of subprocessors: data processing agreement

Data may be disclosed to authorities on the basis of a requirement under law. Anonymised data containing no personal data may be used in research cooperation (e.g. universities) in accordance with the terms of service.

Personal data is processed and stored in the EU/EEA. Data is not transferred outside the EU or EEA. Should a transfer exceptionally be necessary (for example because of a single tool), it will be made with safeguards in accordance with Chapter V of the GDPR (including the European Commission’s standard contractual clauses) and described in this policy.

We protect the data with appropriate technical and organisational measures: data transfers are encrypted, access to data is limited according to job duties and protected with personal credentials, environments are monitored and the data is backed up. The eWatt reader only reads measurement data from the electricity meter – it does not control the property’s systems or collect any other data. We notify personal data breaches to the supervisory authority and to data subjects as required by the GDPR.

You have the right to:

• know whether we process your personal data and receive a copy of it (right of access)
• request the rectification of inaccurate or incomplete data
• request the erasure of your data when there is no longer a basis for processing it
• request the restriction of processing and object to processing based on legitimate interest on grounds relating to your particular situation
• object to direct marketing at any time
• receive the data you have provided under a contract in a machine-readable format (right to data portability).

Please send requests to the contact details in section 1. We respond within one month. If you believe that we process your data unlawfully, you have the right to lodge a complaint with the supervisory authority: the Office of the Data Protection Ombudsman, www.tietosuoja.fi.

We use cookies and similar technologies (e.g. local storage) on our website and in our service. A cookie is a small text file that your browser stores on your device. Cookies fall into the following groups:

• Necessary cookies. Needed for the website and the service to work: keeping you signed in, the online shop’s basket and ordering process, security (including preventing misuse) and remembering your cookie choice. These cookies are always on, and no consent is asked for them. Duration: for the session or at most 12 months.
• Functional cookies. Remember your choices, such as language and interface settings, to make the website smoother to use. Duration: at most 12 months.
• Analytics cookies. Collect information on how the website is used (including visitor numbers, the most popular pages and the channel you came from) so that we can develop the website and the service. In use: Google Analytics 4 and Amplitude (EU data centre). The data is collected in statistical form and is not used to identify individual visitors. Duration: at most 24 months.
• Marketing cookies. Enable the targeting of advertising and measuring its effectiveness in third-party services. In use: Google Ads and the LinkedIn Insight Tag. Duration: at most 12 months.

We ask for your consent to all but the necessary cookies with a cookie notice shown when you arrive on the website. You can change your choice or withdraw your consent at any time in the website’s cookie settings (Cookie settings at the bottom of every page) and delete cookies in your browser settings. Blocking necessary cookies in your browser may impair the website and the service.

Analytics and marketing cookies may be set by third parties acting on our behalf or in their own name; their cookie practices are described in those services’ own policies.

We update this policy as the service and legislation develop. The version in force is always available on our website; we inform customers of material changes by email or in the application. Version history: v1.0 28 September 2026.