Personal Data Management Policy

1. Introduction

Energy Resource s.r.o. (‘Company’, ‘we’, ‘us’) is committed to ensuring that all personal data is processed lawfully, fairly, and transparently in accordance with Regulation (EU) 2016/679 (GDPR) and other applicable EU data protection laws.

2. Data Controller

Energy Resource s.r.o.
Registered office: Mlynské nivy 18890/5, Bratislava – mestská časť Ružinov 821 09, Slovakia

Company ID: 55 080 197
Contact email: info@energy-resource.sk

3. Scope of Application

This Policy applies to the processing of personal data of:
– Business partners, clients, and suppliers;
– Representatives of regulatory and market institutions (e.g., market operators, clearing entities, transmission system operators);
– Visitors of our website and other persons whose data we process in the course of our activities.

4. Categories of Data Processed

– Identification data (name, position, company, ID numbers where required);
– Contact details (address, phone, email);
– Contractual and transactional data (agreements, correspondence, financial identifiers);
– Technical data (system login details, IP addresses, access logs where applicable).

5. Purposes and Legal Basis of Processing

We process personal data for the following purposes:
– Compliance with legal and regulatory obligations (Art. 6(1)(c) GDPR);
– Performance of contracts and pre-contractual steps (Art. 6(1)(b) GDPR);
– Market participation, compliance, and operational security;
– Protection of our legitimate interests (Art. 6(1)(f) GDPR), including IT security and risk management.

6. Retention of Data

Personal data is kept only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Once retention periods expire, data is securely deleted or anonymised.

7. Data Sharing and Transfers

We may share data with:
– Regulatory and supervisory authorities;
– Market operators and clearing houses;
– Service providers engaged under confidentiality and data processing agreements.

If data is transferred outside the EU/EEA, we ensure adequate safeguards in line with GDPR Chapter V (such as Standard Contractual Clauses).

8. Data Security

We apply appropriate technical and organizational measures to safeguard personal data against unauthorized access, disclosure, alteration, or destruction.

9. Rights of Data Subjects

Under GDPR, individuals have the right to:
– Access their data (Art. 15);
– Rectify inaccurate data (Art. 16);
– Request deletion (‘right to be forgotten’, Art. 17);
– Restrict or object to processing (Art. 18–21);
– Request data portability (Art. 20);
– Lodge a complaint with a supervisory authority.

Requests may be submitted by email: info@energy-resource.sk

10. Updates

We may update this Policy from time to time. The current version will always be available on our website.