Privacy Statement

1. Controller

Quasar Energy (sole trader, The Netherlands) is the data controller responsible for your personal data.

Company	Quasar Energy
KVK	98795589
BTW	NL005354375B07
E-mail	sbabaev@quasarenergy.nl
Address	Box C2228, Keurenplein 41 1069 CD Amsterdam Nederland

2. Data We Collect and Why

2.1 Contact Form

When you send a message via our contact form we collect your name, email address, subject and message to handle and reply to your enquiry.

Legal basis — Art. 6(1)(f) GDPR: legitimate interest in communicating with prospective and existing clients.

2.2 Report Orders (Tally.so / Direct Form / Stripe)

Engineering calculation reports and Quasar Intelligence market analytics reports are ordered via forms operated by Tally.so. Grid Intelligence reports are ordered via a form hosted directly on our website. All payments are processed by Stripe. Tally.so and Stripe act as independent data controllers for data processed through their platforms.

We receive your email address and order inputs solely to generate and deliver the report you purchased. Depending on the report type, order inputs include: engineering project parameters (calculation reports), date range and bidding zone (market analytics reports), or bidding zone (Grid Intelligence reports). For Grid Intelligence orders, we also collect an optional VAT identification number to apply EU B2B reverse-charge rules where applicable.

This applies to all report types: engineering calculation reports (Module 01, Module 02, Module 03 — Grid Connection), Quasar Intelligence market analytics reports (Weekly, Monthly), and Grid Intelligence reports (Grid Pulse Weekly). For grid connection dossiers (Module 03), we additionally collect company name, site address, postcode, and technical installation parameters (transformer, cable, and inverter specifications) to generate the pre-application dossier.

Legal basis — Art. 6(1)(b) GDPR: performance of a contract.

2.3 Solar Explorer Tool

If you type a city name in the Solar Explorer, it is sent to OpenStreetMap Nominatim (geocoding) via our server-side proxy. The resulting coordinates are forwarded to the PVGIS API (European Commission) to retrieve solar irradiance data. The city name relates to a geographic location, not to you personally, and is not stored by us.

2.4 Infrastructure (Cloudflare)

This website is hosted on Cloudflare Pages. Cloudflare processes your IP address and request metadata as our data processor to serve the site reliably and protect it against abuse (DDoS / WAF).

Legal basis — Art. 6(1)(f) GDPR: legitimate interest in operating a secure and available service.

2.5 Web Analytics (Cloudflare Web Analytics)

We use Cloudflare Web Analytics to collect aggregated, anonymous usage statistics such as page views, referrer URLs, browser type, device type and country. This service uses no cookies and does not collect or store IP addresses — your IP is used only transiently to derive your country and is then discarded. No data is linked to individual visitors.

Legal basis — Art. 6(1)(f) GDPR: legitimate interest in understanding aggregate site usage to improve our services.

2.6 Grid Compass Account (Authentication & Subscription)

When you create a Grid Compass account, Clerk (our authentication provider) collects your email address to manage passwordless sign-in. Your subscription status and Stripe customer reference are stored in Clerk metadata to grant dashboard access. Order and payment data is stored in our Neon-hosted PostgreSQL database.

Legal basis — Art. 6(1)(b) GDPR: performance of a contract (providing the subscribed service).

3. Cookies and Local Storage

Strictly necessary (no consent required): We store one item in your browser's localStorage (qe_ad_consent) to remember your cookie preference. This does not require consent under Art. 5(3) ePrivacy Directive / Dutch Telecommunicatiewet Art. 11.7a. If you use Grid Compass, a short-lived session cookie (__session) is set by Clerk to authenticate your signed-in session.

Advertising & analytics (consent required): If you click "Accept All" in our cookie banner, we load Google Ads and Google Analytics 4 (GA4) via gtag.js. Google Ads sets cookies for advertising measurement and conversion tracking. GA4 collects website usage data including page views, session duration, scroll depth, navigation paths, and referral sources. These cookies are set by Google (domains: googleads.g.doubleclick.net, google-analytics.com). We use Google Consent Mode v2 with region-specific defaults: for visitors in the EEA and United Kingdom, all tracking is disabled by default until you consent; for visitors outside these regions, analytics may be active from page load — you can opt out via the cookie banner at any time. If you decline, Google receives no personal data and operates in cookieless mode (modelled conversions only). You can change your choice at any time by clearing your browser's localStorage.

4. Third Parties and International Transfers

All transfers of personal data to the United States are covered by either the EU–US Data Privacy Framework or Standard Contractual Clauses (Commission Decision 2021/914).

5. Retention

6. Your Rights (Art. 15–22 GDPR / AVG)

You have the right to:

• →Access the personal data we hold about you (Art. 15)
• →Rectification of inaccurate data (Art. 16)
• →Erasure where data is no longer necessary (Art. 17)
• →Restriction of processing in certain circumstances (Art. 18)
• →Data portability where processing is contract-based (Art. 20)
• →Object to processing based on legitimate interest (Art. 21)

To exercise any right, email sbabaev@quasarenergy.nl. We will respond within 30 days (extendable to 90 days for complex requests, with notice).

7. Complaints

You have the right to lodge a complaint with the Dutch supervisory authority:

8. Changes

We may update this Privacy Statement. The date at the top of this page reflects the most recent revision. Material changes will be announced via a notice on this website.