Privacy policy

The German privacy policy is legally authoritative. This English version is provided for convenience.

Last updated: 3 September 2026

1. Controller

The controller responsible for processing personal data on gridfusion.de and the associated GridFusion web services is:

Net-Base Software GmbH
Weißerlenstraße 3
79108 Freiburg im Breisgau
Germany
Email: info@net-base-software-gmbh.de

2. Website delivery and server logs

When you access our website, the hosting infrastructure processes technically necessary access data. This may include your IP address, access time, requested URL, HTTP status, transferred data volume, referrer, browser and operating-system information. We use this data to provide the site securely and reliably, diagnose faults and prevent misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this service.

Traffic between your browser and the website is encrypted using TLS. Log data is retained only as long as required for operations, security and the investigation of specific incidents.

3. Strictly necessary cookies

GridFusion does not use cookies for personalised advertising. Depending on the function you choose, the following strictly necessary cookies may be set:

• nbml_lang stores an explicitly remembered language selection for the current browser session only.
• __Host-gridfusion_portal holds a short-lived session token after login that browser scripts cannot read; its lifetime is limited to 15 minutes.
• __Host-gridfusion_cart associates a shopping cart and expires no later than the time specified by the central service, with a technical maximum of 366 days.
• WordPress login and settings cookies are used only in the administration area or for signed-in editors.

These cookies are necessary for the function selected. The legal bases are section 25(2)(2) TDDDG and, where personal data is processed, Article 6(1)(b) or (f) GDPR.

4. Contacting us

If you contact us by email or another offered channel, we process the contact details and message you provide in order to respond. The legal basis is Article 6(1)(b) GDPR where the matter concerns a contract or pre-contractual steps, and otherwise Article 6(1)(f) GDPR. Voluntary additional information is processed on the basis of your consent under Article 6(1)(a) GDPR.

5. Newsletter and product notifications

If you subscribe to the newsletter or a product notification, we process in particular your email address, language, country and product reference where applicable, and the time and status of your consent. Newsletter registration is protected by a confirmation link. The legal basis is your consent under Article 6(1)(a) GDPR. You may withdraw it at any time for the future by using the unsubscribe link or contacting us. After unsubscribing, we retain only the data required to demonstrate consent or honour a suppression request.

6. Customer portal, shop and contract performance

For registration, login, orders and contract performance, the central GridFusion services process the necessary account, contact, address, cart, quotation, order, invoice, payment-status, subscription and entitlement data. Payment data is processed only to the extent required by the payment method selected and enabled by us. The legal basis is Article 6(1)(b) GDPR; legally required retention is based on Article 6(1)(c) GDPR.

WordPress acts solely as a presentation and intermediary layer. Authoritative customer, order and device data is stored by the central GridFusion services. Session tokens are passed only server-side and are made available to the browser exclusively in protected HttpOnly cookies.

7. Device and energy data

A GridFusion device operates locally by default. Server-side measurement history, forecasting or AI functions are used only in accordance with the data configuration selected on the device or in the customer account. The processed data may include a device identifier, system profile, technical state, time series for generation, consumption, storage and grid exchange, as well as forecast and optimisation data derived from them. This does not replace or weaken local safety control or the Solakon Safety Gate.

The activation and retention period you select apply to server-side device functions. Where provided for the relevant function, the customer portal offers data exports and erasure requests. Statutory retention duties and the establishment, exercise or defence of legal claims remain unaffected.

8. AI-assisted translation of editorial content

We may use the API service provided by OpenAI Ireland Limited to create and update English versions. Only editorial source text intended for publication is transmitted server-side. The GridFusion translation function does not send visitor, form, customer-account, order, payment or device data to OpenAI. Legal texts are maintained as fixed language versions.

The purpose is to provide a bilingual service efficiently. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is making our content more accessible internationally. OpenAI states that API business data is not used to train its models by default. Where data is processed outside the European Economic Area, the agreed data-protection terms and appropriate safeguards apply, in particular the EU Standard Contractual Clauses.

9. Recipients and processors

We use carefully selected service providers, in particular for hosting, technical operations, email delivery, translation and, where enabled, payment processing. They receive data only to the extent required to perform their tasks and are contractually bound where required by law. Any other disclosure takes place only under a legal obligation, for contract performance or with your consent.

10. Retention

We retain personal data only for as long as required for the relevant purpose. It is then deleted or anonymised unless statutory retention duties, an ongoing contractual relationship, security needs, or the establishment, exercise or defence of legal claims require further retention. Specific function-related periods are stated above.

11. Your rights

Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction and data portability. You may object, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. You may withdraw consent at any time for the future.

To exercise your rights, contact info@net-base-software-gmbh.de.

12. Right to lodge a complaint

You have the right to lodge a complaint with a data-protection supervisory authority. In Baden-Württemberg, you can contact the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Heilbronner Straße 35, 70191 Stuttgart, at baden-wuerttemberg.datenschutz.de.

13. Updates to this policy

We update this privacy policy when functions, service providers or the legal framework change. The current version is published on this page.