1. Introduction
We are pleased about your interest in the Digital Energy Lab platform (digitalenergylab.com). Protecting your personal data is important to us. This Privacy Policy informs you in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) about what data is collected, how it is used, and what rights you have.
2. Data Controller
The entity responsible for data processing within the meaning of the GDPR is:
3. Data We Collect
3.1 Newsletter Subscription
If you subscribe to our newsletter, we collect your email address. This is processed solely to send newsletters containing content on energy, cybersecurity, and related topics. The legal basis is your explicit consent under Art. 6(1)(a) GDPR. You may withdraw your consent at any time.
Note: The newsletter service is currently in development. No data is actively stored at this time.
3.2 Server Log Data
Each time our website is accessed, our hosting provider Vercel Inc. automatically stores the following data in server log files:
- IP address (anonymised after processing)
- Date and time of access
- URL accessed
- Browser type and version
- HTTP status code
The legal basis is Art. 6(1)(f) GDPR (legitimate interests: operation and security of the website).
4. Third-Party Services
This platform retrieves real-time data server-side only from public APIs. No personal user data is transmitted to any external API.
Vercel Inc.
Art. 6(1)(f) GDPR (legitimate interests)Hosting and CDN infrastructure. Vercel processes server log data on servers in the USA/EU.
https://vercel.com/legal/privacy-policySanity.io
Art. 6(1)(f) GDPRContent management system for blog content (TrustHub). Sanity processes editorial content in accordance with its privacy policy.
https://www.sanity.io/legal/privacyFraunhofer ISE Energy-Charts API
No personal data processingPublic API for German electricity generation data, spot prices, and CO₂ intensity. No user identification or personal data is transmitted.
https://energy-charts.infoGridRadar.net
No personal data processingAPI for real-time UCTE grid frequency data. API keys are processed server-side; no user data is transmitted.
https://gridradar.netAwattar GmbH
No personal data processingPublic API for EPEX SPOT electricity price forecasts (24 hours). No user data is transmitted.
https://www.awattar.de5. Cookies
This website does not set any marketing or tracking cookies of its own. Technically necessary cookies (e.g. for dark/light theme preference) are stored locally in your browser and are not transmitted to any server. No third-party analysis of your browsing behaviour takes place.
6. Data Retention
- Email addresses (newsletter): Until consent is withdrawn, after which immediate deletion.
- Server log data: Automatically deleted by Vercel in accordance with their privacy policy (typically 30–90 days).
- CMS content (Sanity): Editorial content is stored for the duration of the platform's operation.
7. Your Rights as a Data Subject
Under the GDPR, you have the following rights:
Right of access (Art. 15)
You can request information about the personal data stored about you.
Right to rectification (Art. 16)
You can request the correction of inaccurate data.
Right to erasure (Art. 17)
You can request the deletion of your data, unless statutory retention obligations apply.
Right to restriction (Art. 18)
You can request restriction of the processing of your data.
Data portability (Art. 20)
You can receive your data in a machine-readable format.
Right to object (Art. 21)
You can object to the processing of your data based on legitimate interests.
Withdrawal of consent (Art. 7(3))
You can withdraw any consent given at any time without giving reasons.
Right to complain (Art. 77)
You have the right to lodge a complaint with the competent supervisory authority.
To exercise your rights, please contact: hello@digitalenergylab.com
8. Supervisory Authority
State Commissioner for Data Protection of Lower Saxony (LfD Niedersachsen)
Prinzenstraße 5, 30159 Hannover, Germany
You have the right to lodge a complaint with this authority at any time if you believe that the processing of your data violates the GDPR.
9. Changes to This Policy
We reserve the right to update this Privacy Policy as necessary to comply with changes in legislation or changes to our service. The current version will always be found on this page. The date of the last update is indicated above.