Privacy Policy

Last updated: 9th July, 2026

This Privacy Policy explains how Monbat Energy Holding GmbH (“Monbat Energy”, “we”, “us”) collects, uses, shares and protects your personal data when you visit this website or contact us, in accordance with Regulation (EU) 2016/679 (the “GDPR”) and applicable German and EU data-protection law.

Protecting personal data is a shared principle across the Monbat group of companies, and this policy reflects that approach for our energy-storage and energy-management business.

1. Who is responsible for your data (Controller)

The controller responsible for processing your personal data through this website is:

Monbat Energy Holding GmbH

Montaniastrasse 17, 99734 Nordhausen, Germany

Commercial register no.: HRB 523842

Email: georgy.trenchev@monbat.com

2. Data Protection Officer

You can reach our group Data Protection Officer for any question about this policy or your personal data at: georgy.trenchev@monbat.com

3. What personal data we collect

We only collect the data we need to respond to your enquiry and provide our services. Depending on how you use the site, this includes:

  • Lead enquiry form (4-step form): your industry, annual energy consumption range, intended battery use case, and your contact details — first name, last name, company, phone number, email address and country.
  • Contact form: the contact details and message content you choose to provide.
  • Newsletter sign-up: your email address (and any name you provide), processed on a double opt-in basis.
  • Call booking: the contact details you submit are used to schedule a call via our booking provider.
  • Technical and usage data: collected automatically through cookies and similar technologies (e.g. IP address, device and browser information, pages viewed). These are described in detail in our Cookie Policy and are only set where you have given consent, except for those strictly necessary to run the site.
  • Security / anti-spam data: when you submit a form, our bot-protection tool (Cloudflare Turnstile) processes technical signals such as your IP address, browser User-Agent and limited device/connection information to distinguish human visitors from bots. These signals are strictly necessary to protect our forms and are not used to identify you or for advertising.

All personal data processed through this website is provided directly by the user. We do not obtain personal data from third parties.

We do not knowingly collect special categories of personal data through this website.

4. How we use your data and our legal bases

Purpose Legal basis (GDPR Art. 6)
Responding to your enquiry and taking steps prior to a possible contract Art. 6(1)(b) – pre-contractual steps, and Art. 6(1)(f) – legitimate interest in handling B2B enquiries
Scheduling and conducting your requested call Art. 6(1)(b) and Art. 6(1)(f)
Sending you our newsletter Art. 6(1)(a) – your consent (double opt-in)
Measuring website performance with analytics cookies Art. 6(1)(a) – your consent, given via our cookie banner
Operating, securing and maintaining the website and server logs Art. 6(1)(f) – legitimate interest in a secure, functioning site
Protecting our website and forms against spam, abuse and automated (bot) traffic Art. 6(1)(f) – legitimate interest in keeping the site and our forms secure

Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out beforehand.

5. Who we share your data with

We do not sell your personal data. We share it only with the recipients below, who act as our processors or as part of our group:

Recipient Role Location
Monbat group companies Routing your enquiry to the responsible regional office (e.g. Bulgarian or German office) so we can respond EU (Germany / Bulgaria)
SiteGround Website hosting and server logs EU (Germany)
Brevo (Brevo SAS) Delivery of enquiry notifications and newsletter emails EU (France)
Calendly (Calendly LLC) Scheduling your requested call; the details you submit are passed to the booking page USA
Google (Google Ireland Ltd / Google LLC) Google Analytics 4 (via Google Tag Manager) for website statistics, subject to your consent EU / USA
Cloudflare (Cloudflare, Inc.) “Turnstile” bot and spam protection on our forms; processes security signals such as IP address, browser/User-Agent and device/connection data USA

All of the listed providers act either as data processors within the meaning of Article 28 GDPR or as joint controllers pursuant to Article 26 GDPR, unless expressly stated otherwise.

We also use Google Search Console to understand how our pages perform in search results. This works on aggregate search data and does not track individual visitors on our website.

Our forms are protected by Cloudflare Turnstile. You can read how Cloudflare handles the data it processes in the Cloudflare Turnstile Privacy Addendum.

We may also disclose personal data to public authorities, courts or professional advisers where we are legally required to do so or where necessary to establish, exercise or defend legal claims.

6. International data transfers

Some of our providers (for example, Calendly, Google and Cloudflare) may process data outside the European Economic Area, including in the United States. For transfers to the United States, we implement additional technical safeguards, including IP anonymization, limitation of the data collected, and data minimization configurations. You can request more information about these safeguards using the contact details above.

7. How long we keep your data

  • Enquiry and contact data: up to 24 months after our last contact with you, after which it is deleted or anonymised, unless a longer statutory retention period applies.
  • Newsletter data: until you unsubscribe or withdraw your consent.
  • Analytics data: for the cookie lifetimes set out in our Cookie Policy.
  • Server logs: We and our hosting provider may collect and store server, error, and security logs for security, technical support, and operational purposes. Such logs may include IP addresses, browser information, timestamps, requested pages, referrer URLs, error details, and security-event information. These logs are retained only for a limited period as necessary for their purpose, and retention may vary by log type.

8. Your rights

Under the GDPR, you have the right to:

  • Access your personal data and obtain a copy of it.
  • Rectify inaccurate or incomplete data.
  • Erase your data, where the conditions are met.
  • Restrict processing in certain circumstances.
  • Object to processing based on our legitimate interests, and at any time to processing for direct-marketing purposes.
  • Data portability — receive your data in a structured, machine-readable format, where applicable.
  • Withdraw consent at any time, where processing is based on consent.

The right to data portability applies only to personal data that we process on the basis of your consent or for the performance of a contract.

To exercise any of these rights, contact us at georgy.trenchev@monbat.com.

9. Right to lodge a complaint

If you believe we have not handled your personal data lawfully, you may lodge a complaint with a supervisory authority — in particular in the EU country of your residence or workplace. The authorities relevant to us are:

  • Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit (TLfDI), Häßlerstraße 8, 99096 Erfurt, Germany — www.tlfdi.de
  • Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria — www.cpdp.bg

10. Cookies

This website uses cookies and similar technologies. You can review the categories, providers and durations, and manage your preferences, in our Cookie Policy.

11. Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. No transmission over the internet can be guaranteed as completely secure, but we work to keep our safeguards in line with current good practice.

12. Other terms

Your use of this website is also governed by our Terms & Conditions.

13. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available on this page, with the “Last updated” date above reflecting the latest revision.

14. Contact

For any question about this Privacy Policy or your personal data, contact:

Monbat Energy Holding GmbH — Montaniastrasse 17, 99734 Nordhausen, Germany

Email: georgy.trenchev@monbat.com