Privacy Policy
Last updated: 9th July, 2026
This Privacy Policy explains how Monbat Energy Holding GmbH (“Monbat Energy”, “we”, “us”) collects, uses, shares and protects your personal data when you visit this website or contact us, in accordance with Regulation (EU) 2016/679 (the “GDPR”) and applicable German and EU data-protection law.
Protecting personal data is a shared principle across the Monbat group of companies, and this policy reflects that approach for our energy-storage and energy-management business.
1. Who is responsible for your data (Controller)
The controller responsible for processing your personal data through this website is:
Monbat Energy Holding GmbH
Montaniastrasse 17, 99734 Nordhausen, Germany
Commercial register no.: HRB 523842
Email: georgy.trenchev@monbat.com
2. Data Protection Officer
You can reach our group Data Protection Officer for any question about this policy or your personal data at: georgy.trenchev@monbat.com
3. What personal data we collect
We only collect the data we need to respond to your enquiry and provide our services. Depending on how you use the site, this includes:
- Lead enquiry form (4-step form): your industry, annual energy consumption range, intended battery use case, and your contact details — first name, last name, company, phone number, email address and country.
- Contact form: the contact details and message content you choose to provide.
- Newsletter sign-up: your email address (and any name you provide), processed on a double opt-in basis.
- Call booking: the contact details you submit are used to schedule a call via our booking provider.
- Technical and usage data: collected automatically through cookies and similar technologies (e.g. IP address, device and browser information, pages viewed). These are described in detail in our Cookie Policy and are only set where you have given consent, except for those strictly necessary to run the site.
- Security / anti-spam data: when you submit a form, our bot-protection tool (Cloudflare Turnstile) processes technical signals such as your IP address, browser User-Agent and limited device/connection information to distinguish human visitors from bots. These signals are strictly necessary to protect our forms and are not used to identify you or for advertising.
All personal data processed through this website is provided directly by the user. We do not obtain personal data from third parties.
We do not knowingly collect special categories of personal data through this website.
4. How we use your data and our legal bases
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Responding to your enquiry and taking steps prior to a possible contract | Art. 6(1)(b) – pre-contractual steps, and Art. 6(1)(f) – legitimate interest in handling B2B enquiries |
| Scheduling and conducting your requested call | Art. 6(1)(b) and Art. 6(1)(f) |
| Sending you our newsletter | Art. 6(1)(a) – your consent (double opt-in) |
| Measuring website performance with analytics cookies | Art. 6(1)(a) – your consent, given via our cookie banner |
| Operating, securing and maintaining the website and server logs | Art. 6(1)(f) – legitimate interest in a secure, functioning site |
| Protecting our website and forms against spam, abuse and automated (bot) traffic | Art. 6(1)(f) – legitimate interest in keeping the site and our forms secure |
Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out beforehand.
5. Who we share your data with
We do not sell your personal data. We share it only with the recipients below, who act as our processors or as part of our group:
| Recipient | Role | Location |
|---|---|---|
| Monbat group companies | Routing your enquiry to the responsible regional office (e.g. Bulgarian or German office) so we can respond | EU (Germany / Bulgaria) |
| SiteGround | Website hosting and server logs | EU (Germany) |
| Brevo (Brevo SAS) | Delivery of enquiry notifications and newsletter emails | EU (France) |
| Calendly (Calendly LLC) | Scheduling your requested call; the details you submit are passed to the booking page | USA |
| Google (Google Ireland Ltd / Google LLC) | Google Analytics 4 (via Google Tag Manager) for website statistics, subject to your consent | EU / USA |
| Cloudflare (Cloudflare, Inc.) | “Turnstile” bot and spam protection on our forms; processes security signals such as IP address, browser/User-Agent and device/connection data | USA |
All of the listed providers act either as data processors within the meaning of Article 28 GDPR or as joint controllers pursuant to Article 26 GDPR, unless expressly stated otherwise.
We also use Google Search Console to understand how our pages perform in search results. This works on aggregate search data and does not track individual visitors on our website.
Our forms are protected by Cloudflare Turnstile. You can read how Cloudflare handles the data it processes in the Cloudflare Turnstile Privacy Addendum.
We may also disclose personal data to public authorities, courts or professional advisers where we are legally required to do so or where necessary to establish, exercise or defend legal claims.
6. International data transfers
Some of our providers (for example, Calendly, Google and Cloudflare) may process data outside the European Economic Area, including in the United States. For transfers to the United States, we implement additional technical safeguards, including IP anonymization, limitation of the data collected, and data minimization configurations. You can request more information about these safeguards using the contact details above.
7. How long we keep your data
- Enquiry and contact data: up to 24 months after our last contact with you, after which it is deleted or anonymised, unless a longer statutory retention period applies.
- Newsletter data: until you unsubscribe or withdraw your consent.
- Analytics data: for the cookie lifetimes set out in our Cookie Policy.
- Server logs: We and our hosting provider may collect and store server, error, and security logs for security, technical support, and operational purposes. Such logs may include IP addresses, browser information, timestamps, requested pages, referrer URLs, error details, and security-event information. These logs are retained only for a limited period as necessary for their purpose, and retention may vary by log type.
8. Your rights
Under the GDPR, you have the right to:
- Access your personal data and obtain a copy of it.
- Rectify inaccurate or incomplete data.
- Erase your data, where the conditions are met.
- Restrict processing in certain circumstances.
- Object to processing based on our legitimate interests, and at any time to processing for direct-marketing purposes.
- Data portability — receive your data in a structured, machine-readable format, where applicable.
- Withdraw consent at any time, where processing is based on consent.
The right to data portability applies only to personal data that we process on the basis of your consent or for the performance of a contract.
To exercise any of these rights, contact us at georgy.trenchev@monbat.com.
9. Right to lodge a complaint
If you believe we have not handled your personal data lawfully, you may lodge a complaint with a supervisory authority — in particular in the EU country of your residence or workplace. The authorities relevant to us are:
- Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit (TLfDI), Häßlerstraße 8, 99096 Erfurt, Germany — www.tlfdi.de
- Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria — www.cpdp.bg
10. Cookies
This website uses cookies and similar technologies. You can review the categories, providers and durations, and manage your preferences, in our Cookie Policy.
11. Security
We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. No transmission over the internet can be guaranteed as completely secure, but we work to keep our safeguards in line with current good practice.
12. Other terms
Your use of this website is also governed by our Terms & Conditions.
13. Changes to this policy
We may update this Privacy Policy from time to time. The current version is always available on this page, with the “Last updated” date above reflecting the latest revision.
14. Contact
For any question about this Privacy Policy or your personal data, contact:
Monbat Energy Holding GmbH — Montaniastrasse 17, 99734 Nordhausen, Germany
Email: georgy.trenchev@monbat.com
