Who we are

This Privacy Policy explains how Energo Energy Efficiency Engineering DOO ("Energo", "we", "us"), Kneza Miloša 53, 11000 Belgrade, Serbia, company registration number 20275987, tax ID (PIB) 104959519, collects and uses personal data when you visit this website, contact us, subscribe to our newsletter, register for an Academy course or work with us.

Energo has offices in Belgrade, Serbia and Bellinzona, Switzerland. Our Swiss office is operated by ENERGO Swiss Sagl, Viale Stazione 18, 6500 Bellinzona, Switzerland (UID CHE-192.726.631).

For the purposes of the EU General Data Protection Regulation (GDPR), the Swiss Federal Act on Data Protection (FADP) and the Serbian Law on Personal Data Protection, Energo is the controller of the personal data described in this policy.

Data we collect

Data you give us

  • When you contact us: your name, email address, company, the service you are interested in, and the content of your message.
  • When you register for an Academy course or event: your name, email address, phone number, company, and the company address and VAT number we need for invoicing. If you tell us about dietary requirements for a course lunch, we use that only to arrange catering.
  • When you subscribe to our newsletter: your email address, and the date and source of your subscription.
  • When you work with us: contact details of the people involved in a project, and the information exchanged in the course of the work.

Data collected automatically

  • Technical data: IP address, browser and device type, operating system, referring page and the pages you visit.
  • Usage data from Google Analytics: how visitors find and move through the site, measured with cookies and only after you consent.
  • Usage data from Microsoft Clarity: clicks, scrolling and mouse movement, recorded as anonymised session replays and heatmaps, only after you consent. Clarity masks the text you type into form fields.
  • Newsletter engagement: whether a newsletter was opened and which links were clicked, measured by MailUp.
  • Form protection: Google reCAPTCHA checks that course registration forms are submitted by people, not automated programs.

More detail on cookies is in our Cookie Policy.

How we use your data

We use personal data to:

  • answer enquiries, set up calls and prepare proposals;
  • deliver and manage the services agreed with you or your organisation;
  • organise Academy courses and events, issue invoices, and report attendance to the bodies whose curricula we teach, such as USGBC, where our instructor agreements require it [CONFIRM what is reported];
  • send our newsletter, where you have asked to receive it;
  • understand how the website is used, so we can improve it;
  • protect the website and its forms against abuse;
  • meet our legal, tax and accounting obligations.

Legal bases

We rely on the following legal bases under the GDPR and the equivalent Swiss and Serbian law:

  • Contract: where we need the data to prepare or perform a contract with you, including course registrations.
  • Legitimate interests: to respond to business enquiries, run our business and keep the website secure, where these interests are not overridden by your rights.
  • Consent: for the newsletter, Google Analytics and Microsoft Clarity. You can withdraw consent at any time, through the unsubscribe link in every newsletter or the cookie settings link in the website footer.
  • Legal obligation: where the law requires us to keep or disclose data, for example invoicing records.

Sharing your data

We do not sell personal data. We share it only with:

  • Webflow, Inc., which hosts this website and receives submissions from its forms;
  • Google (Google Analytics, Google reCAPTCHA and Google Maps on our Contact page);
  • Microsoft (Microsoft 365, which hosts our email and documents, and Microsoft Clarity);
  • MailUp S.p.A., which sends our newsletter;
  • jsDelivr, a content delivery network that serves some of the website's scripts and receives your IP address when it does;
  • certification and education bodies such as GBCI, USGBC, IWBI, BRE, DGNB and GRESB, where a project or course requires it and with the client's agreement;
  • professional advisers such as accountants, lawyers and insurers;
  • authorities, where the law requires it.

Service providers process data on our instructions and under contracts that require them to protect it.

International transfers

Our offices are in Serbia and Switzerland. Webflow, Google and Microsoft may process data in the United States. Where personal data is transferred to a country without an adequacy decision, we rely on the provider's certification under the EU-US Data Privacy Framework and its Swiss-US extension, or on the European Commission's Standard Contractual Clauses.

How long we keep data

  • Enquiries: up to two years after our last contact, unless a contract follows.
  • Contract, course registration and invoicing records: for as long as accounting and tax law requires.
  • Newsletter: until you unsubscribe. We then keep only your email address on a suppression list, so we do not write to you again.
  • Google Analytics: event data is kept for 14 months.
  • Microsoft Clarity: data is kept for up to 13 months, and session recordings for 30 days.

Your rights

Depending on where you live, you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have data erased;
  • restrict or object to processing, including direct marketing;
  • receive your data in a portable format;
  • withdraw consent at any time, without affecting processing that took place before.

To use any of these rights, write to info [at] energogroup.com. We will reply within one month.

You can also complain to a supervisory authority: the Commissioner for Information of Public Importance and Personal Data Protection in Serbia, the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland, or the data protection authority in your EU country of residence.

Security

We use technical and organisational measures to protect personal data against loss, misuse and unauthorised access, including access controls and encrypted connections. No system is completely secure, and we cannot guarantee the security of data sent over the internet.

Changes to this policy

We may update this policy when our services or the law change. The date at the top of this page shows when it was last revised, and significant changes will be noted here.

Contact

Questions about this policy or your personal data can be sent to info [at] energogroup.com or by post to Energo Energy Efficiency Engineering DOO, Kneza Miloša 53, 11000 Belgrade, Serbia.