...
Private
Business

Privacy Policy

Last updated: May 2026

Welcome to EnergyKing. In this privacy statement, we explain what personal data we collect, why and how we process it, how long we retain it, and what your rights are.
By using our website or our KingConnect app, you agree to this privacy statement and to our Terms and Conditions.
We process your data in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and Belgian privacy legislation.

1. Who are we?

The data controller is:
EnergyKing NV
Mechelsesteenweg 676
3020 Herent, Belgium
Company number: BE0806.516.101
General information: info@energyking.be
Data Protection Officer (DPO): Nick Bosmans – nick.bosmans@energyking.be

For certain data processing activities (e.g., EMS data, device connectivity), we collaborate with Nexxtlab SA, based in Luxembourg. In this context, Nexxtlab acts as a processor or joint controller, depending on the situation.

EnergyKing and Nexxtlab have entered into a formal data processing agreement (DPA) in accordance with Article 28 of the GDPR.

2. What personal data do we process?

We collect only the data that is strictly necessary for providing our services. This may include:`

  • Identification information: name, email address, phone number
  • Installation details: installation address, device types, serial numbers, brand information
  • Energy data: electricity consumption by quarter-hour, power fed into the grid, solar generation, battery status (SoC), charging station or heat pump behavior
  • Technical data: IP address, device ID, connection logs
  • Payment information: payment status, Stripe ID, subscription plan
    (Note: We do not store payment card information. This information is processed exclusively by Stripe.)
    Support information: help desk inquiries, chat logs, ticket history

We do not collect health data, GPS tracking data, or other sensitive personal data.
Please note: the installation address may be considered location data as defined by the GDPR. This data is never used for tracking purposes.

3. Why do we process your data?

  • Access to and proper functioning of the app (performance of the agreement)
  • Real-time monitoring and smart control of energy assets (performance of the agreement)
  • Installation Planning and Follow-Up (Legitimate Interest)
  • Billing and Subscription Management (Legal Obligation & Agreement)
  • Reports or tips in the app (legitimate interest)
  • Newsletters and tips via email (consent)

4. How do we collect this data?

  • Through forms on our website
  • By registering in the KingConnect app
  • During installation by an EnergyKing technician or a subcontractor
  • From connected devices via a gateway or P1 cable
  • Through API integrations (such as Stripe)
  • By contacting our help desk

5. Who do we share your information with?

  • We share your personal data exclusively with trusted processors or partners, solely for the purposes described above. All parties are contractually bound to comply with GDPR-compliant security and confidentiality requirements.
  • Nexxtlab SA (EMS platform, Luxembourg) – performance of the agreement
  • Stripe Inc. (payment processor, U.S.) – performance of the agreement
  • Combell NV (hosting, Belgium) – legitimate interest
  • Technical Subcontractors (Installation & Service, Belgium) – Contract Performance

EnergyKing is not liable for incorrect or incomplete data resulting from incompatible or incorrectly configured third-party devices, unless otherwise provided by law.

6. How long do we retain your data?

  • Personal and installation data: up to 10 years
  • Energy data: up to 5 years
  • Support details: 3 years
  • Payment and billing information: 7 years

7. Your Rights

  • You have the following rights (Articles 12–23 of the GDPR):
  • Right of Access
  • Right to Rectification; Right to Erasure
  • Right to Restriction of Processing
  • Right to Object
  • Right to Data Portability
  • Right to Withdraw Consent

Please send your request to: privacy@energyking.be (response within 30 days)

8. Security

  • Encryption of all data transfers via TLS (HTTPS)
  • Access Control Based on User Roles
  • ISO 27001-certified hosting through Combell
  • Daily backups and access logging
  • Authentication via external login providers (Google and Apple)
  • EnergyKing never stores your password
  • Multi-factor authentication (MFA) is available as an option through Google/Apple itself
  • EnergyKing does not operate its own MFA and is not responsible for the operation of MFA by third-party providers

9. International Transfer

  • Standard Contractual Clauses (SCCs)
  • Encryption and Restricted Access
  • No energy data outside the EU

10. Cookies

  • Functional cookies (session cookies, language settings)
  • Technical cookies (errors, performance)
  • No tracking or advertising cookies.

11. Complaints & Contact

privacy@energyking.be
Mechelsesteenweg 676, 3020 Herent, Belgium

Not satisfied? File a complaint with:
Data Protection Authority – Drukpersstraat 35, 1000 Brussels
www.gegevensbeschermingsautoriteit.be

12. Changes

This statement is subject to change. Always check the most recent version at:
https://energyking.be/privacy-cookie-policy/

We recommend that you review this statement regularly.