Privacy Policy

BESS SERVICE Privacy Policy

Version date: 7 September 2026

Applicable website: https://bessservice.eu/

1.Who We Are and Scope

Energy Planet Services B.V. operates the BESS SERVICE brand and is the data controller for the personal-data processing described in this Policy.

This Policy applies to website visitors, registered users, Academy learners, certificate holders, technician-network applicants, project-matching participants, business contacts, newsletter subscribers and others who contact us.

Registered office: Walborg 2-A, 1082 AM Amsterdam, the Netherlands Dutch Chamber of Commerce (KvK) number: 42109239 Business contact address: Keienbergweg 17, 1101 EZ Amsterdam, the Netherlands Privacy contact email: service@bessservice.eu

2.Information We Collect

Account and identity information. This includes your name, email, country or region, company, job title, company size, account identifier, profile image if used, and sign-in and verification status.

Professional and project information. This includes service types, geographic coverage, technical expertise, BESS experience, CVs, qualifications, certificates, work authorisations, availability and application materials.

Learning and assessment information. This includes enrolment, course access and completion progress, assessment answers, scores, attempt history, certificates and learning records. Where sharing features are provided, related sharing actions may also be recorded.

Enquiry and business information. This includes contact details, service requirements, messages, attachments, quotations and project communications submitted through forms, email or other channels.

Subscription information. This includes email addresses, subscription preferences and unsubscribe records, and email opens and clicks where tracking is enabled on an appropriate legal basis.

Technical and usage information. This includes IP addresses, approximate location, device, browser, language, access times, page views, clicks, sessions, errors, security logs, cookies and similar identifiers.

We may also obtain information from clients, project partners, referees, public professional sources and third parties you choose to connect. We will provide information about the source and processing where required by applicable law.

3.Purposes and Legal Bases

Accounts, courses and certificates. We use information to create and manage accounts, verify email addresses, retain learning progress, administer assessments and issue certificates, generally on the basis of performing a contract or taking pre-contractual steps at your request.

Technician network and project matching. We use professional information to assess experience and qualifications, maintain a talent pool, contact candidates and recommend suitable personnel. Depending on the circumstances, the legal basis is contract performance, steps at your request, applicable legitimate interests or your consent.

Enquiries and commercial services. We use information to respond to enquiries, prepare quotations and discuss FAT, O&M, LTSA, sourcing or BESS ProVision projects, based on steps at your request, contract performance or legitimate interests in normal business communications.

Security and operations. We use necessary information for authentication, troubleshooting, abuse prevention, logging, backups and platform maintenance, based on contractual obligations, legal duties or legitimate interests in maintaining a secure and stable service.

Newsletters and promotion. We send news, course, event and service information with consent or where otherwise permitted by applicable law, and provide an unsubscribe mechanism.

Analytics and improvement. We analyse website and course use, performance and errors to improve services. Non-essential tracking requiring consent is enabled only after consent; necessary security analysis and appropriate aggregated analysis may rely on legitimate interests.

Legal compliance and disputes. We may process necessary information for tax, audits, regulation, complaints and the establishment, exercise or defence of legal claims.

4.Technician Network and Project Matching

If you apply to the technician network or opt into project matching, we may assess your location, languages, coverage, experience, qualifications, learning records and availability to determine suitability for specific opportunities.

Initial screening may use rules or support tools, but the matching described in this Policy does not involve decisions producing legal or similarly significant effects based solely on automated processing.

Where an appropriate legal basis exists, we may provide professional information needed for matching to relevant clients, project owners or partners, limiting disclosure to opportunity-relevant information where possible. Recipients that determine their own purposes may act as independent data controllers.

5.Cookies and Similar Technologies

We use necessary technologies for sign-in, sessions, security, language selection and storage of cookie preferences. Functional, analytics and marketing technologies are enabled only after relevant consent where required.

The Academy and BESS ProVision 3D Viewer may use local storage or server-side state to support learning progress, model display and interactions. See our Cookie Policy and website Cookie Settings for details.

6.Sharing of Information

We may provide necessary information to service providers supporting website hosting, cloud storage, security, authentication, email, video, analytics and other technical functions.

Where relevant to services or project matching you choose, we may provide necessary information to clients, project owners, EPCs, manufacturers, field-service partners, project managers and training partners.

We may also lawfully disclose information to professional advisers, auditors, insurers, regulators and law enforcement, or as necessary for corporate restructuring, financing or asset transactions.

We do not sell personal data or disclose your information for third-party independent marketing merely because you registered for a course. For such uses, we will provide notice and obtain consent where required.

7.International Data Transfers

Our teams, clients, service providers and project partners may be located outside the European Economic Area. Depending on service arrangements, information may need to be transferred to other countries or regions.

For international transfers restricted by the GDPR, we will use applicable adequacy decisions, EU Standard Contractual Clauses and necessary supplementary safeguards, or another lawful mechanism where its conditions are met. You may contact us for information about applicable safeguards.

8.Retention

Account information: Retained while the account is active and normally deleted or anonymised within 30 days after closure, with backups expiring according to the applicable backup cycle, subject to legal requirements or other lawful retention.

Learning and certificate records: Learning records are normally retained while the account is active. Records necessary to verify certificate authenticity may be retained for the certificate validity period or a reasonable verification period.

Talent-pool and matching information: Normally retained for 12 months after the last interaction, or longer with consent or where an ongoing relationship exists.

Enquiries and project communications: Normally retained for 24 months after the last interaction, or longer where required for contracts, claims or legal compliance.

Marketing subscriptions: Retained until you unsubscribe. Necessary suppression records may be retained to avoid sending further marketing to people who have opted out.

Analytics identifiers: The proposed retention period is no more than 14 months, subject to the actual tool configuration and published cookie inventory.

Security logs: Normally retained for 6–12 months, with lawful extensions where a security incident or investigation requires it.

Longer legal, tax, accounting, audit, insurance or dispute-related requirements take precedence. When retention is no longer necessary, we will delete, anonymise or lawfully restrict use of the relevant data.

9.Data Security

We apply risk-appropriate access controls, encryption in transit, password protection, permission management, logging, backups and supplier management. No internet service can guarantee absolute security.

Where a personal-data breach requires notification, we will notify the relevant supervisory authority and affected individuals as required by applicable law.

10.Your Rights

Subject to applicable law, you may request access, correction or deletion of personal data, restriction of processing, objection to processing based on legitimate interests, withdrawal of consent and, where applicable, data portability. You also have applicable safeguards regarding significant decisions based solely on automated processing.

You may object to direct marketing at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on that basis before withdrawal.

Submit requests to service@bessservice.eu. We may need to verify your identity and normally respond within one month. Where permitted by applicable law, this period may be extended based on the complexity and number of requests.

You may lodge a complaint with the Dutch Data Protection Authority, Autoriteit Persoonsgegevens, or the appropriate supervisory authority in your habitual residence, place of work or place of the alleged infringement.

11.Children

Accounts, training certification and project-matching services are primarily intended for people aged 18 or over. If we discover that a minor’s personal data has been collected without appropriate authority, we will take reasonable steps to delete it.

12.Third-Party Websites and Embedded Content

The website may contain external links, social sharing, video, maps or third-party 3D components. Relevant third-party processing is governed by their own privacy notices. Where required, we obtain consent before loading non-essential tracking technologies.

13.Changes and Contact

We may update this Policy for business, technical, supplier-related or legal reasons and will indicate the updated date. Material changes will be reasonably notified through the website, account notices or email.

For questions about personal-data processing, contact: service@bessservice.eu.