Privacy Policy
Privacy Policy
Last updated: February 2026
1. Data Controller
Perpetum Energy BV ("we", "us", "our") is the data controller responsible for processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable national data protection legislation.
Registered office: Begoniastraat 34, 9810 Nazareth-De Pinte, Belgium
Company number: BE 0893.005.754
Email: privacy@perpetumenergy.com
Website: https://perpetum.energy
2. What Personal Data We Collect
2.1 Data you provide directly
- Identification and contact information (e.g. name, email address, phone number)
- Professional information (e.g. company name, job title)
- Booking and meeting data, or gated content downloads
- The content of your message or request (whether by submission of form, email, chat or otherwise)
- Event registrations: details provided when registering for events we organise
2.2 Data collected automatically when you use our website
When you visit our website, we may (depending on your cookie choices) process:
- Technical data: IP address, browser type, device and system information
- Usage data: pages visited, time spent on pages, click behaviour, referring URLs, search terms used
- Cookie data: information collected via cookies and similar tracking technologies (see also our Cookie Policy and cookie settings)
- Behavioural data: browsing patterns used to personalise your website experience
2.3 Data from third party sources
We may (depending on configuration and your choices) receive or derive data via:
- HubSpot Inc: CRM data and where enabled, website tracking/visitor identification, lead scoring data
- Google Analytics 4 (GA4): anonymised analytics and conversion tracking data
- Publicly available information: business contact details from publicly accessible sources for B2B prospecting
3. Purposes and Legal Basis
We process your personal data for the following purposes:
| Purpose | Description | Legal Basis |
|---|---|---|
| Website operation and security | Technical functioning, security and performance, troubleshooting | Legitimate interest |
| Analytics & improvement | Understanding website usage to improve user experience and content | Consent via cookie consent (where required) |
| Contact requests and follow-up (lead generation) | Identifying potential contacts, tracking buyer intent; handle your request, contact you and follow up; internal follow-up in our CRM. | Legitimate interest; Consent for marketing |
| Meeting bookings | Register, schedule, confirm and manage your meeting; practical communication related to the booking. | Legitimate interest |
| Content personalisation | Adapting content based on browsing behaviour | Consent via cookie consent |
| Marketing communications | Newsletters, event invitations, commercial communications | Consent; Legitimate interest for existing relationships |
| B2B prospecting | Identifying and contacting relevant business contacts at organisations that may benefit from our services, using business contact details obtained from publicly accessible sources. | Consent; Legitimate interest for promoting services to relevant business contacts |
| Legal compliance | Complying with legal and regulatory obligations | Legal obligation |
4. Who we share your data with
We may share personal data with service providers supporting us (processors), solely for the purposes described in this policy and under appropriate contractual safeguards (including data processing agreements), including:
- HubSpot Inc. (CRM, marketing automation), EU data centre (eu1)
- Google LLC (GA4, GTM), EU data processing, anonymised IP
- CookieYes Ltd (consent management)
- Hosting provider (Lovable/Vercel), website hosting and CDN
- Prerender.io, server-side rendering for crawlability
We may also share your data:
- where required by law (e.g., upon request from competent authorities);
- to protect our rights (e.g., in the context of disputes).
4.2 International transfers (outside the EEA)
Some service providers may use (sub-)processors or infrastructure outside the European Economic Area (EEA), including the United States. Where applicable, transfers are protected through appropriate safeguards, such as:
- the EU-U.S. Data Privacy Framework,
- Standard Contractual Clauses (SCCs), and supplementary measures.
4.3 No selling of personal data
We do not sell personal data. We do not share data with third parties for their own marketing purposes.
5. Data Retention
We do not retain personal data longer than necessary for the purposes for which it was collected, unless longer retention is required or justified (e.g., legal obligation, dispute).
Indicative retention periods:
- Website analytics (GA4) data: 14 months (default setting)
- Cookie consent records: 6 months (then re-consent required)
- Server logs: 90 days
- HubSpot contact records:
- (i) in case of no business relationship: up to 24 months after the last meaningful interaction, unless longer retention is necessary;
- (ii) in case of business relationship: duration of business relationship + 3 years for commercial follow-up/archiving, unless longer retention is necessary;
- Marketing communication consent: until withdrawn
6. Your Rights
Under the GDPR, you have the following rights (depending on the circumstances):
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction
- Right to data portability
- Right to object
- Right to withdraw consent at any time (where processing is based on consent).
To exercise your rights, contact us at privacy@perpetumenergy.com.
You also have the right to lodge a complaint with a supervisory authority, such as:
- Belgium: Gegevensbeschermingsautoriteit (GBA)
- Netherlands: Autoriteit Persoonsgegevens (AP)
- France: CNIL
- Germany: Relevant Landesdatenschutzbehörde
7. Cookies and cookie settings
We use cookies and similar technologies. Where required, we ask for your consent via our cookie banner/consent management tool (CookieYes Ltd). You can adjust your cookie preferences at any time via the cookie settings on our website.
For more information, please see our Cookie Policy.
8. Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encryption of data in transit (TLS/HTTPS)
- Access controls and authentication
- Regular security assessments
9. Changes to This Policy
We may update this Privacy Policy from time to time. The most recent version is always available on our website.
10. Contact
Perpetum Energy BV, privacy@perpetumenergy.com