Regilo privacy notice and cookie policy
Regilo Group B.V. · Regilo Supply B.V. · Regilo Systems B.V. · Regilo Solutions B.V.
Version 1.0 | 19 September 2026
Privacy notice
We process personal data when you visit our websites, contact us, place an order or use our services. This notice explains which data we use, why we use it, who we share it with and your rights.
This notice applies to Regilo Group B.V., Regilo Supply B.V. trading as LithiumAccus.nl, Regilo Systems B.V. and Regilo Solutions B.V., and the websites they operate. These include the Regilo websites with a .com domain, LithiumAccus.nl and associated portals. It also covers sales, installation, maintenance, the Regilo EMS platform, Re.Connect and support, insofar as we are responsible for the processing ourselves. Only the sections relevant to your contact or service apply to you.
1 Who is responsible
“Regilo”, “we” and “us” mean the company that determines the purpose and means of the particular processing. This is known as the controller. The following overview helps you identify the relevant company.
| Company | Responsible for its own processing relating to |
|---|---|
| Regilo Group B.V. | The group website, general group enquiries and its own holding company activities. |
| Regilo Supply B.V. — trading as LithiumAccus.nl | Its own websites and online shop, product sales to businesses and consumers, orders, delivery and related customer service. |
| Regilo Systems B.V. | Its own website, advice, engineering, installation, commissioning, maintenance and service. |
| Regilo Solutions B.V. | Its own website, EMS services, Re.Connect, accounts, subscriptions and product support. For data processed solely on a customer’s instructions, see section 4. |
The website and form identify the company that operates the website or handles the enquiry. For an order or engagement, the contracting party is stated in the quotation, order confirmation or agreement. Where several companies are involved, each remains responsible for its own processing. Data is not automatically shared freely throughout the group.
For privacy enquiries, contact info@regilosolutions.com. This is the central contact point for all four Regilo companies. Where possible, state the company or website concerned. We will ensure your enquiry reaches the appropriate company. You can also write to Egersundweg 2, 9723 JM Groningen, the Netherlands, marked “Privacy”. Our telephone number is +31 (0)50 205 33 38.
| Company | Postal address and registration |
|---|---|
| Regilo Group B.V. | Egersundweg 2, 9723 JM Groningen, the Netherlands — Dutch Chamber of Commerce 92331424 |
| Regilo Supply B.V. | Egersundweg 2, 9723 JM Groningen, the Netherlands — Dutch Chamber of Commerce 98526901 |
| Regilo Systems B.V. | Egersundweg 2, 9723 JM Groningen, the Netherlands — Dutch Chamber of Commerce 98549138 |
| Regilo Solutions B.V. | Egersundweg 2, 9723 JM Groningen, the Netherlands — Dutch Chamber of Commerce 98527487 |
2 Which data we process
The data we need depends on what you do with us. It may include:
- Contact details: name, company name, job title, email address, telephone number and correspondence. For business customers, we also process details of contact persons and authorised users.
- Order and payment details: billing and delivery addresses, orders, quotations, invoices, payment status, bank details where necessary, returns and warranty enquiries.
- Installation and service data: installation address, on-site contact, serial numbers, configurations, work orders, test results, relevant photographs, faults and support conversations.
- Account and usage data: username, login and security information, access rights, account settings, activation times and use of our digital services.
- Energy and system data: timestamped measurements, generation, consumption from the grid, export, battery status, charging data, configured limits, fault notifications and commands sent to connected equipment. Available data depends on the connected devices and agreed functions.
- Website data: IP address, browser and device details, pages visited, technical logs and cookie preferences, insofar as the technology used collects this information.
- Job application data: contact details, CV, motivation, work experience and information from interviews when you apply for a job with us.
Energy and installation data is personal data if it can be linked directly or indirectly to a person. Information about a home, charge point or user account may also qualify. Only genuinely anonymous data falls outside this notice.
We receive data from you, through your use of our services and from connected equipment. We may also receive necessary data from your employer, client, installer, service partner or an integration you use. For business contacts, we may use relevant business information from public company websites or the Dutch Business Register. If we obtain your data from another source, we will generally inform you within one month, or earlier at the first contact or first disclosure to another recipient. We will also identify the source, unless a statutory exception applies.
We do not ask for medical information, a Dutch citizen service number (BSN) or a copy of your identity document through general forms. Do not send such information unless it is necessary. Where required, we provide separate information for personnel records or particular incident files.
3 Why we use data
The GDPR requires a lawful basis for each processing activity. Below we explain the basis for each purpose. A contract is the basis only where you are personally a party to that contract, for example as a consumer or sole trader. For employees of a business customer, we generally rely on the legitimate interests described below.
Contact and enquiries
We use your contact details and the content of your enquiry to respond, arrange a demonstration or appointment, and prepare a quotation. If this concerns your request to enter into a contract, that is the basis. For other enquiries and business contacts, our legitimate interest is to answer questions carefully and maintain business relationships.
Sales, installation and support
We use necessary order, payment, installation and service data to supply products, schedule work, hand over an installation and handle returns, warranty matters or support. The basis is performance of our contract with you. For business contacts, it is our legitimate interest in performing and documenting the work for their organisation.
Digital services and energy management
We use account, installation and system data for activation, access management, monitoring, notifications, diagnostics and agreed control. The basis is performance of our contract with you, or our legitimate interest in providing and securing the service for your organisation. Where we process data solely on behalf of a business customer, that customer determines the lawful basis; see section 4.
Administration and legal obligations
We use necessary data for invoicing, financial administration and compliance with tax rules or a legally valid information request from a competent authority. For legally required records, the basis is a legal obligation. To collect or substantiate a claim, we rely on our legitimate interest in protecting our rights.
Security and improvement
We use necessary technical data to identify errors, prevent misuse, secure accounts and systems, and improve the reliability of our services. Our legitimate interest is to provide secure, properly functioning services. We limit the data and access to what is necessary and take your privacy interests into account. Where anonymous data is sufficient, we use it. For cookies requiring consent, see the Cookie policy.
News and marketing
We send newsletters and other commercial emails if you have consented. A company may also promote its own similar products or services to its existing customers if it obtained the email address during a sale and offered a simple, free opt-out both at that time and in every message. For this limited customer communication, our legitimate interest is maintaining the customer relationship, within the rules governing electronic messages.
A purchase from one company does not automatically constitute consent to commercial emails from the other companies. For joint newsletters, the sign-up clearly identifies the companies on whose behalf you will receive messages. You can unsubscribe at any time. Operational messages, such as order confirmations or necessary service notifications, are separate from marketing.
If we wish to use your name, identifiable photograph or personal experience in a customer story or another marketing publication, we ask for consent in advance. We explain where and for what purpose we will use the information. You can subsequently withdraw your consent.
Job applications
We use application data to assess your application and conduct the recruitment process. The basis is taking steps at your request towards a possible employment contract. If we wish to retain your data afterwards for future vacancies, we ask for separate consent.
Required fields indicate which data is needed to handle your request or order. For example, we cannot deliver without a delivery address. Certain EMS functions cannot operate without necessary measurement or account data. Consent to marketing or optional cookies is not a condition of purchasing or receiving ordinary services.
4 Energy management and system access
Our own responsibility and processing on instructions
Regilo Solutions B.V. is responsible for processing for which it determines the purposes and means itself, such as its own customer relationship and invoicing records. If Solutions processes personal data solely on behalf of and under the instructions of a business customer, for example data about that customer’s users or sites, Solutions acts as a processor for that activity. The arrangements are set out in a data processing agreement. The customer remains responsible for informing the people concerned and determining the lawful basis.
The actual configuration of the service determines the role for each processing activity. An installer or business customer is therefore not automatically the controller for all EMS data. For services supplied directly to consumers, Regilo’s applicable responsibilities as a controller apply. If several parties jointly determine purposes and means, they record their allocation of responsibilities and make its essence available.
Installers and connected services
An installer or service partner receives access only to the sites, functions and data for which it is authorised and which are necessary for the agreed work. Contact us if that access needs to be changed or terminated. Ending access does not automatically delete data that must be retained on another valid basis.
When your installation is connected to Victron VRM, relevant system data is processed through that environment and can be viewed there by authorised users. The exchanged data depends on the configuration and permissions granted. The portal is at vrm.victronenergy.com. Please also consult the terms and privacy information provided there for your account. General privacy enquiries to Victron can be sent to privacy@victronenergy.com. Regilo remains responsible for its own use and disclosure of data.
Data is exchanged with an energy supplier, aggregator or other market participant only if the integration forms part of the agreed service and there is a valid lawful basis. Before activation, we inform you about the party involved, the purpose and the data. An EMS subscription does not automatically give third parties access to your installation or permission to provide energy market services.
5 AI and automated processing
We may use AI to support our customer service, for example to organise an enquiry, find relevant product information or prepare an answer. We process only the data needed for that support. The lawful basis follows the support purpose in section 3. If you communicate directly with an AI assistant, we make this clear at the outset. You can ask for your enquiry to be handled by a member of staff.
We do not make customer or installation data available for training generally available AI models. Suppliers providing AI support for us may use that data only for the agreed service and under appropriate arrangements. When using an AI assistant directly, you can always request assistance from a member of staff through info@regilosolutions.com.
The EMS may make automatic decisions about connected equipment, such as charging a battery based on tariffs, measurements and configured limits. This can affect energy consumption, comfort, costs and revenue. The agreed functions and settings determine how it operates. A technical control command is not automatically a decision about a person within the meaning of Article 22 GDPR.
We do not use solely automated decision-making about individuals that has legal or similarly significant effects. Such decisions are assessed by a member of staff. A separate payment provider may carry out its own checks; the information supplied by that provider during payment applies. If a Regilo service starts using such automated decisions, we will inform you before processing about the permitted basis, operation, consequences and applicable rights, including human intervention and the right to contest a decision.
6 Who we share data with
We share only data that the recipient needs for the relevant purpose and for which there is a valid lawful basis. Depending on your contact or service, recipients may include:
- Hosting, cloud, IT, email, CRM, administration and support providers, including suppliers of AI support used by us.
- Payment providers and carriers for payment and delivery of orders.
- Installers, maintenance and service partners, and manufacturers for performance of work, technical support or warranty matters.
- Providers of connected platforms and APIs, such as Victron VRM, and agreed energy or market participants.
- Accountants, legal advisers, insurers or competent authorities, insofar as necessary for their engagement, an obligation or protection of rights.
- Other Regilo companies where necessary for your enquiry, performance of an engagement or a lawfully organised supporting group function.
- Providers of optional website features or marketing technologies, in accordance with your choice and the information in that website’s cookie overview.
We enter into data processing agreements with suppliers that process personal data solely on our instructions. Parties processing data for their own purposes have their own responsibilities. Within the group, access is limited to employees who need the data. We do not sell personal data.
7 Data outside the European Economic Area
Some suppliers or connected services may process data outside the European Economic Area or make it accessible there. We permit such transfers only if GDPR requirements are met. This may be based on an applicable European Commission adequacy decision or appropriate safeguards, such as European standard contractual clauses, supplemented by additional measures where necessary.
Our website may link to Calendly for online appointments. You decide whether to open that external service; you can also arrange an appointment by email or telephone. Calendly explains its processing and international transfers at calendly.com/legal/privacy-notice. We use the appointment details supplied to us to schedule and handle the appointment. For processing on our instructions, we put the necessary arrangements and transfer safeguards in place.
External online services may process data in the United States or another country outside the EEA. Information about the recipient, the country concerned and the safeguard actually used is provided at the relevant integration or through that service’s privacy information. You can request the applicable information and a copy of the relevant safeguards through info@regilosolutions.com. Confidential information may be redacted. We rely on an adequacy decision only if the recipient and processing fall within its scope.
8 How long we retain data
We retain personal data no longer than necessary for its purpose, after which we delete or anonymise it. An exception to the periods below applies if particular data is demonstrably needed for longer because of a legal obligation or a specific claim. We limit that exception to relevant data and reassess the need.
| Data | Retention period or criterion |
|---|---|
| Standalone enquiries and quotations that do not lead to an engagement | Up to 12 months after the last substantive contact; deleted earlier if retention no longer serves a purpose. |
| Order, contract and handover records | For the duration of the agreement. Afterwards, only as long as needed for ongoing warranty matters, service, statutory retention obligations or legal claims. The applicable obligation or limitation period determines the duration. |
| Basic tax records | Generally 7 years under the tax retention obligation; a different statutory period takes precedence. This does not automatically apply to all customer or measurement data. |
| Accounts | Up to 3 months after the account or service ends. Access rights cease as soon as there is no valid reason for them. |
| Detailed EMS data in Regilo storage | Raw measurements and control-command logs: up to 90 days after recording, for diagnosis, checking operation and incident investigation. |
| EMS summaries in Regilo storage | Hourly, daily and monthly overviews: up to 24 months after recording, for insight and comparison of consumption and performance across seasons. |
| End of the EMS service | An export may be requested within 30 days of termination. Remaining service data is deleted from active Regilo systems no later than 90 days after termination; any shorter ordinary retention period still applies. |
| Closed support enquiries | Up to 2 years after closure. Essential information in a longer-running warranty or installation file follows the retention period for that file. |
| Technical and security logs | Up to 90 days. Only data relating to a specific incident is retained longer, for as long as investigation or resolution makes this necessary. |
| Newsletter and opt-out records | Mailing list: until unsubscribe. Evidence of consent: up to 2 years after withdrawal or last use. A minimal opt-out record is retained as long as necessary to respect your choice, subject to annual review. |
| Job application data | Up to 4 weeks after the recruitment process ends. With separate consent, up to 1 year for future vacancies. |
| Cookies and website data | Cookie choice: up to 6 months. Identifiable statistical data: up to 14 months. Marketing measurement data: up to 90 days. Shorter periods in the current cookie overview take precedence. |
The EMS periods above apply to storage managed by Regilo itself. For data processed solely on instructions, we follow the agreed lawful instructions and deletion arrangements with the responsible customer. Necessary evidence relating to a specific claim or legal obligation may be retained separately for longer; we limit this to the relevant file.
Victron VRM has its own storage environment. According to the VRM manual, detailed data in the Advanced tab is retained for at least 6 months, with an exception for battery state of charge; yield and consumption data on the dashboard is retained for at least 5 years. These are minimum periods stated by Victron, not deletion periods guaranteed by Regilo. The terms and capabilities of your VRM service determine which history remains available. On termination, we also handle requests relating to VRM data insofar as it falls under our responsibility. Simply disconnecting an installation does not automatically delete its history.
Deleted data may remain in restricted backups. These are overwritten within a maximum of 90 days. We use such data solely for necessary recovery. When restoring a backup, we reapply relevant deletions.
9 How we protect data
We take technical and organisational measures appropriate to the data and risks. These include access restrictions, appropriate management of accounts and permissions, protection of connections and systems, maintenance and incident procedures. No measure provides an absolute guarantee. If you suspect misuse or a security issue, please report it through our privacy contact.
10 Your rights
You can ask us for access to your personal data, a copy, correction, deletion or restriction of its use. Subject to the statutory conditions, you can receive data you have provided and which we process automatically on the basis of consent or a contract in a commonly used digital format, or have it transferred.
If we use personal data on the basis of your consent, you can withdraw that consent at any time. This does not affect the lawfulness of use before withdrawal. You may object to processing based on a legitimate interest on grounds relating to your particular situation.
You can always object to direct marketing free of charge. We will then stop that use, including any profiling for that marketing. You can unsubscribe through the link in a commercial message or through our privacy contact.
Send your request to info@regilosolutions.com or the postal address of the relevant company. We respond without undue delay and within one month at the latest. For complex or numerous requests, that period may be extended by up to two months. We will inform you within the first month and explain why.
If we have reasonable doubts, we may request additional information to verify your identity. We do not routinely ask for a full copy of an identity document. Sometimes we cannot erase all data, for example because of a statutory retention obligation or the rights of others. We will explain this. If we act solely as a processor, we help direct your request to the responsible customer.
You can lodge a complaint directly with the Dutch Data Protection Authority through www.autoriteitpersoonsgegevens.nl. You do not have to complain to us first, although you are welcome to contact us to discuss a problem.
11 Changes
We update this notice when our services or data processing change. The version and date appear at the top. Where necessary, we also inform affected users directly of significant changes. Publishing a new notice does not by itself give us consent for a new use of personal data.
Cookie policy
This cookie policy applies to the websites of Regilo Group B.V., Regilo Supply B.V. including LithiumAccus.nl, Regilo Systems B.V. and Regilo Solutions B.V. The company operating the relevant website is responsible for its own use of cookies. That company is identified on the website and in our privacy notice. The current cookie overview available through Cookie settings relates to the website you are visiting.
1 What cookies and similar technologies are
Cookies are small files that a website places on your computer, tablet or telephone. Here we also use the term for similar technologies, such as local browser storage, pixels and other ways of storing or reading information on your device. These technologies may be necessary for the website to work or may be used for statistics, external content and marketing.
Not every website uses every category below. The current overview identifies the technologies actually used on this website, their providers and purposes.
2 The categories we distinguish
Necessary technologies
These technologies are necessary for communication or a function you request, such as logging in, a shopping basket, security or remembering your cookie choice. Insofar as they fall within the statutory exception, we do not request consent. Where personal data is processed, the basis is performance of the requested service or our legitimate interest in a secure, functioning website.
Optional statistics
Regilo asks for prior consent for analytical cookies and similar measurement methods that store or read information on your device. We apply this choice even where a limited statistical application might legally be exempt from consent. The overview identifies the data and providers involved. Without consent, these technologies remain disabled.
External content and additional features
Embedded videos, maps, appointment modules or other external components may exchange information with their providers. Where consent is required, we load the relevant component only after you have given it. An ordinary link to another website is different: if you open it, that website’s policy applies.
Marketing
Marketing technologies may be used to measure campaigns, recognise visitors or tailor advertising to interests. This may also involve behaviour across several websites. We use such technologies only with prior consent. The overview identifies the providers, purposes and any data sharing.
3 Giving or refusing consent
If this website uses optional technologies, on your first visit you can choose Accept all, Reject all or Set preferences. Reject all refuses all optional technologies, including statistics, external content and marketing. Only necessary technologies remain active. The choice buttons are immediately visible and presented with equal prominence.
Optional categories are off by default. You can choose by purpose; for example, a separate choice to play a video does not give consent for marketing. Continuing to browse, scrolling or closing the notice does not constitute consent. After refusal, the ordinary website remains accessible, although a particular external feature may remain disabled.
4 Changing your choice
You can change your choice or withdraw consent at any time through Cookie settings at the bottom of the website. Withdrawal is as easy as giving consent. It does not affect the lawfulness of previous processing. We stop the relevant future storage, reading and transfer, and remove previously placed optional cookies insofar as we have technical control over them.
You can also delete stored cookies through your browser. The website may then ask for your preference again. Your choice applies only to the website where you make it. We do not automatically carry it over to another Regilo domain or a separate portal. We remember both consent and refusal for a maximum of 6 months. After that, we ask you to choose again if optional technologies are used; we do so earlier if purposes or providers change materially. To demonstrate consent, we retain a limited evidence record for up to 2 years after withdrawal or the last use of that consent.
5 This website’s cookie overview
Cookie settings at the bottom of the website provides the current overview for the domain you are visiting. That overview forms part of this cookie policy. It shows the cookies and similar technologies used in each category and lets you manage your preferences.
For each cookie or similar technology, the overview states its name, provider, placing domain, specific purpose, category, lifetime and retention period for collected data. It also identifies any recipients and transfers outside the EEA, the associated safeguard, whether consent is needed and a link to the provider’s privacy information. The overview shows the date of the latest check.
Cookies may disappear when you close the browser or remain for a fixed period. A provider may also retain data after the cookie itself expires. We therefore state both periods where they differ. For your rights, our privacy contact and general information about personal data, see our privacy notice.
If only necessary technologies are used, no consent banner is needed. Information about those technologies remains available through Cookie settings. For questions, contact info@regilosolutions.com or write to Regilo, marked “Privacy”, Egersundweg 2, 9723 JM Groningen, the Netherlands.