1. General

This Privacy Notice sets outs the basis on which we, Stichting SolarXS2All (“SolarXS2All”), will process any personal information that we may collect from you when you use our online services, contact us (such as via telephone, an online contact form or email, etc.), or for instance subscribe to our newsletter.

We are committed to respecting and protecting the privacy of the individuals whose personal data we process. All your personal data will be processed in accordance with applicable data protection laws, including the European Regulation 2016/679 on the protection of natural persons with regard to the processing of personal date and on the free movement of such data (the “General Data Protection Regulation” or “GDPR“), as amended from time to time.

2. The controller of your data

The controller of your data isSolarXS2All, a Dutch foundation (stichting) registered with the Dutch chamber of commerce under number 96939435.

Where this Privacy Notice refers to “we”, “our”, or “us” below, this shall mean SolarXS2All.

3. What data we collect about you?

When you visit our website, contact us, submit project requests, or subscribe to a newsletter, we may collect the following data about you:

• Your domain name, IP address, and/or anonymized user identifier
• Which internet browser you are using
• The device and/or environment you are using
• The origin of your visit to our website (such as through a Google search result, through our Facebook page, etc.)
• Your surfing behavior and activity on our website (such as what you look at on the website, what you click, how much time you spend on the website, etc.)
• Your full name
• Your address
• Your email address
• Your company
• Your telephone number
• How often you open our newsletter and whether you click on buttons and links to our website
• Your requests
• Any additional information that you directly provide to us (such as emails, phone calls, letters, online contact form information, personal information, etc.

4. How do we collect your personal data?

The way we collect your personal data depends on how you use our website, contact us, submit project requests, or subscribe to a newsletter. Some data is collected automatically as you interact with us via our website. Other data is collected directly from you (such as information you provide for a specific purpose, request, etc.) or with your consent. Where required by law, we will obtain your consent for the collection and processing of your information (such as for the purpose of direct marketing). An overview of all possible ways in which we can collect your data is listed below:

• When you visit our website and accept cookies
• When you subscribe to a newsletter
• When you contact us (such as via telephone, an online contact form, email, postal mail etc.)
• When you submit project requests
• When you input your data or information into an online tool or form

Our website may automatically record certain information through the use of cookies. Please refer to our separate Cookies Statement for more information.

5. Why do we collect this data?

It is necessary for us to collect certain data for various purposes. For example, we cannot contact you unless we have your email address, name, or telephone number, and we need an address to which we should reply. In addition, we also collect certain data for marketing purposes (with your specific consent), for example, your email address when you subscribe to a newsletter.

An overview of possible reasons why we collect your data is listed below:

• To provide input on a project request
• To be able to contact you, for example, about requests, donations or to answer questions when you have contacted us
• To assess our existing or potential relationship
• To conduct marketing activities

The legal basis of the data processing activities carried out by us depends on the type of data we are processing as well as the purpose of the processing. The legal basis of the processing could include the following:

• Performance of our contract: we are allowed to process your personal data to communicate with you before entering into our contractual relationship. For example, we need your contact details to be able to support a project or to supply products to support a project.
• Legitimate interest: we may process your personal data when it is in our legitimate interest to do so. For instance, we may collect certain data from our website to improve our online services and the look and feel of our website.
• Consent: we may also process your personal data if we have your express consent, e.g. when you sign up for a newsletter.
• Legal obligation: we may process your personal data to comply with our legal and regulatory obligations.

6. How long do we store this data?

We store your data only for as long as is necessary for the purposes mentioned in this Privacy Notice in accordance with reasonable practices and applicable laws. For example, if you unsubscribe from our newsletter, we no longer need your email address for purposes of the newsletter and your data will be removed from our mailing list. We will not store your data if we are required by law to delete it (e.g. if you object to the processing and we do not have compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms).

7. How do we protect your data?

We take appropriate security measures (such as physical, electronic, and administrative safeguards) to protect any data we collect from unauthorized or inappropriate access. We restrict access to information about you to persons who need to know the information in order to achieve the purposes mentioned in this Privacy Notice.

8. What are your rights under data protection laws?

Subject to specific legal requirements and potential restrictions, you may have the following rights under applicable data protection laws:

• You have the right to obtain information on your data stored by us, as well as on certain aspects of our data processing activities, including the purposes of processing and the recipients of your data.
• At your request, we will correct the inaccurate or incomplete data stored by us in relation to you.
• You have the right to request the deletion of your data, if doing so is not in conflict with other statutory provisions (e.g. statutory retention periods) or an overriding interest on our part (e.g. for the defence of our rights and claims).
• You have the right to request that we restrict the processing of your data. In such cases, we may only use the data for certain limited purposes set out by law.
• You have the right at any time to object to any processing of your data that is based on our legitimate interests or public interest on grounds relating to your particular situation. If you object, we will no longer process your personal data unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
• In case we process your personal data for marketing purposes, and you do not wish to receive any marketing materials or a newsletter, you have the right to object to this at any time. If we receive such objection from you, we will stop processing your data for such marketing purposes.
• In certain cases, you also have the right to receive your data in a structured, commonly used and machine-readable format or have it sent to a third party.
• In addition, you have the right to revoke any consent given to us for the processing of personal data with future effect at any time. Please note that if you withdraw your consent, that does not make the data processing carried out by us prior to receiving your request unlawful.
• You also have a right to complain to a data protection supervisory authority. However, we recommend that you always direct any complaints to us first.
• If you want to exercise any of the above rights, or if you have any questions in relation to our data processing activities, you may submit a request to us via email or phone call:
• Email us at - info@solarxs2all.com

9. How is your data shared?

Generally, we will not share any data we collect with third parties and affiliates except as outlined below. For example, we may share your data with authorized business or support partners, partners, ambassadors or third-party service providers that, on our behalf, perform certain services, supporting the functionality of our website, fulfilling your requests, management of contests, promotions and surveys, and communicating a newsletter. These third parties will have access to your information to the extent needed in order to perform their services, but the third parties are not permitted to share or use your information for any purposes besides those outlined in this Privacy Notice. We will never sell your data to a third party for the third party’s marketing use.

Additionally, we may disclose personal information about you:

• If it is necessary to make a transaction or request you have made
• If we are required to do so by law or court order
• If we must comply with a legitimate legal request by a legal authority or government official
• If we believe we must do so in order to prevent financial loss or physical harm
• To establish or defend our legal rights or defend against legal claims
• In connection with fraud or illegal activity, suspected or actual

Our website may contain links to third party websites, such as websites of ambassadors, partners or third party service providers, etc. We do not control the content, security, or privacy practices on these sites, and we encourage you to review the privacy notices of each site you visit.

We may use plugins, such as social share buttons or a like button (for example, for social media websites such as Facebook, etc.). Plugins, including their loading, use, and operation, are governed by the third party’s privacy notice.

Please note that where it is necessary to transfer your data to a recipient outside of the European Union (EU) and the European Economic Area (EEA), we will comply with all transfer requirements applicable under data protection laws. You may request a copy of the arrangements we have implemented with recipients located outside the EU and the EEA by contacting us via email (info@solarxs2all.com)

10. Does this Privacy Notice ever change?

We reserve the right to modify or supplement this Privacy Notice. Please revisit this Privacy Notice periodically to ensure that you have up-to-date information concerning our data processing activities. The date of the latest version of this Privacy Notice is indicated below.

Last updated: 8 October 2025