Privacy policy 1.0
Privacy policy description
Privacy Policy – Imeon Energy
Collected Data
Types of data collected
As part of the use of our smart inverters and monitoring platform, we collect the following data reported by your equipment:
• Energy production data
• Electrical consumption data
• Technical parameters of the inverters
• Performance and yield data
• Technical alerts and diagnostics
• Event timestamps
• Technical identifiers of the equipment
Collection Methods
Data is transmitted via Wi‑Fi or Ethernet over the Internet. Connection to the monitoring platform is not required for the proper functioning of the hardware. We do not collect geolocation data.
Purposes of Processing
We use your data to provide detailed information about your installations via our monitoring platform, ensure the tracking and optimization of your equipment, provide personalized technical support, and improve our products and services.
Data Sharing
Sharing with your installer
You may choose to share or not your production data with your installer to facilitate maintenance and monitoring of your installation. The option to disable this sharing is located on your profile page.
Integrations with Third‑Party Services
As part of our integrations with third‑party home automation platforms and voice assistants, including Google Assistant, Amazon Alexa, and similar services, we share user data in accordance with applicable regulatory requirements and the policies of these platforms upon user authorization and account linking.
We share only the data strictly necessary for the operation of each platform integration, respecting the principle of data minimization. For Google, we share device status data and energy readings from your installation, required for the Google Assistant integration to function properly, in compliance with the Google API Services User Data Policy and usage limitation requirements. For Amazon Alexa, we transmit the device statuses and energy readings of your installation.
These data transfers are secured by encrypting data using at least TLS 1.2, OAuth 2.0 authentication, limiting permissions to only the required scopes, immediate revocation of access in case of integration disconnection, and regular auditing of data access and sharing.
These authorizations can be revoked at any time via your monitoring account settings.
Data Retention
Your data is retained indefinitely, as necessary to provide our monitoring and technical support services.
Regarding third‑party integrations, we apply retention periods specific to data types: authentication data is retained as long as the integration remains active, and user data is processed in accordance with GDPR standards of third‑party integrations.
Data Location
All your data is hosted in France, ensuring its protection under European standards.
Some third‑party platforms may process your data outside the European Union; in such cases, we ensure appropriate safeguards are in place, including EU Commission adequacy decisions or standard contractual clauses. We limit transfers to only necessary data and inform you of the destination countries of the data.
Your Rights
Under GDPR, you have the following rights:
• Right of access: You may request access to your personal data
• Right of rectification: You may request correction of inaccurate data
• Right of erasure: You may request deletion of your data
• Right to data portability: You may obtain your data in a structured format
• Right to object: You may object to the processing of your data
Rights Specific to Third‑Party Integrations
You have expanded rights regarding data management, including the ability to revoke authorizations at any time from your monitoring account or directly within the third‑party platform settings, and to limit the types of data shared with each service.
Under GDPR, you are entitled to access the full list of data shared with each platform, rectify inaccurate information, request data erasure, obtain your data in a structured format, and object to processing for specific purposes.
Exercising Your Rights
To exercise your rights, you can contact us by phone.
Data Security
We implement all appropriate technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction.
Compliance with Platform Policies
We never use Google user data for targeted advertising, remarketing, or any form of personalized advertising, in accordance with the Google API Services User Data Policy.
Human access to user data is only authorized in exceptional circumstances, specific files or data, and solely for providing service or technical support.
Policy Changes
We reserve the right to modify this privacy policy at any time. Any changes will be notified to you via our platform.
Contact
For any questions regarding this privacy policy or the use of your personal data, you can contact us:
IMEON ENERGY
6 rue de Kerbernard
29200 Brest
France