Datenschutz | METEORIC

This Privacy Policy applies to the processing of personal data by Fundamental Energy GmbH, Max-Urich-Straße 3, 13355 Berlin ("Controller", "we", or "us") when visiting our website at https://meteoric.energy/ and when using our METEORIC platform.

METEORIC provides companies with an AI-powered Software-as-a-Service (SaaS) platform for optimizing energy procurement and portfolio management.

When you use our website or platform, we process your personal data. We comply with all applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

If changes occur in our data processing practices, we will update this Privacy Policy and notify you of any material changes via email.

1. Controller

Fundamental Energy GmbH

Max-Urich-Straße 3

13355 Berlin

Germany

Email: hello@meteoric.energy

Website:https://meteoric.energy

2. Data Protection Officer

For any questions regarding data protection or to exercise your rights, you may contact our Data Protection Officer:

Yannick WurcheEmail: datenschutz@meteoric.energy

3. Collection and Processing of Personal Data

3.1 Website Visits

When you access our website, so-called server log files are automatically collected and temporarily stored:

Operating system and browser type (including version)
IP address of the accessing device
Referrer URL (previously visited page)
Name and address of the retrieved file
Date, time, and duration of access

Legal Basis: Art. 6 (1) (f) GDPR (legitimate interest in the secure and stable operation of the website).

Storage Duration: 30 days.

3.2 Contact Form

If you use our contact form, we collect:

First and last name
Company name
Email address
Phone number (optional)
Message content

This data is used exclusively to respond to your inquiry and will not be passed on to third parties without your consent.

Legal Basis: Art. 6 (1) (f) GDPR (legitimate interest in responding to inquiries) or Art. 6 (1) (b) GDPR for pre-contractual measures.

Storage Duration: Up to 3 years after the conclusion of the communication.

3.3 Registration and Use of the METEORIC Platform

When registering for and using the METEORIC platform, we process:

Account Data: Name, email address, company name, role, business address.
Usage Data: Login timestamps, features used, interactions with the platform.
Energy Data: Load profiles, annual consumption data, delivery point information, metering point data.
Payment Information: For paid usage (bank details, payment history).

Legal Basis: Art. 6 (1) (b) GDPR (performance of a contract).

Storage Duration: For the duration of the contractual relationship; accounting and contract data for up to 10 years in accordance with commercial and tax retention obligations.

3.4 Cookies and Web Analytics

Functional Cookies Our website uses technically necessary cookies for session management, login functions, and basic website operations. These cookies cannot be deactivated, as the website will not function properly without them.

Legal Basis: Art. 6 (1) (f) GDPR (legitimate interest).

Analysis Cookies (Google Analytics) We use Google Analytics to analyze the use of our website (navigation, page views, visitor origin). These cookies are only set with your consent.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Data Processed: Usage statistics, IP address (anonymized), page views, session duration.
Third-Country Transfer: USA; based on Standard Contractual Clauses (SCCs) pursuant to Art. 46 (2) (c) GDPR.
Legal Basis: Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG (consent).
Opt-Out: Via our cookie banner or at https://tools.google.com/dlpage/gaoptout.

You may withdraw your consent at any time via our cookie banner.

5. International Data Transfers

In the course of our business activities, personal data may be transferred to service providers outside the European Economic Area (EEA). Such transfers occur exclusively on the basis of appropriate safeguards in accordance with the European Commission's Standard Contractual Clauses (Art. 46 (2) (c) GDPR) in conjunction with appropriate technical and organizational measures.

6. Storage Duration

We delete personal data as soon as it is no longer required for its original purposes:

Server Log Files: 30 days.
Contact Inquiries: Up to 3 years after the conclusion of communication.
User Data (Platform): For the duration of the contractual relationship; thereafter 360 days after account termination.
Contractual and Accounting Data: Up to 10 years pursuant to § 257 HGB and § 147 AO (German commercial/tax codes).

7. Data Security

We employ Technical and Organizational Measures (TOMs), including:

Encryption of data transmission (TLS/HTTPS).
Encryption of stored data.
Role-based access control and multi-factor authentication.
Regular backups.
A defined process for detecting and reporting data protection incidents.

8. Your Rights

Regarding the processing of your personal data, you have the following rights:

8.1 Right of Access (Art. 15 GDPR): You may request information about what data we process about you, for what purpose, for how long, and to whom we disclose it.
8.2 Right to Rectification (Art. 16 GDPR): You may request the correction of inaccurate or incomplete data.
8.3 Right to Erasure (Art. 17 GDPR): You may request the deletion of your data if it is no longer required for the original purposes, if you have withdrawn your consent, or if the processing was unlawful.
8.4 Right to Restriction of Processing (Art. 18 GDPR): You may request that we restrict the processing of your data while, for example, the accuracy of the data is being contested.
8.5 Right to Data Portability (Art. 20 GDPR): You have the right to receive your data in a structured, machine-readable format and to transfer it to another provider.
8.6 Right to Object (Art. 21 GDPR): You may object to processing based on legitimate interests (Art. 6 (1) (f) GDPR) at any time. We will cease processing unless compelling legitimate grounds exist.
8.7 Right to Withdraw Consent (Art. 7 (3) GDPR): You may withdraw any consent granted at any time with future effect. The lawfulness of processing carried out prior to the withdrawal remains unaffected.

To exercise your rights, please contact: datenschutz@meteoric.energy

9. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit Alt-Moabit 59–61, 10555 Berlin

Email: mailbox@datenschutz-berlin.de

An overview of all state authorities can be found here: https://www.bfdi.bund.de/

10. Automated Decision-Making

We do not process your data for fully automated individual decision-making, including profiling, within the meaning of Art. 22 GDPR.

Status: March 2026