Privacy Policy
Smart Climate B.V. ("we", "us", "our") operates the SmartClima platform, which includes web and mobile applications for monitoring HVAC systems. This privacy policy explains how we collect, use, store, and protect your personal data when you use our services.
We are committed to protecting your privacy and processing your data in compliance with the General Data Protection Regulation (GDPR) and applicable Dutch data protection law.
1. Data Controller
The data controller responsible for your personal data is Smart Climate B.V., registered in the Netherlands. You can reach us at info@smartclima.app.
2. Data We Collect
Account Data
When you create an account, we collect:
- Email address
- Name
- Password (stored as a cryptographic hash, never in plain text)
- Account role (user, technician, or expert)
Heat Pump Sensor Data
When you connect a heat pump, the SmartClima connector collects operational data from it, including temperatures, pressures, electrical readings, flow rates, and operational states. This data is transmitted from the connector and stored in our time-series database.
Device and Heat Pump Metadata
We store metadata about your heat pumps, such as name, brand, model, and installation location (as provided by you).
Device Provisioning Data
When you connect a new heat pump via the mobile app, we temporarily access your device's location (to detect your Wi-Fi network name) and your Wi-Fi network name and password (to configure the SmartClima connector). This data is used solely during the provisioning process and is not stored on our servers. Wi-Fi credentials are transmitted directly to the connector over a local Bluetooth connection and are not sent to SmartClima.
Usage and Diagnostic Data
We collect limited technical data to maintain and improve the service, including error reports, app version and device type, and general usage patterns. We do not use analytics trackers or advertising SDKs in our applications.
3. Legal Basis for Processing
We process your data under the following legal bases (Article 6 GDPR):
| Data | Legal basis |
|---|---|
| Account data | Performance of a contract (Art. 6(1)(b)) |
| Heat pump sensor data | Performance of a contract (Art. 6(1)(b)) |
| Heat pump metadata | Performance of a contract (Art. 6(1)(b)) |
| Error reports and diagnostics | Legitimate interest (Art. 6(1)(f)) |
| Transactional emails | Performance of a contract (Art. 6(1)(b)) |
4. How We Use Your Data
We use your data to:
- Provide the SmartClima monitoring service, including real-time and historical sensor data
- Authenticate your identity and manage access to your heat pumps
- Send transactional emails (e.g., password resets, account verification)
- Detect and resolve errors, crashes, and service issues
- Improve the reliability and performance of the platform
- In the future, with your consent: provide predictive maintenance insights using machine learning
We do not sell your data, use it for advertising, or share it with third parties for their own marketing purposes.
5. Data Sharing and Sub-processors
We share your data only with service providers (sub-processors) that are strictly necessary to operate the platform. All sub-processors are bound by data processing agreements. The categories of sub-processors we use include:
- Infrastructure hosting provider (EU) — servers and database hosting
- Authentication provider (EU) — user account management and login
- Error tracking provider — application error monitoring and diagnostics
- Email delivery provider (EU) — transactional emails such as password resets
A current list of our specific sub-processors is available upon request at info@smartclima.app. We do not share your data with any other third parties unless required by law.
6. International Data Transfers
Your data is primarily stored and processed within the European Union. Where a sub-processor processes data outside the EU, appropriate safeguards are in place in accordance with GDPR Chapter V, such as Standard Contractual Clauses or an adequacy decision.
7. Data Retention
| Data type | Retention period |
|---|---|
| Account data | Until you delete your account, plus up to 30 days for backups |
| Heat pump sensor readings | Deleted within 30 days of account deletion; older data is automatically compressed during use |
| Error reports | 90 days |
| Transactional email logs | 30 days |
You may request deletion of your data at any time (see Section 8).
8. Your Rights Under GDPR
As a data subject in the EU, you have the right to:
- Access your personal data (Art. 15)
- Rectification of inaccurate data (Art. 16)
- Erasure ("right to be forgotten") (Art. 17)
- Restriction of processing (Art. 18)
- Data portability — receive your data in a structured, machine-readable format (Art. 20)
- Object to processing based on legitimate interest (Art. 21)
- Withdraw consent at any time, where processing is based on consent (Art. 7(3))
To exercise any of these rights, contact us at info@smartclima.app. We will respond within 30 days.
If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
9. Security
We implement appropriate technical and organizational measures to protect your data, including encrypted connections (TLS), cryptographic password hashing, restricted system access, and hosting in certified EU data centers.
10. Cookies
The SmartClima web application uses only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
11. Children's Privacy
SmartClima is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
12. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of material changes by email or through the application. The "last updated" date on this page reflects the most recent revision.
This privacy policy is available in several languages. If the translations differ, the Dutch version prevails.
13. Contact
For questions or concerns about this privacy policy, contact us at info@smartclima.app.
Last updated: September 26, 2026