Privacy policy

The values you enter into the calculators (for example system size, consumption, floor area, fuel or region) are calculated in your browser and we do not store them together with your identity. Some calculators, such as the heat pump calculator, write the entered values into the page address so that you can save or share the result; such an address contains neither your name nor your contact details. On every visit our hosting provider (Vercel Inc.) technically processes your IP address and the address of the page you open, and estimates your country from the IP address so that we can show content for the right country. We do not store the IP address itself.

We only ask for data that directly identifies you (name, phone number, e-mail) when you decide to send a quote request, send a calculation to your e-mail or register your company. These activities, as well as the review of an uploaded quote, are covered in the following sections.

If, after a calculation, you request a non-binding quote for solar panels or a heat pump, you enter details about the project, the property and your contact details in the form. After sending it you may voluntarily add more details, for example your roof type or what else you are interested in. The table below shows exactly what data we collect and why.

On some pages you can have a summary of your calculation sent to your e-mail. We process your e-mail address, the summary of the calculation (a few lines of results and links to them), the wording and time of your confirmation, the page address and any campaign parameters. We do this because you requested this service (Art. 6(1)(b) GDPR). We send the e-mail via Zoho Mail (Zoho Corporation B.V., EU data centre) and also receive a copy.

We send you tips and news only if you ticked this separately in the form (Art. 6(1)(a) GDPR). You can unsubscribe at any time by replying STOP to any of our e-mails.

We keep the copy of the calculation for 6 months. If you signed up for tips, we keep your e-mail address for that purpose until you unsubscribe.

If you upload a quote from an installation company for review (usually as a PDF), we process the content of the document so that we can give you our assessment – a comparison of the price with the usual market range, a check of the proposed system size and a warning about items that are missing or unclear.

Such a quote may also contain your personal data added by the installation company – typically your name, the address of the supply point, the supply point number (EIC) or contact details. We do not need this data for the review and do not use it for any other purpose.

The quote also contains data about the company that issued it – business name, company ID, registered office and possibly the name of an employee. If the supplier is a sole trader, this is personal data of a natural person. We process it only during the review, do not store it and do not rate the supplier; the legal basis is our legitimate interest and the user's interest in having the quote they received reviewed (Art. 6(1)(f) GDPR). As we do not know the supplier and do not keep the data, we inform them through this publication (Art. 14(5)(b) GDPR). They may object to the processing by writing to info@kalkulix.eu.

We extract the technical and price data from the text of the quote automatically, either with our own algorithm on our server or with the Google Gemini API service operated by Google Cloud EMEA Limited (Ireland). You can see which method was used next to the result (the label “Prefilled using AI”). We use the Gemini API in its paid mode, in which Google, according to its terms, does not use the content to improve its products and processes it as our processor under a data processing agreement. Before we send the text of the quote to the service, we automatically remove names, addresses, the supply point number (EIC), phone numbers, e-mail addresses, bank details and other identifiers, so that only a technical and price description of the proposed system should reach the service, for example output, number and type of panels, inverter, battery and price. Automatic removal is not infallible; should a piece of personal data exceptionally remain in the text, Google may, under the contract, use it only to provide the service to us. Google keeps the submitted text and the response for at most 55 days solely to detect abuse of the service, and during this time authorised Google employees may access them. Google and its subcontractors may also process the data outside the EU (see the section on transfers outside the EU/EEA).

We do not pass the uploaded quote on to installation companies or anyone else. If you request competing quotes after the review, we send partner companies only the data from the quote request form that you filled in for that purpose – never the document from your original supplier.

We do not store the uploaded document. We process it in server memory only for the time needed to extract the technical and price data, usually a few seconds, and then discard it. The result of the review is shown only in your browser and we do not keep it.

For now, we neither store nor analyse in aggregate the technical and price data from uploaded quotes. If we change this in the future, for example to refine the price ranges we compare quotes with, we will update this policy in advance and it will concern only anonymised data without any link to you or your document.

If you register as an installation company in our partner list in order to receive customer requests from us, we process the following data:

We measure traffic with Google Analytics 4, operated for us as a processor by Google Ireland Limited. The Google Analytics script is loaded and the _ga cookies are stored only after you consent to this in the cookie banner; without consent we do not run Google Analytics. According to Google, it does not store the IP addresses of visitors from the EU. Data in Google Analytics is kept for 2 months. An overview of all cookies and similar technologies, including how long they last, is available in our separate cookie policy (/en-gb/cookies).

Sharing your contact and project data with installation companies for solar panels or heat pumps is based on your consent (Art. 6(1)(a) GDPR). We process any additional details you send about the request on the same basis. This consent is separate from any consent to Kalkulix.eu's own marketing (for example tips by e-mail) – that is always voluntary and refusing it has no effect on whether you receive a quote. Without your name, phone number and e-mail we cannot pass the request on to a company; the company needs the other data to prepare the quote.

We deliberately did not choose legitimate interest as the legal basis for passing your contact details to other companies – when filling in a calculator you would probably not reasonably expect your data to be shared with commercial partners, so we consider explicit consent a safer and fairer basis.

By uploading a quote you order our free service of reviewing it, and we process the content of the document to provide that service (Art. 6(1)(b) GDPR) – without processing the content we cannot give you our assessment. We send you a calculation by e-mail on the same basis if you request it.

We process the registration of your company in the partner list on the basis of negotiating and performing a contract between you and Kalkulix.eu (Art. 6(1)(b) GDPR).

On the basis of our legitimate interest (Art. 6(1)(f) GDPR) we process: the IP address fingerprint, the time taken to fill in the form and a check for repeated submissions to protect the forms against abuse and spam; the page address, referring page and browser type for diagnostics; campaign parameters in a request so that we know which campaign brought it; supplier data in an uploaded quote; and the data needed to prove consent and defend legal claims. We have weighed these interests against your rights – the data is limited and we use it for nothing else. You may object to this processing (see “Right to object”).

We measure traffic with Google Analytics and store campaign data in your browser only with your consent from the cookie banner (Art. 5(3) of Directive 2002/58/EC as implemented in Section 109(8) of Slovak Act No. 452/2021 Coll., and Art. 6(1)(a) GDPR). You can change or withdraw your consent at any time via the cookie settings link in the website footer.

We pass your name, phone number, e-mail and project data to installation companies from our partner list that operate in your region and deal with what you are asking for (solar panels or a heat pump) – at most to as many as you selected in the form. As of the effective date of this policy, our partner for solar panels in Slovakia is ESUN (esun.sk). If we have no partner in your region or for your request, we will not pass the request on to anyone, we will let you know by e-mail and we will delete your data within 30 days.

If we pass a request to a company operated by another legal entity, that entity becomes an independent controller for its further processing of your data (for example calling you, preparing a quote, its own CRM), and its own privacy policy applies.

The list of partners may change and we will reflect every change in this section. If you want to know which specific company or companies we sent your request to, write to us at info@kalkulix.eu.

In addition to partner companies, the following providers (processors) process data on our behalf, acting solely on our instructions and not allowed to use the data for their own purposes: Vercel Inc. (USA) – website hosting and form processing; Zoho Corporation B.V. (Netherlands) – mailbox and sending e-mails; Google Ireland Limited (Ireland) – traffic measurement with Google Analytics, only with your consent; Google Cloud EMEA Limited (Ireland) – the Google Gemini API service for extracting data from an uploaded quote, where we use it.

We keep data from the quote request form, including any additional details, for 12 months from submission or until you withdraw your consent, whichever comes first. After that we keep, for 3 years, only a record of when and in what wording you gave consent and to whom we passed the request (without the phone number, the e-mail only as a fingerprint), so that we can prove we acted lawfully. The company we passed the request to keeps the data in line with its own policy.

We keep data about a registered company for as long as the company is in our partner list. If no cooperation arises, we keep it for 12 months from registration. We keep accounting documents for the period required by accounting law.

You can withdraw your consent to sharing data with partner companies at any time by writing to info@kalkulix.eu. Withdrawal does not affect the lawfulness of processing before the withdrawal, for example the fact that a company we passed your contact details to earlier has already received the request.

We do not keep uploaded quotes (see above). The IP address fingerprint and the check for repeated submissions exist only in server memory, usually for a few minutes to hours. Data in Google Analytics is kept for 2 months.

Under the GDPR you have the following rights in relation to your personal data. You can exercise any of them free of charge by writing to info@kalkulix.eu; we will reply within one month at the latest. As the forms do not require an account, we look up your data by the e-mail address or phone number you provided. To avoid sending it to the wrong person, we reply to the e-mail address from the form or ask you to verify your identity.

You may object at any time, on grounds relating to your particular situation, to processing that we carry out on the basis of legitimate interest (protection of the forms, technical data, campaign parameters, supplier data in an uploaded quote) – simply write to info@kalkulix.eu. If you object, we will stop the processing unless we demonstrate compelling legitimate grounds that override your interests, or grounds for the defence of legal claims (Art. 21 GDPR). If we ever processed your data for direct marketing, you could object to that at any time and without giving reasons.

We do not store your IP address in its original, readable form. To limit abuse of the forms, for example repeated automated submissions, we calculate a shortened cryptographic fingerprint (hash) of it with a secret salt and keep it only in server memory, usually for a few minutes. Without the secret salt the IP address cannot be derived from the fingerprint; it is, however, pseudonymised rather than anonymous data, so we treat it as personal data.

To be able to prove that we obtained your consent lawfully, we store the exact wording of the consent you ticked, its version and the time you gave it.

Together with a form we also record some technical data – the address of the page from which you sent the form, the referring page and your browser type (user agent), and if you came from an advert and consented to marketing cookies, also campaign parameters (utm, gclid, fbclid) and the time of your first visit. We use this data for diagnostics, protection against abuse of the form and to evaluate which campaign brought the request – not to track you across the internet.

The Kalkulix.eu website runs on the infrastructure of Vercel Inc., based in the USA. The server functions that process forms and uploaded quotes run in the data centre in Frankfurt (EU), but Vercel Inc. and its subcontractors from the USA may have access to the data. Such a transfer is protected by the European Commission's standard contractual clauses (Implementing Decision (EU) 2021/914), which form part of our contract with Vercel. Vercel is also certified under the EU-U.S. Data Privacy Framework.

Google Analytics (Google Ireland Limited) and the Google Gemini API service (Google Cloud EMEA Limited) may transfer data to their parent company Google LLC and other subcontractors in the USA and other countries. These transfers are protected by standard contractual clauses and by Google LLC's certification under the Data Privacy Framework. Our mailbox is operated by Zoho Corporation B.V. in data centres in the EU. We pass requests to partner companies only within Slovakia, the Czech Republic and Hungary. We will provide a copy of the contractual safeguards on request at info@kalkulix.eu.

The calculators, the 0–100 score and the written recommendation assess a house, an installation or a quote using fixed formulas. They do not make decisions about you, have no legal or similarly significant effects and do not decide whether you receive a service – they are a recommendation on which you decide. They are therefore not automated decision-making within the meaning of Art. 22 GDPR.

Our services are not intended for persons under 16 (15 in the Czech Republic). If we find out that a younger person has sent us a request, we will delete their data and not pass it on to anyone.

We have not appointed a data protection officer (DPO) as the GDPR does not require us to. For all data protection questions, contact us at info@kalkulix.eu.

Providing data is voluntary. Without contact details, however, we cannot pass on a request or send a calculation by e-mail.

We may update this policy, in particular when we add a new service or change a provider. The effective date is shown at the top of the document and we will mark significant changes on this page.