Privacy Policy
Effective Date: September 7, 2026
EP Grid Solutions respects your privacy and is committed to protecting personal data in accordance with applicable European Union data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).
This Privacy Policy explains how we collect, use, store, and protect personal data when you visit www.epgridsolutions.com, contact us, or otherwise interact with us through the Website.
1. Who We Are
EP Grid Solutions is a Czech-based joint venture between Pontech and Eximprod Engineering, bringing together expertise in utility IT, enterprise GIS, electrical engineering, grid automation, ADMS, and systems integration.
For the personal data processing activities described in this Privacy Policy, EP Grid Solutions acts as the data controller where it determines the purposes and means of processing.
Where appropriate in connection with a particular inquiry, project, or business relationship, personal data may also be processed by Pontech and/or Eximprod as part of the EP Grid Solutions business activities.
For privacy-related questions or requests, please contact:
EP Grid Solutions
Email: contact@epgridsolutions.com
Website: www.epgridsolutions.com
EP Grid Solutions operates primarily within the European Union, with a particular focus on the Czech Republic and Central Europe.
2. Personal Data We Collect
The types of personal data we collect depend on how you interact with our Website.
Information You Provide Through Our Contact Form
When you contact us through the Website, we may collect:
full name;
company or organization;
business email address;
telephone number;
area of interest;
project or service requirements;
information included in your message; and
any other information you voluntarily provide.
We recommend that you do not submit sensitive personal data, confidential infrastructure information, security credentials, classified information, or other highly sensitive information through the general Website contact form.
Information Collected Automatically
When you access the Website, our web server, hosting infrastructure, security services, or related technical systems may automatically process limited technical information such as:
IP address;
browser type and version;
operating system;
device type;
date and time of access;
pages or resources requested;
referring website;
technical error information; and
security-related information.
This information may be required to deliver the Website, maintain security, diagnose technical problems, and protect our systems against spam, fraud, automated attacks, and other forms of abuse.
3. How We Use Personal Data
We may process personal data for the following purposes:
Responding to Inquiries
We use the information you submit to:
respond to questions;
discuss potential projects;
understand your organization’s requirements;
provide information about our capabilities and services;
arrange further discussions;
prepare for a potential business relationship; and
communicate regarding your inquiry.
Managing Business Relationships
Where an inquiry develops into a business relationship, we may use relevant information to:
communicate with your organization;
manage discussions and project opportunities;
prepare proposals or related business documentation;
coordinate activities between EP Grid Solutions, Pontech, and Eximprod; and
maintain appropriate business records.
Any commercial project or engagement may be subject to separate contractual documentation and additional privacy or data-processing terms where required.
Website Operation and Security
We process limited technical information where necessary to:
operate and maintain the Website;
protect forms against spam and automated submissions;
detect suspicious or malicious activity;
maintain network and information security;
troubleshoot technical problems; and
prevent fraud or abuse.
Website Analytics
We use privacy-focused analytics to understand how the Website is used and to improve its content, structure, and performance.
More information about our analytics practices is provided below.
4. Legal Bases for Processing
Under the GDPR, we must have a lawful basis for processing personal data.
Depending on the circumstances, we rely on the following legal bases:
Taking Steps Before Entering Into a Contract — Article 6(1)(b) GDPR
When you contact us about a potential project, service, proposal, or business relationship, processing may be necessary to respond to your request and take steps before entering into a contract.
Legitimate Interests — Article 6(1)(f) GDPR
We may process personal data where necessary for our legitimate business interests, including:
responding to business inquiries;
managing B2B relationships;
operating and improving our Website;
maintaining network and information security;
preventing spam, fraud, automated attacks, and abuse;
maintaining appropriate business records; and
protecting our legal rights.
Where we rely on legitimate interests, we consider whether our interests are overridden by your rights and freedoms.
Legal Obligations — Article 6(1)(c) GDPR
We may process or retain personal data where required to comply with applicable legal, regulatory, accounting, tax, or other statutory obligations.
Consent — Article 6(1)(a) GDPR
Where processing requires your consent, we will request it before carrying out that processing.
You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
5. Independent Analytics
Our Website uses Independent Analytics, a privacy-focused analytics solution integrated into WordPress.
Independent Analytics is designed to provide website usage statistics without using analytics cookies and without storing information that directly identifies individual visitors.
Analytics information is stored within our Website’s WordPress database rather than being sent to a third-party analytics platform for visitor tracking.
The information may include non-identifying or aggregated information relating to:
pages viewed;
traffic and referral sources;
browser and device types;
dates and times of visits;
geographic information at a general level; and
Website usage and engagement.
We use this information to understand Website performance and improve our content and services.
We do not use Independent Analytics to create advertising profiles or track individual users across unrelated websites.
6. hCaptcha
Our Website uses hCaptcha, a security service provided by Intuition Machines, Inc., to protect forms and other Website functionality from spam, automated submissions, fraud, and abuse.
When you access or interact with a Website area protected by hCaptcha, the service may process technical and behavioural information such as:
IP address;
browser and device information;
time spent on the Website or relevant page;
mouse movements or other interaction signals;
request and network information; and
information required to determine whether an interaction is performed by a human user or an automated system.
Depending on the implementation, this analysis may occur automatically when a protected section of the Website is loaded.
We use hCaptcha because we have a legitimate interest in protecting our Website, systems, and users against automated abuse, spam, fraud, and malicious activity. Processing may also be necessary when protecting a form used to take steps at your request before entering into a potential business relationship.
Intuition Machines may act as a data processor when providing hCaptcha services on our behalf.
Because Intuition Machines is based in the United States, certain technical information may potentially be processed outside the European Economic Area. Appropriate safeguards for international transfers are addressed in Section 11 below.
Additional information about hCaptcha’s data practices is available in the hCaptcha Privacy Policy.
7. Cookies and Similar Technologies
Our Website uses a limited number of cookies and related technologies.
These currently include technologies required to:
remember your cookie consent preferences;
provide essential Website functionality;
protect forms and services against spam and abuse; and
maintain Website security.
Our Website does not currently use cookies for personalized advertising or cross-site advertising tracking.
Independent Analytics operates without analytics cookies.
For detailed information about the cookies and related technologies used on our Website, including hCaptcha-related technologies, please see our Cookie Policy.
Where consent is legally required for a non-essential cookie or similar technology, it will not be activated until appropriate consent has been obtained.
You may review or change your cookie preferences through the cookie settings available on the Website.
8. Contact Form Information
When you submit our Website contact form, the information you provide is used primarily to respond to your inquiry and determine whether and how EP Grid Solutions can assist your organization.
The Website currently allows visitors to provide information including:
full name;
company;
business email address;
phone number;
area of interest; and
a message.
Where a form field is identified as required, we need that information in order to process the inquiry. If required information is not provided, we may not be able to respond effectively to your request.
Submitting a form does not automatically add you to an email marketing list.
If we introduce email newsletters or other direct marketing activities requiring consent or another legal basis, we will provide appropriate information and controls separately.
9. Who May Receive Personal Data
Personal data is accessible only where reasonably necessary for the purposes described in this policy.
Recipients may include:
EP Grid Solutions Team
Authorized individuals involved in responding to inquiries, managing the Website, or supporting business development may access relevant information.
Pontech and Eximprod
Because EP Grid Solutions combines the capabilities of Pontech and Eximprod, information relating to an inquiry may be shared with the relevant organization where necessary to:
evaluate the inquiry;
identify appropriate technical expertise;
respond to project requirements;
prepare a potential proposal; or
manage a resulting business relationship.
We limit such sharing to information reasonably necessary for the relevant purpose.
Service Providers
We may use third-party service providers to support Website and business operations, including:
website hosting;
email hosting and delivery;
IT administration;
cybersecurity;
spam and fraud prevention;
cookie consent management; and
other necessary technical services.
These providers may process personal data only where necessary to provide their services and are subject to appropriate contractual and legal requirements where required by the GDPR.
Legal and Regulatory Recipients
We may disclose information where required by law or where reasonably necessary to:
comply with a legal obligation;
respond to a valid request from a competent authority;
protect our legal rights;
prevent fraud or security threats; or
establish, exercise, or defend legal claims.
We do not sell personal data.
10. How Long We Keep Personal Data
We retain personal data only for as long as necessary for the purposes for which it was collected.
The appropriate retention period depends on factors including:
the nature of the inquiry;
whether a business relationship develops;
the duration of any project or contractual relationship;
legal and regulatory requirements;
accounting or record-keeping obligations;
security requirements; and
the need to establish, exercise, or defend legal claims.
If an inquiry does not result in a business relationship, information will be retained only for as long as reasonably necessary to respond to the inquiry, perform appropriate follow-up, maintain necessary business records, and address applicable legal or security requirements.
Where information is no longer required, it will be deleted, anonymized, or otherwise securely disposed of in accordance with our applicable procedures.
11. International Data Transfers
EP Grid Solutions primarily operates within the European Union.
However, some third-party technology providers may process limited personal data in countries outside the European Economic Area (EEA).
For example, hCaptcha is provided by Intuition Machines, Inc., a company headquartered in the United States. hCaptcha states that its processing infrastructure includes regional systems and that certain metadata may, where applicable, be processed in the United States.
Where personal data is transferred outside the EEA, we take appropriate steps to ensure that the transfer complies with applicable GDPR requirements.
Depending on the provider and circumstances, safeguards may include:
an adequacy decision adopted by the European Commission;
participation in an approved data transfer framework;
European Commission Standard Contractual Clauses;
additional technical and organizational safeguards; or
another legally permitted transfer mechanism.
hCaptcha states that it participates in the EU-U.S. Data Privacy Framework and also uses European Commission Standard Contractual Clauses for relevant transfers.
12. Data Security
We take reasonable technical and organizational measures designed to protect personal data against:
unauthorized access;
accidental or unlawful destruction;
loss;
alteration;
unauthorized disclosure; and
other unlawful forms of processing.
Measures may include access restrictions, security monitoring, Website protection tools, software maintenance, secure hosting practices, and anti-abuse technologies.
However, no method of electronic transmission or storage can be guaranteed to be completely secure.
For this reason, please do not submit passwords, security credentials, classified infrastructure data, or other highly sensitive information through the Website’s general contact form.
13. Your Rights Under the GDPR
Subject to the conditions and limitations established by the GDPR, you may have the following rights:
Right of Access
You may request confirmation of whether we process personal data about you and request access to that information.
Right to Rectification
You may request correction of inaccurate or incomplete personal data.
Right to Erasure
In certain circumstances, you may request deletion of your personal data.
This is sometimes referred to as the “right to be forgotten.”
Right to Restriction of Processing
You may request that we limit how your personal data is processed in certain circumstances.
Right to Data Portability
Where the legal requirements are met, you may request personal data you provided to us in a structured, commonly used, machine-readable format and may have the right to transmit it to another controller.
Right to Object
Where processing is based on our legitimate interests, you may object to that processing on grounds relating to your particular situation.
We will stop the relevant processing unless we demonstrate compelling legitimate grounds to continue or the processing is required for the establishment, exercise, or defence of legal claims.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw your consent at any time.
Withdrawal does not affect processing lawfully carried out before the withdrawal.
Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority.
You may generally contact the supervisory authority in:
the EU Member State where you normally reside;
the EU Member State where you work; or
the Member State where you believe an infringement of data protection law occurred.
We encourage you to contact us first if you have a privacy concern so that we have an opportunity to address it.
14. Exercising Your Privacy Rights
To exercise a GDPR right or ask a question regarding your personal data, contact:
Please include enough information for us to understand your request.
We may need to request additional information where reasonably necessary to verify your identity before disclosing, changing, or deleting personal data.
We will respond in accordance with the time periods and requirements established by applicable data protection law.
15. Automated Decision-Making
EP Grid Solutions does not currently use personal data collected through this Website to make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning Website visitors.
Automated security technologies such as hCaptcha may analyze interactions for the limited purpose of distinguishing legitimate visitors from automated or abusive activity.
16. Children’s Privacy
The Website is intended for businesses, utilities, professionals, and other organizations and is not directed toward children.
We do not knowingly use the Website to collect personal data from children.
If you believe that a child has provided personal data to us through the Website, please contact us so that we can take appropriate action.
17. Third-Party Websites
Our Website contains links to websites operated by third parties, including our business partners and technology providers.
This Privacy Policy applies only to the processing activities covered by EP Grid Solutions.
When you visit another website, its own privacy policy and terms apply. We are not responsible for the privacy practices of third-party websites that we do not control.
We encourage you to review the privacy policy of any external website before providing personal information.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in:
our Website;
our business operations;
the technologies we use;
our service providers; or
applicable legal requirements.
When we make changes, we will update the Effective Date at the top of this policy.
Where required by law, we will provide additional notice or request consent before implementing a material change affecting how personal data is processed.
19. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our processing of personal data, please contact:
EP Grid Solutions
Email: contact@epgridsolutions.com
Website: www.epgridsolutions.com
For requests relating to a specific project or business relationship, we may forward your request to the relevant EP Grid Solutions, Pontech, or Eximprod representative responsible for that relationship.
Company name:
EP Grid Solutions s.r.o.
Jurisdiction:
Czech Republic
Ownership structure:
- Eximprod: 50%
- Pontech CZ: 50%
- Company name: EP Grid Solutions s.r.o.
Registered office address:
Hráského 1016, 256 01 Benešov, Czech Republic