Transparent handling of your data

JAS Energy SOLutions FlexCo

Geiselbergstraße 54/1/R01, 1110 Vienna, Austria

Email: office@jas-energy.com | Phone: +43 676 442 7719

Company register number: FN 621032 h | Court: Commercial Court Vienna

This privacy notice provides information under Art. 13 GDPR about processing when you visit our website, use the contact form, submit a Wallbox enquiry or send an open application.

We process data only for specified purposes and only to the extent required for secure website operation, handling enquiries and applications, and preparing or performing contracts.

No automated decision-making or profiling under Art. 22 GDPR takes place. Form data is not used for newsletters, personalised advertising or marketing profiles.

Our website is delivered through Cloudflare Pages and Cloudflare Functions. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.

When the website is accessed, technically required connection data may be processed, including IP address, time, requested URL or file, HTTP status, referrer, browser and device information and security events.

The purposes are website delivery, troubleshooting, protection against DDoS attacks and malicious traffic, and ensuring availability and integrity. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is secure and reliable website operation.

Cloudflare processes metadata in the EU and the USA. US transfers rely on the EU-US Data Privacy Framework adequacy decision under Art. 45 GDPR where the relevant Cloudflare entity is certified, supplemented by Standard Contractual Clauses under Art. 46(2)(c) GDPR.

Further information: Cloudflare Privacy Policy · Cloudflare Data Processing Addendum · Cloudflare DPF entry

We do not use Google Analytics, Meta Pixel or comparable marketing or audience tracking.

Our application does not use the client-side Cloudflare Web Analytics beacon. We also remove any beacon inserted automatically and block connections to static.cloudflareinsights.com through our Content Security Policy.

Technical and security-related edge statistics produced by Cloudflare as our hosting and security provider are part of the secure operation described in section 3 and are not used by us to create personal usage profiles.

Our application does not set analytics, advertising or marketing cookies.

We use localStorage for two technical settings: “jas-language” stores the language actively selected by you; “jas-privacy-notice-seen” stores only that the privacy notice has already been displayed. We do not automatically detect your browser language.

The language setting remains until changed or deleted by you. The notice status remains until browser storage is deleted. These values are not sent to our server.

Access to these technically required or expressly requested settings is based on section 165(3) of the Austrian Telecommunications Act 2021. Where a stored value qualifies as a personal online identifier, subsequent processing relies on Art. 6(1)(f) GDPR. Our interest is a user-friendly presentation without unnecessary repetition.

Cloudflare may use cookies or similar identifiers for strictly necessary security functions. Non-essential storage would require prior consent; we currently do not use such storage.

The contact form processes name, email address and message as required fields. Phone number and selected areas of interest are optional.

The purpose is to handle your enquiry, answer follow-up questions and, where applicable, take pre-contractual steps for a potential project.

The legal basis is Art. 6(1)(b) GDPR for contract-related or pre-contractual enquiries. Other enquiries rely on Art. 6(1)(f) GDPR and our legitimate interest in efficient business communication.

The checkbox merely documents that you have read this privacy information. It is not consent and is not the legal basis for processing.

Without your name, email address and message, we cannot process the enquiry.

For a Wallbox enquiry, first and last name, email address, phone number, address and selected product are required. Notes and attachments are optional.

Permitted attachments are PDF, JPG, PNG or WEBP files up to 5 MB. They may include property photos or plans. Please do not submit ID copies, health data or other unnecessary sensitive information.

The purpose is technical pre-assessment, quotation and preparation of a potential contract. The legal basis is Art. 6(1)(b) GDPR.

The checkbox only documents acknowledgement of this notice. We cannot handle the enquiry without the required fields.

When you send an open application to job@jas-energy.com, we process the contact details, cover letter, CV, qualifications and employment history, optional attachments and subsequent application correspondence that you provide.

The purposes are to assess your application, contact you and decide whether to enter into a potential employment relationship. The legal basis is Art. 6(1)(b) GDPR for steps taken at your request before entering into a contract. Without the information required for assessment and contact, we cannot consider your application.

After the recruitment process has ended, limited further retention relies on Art. 6(1)(f) GDPR. Our legitimate interests are documenting the process and establishing, exercising or defending potential legal claims. The specific period is described in section 13.

Access is limited to internal staff involved in recruitment. Application emails are stored directly in our business mailbox at IONOS and are not transmitted through Brevo. No automated decision-making or profiling takes place.

Please do not submit identity documents, health data or other special categories of personal data unless exceptionally necessary or expressly requested. Sensitive information that is not required is not used for the selection decision and is deleted where possible.

We retain an application for longer-term consideration only where we separately request your explicit consent under Art. 6(1)(a) GDPR. Consent is voluntary and can be withdrawn at any time for the future. Without separate consent, no longer-term applicant pool retention takes place.

We use Cloudflare Turnstile to protect forms against automated submissions. The widget is embedded only in connection with protected forms.

Turnstile processes signals including IP address, TLS fingerprint, user-agent, sitekey and associated origin as well as further security and interaction signals. Our server sends the generated token and, where available, the IP address to Cloudflare for verification.

Cloudflare acts as processor when securing our forms and also processes certain signals as an independent controller to improve bot detection. Our legal basis is Art. 6(1)(f) GDPR and our legitimate interest in preventing spam, abuse and automated attacks.

Our application does not enable Turnstile Pre-Clearance. This notice must be updated before that configuration is changed.

Further information: Turnstile Privacy Addendum · Turnstile documentation

We use Brevo transactional email to transmit form messages. The contracting entity is Sendinblue SAS, 17 rue Salneuve, 75017 Paris, France.

This section applies only to messages submitted through the website forms. Open applications sent to job@jas-energy.com are transmitted directly by email and are not processed through Brevo.

Brevo receives the submitted form content, destination and reply-to address and, for Wallbox enquiries, any optional attachment. IP address, user-agent and origin are not included in the email. The enquirer's name is not used in the subject line.

The legal basis is Art. 6(1)(b) or Art. 6(1)(f) GDPR. A processing agreement under Art. 28 GDPR is in place.

Brevo uses subprocessors, including infrastructure in France and Belgium and Cloudflare with EU and US server locations. According to Brevo, third-country transfers are protected through the EU-US Data Privacy Framework and Standard Contractual Clauses.

After successful handover, our backend uses the Brevo API to request deletion of the related transactional log and any stored preview by message ID. Brevo processes this deletion request; necessary technical security or evidence data may temporarily remain under the provider's rules.

Further information: Brevo DPA and subprocessors · Brevo Privacy Policy

Messages delivered by Brevo and messages sent directly to our business email addresses – including job@jas-energy.com – are stored in our business mailbox at IONOS. The provider is IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany.

IONOS processes email content and technical delivery data as processor. For current IONOS contracts, the processing agreement forms part of the contractual terms.

Further information: IONOS processing agreement · IONOS Privacy Policy

Recipients are authorised internal staff and, where required, Cloudflare, Brevo and IONOS as technical providers. We do not disclose data for advertising or address-trading purposes.

Data may also be disclosed to authorities, courts, legal or tax advisers or other bodies where required by law or necessary to establish, exercise or defend legal claims.

International transfers use the safeguards described in sections 3, 9 and 10. A copy of the essential safeguards can be requested at office@jas-energy.com.

General contact enquiries and related emails are normally deleted no later than 12 months after final handling where no contract is concluded and no legal reason requires longer retention.

Wallbox enquiries, attachments and quotations without a subsequent contract are normally deleted no later than 12 months after closure. If a contract is concluded, contract, tax and company-law records are retained according to statutory obligations, generally for seven years.

Application documents and related correspondence are normally deleted no later than seven months after the recruitment process ends or after we inform you that no current employment opportunity is available. Any longer applicant pool retention is limited to the period separately agreed on the basis of your explicit consent, or for as long as a legal obligation or specific legal claim requires it.

Brevo transactional logs are submitted for deletion through an automated API request after successful handover. Data in the IONOS mailbox is deleted according to the periods above.

Cloudflare retains technical security and connection data according to the product used, account settings and its legal obligations. Our application does not maintain a permanent visitor database or create separate personal website logs.

Local browser storage remains until you change the setting or delete it.

We use encrypted HTTPS connections, access controls, secret management, server-side validation, file size and file type checks and Cloudflare Turnstile.

A Content Security Policy restricts scripts, connections and embedded content to required sources and blocks analytics beacons that are not used.

Despite careful technical and organisational measures, internet transmission can never be guaranteed to be entirely risk-free.

Subject to the legal conditions, you have rights of access, rectification, erasure, restriction, data portability and objection under Arts. 15 to 21 GDPR.

Where processing exceptionally relies on consent – such as separately agreed longer-term applicant pool retention – it can be withdrawn at any time for the future. Regular handling of contact, quotation and application enquiries does not rely on consent.

Requests can be sent to office@jas-energy.com or our postal address. We normally respond within one month. Where justified doubts exist, we may request additional information to confirm identity.

You may also complain to the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna: dsb.gv.at.

Based on our current assessment, appointing a data protection officer under Art. 37 GDPR is not mandatory. Privacy enquiries should be sent to office@jas-energy.com.

We update this notice when services, data flows or the legal framework change. The version published on this website applies.

Last updated: August 24, 2026