Data protection policy

Update: 05/12/2025

Scope

This document governs the use and protection of personal data collected via the website of the Helia Energy as part of her professional activities.

Identification of the manager

Data processing is carried out under the responsibility of:

Helia Energy S.à r.l.

19 rue de lIndustry, 8069, Bertrange, Luxembourg

R.C.S. Luxembourg: B301941 VAT number: LU31091391

Contact: contact@helia.lu

Type of data concerned

In the context of the use of the site or exchanges with Helia, certain data can be processed, in particular:

• • Information to identify a natural person,

• • data communicated in the context of requests, simulations or trade,

• • Technical information related to access and use of the site,

• • Data necessary for the administrative and operational management of projects.

Helia only collects data strictly useful to her activities.

Use of data

The data collected is processed only within the strict framework of Helia’s activities, in particular for:

• • Management of requests, exchanges and commercial relations,

• • the preparation, execution and monitoring of the services offered,

• • the internal operations necessary for the proper functioning of the company,

• • Securing, optimizing and analyzing the site and its performance,

• • the dissemination of communications or content of an informative or promotional nature, when the regulations allow it,

• The protection of Helia’s legitimate interests, including in case of control, complaint or litigation.

Legal basis

The treatments implemented by Helia are based, depending on the situation, on:

• • the execution of pre-contractual or contractual measures,

• • User consent, when required,

• • compliance with applicable legal and regulatory obligations,

• Helia’s legitimate interest, in particular for the management, security, development and promotion of its activities.

Access to data

The processed data can be viewed by:

• • Employees authorized by Helia,

• • technical service providers on behalf of Helia,

• • competent authorities when required by the regulations.

No personal data is given for commercial purposes.

The service providers on behalf of Helia Energy act on instruction and within a supervised contractual framework.

Tracers, cookies and similar technologies

The site may use cookies or similar technologies necessary for its operation, as well as tools allowing audience measurements, performance analyses or targeted communication and distribution actions.

These treatments may involve third party partners and are implemented in accordance with the choices expressed by the user and the applicable regulations. Preferences can be changed at any time via the devices provided for this purpose.

Conservation

Personal data is kept for durations adapted to the purposes pursued, then deleted, archived or anonymized in accordance with legal obligations, operational constraints and legitimate interests of Helia Energy.

Personal rights

Any data subject has the rights provided for by the applicable data protection regulations, in particular the rights of access, rectification, opposition and erasure.

Requests can be addressed to:

contact@helia.lu

A complaint can also be lodged with the

cnpd.

Trackers and cookies

The site may use tracers necessary for its operation as well as tools subject to consent. Preferences can be managed at any time via the devices made available.

Evolution of the document

Helia may adapt this document at any time to take account of legal, technical or operational changes. The version published on the site prevails.

What are your rights to your data?

If you have an account on this site or have left comments, you can request to receive an exported file containing the personal data we hold about you, including all the data you have provided to us. You can also request that we erase all personal data we hold about you. that ndoes not include the data we are required to keep for administrative, legal or security purposes.

Where is your data sent

Visitor feedback can be verified by an automated spam detection service.