PVcase

Privacy Policy

PVcase, UAB, a Lithuanian company acting as data controller under the GDPR, processes personal data lawfully and transparently for various stakeholders—including clients, job applicants, and partners—without handling special categories of sensitive data, based on legal grounds such as contract performance, legal obligations, legitimate interests, or consent, while complying with EU and Lithuanian data protection laws and providing contact information for privacy inquiries.

This Privacy Policy is issued by PVcase, UAB, a private limited liability company incorporated under the laws of the Republic of Lithuania. For the purposes of the General Data Protection Regulation (EU) 2016/679 (GDPR), PVcase acts as the data controller when processing your personal data in connection with the services and activities described in this policy.

PVcase operates within the European Union, and its personal data processing activities are carried out in accordance with applicable EU and Lithuanian data protection laws. If you are located outside the EU/EEA, local data privacy regulations may differ, and PVcase does not guarantee compliance with non-EU laws unless explicitly stated.

For more information related to this Privacy Policy, you may contact PVcase by email: legal@pvcase.com

1. How we use your personal data

This Privacy Policy outlines how PVcase processes personal data in connection with various activities, services, and interactions. The processing activities described apply to different categories of data subjects, including job applicants, clients, business partners, platform users, researchers, landowners, and whistleblowers. Each activity is conducted in accordance with the principles of lawfulness, fairness, transparency, data minimization, and purpose limitation.

PVcase does not collect or process any special categories of personal data (such as data concerning health, political opinions, religious beliefs, or biometric data) at any stage of its data processing.

2. Legal bases for processing your personal data

PVcase processes your personal data based on the following legal grounds:

  • Performance, conclusion, amendment, or administration of a service contract (Article 6(1)(b) GDPR)
  • Compliance with legal obligations and regulatory requirements (Article 6(1)(c) GDPR)
  • Pursuit of PVcase's or third parties’ legitimate interests (Article 6(1)(f) GDPR)
  • Your consent (Article 6(1)(a) GDPR)

In certain cases, the same personal data may be processed under more than one of the above legal bases.

3. Data retention

PVcase processes and retains your personal data only for as long as necessary to achieve the purposes for which it is processed, or as required by applicable law. Once the specified data processing or retention period expires, PVcase will delete or securely and irreversibly anonymize your personal data as soon as reasonably possible within a justifiable time frame.

A longer retention and/or processing period may apply in cases such as debt or damage management, dispute resolution, defending against claims, investigation of violations, ensuring restriction of access after agreement termination, ensuring security and integrity of information systems, or other legal grounds under applicable law.

4. Purposes and types of personal data collected

PVcase collects and processes only the personal data that is sufficient and necessary to achieve the defined purposes. Detailed information is provided below.

4.1. Use of PVcase Demo and Related Data Processing

  • When an individual requests access to a PVcase demo, PVcase collects business-related personal data (name, work email, phone number, company name, job title, estimated number of projects, project scale, company profile, industry, business type, country).
  • Demo calls may be recorded for quality assurance and internal training (with consent).
  • Admin users are provided with login credentials; their name, surname, email address, and job title are processed for account setup.
  • For team access, full names and email addresses of users to whom licenses are assigned are processed.
  • Admin user login activity (timestamps, user IDs, email addresses, IP addresses, browser types, device types, session IDs) is tracked for diagnostics and security.
  • If a contractual agreement is reached, data necessary for contract fulfillment is processed (name, surname, email, phone, job title, signature, business address).

4.2. Customer Support and Business Communication

PVcase processes personal data in connection with communication channels such as chatbots, email, phone, online meetings, contact forms, in-person meetings, and social media. Data processed may include name, email, phone, job title, company, business address, communication content, IP, browser/device metadata, meeting history, support tickets, and CRM notes. The purpose is to ensure effective customer service, technical support, relationship management, and updates on products/services.

4.3. Direct Marketing Messages

  • To existing clients: PVcase may send direct marketing communications regarding similar products/services based on legitimate interest. Data processed includes name, email, company, job title, marketing preferences, and previous purchases/interactions. You may object at any time.
  • To potential clients: PVcase may process personal data for direct marketing based on consent, including name, email, company, job title, area of interest, consent status, and communication history. Consent can be withdrawn at any time.

4.4. Newsletter Engagement Tracking

PVcase analyzes recipient engagement with email newsletters using tracking pixels (with consent). Data collected includes whether and when the message was opened and which links were clicked. Consent can be withdrawn at any time.

4.5. Processing of Landowner Data for Solar Project Planning and Site Evaluation

PVcase does not process personal data of private land or property owners for project planning or evaluation. Clients use PVcase tools to access and manage such data directly. PVcase does not access, view, or control this data.

4.6. Candidates Data Processing

  • When you submit a job application, PVcase collects information such as name, email, phone, CV, cover letter, LinkedIn profile, responses to questions, and other documents provided. This is processed based on consent.
  • Video interviews may be recorded with explicit consent.
  • References from current employers are obtained only with explicit consent; references from former employers are based on legitimate interest.
  • PVcase may enrich applications with publicly available LinkedIn information (not private data), based on legitimate interest.
  • All recruitment data is used solely for evaluating applicants and defending against legal claims.

4.7. Handling of Whistleblower Reports

PVcase processes personal data submitted through its internal whistleblowing channel for the purpose of receiving, investigating, and responding to reports of violations, misconduct, or breaches of ethics. Data processed may include name, surname, date of birth or personal ID, contact details, workplace, and information related to the report. Data is handled confidentially and may be shared with authorized personnel or external parties as necessary.

4.8. Processing of Personal Data for Educational and Research Access

PVcase processes personal data provided by researchers and students for academic access to its software. Data includes name, job title, email addresses, phone, LinkedIn, university/institution details, country, license type, proficiency, software used, cost info, interest in other products, and additional comments. Processing is based on explicit consent.

4.9. Processing of Personal Data for University Partnerships

  • Exploring Academic Partnerships: Name, email, job title, university, department, country, and communication content are processed for initiating collaborations (legitimate interest).
  • Managing Academic Partnership Agreements: Data necessary for managing partnerships is processed for contract performance.
  • Educational License Coordination: Data such as email addresses, job title, university affiliation, role, license details, usage info, and additional information is processed for managing access and ensuring proper use (legitimate interest).

4.10. Use of Social Media Platforms

PVcase maintains company pages on platforms such as LinkedIn, Facebook, Instagram, and YouTube. When you interact with PVcase via these platforms, PVcase may process personal data visible through your public profile or provided voluntarily (name, profile link, comment/message content, reactions, participation in interactive content). In contests or giveaways, additional information may be processed for participation and awarding prizes. Interactions are also subject to the privacy policies of the respective platforms.

5. Processing Business Account Data

If services are provided to a business entity, PVcase processes the corporate details, personal data of designated contact persons, and employees added to the business account. The business client is responsible for informing its employees and contact persons about the processing of their personal data. Where business clients act as data controllers, PVcase is not responsible for such processing activities.

6. Security of Personal Data

PVcase processes personal data responsibly and securely, applying appropriate technical and organizational measures. Key principles include:

  • Collecting data only for specified and legitimate purposes
  • Processing data fairly and only for its original purpose
  • Retaining data only as long as necessary
  • Processing data only by authorized employees
  • Using appropriate technical and organizational measures
  • Disclosing data to third parties only with a legal basis
  • Notifying authorities of data breaches where applicable
  • Conducting regular data protection training and audits
  • Continuously reviewing and improving data protection processes
  • Monitoring systems for breaches or attacks

Absolute security cannot be guaranteed, especially for data transmitted via the internet. Users bear responsibility for the security of their own data submissions.

7. Cookies

PVcase uses cookies and similar technologies on its platform. More information is available in the Cookie Policy.

8. Data Recipients

PVcase may share personal data with third parties, acting as data processors or independent data controllers, including:

  • Cloud infrastructure providers (e.g., Google LLC, Microsoft Corporation)
  • Customer relationship and marketing service providers (e.g., Gainsight)
  • Communication and meeting scheduling tools (e.g., Zoom, Microsoft Teams, Google Meet)
  • Payment processing and subscription management providers
  • Technical diagnostics and analytics providers (e.g., Mixpanel, HubSpot)
  • Legal, financial, and compliance consultants
  • Public authorities and regulators
  • Affiliated companies within the PVcase group
  • Academic institutions and research partners
  • Former or current employers and professional referees (in recruitment)
  • Recruitment platform providers (e.g., Recruitee B.V.)

Some service providers are established outside the European Economic Area (EEA), and in such cases, data is protected by EU standard contractual clauses or adequacy decisions by the European Commission.

Related