Privacy Policy
Last updated: January 2026
The EXQUISHEAT website (https://exquisheat.ehpa.org) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information, in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679).
1. Data Controller
The data controller responsible for processing personal data on this website is:
European Heat Pump Association (EHPA)
Website: https://www.ehpa.org
2. Personal Data We Collect
We may collect and process the following personal data:
- Email address (for newsletter subscription)
- Technical and usage data, such as IP address, browser type, operating system, pages visited, and interaction data (via analytics tools)
3. Purpose of Data Processing
Your personal data is collected and processed for the following purposes:
- To send newsletters and project-related communications, when you voluntarily subscribe
- To analyze website traffic and usage in order to improve content, performance, and user experience
- To ensure website security and technical functionality
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent – when you subscribe to our newsletter
- Legitimate interest – for website analytics and security purposes
5. Analytics and Cookies
This website uses analytics tools (such as Google Analytics or similar services) to collect aggregated and anonymized information about website usage.
These tools may use cookies or similar technologies. Where required, cookie consent mechanisms are provided. You can manage or disable cookies through your browser settings.
6. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Email addresses are stored until you unsubscribe from the newsletter
- Analytics data is retained according to the configuration of the analytics provider
7. Data Sharing and Transfers
We do not sell or rent your personal data. Data may be processed by trusted third-party service providers (such as email marketing or analytics platforms) acting as data processors, under appropriate data protection agreements.
Where data is transferred outside the European Economic Area (EEA), appropriate safeguards are applied in accordance with GDPR requirements.
8. Your Rights Under GDPR
Under the GDPR, you have the right to:
- Access your personal data
- Request rectification of inaccurate or incomplete data
- Request erasure of your data (“right to be forgotten”)
- Restrict or object to processing
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
You may exercise your rights by contacting us using the details provided below.
9. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration.
10. Changes to This Privacy Policy
This Privacy Policy may be updated from time to time to reflect legal, technical, or operational changes. Any updates will be published on this page with a revised date.
11. Contact
If you have any questions about this Privacy Policy or how your personal data is processed, please contact us via the EHPA website: