Catalystby phelas
DEContact expert

Privacy Policy

Last updated: July 2026

1. Introduction and Controller

We are pleased that you are interested in our website. The protection of your personal data is important to us. Below we inform you about how we handle your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR).

Controller within the meaning of the GDPR: Phelas GmbH Hermann-Oberth-Straße 23 85640 Putzbrunn Germany Email: reachout@phelas.com

2. Collection and Storage of Personal Data, Nature and Purpose of Use

a) When visiting the website

When you visit our website for purely informational purposes, we only collect the data that your browser transmits to our server (server log files). We also use hosting services provided by Vercel.

  • Purpose: Ensuring a smooth connection and a comfortable user experience.
  • Legal basis: Art. 6(1)(f) GDPR (Legitimate interest).

b) Contact inquiries (email, phone, SMS, form)

When you contact us, we process the information you provide (name, email, company, phone number, message) in order to handle your inquiry.

  • Purpose: Processing inquiries.
  • Legal basis: Art. 6(1)(b) GDPR (performance of a contract / pre-contractual measures) or Art. 6(1)(f) GDPR.

c) Account data (access)

Upon registration, we store your login data in the cloud infrastructure of Supabase (EU region).

  • Purpose: Provision of the contractually agreed service.
  • Legal basis: Art. 6(1)(b) GDPR.

d) Newsletter and promotional emails

Where you have given us your explicit consent, we use your email address to send you regular newsletters and information about our products. Only an email address is required for this. Registration is generally carried out using a double opt-in procedure. We log the registration in order to be able to demonstrate the sign-up process in accordance with legal requirements. Our newsletters may contain tracking pixels, which we use to carry out statistical evaluations (e.g. open and click rates) to optimise our offering.

  • Purpose: Direct marketing and information about company news.
  • Legal basis: Art. 6(1)(a) GDPR (consent). For existing customers, the sending of similar goods or services may also be based on Art. 6(1)(f) GDPR in conjunction with Section 7(3) UWG.
  • Withdrawal: You may unsubscribe at any time via the link at the bottom of every email or by sending a message to [contact@phelas.com].

3. Analytics and Tracking Tools

We use tools for the statistical analysis and optimisation of our online offering. For non-essential tools, we obtain your consent via our consent banner.

a) Google Analytics & Google Tag Manager

We use Google Analytics (provider: Google Ireland Ltd.) for website analysis. We apply IP anonymisation. Google Tag Manager is used to manage these tools.

  • Legal basis: Art. 6(1)(a) GDPR (consent).
  • Third-country transfer: Data may be transferred to the USA. Google is certified under the EU–U.S. Data Privacy Framework.

b) 1st Party On-Site Tracking & Vercel Analytics

We use our own tracking methods and Vercel Analytics for performance measurement.

  • Legal basis: Art. 6(1)(f) GDPR (where anonymised) or Art. 6(1)(a) GDPR, depending on configuration.

4. Marketing Communications

We inform you about our products via email, phone or SMS.

  • Email marketing: Only with explicit consent (double opt-in) or for existing customers in accordance with Section 7(3) UWG.
  • Phone/SMS: On the basis of explicit consent.
  • Withdrawal: You may withdraw your consent at any time with future effect.

5. Social Media Presences

We maintain profiles on LinkedIn, YouTube and Instagram. When you visit these profiles, data is processed by the platform operators (including, where applicable, in the USA). We note that joint controllership under Art. 26 GDPR may exist for certain processing activities (e.g. insights data).

6. Data Sharing

a) Data Processors

We engage external service providers with whom data processing agreements (DPA) have been concluded in accordance with Art. 28 GDPR:

  • Vercel Inc. (Hosting & Analytics)
  • Supabase / Point One Systems (Database & Authentication)
  • Google Ireland Ltd. (Analytics & Tools)

b) Sharing with Project Partners (with Consent)

Where you have given your explicit consent in connection with our analysis services (e.g. when accessing a customer study), we share the following personal data with our project partners:

  • Data shared: Name, email address, phone number
  • Recipients:
    • Fluence Energy Germany GmbH, Schallershofer Straße 143, 91056 Erlangen
    • Forschungsstelle für Energiewirtschaft e. V. (FfE), Am Blütenanger 71, 80995 München
  • Purpose: To allow the respective project partner to contact you directly.
  • Legal basis: Art. 6(1)(a) GDPR (consent).
  • Withdrawal: You may withdraw your consent at any time with future effect by contacting reachout@phelas.com.

7. Cookies

Our website uses technically necessary cookies (e.g. for login) as well as analytics cookies (only with consent). You can change your cookie settings at any time via our consent tool or delete cookies in your browser.

8. Retention Period

Personal data is deleted as soon as the purpose of storage no longer applies or you withdraw your consent, provided no statutory retention obligations prevent deletion.

9. Your Rights as a Data Subject

You have the right to:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Objection to processing (Art. 21 GDPR)
  • Complaint to a supervisory authority (Art. 77 GDPR)

10. Data Security

We use the widely adopted SSL/TLS protocol in conjunction with the highest level of encryption supported by your browser.