Privacy policy

Who is responsible

The controller is ELAP. For any question about this policy, or to exercise your rights, write to hello@elap.solar.

What we collect

We collect only what you give us and the minimum the site needs to work:

• Contact and demo form: name, company, email, phone (optional), project surface (optional), message (optional) and browsing language.
• Where the visit came from: the page you arrived on, the site that referred you, the time zone your browser reports and, if you came from a campaign, its utm_source, utm_medium, utm_campaign, utm_content and utm_term tags. We do not look at your IP address to work out where you are.
• Your account, if you have one: email and password, stored hashed and never in plain text.
• Technical session and security cookies, and the cookie that stores your choice about cookies.
• If you accept analytics cookies, Google Analytics records your visit: which pages you read, from which country and on what kind of device. The cookie policy has the detail.
• If you accept marketing cookies, LinkedIn may record your visit. The cookie policy has the detail.

What we use it for

• Answering your enquiry and arranging a product demonstration.
• Running the service for account holders: session, licences and projects.
• Understanding which campaigns bring enquiries, so we do not spend on the ones that do not.
• Meeting legal and accounting obligations where applicable.

Legal basis

We process form data to take steps you asked for prior to a contract, and for our legitimate interest in answering commercial enquiries. Analytics and marketing cookies are processed on the basis of your consent alone, which you can withdraw at any time.

Who we share it with

We do not sell personal data. We share it only with providers who deliver a service to us and process it on our instructions:

• Hosting: the site and the database run on our own server rented from Vultr.
• Resend: the internal notification when a new enquiry arrives.
• Telegram: alternative internal notification where configured.
• Cal.com: meeting scheduling. It receives your name, email, company and an internal reference for your enquiry.
• Google: site analytics, only if you accepted analytics cookies.
• LinkedIn: only if you accepted marketing cookies.
• Stripe and PayPal: payment processing, once purchasing is enabled.
• Twilio: two-step verification for panel accounts.

International transfers

Several of these providers are based outside Argentina, mainly in the United States. Where applicable, the transfer relies on each provider's contractual clauses.

How long we keep it

Commercial enquiries are kept for as long as the commercial conversation is open, and you can ask us to delete them at any time. Account data is kept while the account exists, and afterwards for the statutory accounting retention periods.

Your rights

You can ask us for access to your data, its correction, its deletion, restriction of processing and portability, and you can object to certain processing. Write to hello@elap.solar and we will answer.

If you are in the European Union or the United Kingdom you may also complain to your national supervisory authority. In Argentina, to the Agencia de Acceso a la Información Pública.

Security

The site is served entirely over HTTPS, passwords are stored with a hashing algorithm built for the purpose, forms are protected against automated submissions, and panel access requires two-step verification.