Privacy Policy

1. Data Controller

KÖBER Energy Holding S.R.L. ("KÖBER Energy", "we", "us", or "our"), with registered office at 18 Cluceru Udricani Street, 030782, 3rd District, Bucharest, Romania, is the data controller responsible for your personal data processed through this website (www.koberholding.com). For any privacy-related matters, you may contact us at: office@koberholding.com

2. Personal Data We Collect

We collect personal data only when you voluntarily provide it through our contact form. This includes: • Full name • Email address • Area of interest (e.g. Renewable Energy Investment, Project Financing, BESS / Gigafactory, Partnership) • Any information you include in your message We do not collect sensitive personal data, and we do not collect data automatically through cookies beyond those necessary for the website to function.

3. Legal Basis for Processing

We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR): • Consent (Art. 6(1)(a) GDPR): When you submit the contact form, you consent to us processing your data to respond to your inquiry. • Legitimate Interests (Art. 6(1)(f) GDPR): To manage and respond to business inquiries and maintain records of investor and partner communications.

4. How We Use Your Data

We use the personal data you provide exclusively to: • Respond to your inquiry or request • Follow up on potential business partnerships, investment opportunities, or other topics you have raised • Maintain internal records of correspondence We do not use your data for automated decision-making or profiling. We do not use your data for unsolicited marketing unless you have separately given your consent.

5. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data. Your data may be shared with trusted third-party service providers who assist us in operating our website and conducting our business, under strict confidentiality agreements: • Resend (resend.com): Email delivery service used to transmit contact form submissions to our team. Resend processes your name and email address solely for this purpose. • Emergent Labs: Cloud hosting infrastructure provider for this website. All third-party providers are contractually obligated to handle your data in compliance with applicable data protection laws.

6. Data Retention

We retain your personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law: • Contact form submissions: Retained for a maximum of 36 months from receipt, unless an ongoing business relationship requires longer retention. • You may request deletion of your data at any time (see Section 8).

7. International Data Transfers

Our service providers may process data outside the European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with GDPR requirements.

8. Your Rights Under GDPR

As a data subject under EU/Romanian law, you have the following rights: • Right of Access: Request a copy of the personal data we hold about you. • Right to Rectification: Request correction of inaccurate or incomplete data. • Right to Erasure ("Right to be Forgotten"): Request deletion of your data where there is no legitimate reason for continued processing. • Right to Restriction of Processing: Request that we restrict processing of your data in certain circumstances. • Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format. • Right to Object: Object to processing based on legitimate interests. • Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing. To exercise any of these rights, please contact us at: office@koberholding.com You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) at www.dataprotection.ro.

9. Cookies

This website uses only technically necessary cookies required for basic functionality (session management, security). We do not use analytics, advertising, or tracking cookies. If we introduce non-essential cookies in the future, we will update this policy and obtain your prior consent through a consent management mechanism.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our website uses HTTPS encryption for all data in transit.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date of the latest revision is indicated at the top of this page. We encourage you to review this page periodically.

12. Contact

For any questions, requests, or concerns regarding this Privacy Policy or our data practices, please contact: KÖBER Energy Holding S.R.L. 18 Cluceru Udricani Street, 030782 3rd District, Bucharest, Romania Email: office@koberholding.com