How your details are handled

Who the controller is

Shelly Europe Ltd is the data controller for anything entered into the registration form on this campaign. Write to nordics@shelly.com with questions about the processing or to exercise your rights.

The website itself is run by Falster IoT ApS as a side project by Shelly employees. Those are two different things, and it is why this page sits beside the site's own privacy page rather than replacing it: that one is about what the website does, this one is about what Shelly Europe does with a registration.

What is collected

• First and last name
• Company name and company registration number
• Email address and phone number — whether you collect the kit or ask for delivery
• The branch you chose to collect the kit from
• Your delivery address — street, postcode, city and country — but only if you ask for the kit to be delivered instead of collecting it from a branch
• Your two tick boxes, and the time you gave marketing consent if you did
• When the registration was made, and when the kit was collected

Your IP address is not stored. It is hashed so it can only be compared with itself — which is what limits how many registrations can be sent from one network in an hour — and the address itself is never written down.

Why

Name, company and registration number establish that you are an electrician and that your branch has not already had a kit. We review every request on that basis before we send a voucher. We compare your request with Shelly's installer register and previous requests, so the kits go to electricians who are new to Shelly. The email address carries your reservation link. The phone number is used if something goes wrong at collection. The branch is what the kit is deducted from.

If you ask for delivery, the delivery address and phone number are used to contact you and to hand the kit over in person or send it.

The lawful basis for those is a legitimate interest in running the campaign. Without them we cannot issue a voucher or know which branch is handing over a box.

Marketing consent is a separate matter. It is optional, it is not a condition of getting a kit, and its lawful basis is your consent. That is why the two tick boxes in the form are separate and both start empty.

How long it is kept

• The delivery address and phone number on a delivery request are deleted at the latest 30 days after the kit has been delivered or the request cancelled. While the request is waiting they are kept — they are what gets the kit to you.
• All personal data on a registration is deleted at the latest 24 months after you registered. Until then it is the record of which kits were handed to whom.
• A reservation that is never collected expires seven days after the request is approved. The data on it follows the rule above: it is deleted at the latest 24 months after the registration.
• Marketing consent is kept until you withdraw it, together with the time you gave it.

Who sees it

Shelly's Nordic sales team, and the counter staff at the branch you chose — they see your name and company when you show your voucher link.

The wholesaler receives a record after the handover. Once the kit has been handed over, we share your name, company, the branch you collected it from and the time of handover with the wholesaler — in Denmark, Lemvigh-Müller. It happens after the handover, and the purpose is so the branch can keep track of the kits it has handed out. We do not share your email address, phone number or company registration number, and we share nothing about a reservation that was never collected. The legal basis is the same legitimate interest in running the campaign.

If you ask for delivery, only Shelly sees your address. The delivery address and phone number stay with Shelly's Nordic sales team and are not shared with a wholesaler.

The data sits with Supabase (database, EU) and is sent as email through Resend (EU). Both are processors. Nothing is sold, rented or passed to advertisers.

Withdrawing consent

Write to nordics@shelly.com and ask. No reason is needed, and it does not affect a kit you already have. Every marketing email also carries an unsubscribe link.

Your rights

You have the right to see, correct and delete your data, to restrict processing, and to receive it in a machine-readable format. Write to nordics@shelly.com. If you are not satisfied with the answer you can complain to your national data protection authority.