This Privacy Policy (“Policy”) explains how SOLX (hereinafter “SOLX” or “we”) collects, uses, and protects your Personal Data, in accordance with the legislation in force in Portugal, including the General Data Protection Regulation (GDPR) and Law No. 58/2019.

Careful reading of this Policy is essential to understand SOLX’s practices regarding the processing of Personal Data, including the use of cookies and information about the energy supply contract. It also covers data collection carried out online and offline, through websites, applications, social networks, the Customer Support Service (SAC), and events.

If you do not agree with this Policy, we recommend that you do not use our services or websites.

1. SOURCES OF PERSONAL DATA
2. COLLECTED PERSONAL DATA AND ASSOCIATED PROCEDURES
3. COOKIES AND SIMILAR TECHNOLOGIES
4. USE OF PERSONAL DATA
5. DISCLOSURE OF PERSONAL DATA
6. RETENTION OF PERSONAL DATA
7. STORAGE AND TRANSFER OF DATA
8. ACCESS TO PERSONAL DATA
9. CHOICES ABOUT THE PROCESSING OF PERSONAL DATA
10. CHANGES TO THE POLICY
11. DATA CONTROLLERS AND CONTACT

---

SOLX may collect Personal Data through:

• SOLX Websites: Platforms and microsites operated by SOLX or on its behalf.
• Mobile applications: Official SOLX apps or apps developed for SOLX.
• Electronic communications: Emails and SMS sent by SOLX.
• Customer Support Service (SAC): Calls and contacts made to our support service.
• Other sources: Third-party social networks (e.g., Facebook, Google) and market research, whenever permitted by law.

Depending on the type of interaction, SOLX may collect:

• Contact data: name, address, email, phone number, etc.
• Account access data: login ID, password (stored irreversibly), and security questions.
• Demographic data: date of birth, gender, location, among other relevant data.
• Technical data: IP address, operating system type, browser type and version, device ID, and location (when authorized).
• Usage data: visited pages, session duration, and clicks, collected via cookies or similar technologies.
• Feedback and surveys: survey responses or information voluntarily provided.
• SAC calls: may be recorded in accordance with applicable law, for quality and clarification purposes.

SOLX uses cookies to ensure the proper functioning of the site, collect statistical data, and improve the user experience, including the display of relevant content. Cookie preferences can be managed in your browser or through a settings panel on our website. For more details, see our Cookies Policy.

In addition, information may be collected in log file format, and web beacons may be used—small pieces of code that allow evaluating the effectiveness of electronic communications or specific content.

The collected Personal Data may be used to:

• Fulfillment of the energy supply contract: order processing, billing, and payment management.
• Customer service (SAC): responding to questions, complaints, and requests for information.
• Contests and promotions: sending communications about products, services, and offers.
• Personalization: tailoring content and advertisements to customer preferences.
• Internal and legal purposes: market research, audits, fraud prevention, compliance with legal obligations, or merger/acquisition processes.

SOLX may share Personal Data with:

• Service providers: partners that assist in providing our services (billing, SAC, etc.) and are bound by confidentiality.
• Debt collection and credit agencies: to assess solvency or carry out collections.
• Third parties for marketing purposes: only with the prior consent of the data subject.
• Authorities and legal proceedings: when required by law or in merger/acquisition contexts.

Personal Data is retained only for as long as necessary to fulfill the described purposes or to meet legal and contractual requirements.

SOLX applies technical and organizational security measures to protect Personal Data against unauthorized access or misuse. However, data transmission over the Internet is not completely secure, and we cannot guarantee absolute protection.

If it is necessary to transfer Personal Data outside the European Economic Area (EEA), SOLX will adopt appropriate safeguards in accordance with applicable legislation.

Under the law, the data subject may access, rectify, or delete their Personal Data, request portability, limit or object to processing. They may also withdraw any consent given, without affecting the legality of the previous processing.

To exercise these rights, contact SOLX by the means described in Section 11. If the request is made by third parties without proof of representation, it may be refused for security reasons.

Marketing communications: you may opt out of receiving promotional communications at any time by following the unsubscribe instructions included in the messages or by adjusting your account settings.
Cookies and personalized advertising: cookie management can be done in your browser or in a preferences panel on our site. Note that refusing some cookies may affect the user experience.

SOLX reserves the right to update this Policy whenever necessary, whether for legal reasons or changes in our data processing practices. We recommend that you check this page regularly.

If you have any questions or comments about this Privacy Policy, please contact:

• Email: mail@solx.pt
• Address: SOLX, Lda. - Av. D. João II, Lt. 30, Edifício Meridiano, 2ºB, 1990-092 LISBOA
• Phone: 967 418 742

We will strive to respond promptly to any questions or complaints regarding the processing of your Personal Data. If our response is not satisfactory, you may file a complaint with the Portuguese Data Protection Authority (CNPD) or the competent authority.

SOLX thanks you for your trust and remains committed to safeguarding the privacy and security of your Personal Data.