Version T1.0 · effective 3 October 2026 · The Italian text prevails in case of discrepancy.
The controller is Energy, . Privacy requests go to Energy, or to bess@barrel.center, which forwards them to Energy.
Barrel S.r.l., Galleria delle Porte Contarine 4, 35137 Padova, Italy, VAT IT12616620964, runs the portal energy.barrel.center on behalf of Energy as processor (Art. 28 GDPR), under an agreement with Energy.
This notice covers the data of the sales people using the Portal and the customer data the sales people enter. It supplements the information Energy gives its employees and collaborators.
| Data | Purpose | Retention |
|---|---|---|
| Sales person's account: email, name, role, phone, country, password (stored hashed), date of invitation and activation, version of the terms accepted | Give access to the Portal and show the contact person on the documents | Until the account is deactivated; then deletion within 30 days |
| Documents produced and their versions, with their source data (customer, site, consumption, load curve, prices, assumptions) | Make documents and revisions available | Until the sales person deletes them, or until the account is deactivated or the agreement ends, unless Energy instructs otherwise |
| Project materials uploaded or pasted in the "Start from the project materials" box and the brief we derive from them | Fill in the form and prepare the documents of the same project | Until deleted from the profile, and in any case 12 months after their last use or at account deactivation. Backups keep them for at most 14 more days |
| "New offer" form, bills and grid connection offers uploaded in their dedicated tabs | Produce the document requested, read consumption and connection data | Only in memory for the processing time; files are not saved. Tax codes, VAT numbers, POD, contract codes, bank data and contact details are not extracted |
| Usage data: documents produced, product, country, date | Operation and support of the service, reporting to Energy as provided in the agreement | Until the account is deactivated; in aggregated form afterwards |
| Technical logs: IP address, date and time, page requested | Security, abuse prevention, fault diagnosis | At most 30 days |
The legal basis for the sales people's data is the performance of the employment or collaboration relationship with Energy and the legitimate interest of Energy in organising its commercial activity (Art. 6.1.b and 6.1.f GDPR). For customer data it is the preparation of an offer requested by the customer (Art. 6.1.b) or the legitimate interest of Energy (Art. 6.1.f).
Barrel does not use usage data to assess the activity of individual sales people. Any use by Energy is governed by its internal rules.
We do not process special categories of data (Art. 9 GDPR) or criminal data: please do not enter them in forms and materials.
To read the materials and produce the documents the Portal sends the necessary data to Anthropic (Claude model) through its API. Anthropic processes them as a provider, under its commercial terms for the API and the data processing addendum that is part of them: it does not use them to train its models and deletes them within 30 days, except for legal obligations or abuse prevention. In the brief and in the documents we do not include names of the customers' staff, e-mails, phone numbers, tax codes, POD or bank data; we do not insert photos with recognisable persons or number plates.
The documents do not produce automated decisions with legal effects on individuals (Art. 22 GDPR).
The Portal uses only technical cookies: the session and the chosen language. No profiling cookies or third-party analytics.
Data subjects may ask for access, rectification, erasure, restriction, objection to processing based on legitimate interest and portability, by contacting Energy. Requests received by Barrel (bess@barrel.center) are forwarded to Energy without delay.
A complaint may be lodged with the competent supervisory authority: that of the country where the data subject lives or works (in Italy the Garante per la protezione dei dati personali, garanteprivacy.it) or that of the country where Energy is established.
The version in force is always at energy.barrel.center/privacy, with the date of update.