Privacy Policy
This policy explains what personal data Rhino collects when you visit rhino.energy or contact us, why we process it, and the rights you have under the General Data Protection Regulation (GDPR).
Last updated: 15 July 2026
1. Who we are
Rhino provides remote energy and utility monitoring for commercial real estate. The rhino.energy website is operated within the Rhino group. Two group entities act as joint controllers for the personal data described in this policy:
- Rhino B.V. (primary controller), registered in Amsterdam, the Netherlands, Chamber of Commerce (KvK) number 89917081, VAT number NL865152287B01. Registered address: Hogehilweg 19, 1101 CB Amsterdam, the Netherlands.
- Rhino Sp. z o.o. (group affiliate), registered office at ul. Strzegomska 140A, 54-429 Wrocław, Poland, entered in the National Court Register (KRS) under number 0000862241, NIP 8943159824, REGON 387285445.
For any question about this policy or your personal data, contact us at legal@rhino.energy.
2. What data we collect
We collect personal data in three ways:
- Data you give us. When you request a demo, request API access, subscribe to our newsletter, or otherwise contact us, we collect the details you submit through our forms. This typically includes your name, business email address, company name, phone number, and any message content. Our forms are provided by HubSpot.
- Usage and device data. When you browse the site, we and our analytics providers collect information such as pages viewed, referring pages, approximate location, browser and device type, and interaction events. Some of this is collected through cookies and similar technologies (see section 4).
- Company-level identification. To understand which organisations are interested in our services, we use business visitor-identification tools that infer the company associated with a visitor's IP address. This is company-level firmographic data, not an attempt to identify you personally.
3. Why we use it, and our legal basis
We process personal data for the following purposes, on the following legal bases under Article 6 GDPR:
| Purpose | Legal basis |
|---|---|
| Responding to demo, API, and contact requests, and providing our services | Performance of a contract, or steps taken at your request before entering into one |
| Sending newsletters and marketing communications | Your consent, which you can withdraw at any time |
| Website analytics, product improvement, and company-level visitor identification | Our legitimate interest in understanding and improving how our site is used, and in reaching relevant businesses. You can object at any time by switching these off on our Cookie Policy page. |
| Security, fraud prevention, and keeping the site available | Our legitimate interest in protecting our systems, and legal obligations |
Providing your data is voluntary, but some of it is necessary for us to respond to your request or provide a service.
4. Cookies and similar technologies
We use cookies and similar technologies for essential site functions, analytics, and marketing. Necessary cookies keep the site working. Analytics and marketing cookies are on by default, which means they start when you open the site rather than waiting for you to agree. You can switch them off at any time on our Cookie Policy page, and once off they are not loaded at all. You can also block cookies through your browser settings.
The main cookies and tracking tools on rhino.energy are:
| Tool / cookie | Provider | Purpose | Type |
|---|---|---|---|
| PostHog (ph_* and related) | PostHog (EU region) | Product analytics: page views, events, and session context. Individual profiles are created only for identified users. | Analytics, first-party |
| SNID | Snitcher | Company-level visitor identification by reverse-IP lookup. | Marketing, first-party, up to 2 years |
| _ga, _ga_* | Google Analytics 4 | Aggregate web analytics: distinguishes visitors and retains session state. | Analytics, first-party, up to 2 years |
| Apollo tracker | Apollo.io | Company-level visitor identification (currently under evaluation). | Marketing, first-party |
| HubSpot meeting scheduler | HubSpot | Embedded on our demo page only, so you can book a slot without leaving the site. Loaded from HubSpot's domain when that page opens, and not gated by the cookie banner because it is part of the booking service itself. We run no HubSpot tracking script across the rest of the site. | Functional, HubSpot's own context |
5. Who we share data with
We do not sell your personal data. We share it only with service providers who process it on our behalf under a data processing agreement, and only as needed to run our website and business. These include:
- HubSpot (forms and customer relationship management)
- PostHog (product analytics)
- Snitcher and Apollo (company-level visitor identification)
- Google (web analytics)
- Netlify (website hosting and content delivery)
We may also disclose data where required by law, for example in response to a valid request from a court or authority.
6. International transfers
Some of our providers process data outside the European Economic Area (EEA). Where that happens, we rely on an appropriate safeguard under the GDPR, such as an adequacy decision of the European Commission or the Commission's standard contractual clauses, to ensure your data receives an equivalent level of protection.
7. How long we keep it
We keep personal data only as long as necessary for the purpose it was collected for, or as required by law. Contact and CRM data is retained for the duration of our relationship and for a reasonable period afterwards in case of follow-up or legal claims. Where processing is based on your consent, we keep the data until you withdraw it. Analytics data is retained according to the retention settings of each tool.
8. Your rights
Under the GDPR you have the right to access your personal data and to request that we rectify, complete, erase, or restrict it. You can object to processing based on legitimate interests, including profiling for marketing, and you can withdraw consent at any time. Where applicable, you also have the right to data portability.
To exercise any of these rights, email legal@rhino.energy. You also have the right to lodge a complaint with a supervisory authority. In the Netherlands this is the Autoriteit Persoonsgegevens; in Poland, the President of the Personal Data Protection Office (UODO).
9. Other websites
Our site may link to third-party websites. Those sites operate independently of us and have their own privacy policies. We are not responsible for their content or practices, and we recommend reading their policies before sharing data with them.
10. Changes to this policy
We may update this policy from time to time. When we do, we will change the "last updated" date at the top of this page, and where changes are significant we will provide a more prominent notice. Questions about this policy can be sent to legal@rhino.energy.