🦁
Lion Solar SolutionsLion Solar Solutions OÜ | Last updated: 11 August 2026
Lion Solar (“Lion Solar”, “we”, “us”, “our”) operates the website https://lion-solar.com and the customer portal at https://portal.lion-solar.com (the “Portal”), through which our customers manage their solar energy projects. The service is provided by Lion Solar Solutions OÜ (Tartu maakond, Tartu linn, Paju tn 2, 50603 Estonia), which is the data controller responsible for your personal data.
If you have any questions about this policy or how we handle your data, contact us at info@lion-solar.com. Lion Solar Solutions OÜ acts as a data controller to the extent that it determines the purposes and means of the processing of personal data under this policy. For data subjects located in the European Economic Area, the processing of personal data is governed by the General Data Protection Regulation of the European Union (“GDPR”) and by other applicable data protection legislation; for data subjects in Türkiye, Law No. 6698 on the Protection of Personal Data (“KVKK”) and the related secondary legislation are taken into account to the extent that they apply.
This policy explains what personal data we collect, why we collect it, how we use and share it, how long we keep it, and the rights you have. It covers both our public website and the Portal, including the notifications we send you by email, in the app, by web push, and by WhatsApp.
For users in Türkiye, where a consent to receive commercial electronic messages is given, amended or withdrawn, the corresponding record of that consent or refusal may additionally be kept to the extent required by the applicable legislation.
We use your personal data to:
Where the KVKK applies, personal data is processed on the basis of the processing conditions set out in Article 5 and, where necessary, Article 6 of Law No. 6698, depending on the specific processing activity concerned.
In this context, personal data may in particular be processed on the following legal grounds:
and, only where necessary, on the basis of the explicit consent of the data subject.
For a processing activity that has to be based on explicit consent, that explicit consent is not made a mandatory condition of benefiting from the service. Explicit consent may be withdrawn by the data subject at any time.
Where you have given us your consent, we may use your name, email address and phone number to send you our newsletter and information about our services, new features, offers, events and company news. Depending on the consent you gave, we may send these by email or over WhatsApp.
Legal basis: your consent (Art. 6(1)(a) GDPR). Giving this consent is not a condition of using the Portal, and declining it has no effect on the services you receive. We record the date, time and wording of each consent so that we can demonstrate it when asked.
You can withdraw this consent at any time, and doing so is as easy as giving it. See Your rights below.
If you have provided a phone number, we may send you messages about your projects (for example, when a project starts, when it is ready, or when a revision is available) through the WhatsApp Business Platform.
To deliver these messages, we share the data needed for that purpose with Meta Platforms Ireland Limited, the provider of the WhatsApp Business Platform, acting as our processor. The data shared consists of your name, your phone number, and the content of the message itself, which may include the name of the project and the text our team writes to you. Meta processes this data to transmit the message to your WhatsApp account, in line with Meta’s own terms and privacy practices.
Promotional messages are a separate matter. We may send news and offers over WhatsApp, but only where you have given a separate consent for that purpose. Your consent to receive messages about your projects does not cover promotional messages, and you may hold one without the other.
WhatsApp messages are optional and easy to stop. You can turn them off at any time in your Portal settings, or by replying STOP (or DUR) to any WhatsApp message we send you. Turning them off does not affect the other ways we keep you informed (email and in-app notifications).
In connection with the use of the WhatsApp Business Platform, personal data may be processed by Meta Platforms Ireland Limited and, where relevant, by the companies of the Meta group concerned, or transferred abroad. These operations are carried out in accordance with the applicable data protection legislation and with the principles described in the International data transfers section below.
Promotional messages are separate from project notifications. We may send news and offers over WhatsApp, but we do so only where the conditions required under the applicable legislation are met. Your acceptance of operational or service-related WhatsApp notifications about your projects does not in itself make the sending of marketing or advertising messages over WhatsApp lawful, and it is not treated as a commercial electronic message consent given for that purpose. You can turn WhatsApp notifications off in your Portal settings, or use the opt-out methods indicated in the messages sent to you. For marketing WhatsApp messages, the rights of users in Türkiye to refuse such messages under Law No. 6563 and the related legislation are reserved.
Pages on this site may include embedded content (for example videos, images, or articles). Embedded content from other websites behaves in the exact same way as if you had visited the other website. Those websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
In the case of embedded content that uses cookies or tracking technologies which are not strictly necessary, those technologies are not activated without the required user preference or consent having been obtained, where the applicable legislation so requires.
Personal data is shared with third parties only to the extent that this is necessary and proportionate for the purpose of the disclosure.
We share personal data with service providers who process it on our behalf, and only to the extent needed to run the service:
If you request a password reset, your IP address may be included in the reset email. We may also disclose data where we are legally required to do so, to protect our legal rights, in connection with a merger, acquisition or sale of assets, or with your explicit consent.
Some of our providers, including Meta and Google, may process data outside your country. Where personal data is transferred outside the European Economic Area or Türkiye, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, to protect it.
We keep your account and project data for as long as your account is active and for as long as we need it to provide the service. After your account is closed, we delete or anonymize your personal data, except where we are required to keep certain records for legal, tax, accounting, or security purposes.
We keep a record of the marketing consents you give and withdraw for as long as we rely on them and for three years afterwards, so that we can show what was agreed and when.
If you leave a comment on the website, the comment and its metadata are retained so that we can recognize and approve any follow up comments instead of holding them in a moderation queue.
Notification and message delivery logs, including WhatsApp delivery status, are kept for a limited period for audit and troubleshooting, and are then deleted.
Personal data is not kept for longer than is necessary for the purposes for which it is processed. Where the applicable legislation prescribes a specific retention period, that statutory period applies; where no such period exists, the retention period applied is determined by taking into account the purpose of the processing, our legal obligations, the applicable limitation periods and the principle of data minimization.
Once the retention period has expired and no other legal ground requires the processing of the personal data, the personal data is deleted, destroyed or anonymized in accordance with the applicable legislation.
Depending on where you live, you have rights over your personal data under the GDPR (European Union) and the KVKK (Türkiye), including the right to:
Data subjects who have statutory rights under the provisions of Law No. 6698 (KVKK) are entitled to request all information notices and the related documents concerning their personal data, and have all the statutory rights laid down under the applicable legislation.
Withdrawing marketing consent. You may withdraw your consent at any time, and doing so is as easy as giving it: use the unsubscribe link at the foot of any newsletter, turn WhatsApp messages off in your Portal settings, or reply STOP (or DUR) to any WhatsApp message. Withdrawal applies going forward and does not affect the lawfulness of messages sent before it.
To exercise any of these rights, contact us at info@lion-solar.com. You also have the right to lodge a complaint with your local data protection authority.
We use only the cookies needed to run the service: they keep you signed in, protect the forms you submit, and remember your display preferences. Your sign-in cookie lasts one hour and is renewed while you are using the service; if you stay signed in, a separate cookie keeps that session alive for up to 90 days. Short-lived cookies used during sign-in and registration expire within minutes. The Portal loads no advertising or analytics tags.
Our website and our demo signup page load Google Analytics and Google Tag Manager. These set cookies on your device and let us see how our pages and our advertising perform, including which advertisement led to a signup. They are not needed to run the site. You can prevent them through your browser settings or a content blocker, and you can opt out of Google Analytics using Google’s own browser add-on at https://tools.google.com/dlpage/gaoptout.
Where the site offers a comment form and you leave a comment, you may opt in to saving your name, email address, and website in cookies for your convenience, so that you do not have to fill in your details again; these cookies last for one year. If you visit our login page, we set a temporary cookie to check whether your browser accepts cookies, which contains no personal data and is discarded when you close your browser. When you log in to the website, we set cookies to save your login information and display choices; login cookies last for two days, screen option cookies last for a year, and if you select “Remember Me” your login persists for two weeks.
We protect your data with appropriate technical and organizational measures, including encryption in transit, access controls, and secure infrastructure. No system is perfectly secure, but we work to keep your data safe and to respond quickly if a problem occurs.
Access to personal data is limited to those persons who need to access it within the scope of their duties and authorization. Appropriate technical and organizational measures required by the applicable legislation are taken in order to prevent the unlawful processing of personal data and unlawful access to personal data, and to ensure that personal data is kept securely.
We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you through the Portal.
Lion Solar Solutions OÜ Tartu maakond, Tartu linn, Paju tn 2, 50603 Estonia
Email: info@lion-solar.com Website: https://lion-solar.com