Privacy Policy

This Privacy Policy governs how Shelly Group SE (the “Company”) processes the personal data of Shelly Hub users. Shelly Hub belongs to the same data-controller group as the corporate website at corporate.shelly.com.

The Company is a public listed company and publishes its full Privacy Policy — including the investor-facing aspects — at corporate.shelly.com/en/page/privacy-policy. The version below focuses on data processed in connection with using Shelly Hub.

The controller of your personal data within the meaning of Art. 4 (7) GDPR is Shelly Group SE.

Our Data Protection Officer answers all questions about the processing and protection of personal data. You can reach them at dpo@shelly.com.

In connection with Shelly Hub we may process the following categories of data:

• Account data — email address, display name, password (bcrypt hash), submission history.
• Submission content — the titles, article bodies, images and links you submit for review.
• Technical data — IP address, user agent and a temporary session identifier required for authentication and security.
• Anonymized data — statistics on the total number of visits to the hub and queries received from users.
• Cookies — see the Cookie Policy.

• Operating Shelly Hub and moderating submissions — Art. 6 (1)(b) GDPR (contract).
• Correspondence in connection with your account and submissions, and the exchange of documents.
• Security and abuse prevention — Art. 6 (1)(f) GDPR (legitimate interest).
• Compliance with the Company's legal obligations and the defence of our rights in administrative or judicial proceedings.
• Anonymous analytics and UX research — Art. 6 (1)(a) GDPR (consent), managed via the cookie banner.

Where strictly necessary, your data may be shared with:

• consultants of the Company (lawyers, auditors, IT advisors) to protect our legitimate interests and meet legal obligations;
• judicial authorities, supervisory bodies and other competent public authorities in Bulgaria, Germany and other EU member states — only to the extent permitted by law;
• marketing and PR agencies — only with anonymised statistics or for communications you have explicitly consented to.

We require and monitor that all of these third parties implement the technical and organisational measures necessary to protect your data.

• Account data — kept until you delete your account.
• Submissions that are never published — deleted after 12 months.
• Data processed for accounting purposes — 10 years (as required by law).
• Security logs — up to 90 days.
• Data relevant to ongoing judicial or administrative proceedings — until the proceedings end with a final, non-appealable act.

At any time, you may exercise the following rights by emailing dpo@shelly.com:

• right of access, including a copy of the data being processed;
• right of rectification of inaccurate or incomplete personal data;
• right of erasure (the “right to be forgotten”) — subject to the exceptions provided by law;
• right to restriction of processing;
• right to data portability in a structured, commonly used and machine-readable format;
• right to object to processing based on legitimate interest, and to direct marketing;
• right to lodge a complaint with the Data Protection Commission of the relevant EU member state;
• right to withdraw any consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

You will receive a response within one month of your request. In cases of factual or legal complexity this period may be extended by another two months.

We do not use automated individual decision-making or profiling that produces legal effects concerning you.

Shelly Hub contains links to third-party sites. Shelly Group SE is not responsible for the protection of personal data processed by those sites. Please familiarise yourself with the privacy policies of those sites and the grounds on which your data is processed by them.

Your personal data will not be transferred to third countries or international organisations outside the European Union. Should this ever become necessary, we will only do so under the European Commission's Standard Contractual Clauses.

To provide certain functionalities we use cookies that are technically necessary for the operation of Shelly Hub. To ensure the best possible user experience we also use optional cookies which you have the option to accept or decline. For more details, see our Cookie Policy.