Privacy Policy
Last updated: 9 November 2026
This privacy policy describes how we handle the personal data you give us.
Data controller
Omtago AB is the controller for the processing of your personal data.
Omtago AB
Company registration no. 559158-7174 (Sweden)
Box 861
391 28 Kalmar
Sweden
Contact us at hello@solar-sherpa.ie.
What personal data we process
Data you give us yourself:
- Name
- Address
- Phone number
- Email address
Data collected automatically when you visit the website:
- IP address, time and which pages are visited. This is logged to protect the service against abuse.
- If you have consented to marketing cookies, advertising IDs and similar identifiers may be collected by the advertising platforms we use.
Purposes and legal basis
We process your personal data for the purposes below. For each purpose we state the legal basis we rely on under the General Data Protection Regulation (GDPR).
- Passing your quote request to installers.
Legal basis: performance of a contract (GDPR Article 6(1)(b)). Without this data we cannot provide the service. - Verifying your phone number with a one-time code sent by text message (SMS), and sending you messages about your request.
Legal basis: performance of a contract (GDPR Article 6(1)(b)). We only send you texts about your request, not marketing. - Customer service and answering your questions.
Legal basis: performance of a contract (GDPR Article 6(1)(b)). - Sending you information and marketing by email about solar panels, installers and related products.
Legal basis: consent (GDPR Article 6(1)(a)). You can withdraw your consent at any time. - Targeted marketing and advertising on other websites, and measuring how well that advertising works.
Legal basis: consent (GDPR Article 6(1)(a)). You can change or withdraw your consent at any time. - Analysis and market research to improve the service.
Legal basis: legitimate interest (GDPR Article 6(1)(f)). Our legitimate interest is understanding how the service is used and making it better. - Protecting the service against spam, fraud, denial-of-service attacks and other abuse.
Legal basis: legitimate interest (GDPR Article 6(1)(f)). Our legitimate interest is keeping the website available and secure. - Bookkeeping and compliance with legal requirements.
Legal basis: legal obligation (GDPR Article 6(1)(c)).
Automated matching
When you request a quote, installers are selected automatically, based on the factors described in our Terms of Service. Our assessment is that this selection does not have legal effects for you or similarly significantly affect you.
You can still object to the automated selection and ask us to handle your request manually. You can also ask for a list of the installers that have received your details. Email hello@solar-sherpa.ie.
Who we share data with
Installers. When you request a quote, we share your contact details with 1–3 installers. Each installer is then an independent controller for its own processing of your data, and is itself responsible for informing you about it.
Suppliers that process data on our behalf. We use suppliers for hosting and operations, email and text message (SMS) sending, logging, error monitoring and analytics. They are processors and may only process your data on our instructions and under data processing agreements.
Address search. When you search for your address in our forms, what you type is sent to Ideal Postcodes (IDDQD Limited, United Kingdom), which provides address suggestions. Ideal Postcodes processes the data on our behalf as our processor. The United Kingdom is covered by an adequacy decision from the European Commission, which means it is recognised as protecting personal data to the same standard as the EU.
Solar estimate. To estimate what solar system would suit your roof, we send your address to Google (Google Ireland Limited), which uses its Solar API to return information about your roof, such as its size, pitch and how much sun it gets. Google is an independent controller for that processing and handles the data under its own privacy policy. The data may be transferred to the USA, where Google is covered by the EU–US Data Privacy Framework.
Advertising and analytics platforms. If you have consented to it, we share certain data with Google and Microsoft for advertising and measurement. As part of this, you may see personalised ads on other websites you visit.
Business transfers. We may transfer personal data to a third party if the business is reorganised, the company is merged, or the business is transferred.
Advertising and measurement
If you consent to marketing cookies, we use Google Ads and Microsoft Advertising to show and measure ads. Our contracting parties are Google Ireland Limited and Microsoft Ireland Operations Limited. They are independent controllers and handle the data under their own privacy policies.
With your consent to marketing cookies, we share a pseudonymised (hashed) form of your email address and phone number with Google and Microsoft, so that they can measure how well our advertising works.
These companies may in turn transfer data to their parent companies in the USA. Both are certified under the EU–US Data Privacy Framework, which the European Commission has approved. Email us at hello@solar-sherpa.ie if you want to know more.
How long we keep data
- Quote requests: 3 years from the request.
- Records that form part of our accounts: 7 years, as required by the Swedish Bookkeeping Act.
- Data used for marketing: until you unsubscribe or object.
- Logs for security and abuse protection (including IP addresses): no more than 12 months.
If before then we judge that you are no longer interested in a solar installation or in information about solar panels and related products, we delete the data earlier.
Marketing
We only send marketing by email to people who have consented to it. You can withdraw your consent at any time, either through the unsubscribe link in our emails or by emailing hello@solar-sherpa.ie. You always have the right to object to direct marketing, and if you do, we stop.
Your rights
You have the right to:
- access the personal data we process about you,
- have inaccurate or incomplete data corrected,
- have your data erased,
- ask us to restrict the processing,
- object to the processing, including an unconditional right to object to direct marketing,
- receive your data in a machine-readable format and transfer it to someone else (data portability),
- withdraw a consent you have given, without affecting processing that took place before.
Contact hello@solar-sherpa.ie to exercise any of these rights.
Complaints
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se, which is our lead supervisory authority.
You can also complain to the data protection authority in the EU country where you live or work. In Ireland, that is the Data Protection Commission, dataprotection.ie.
Cookies
We use cookies and similar technologies. You choose which non-essential cookies may be used, and you can change your choice at any time. The cookies we use and what they do are described in our Cookie Policy.
Security
We take appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss and alteration. Access to the data is limited to the people who need it for their work, and the data is encrypted when transferred over the internet.
