Privacy Policy

Introduction

At EVenergia Consulting, SL, Avenida Diagonal 532, Floor 2, 08006 Barcelona, Spain ("Cargea", "we", "us", "our"), we understand the importance of treating the personal data of our customers, suppliers, business partners, website visitors and other people we interact with in a confidential and private manner. Transparency is a core value at Cargea and we are committed to meeting the requirements and obligations regarding data privacy in accordance with applicable regulations, including the EU General Data Protection Regulation ("GDPR").

Cargea is the data controller for your personal data. This privacy policy explains how Cargea uses the personal data we collect when you use our website, user portals and mobile applications.

When we refer to our "Website" we mean www.cargea.com and the other sites and applications we operate. When we refer to "user portals" and "mobile applications", we mean our product "Cargea".

If you have any questions about this Privacy Policy or wish to exercise your rights as a data subject under Chapter III of the GDPR, you can contact Cargea at info@cargea.com.

1. Categories of personal data, purpose and legal basis

1.1 Website visitors, user portal and/or mobile application users, and newsletter subscribers

When you visit our Website, user portals and/or mobile applications, Cargea processes personal data about you, such as cookies, browser type and version, IP address and duration of visit. The use of cookies is intended, among other things, to improve your user experience, provide functionality, generate statistics, tailor the marketing of our products to your needs and remember your preferences.

The legitimate interests pursued are to offer you products and services that work optimally, a good website experience and marketing activities. The legal basis for the processing is Art. 6(1)(f) of the GDPR. In certain cases, the legal basis is your consent, which will be requested when you visit the Website, user portals and/or mobile applications, in accordance with Art. 6(1)(a) of the GDPR.

If you wish to receive a newsletter or book a demo, we also process the following information: first and last name, topic(s) of interest and email address. The legal basis is Cargea's legitimate interest in promoting its products and marketing activities pursuant to Art. 6(1)(f) of the GDPR.

1.2 Customers

When registering your profile, Cargea will process your personal data, including name, email address, phone number, postal address, banking and payment information, and information about contracted services. The purpose is the provision of our services.

When using our services, Cargea will also process information relating to the date and time, frequency, location and charging pattern of electric vehicles. Information relating to purchases includes name, contact details, address, cost and transaction details.

We use Stripe as a third-party credit card processing company to collect payment information. If you provide payment information, we will share with Stripe data such as your debit/credit card number, billing address, phone number and information about the installed application to process payments.

The legal basis for the processing is Art. 6(1)(b) of the GDPR.

1.3 Contact persons at suppliers or other business partners

As a contact person at a supplier or other business partner, Cargea processes your personal data when you communicate with us, for example through emails in connection with Cargea's existing contractual relationship with the company you work for, or in connection with the conclusion or termination of a contract.

Cargea processes ordinary personal data about you, including name, email address, phone number, job title, etc.

The legal basis is the legitimate interest pursued by Cargea pursuant to Art. 6(1)(f) of the GDPR.

1.4 Enquiries via the chat function in user portals and mobile applications

If you send an enquiry related to Cargea's services through the chat function, Cargea will process your personal data, such as your IP address, geographical location and personal data included in your enquiry, for example name, email address and phone number.

The legitimate interests pursued are customer service by responding to enquiries and business development. The legal basis is Art. 6(1)(f) of the GDPR.

2. Recipients of your personal data

Where relevant, Cargea may disclose or transfer your personal data to affiliates, business partners or other collaborators for business purposes.

Cargea uses third-party service providers, such as hosting providers, payment processors and technology partners, to provide the software, networks, marketing, infrastructure and other services necessary to operate and maintain our services.

3. Transfer of data to third countries (outside the EU/EEA)

In certain cases, your personal data may be transferred to countries outside the EU/EEA. Cargea ensures that such transfer will be carried out in accordance with applicable data protection laws.

4. Retention of your personal data

Cargea will retain your personal data only for as long as necessary to fulfil the purposes of the processing.

Cargea maintains industry-standard security safeguards to protect your data. Where appropriate, we encrypt data in transit and at rest to ensure your information remains private. All payment data is fully encrypted and handled only by PCI-certified organisations.

4.1 Website visitors, user portal and/or mobile application users, and newsletter subscribers

Personal data related to your newsletter account is retained until you withdraw your consent and no longer wish to receive newsletters from us.

4.2 Customers

Customer personal data is generally deleted when it is no longer necessary for the purpose for which it was collected. It is generally deleted 3 years after the termination of the contractual relationship between Cargea and the customer, unless retention is necessary for legal or documentation reasons.

4.3 Contact persons at suppliers or other business partners

If you are a contact person at a supplier or other business partner, Cargea will retain your personal data for as long as Cargea communicates with you in your capacity as a contact point.

4.4 Enquiries via the chat function

Enquiries from prospective customers will generally be deleted 3 years after the enquiry has been resolved, unless retention is necessary for documentation purposes.

4.5 Accounting material

Cargea will retain your personal data to the extent necessary for accounting purposes, such as personal data related to invoicing. Such data will be retained for the legally required retention period under applicable Spanish accounting regulations.

5. Social media

Our Website may use social media plug-ins such as Facebook, Instagram and LinkedIn.

If you access our Website using such a plug-in, your browser may connect to the underlying social network's server and transmit certain information, such as your IP address.

For more information, please consult the privacy policies of the respective social media providers.

6. Your rights

Cargea has implemented various measures to protect your personal data and guarantee your rights.

As a data subject, you have the following rights under the GDPR:

• Right of access.
• Right to rectification.
• Right to erasure.
• Right to restriction of processing.
• Right to data portability.
• Right to object.

Right to lodge a complaint: If you disagree with the way Cargea processes your personal data, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).

Right to withdraw consent: If the processing of your personal data is based on your consent, you have the right to withdraw it at any time.

To exercise any of the above rights, please contact us at info@cargea.com.

7. Questions or complaints

If you have any questions about this Privacy Policy or disagree with the way Cargea processes your personal data, you can contact us at:

info@cargea.com

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es

8. Changes to this Privacy Policy

Cargea reserves the right to amend this Privacy Policy in relation to new technologies, regulatory requirements or other purposes.