End-User License Agreement — Charge Angels

Data Controller

• The entity operating the Charge Angels platform is the data controller responsible for the processing of your personal data as described in this agreement.
• For any questions regarding data protection, please contact the Data Protection Officer.

Legal Basis for Processing

• Consent (Art. 6(1)(a) GDPR): You provide explicit consent when accepting this agreement via the checkbox on the login page.
• Contract Performance (Art. 6(1)(b) GDPR): Processing is necessary for the provision of the EV charging services you have subscribed to.
• Legitimate Interest (Art. 6(1)(f) GDPR): Processing is necessary for the security, maintenance, and improvement of the platform.

Purpose of Data Processing

• Provide and manage EV charging services, including session monitoring, billing, and user authentication.
• Optimize charging station usage and energy management through smart charging algorithms.
• Generate analytics and statistics on consumption, cost, and usage patterns.
• Send notifications related to charging sessions, station availability, and account activity.
• Process payments and manage billing for charging sessions.
• Enable roaming capabilities with partner networks.

Personal Data Collected

• First and last name
• Email address
• Mobile phone number
• RFID card identifiers
• Profile picture
• Postal address
• Vehicle information (license plate, VIN)
• Password (stored in hashed form only)

Business Data Collected

• Instant and total energy consumption
• Charging station status
• Session start/stop events
• Authorization records
• Charging curves (consumption data)
• Cost curves (pricing data)
• Session data (date, time, duration, inactivity, total consumption)
• Active sessions and session history
• Site assignment
• Registered vehicles
• Billing information
• System logs

Data Sharing and Third-Party Processors

• Your data may be shared with the following third-party processors, solely for the purposes described:
  • Stripe: payment processing and billing for charging sessions.
  • Gireve / Hubject: publishing charging station information to roaming platforms.
  • Google Firebase: sending push notifications to your mobile device.
• Your data will not be sold or shared with third parties for marketing purposes.
• Your data may be disclosed to public authorities when required by law (labor inspection, tax authorities, law enforcement).

Data Localization

• The application is deployed and all data is stored on cloud infrastructure located within the European Union.

Data Retention

• Your personal data is retained for the duration of your active use of the platform.
• Your personal data will be automatically erased after an inactivity period of 6 months (no login during that period).
• You may request immediate deletion at any time (see below).

Delete Your Account

• Via the web application:
  • Log in to Charge Angels
  • Edit your profile by clicking the pen button in the sidebar
  • Select the ‘Miscs’ tab
  • Click the red button ‘I Understand and I want to delete my account’
  • Confirm the deletion
• Via the mobile application:
  • Log in to the mobile app (Android / iOS)
  • Go to ‘Settings’ at the bottom of the sidebar
  • Click the red button ‘Delete my account’
  • Confirm the deletion
• By email: send a request to the Data Protection Officer.
• Upon deletion, ALL your personal data (name, email, address, etc.) will be permanently removed from the system.

Privacy by Design

• This application has been designed with personal data protection in mind from the outset, in accordance with Article 25 of the GDPR.

Security

• Authentication (username and password) is required for all users to access the application.
• All data is transmitted over the network using encrypted protocols (HTTPS), ensuring confidentiality.
• Only administrators are authorized to read, write, edit, and delete all data stored in the database.
• Standard users can only read and edit their own personal data, view charging station availability, monitor their active sessions, and access their session history and statistics.

Automated Decision-Making

• The platform uses smart charging algorithms to optimize energy distribution across charging stations. These automated processes affect charging speed and scheduling but do not produce legal effects or similarly significant effects on users.

Your Rights Under the GDPR

Right to Withdraw Consent (Art. 7(3))

• You may withdraw your consent at any time by deleting your account or contacting the Data Protection Officer. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Right of Access (Art. 15)

• You may request access to your personal data by contacting the Data Protection Officer or an administrator, upon providing proof of identity.

Right to Rectification (Art. 16)

• You may request correction of inaccurate, incomplete, or outdated personal data by contacting the Data Protection Officer.

Right to Erasure (Art. 17)

• You may request the deletion of your personal data at any time (see ‘Delete Your Account’ above).

Right to Restrict Processing (Art. 18)

• You may request that the processing of your personal data be restricted in certain circumstances by contacting the Data Protection Officer.

Right to Data Portability (Art. 20)

• You may request the transfer of your personal data in a structured, commonly used, and machine-readable format by contacting the Data Protection Officer.
• You may also export your session data directly from the application.

Right to Object (Art. 21)

• You have the right to object to the processing of all or part of your personal data by contacting the Data Protection Officer.

Right to Lodge a Complaint (Art. 77)

• If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

User Consent

• You must provide your explicit consent for us to process your data as described in this agreement.
• Consent is given via the checkbox on the login page of the Charge Angels application.