Privacy policy

As part of its activities, DRIVECO publishes a website accessible at driveco.com (hereinafter the “Site“) which includes a section dedicated to accessing and paying for the recharging service provided by the charging stations that are part of the DRIVECO’s network (the “Recharging Portal“), as well as several mobile applications available on the Android and iOS platforms (the “Mobile Applications“).

We attach the greatest importance to respecting the privacy and personal data of persons who interact with us via the Site, the Mobile Applications, or by any other means. Thus, we implement appropriate technical and organizational measures to ensure that your personal data is processed in accordance with the regulations in force (in particular the General Data Protection Regulation No. 2016/679 of 27 April 2016 (hereinafter “GDPR”) and the French Data Protection Act of 6 January 1978 as amended).

The terms “data” or “personal data” used in this document have the same meaning as the term “personal data” in the GDPR. Other terms common to this document and the GDPR, such as “processing“, “controller“, “processor“, or “recipient” have the meaning given to them in the GDPR.

The purpose of this document is to inform you in a clear and transparent way about:

• How we process your personal data and what rights you have in this regard;
• The use of cookies on our Site.

Aware of the importance of clear and transparent information in this area, we have integrated various tables to help you better understand our practices regarding the management of your personal data and facilitate the exercise of your rights.

We apply the principles of data minimization, data protection by design and by default.

Consequently, we only collect information that is relevant, adequate and limited to what is necessary for the purposes for which the data is collected and processed.

1. WHO IS THE DATA CONTROLLER OF YOUR PERSONAL DATA?

The data controller is, within the meaning of the GDPR, the person who determines the purposes and means of the data processing, i.e. for what purpose(s) and in what way your personal data are processed.

The person responsible for processing your data is DRIVECO, a simplified joint stock company registered in the Paris trade and companies register under number 818 943 938.

We have appointed a Data Protection Officer (“DPO”) who will be your privileged contact for all questions relating to the protection of your personal data. You can contact the DPO by e-mail at dibbdpo@dibb.fr

2. WHAT PERSONAL DATA DO WE COLLECT AND HOW?

2.1 Data collected

• User identification and contact data: we process the data necessary to contact you and process your request for information. This data includes your email address, your name and phone number.

• User identification, connection and payment data on the Mobile Applications: we process data allowing you to create a user account on the Mobile Applications and connect to your user account on the Mobile Applications. This data includes your identification data (email address, password), the date of your last connection, the last date of acceptance of the legal terms and conditions (general conditions of use, general conditions of sale, privacy policy). You can also enter your credit card number in your user account in order to facilitate payment of the recharge service; this number is processed securely by our partner (INGENICO) and is not kept by DRIVECO. Finally, you can also associate a badge number with your user account.

• Identification and payment data for the provision of the recharge service via the Recharge Portal: in order to allow you to access the recharge service and proceed with its payment via the Recharge Portal, you must enter several personal data such as your email address and your bank card number when the recharge service is subject to a fee; this number is processed securely by our partner (INGENICO) and is not kept by DRIVECO.

• Browsing data of the users of the Site: when you browse the Site, a certain amount of data is collected concerning your terminal (computer, smartphone, tablet), your browser, the pages and the content that you consult. This data may include directly or indirectly identifying data such as, for example, your IP address or a unique identifier linked to your terminal, operating system, software or other.

• Customers and prospects data: we process the data necessary to make commercial contact in order to respond to their request, to present our service offers and to subsequently manage our business relations with our customers and prospects. This data includes in particular e-mail addresses, your name and telephone numbers.

• Business partners Data: We process data that is necessary and relevant to the management of our relationships with our business partners. This data includes email addresses, your first and last name and telephone numbers.

• Candidate data: we process personal data that you provide to us in the context of your responses to our job and internship offers. This data may include your e-mail address, first and last name, telephone number and curriculum vitae.

• User data: we process the data required to load vehicles and for any support services that Driveco implements

2.2 How we collect your data :

• Collection via the Site (forms): we process the data that you voluntarily communicate to us via the form fields provided for this purpose on the Site. Required fields are marked with an asterisk. If you do not provide this information, you will not be able to send us your message.

• Collection via the Mobile Applications: we process the data you provide via the form fields provided for this purpose on the Mobile Applications. Required fields are marked with an asterisk. If you do not provide this information, you will not be able to use the functionality associated with the form.

• Collection via the Recharging Portal: we process the data that you voluntarily communicate to us via the form fields provided for this purpose on our Recharging Portal, allowing you to access the recharge service and, if applicable, to proceed with its payment. Required fields are marked with an asterisk. If you do not provide this information, you will not be able to access the recharge service.
• Use of cookies or other tracers on the Site: We use cookies or other types of “trackers” on our Site. A cookie is an electronic file stored in your terminal (computer, tablet, smartphone…) and associated with the Site. This file is automatically sent back during subsequent contacts with the Site. When you browse this Site, cookies from us and/or third-party companies may be placed on your terminal. The first time you browse this Site, a banner explaining the use of cookies will appear and will allow you to configure your choices. We use different types of cookies generally set as a response to actions you have taken that constitute a request for services, such as setting your privacy preferences, logging in, or filling out forms. They allow us to record information between several visits to the Site on the same device. These cookies are necessary for the operation of the Site and do not require your consent. They are therefore deposited automatically on your terminal. The refusal of these cookies is likely to affect the functioning of the Site and the quality of your browsing experience. “Statistical” or audience measurement cookies: These cookies allow us to evaluate your actions on the Site in order to assess the frequency and volume of visitors and to improve the functioning and ergonomics of the Site. These cookies may be “internal” (i.e., deposited by us) or “third party” (when deposited by third parties). Your agreement is requested prior to the deposit of these cookies, i.e. at the time of your first connection, by means of a box to be checked on our cookies banner (except when the cookie is strictly necessary for the functioning and the current administration operations of the Site).
• Collection of publicly available data (information about our potential customers) via professional social networks (LinkedIn, etc.) or other public sources of information.

• Direct collection: we process the data you send us directly by any means (email, mail).

3. WHAT ARE THE PURPOSES AND LEGAL BASES OF THE PERSONAL DATA PROCESSING THAT WE IMPLEMENT?

4. WHAT SECURITY MEASURES DO WE IMPLEMENT TO PROTECT YOUR PERSONAL DATA?

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or access.

We also monitor the way our service providers process your personal data to ensure that they provide sufficient guarantees that appropriate data security measures are in place.

5. HOW LONG DO WE KEEP YOUR DATA?

Personal data are kept for the period necessary to achieve the purposes for which they are collected, as described in Article 3, plus the duration of the legal requirements.

The main retention periods are the following:

• Data relating to users of the recharging service: duration of the contractual relationship, increased by 5 years. Invoices are kept for 10 years following the year in which they were issued
• Data relating to users contacting the assistance service: In the event of a call, records are kept for 6 months.
• Data relating to prospects: 3 years from the last contact with us (subject to the absence of opposition from the prospect at the time of contact)
• Customer data: duration of the contractual relationship, increased by 5 years, of which 3 years for commercial prospecting purposes
• Business partner data: duration of the contractual relationship, increased by 5 years
• Candidate data: necessary to process active applications and, in case of negative outcome, 2 years from the last contact with the candidate
• Documents and accounting records: 10 years
• Data necessary for the management of disputes: 5 years (legally applicable limitation period)

6. WHAT ARE YOUR RIGHTS?

You have a number of rights over your data, which you can exercise under the conditions set out in the GDPR. You will find below a summary of these rights.

You may exercise these rights at any time and free of charge, except in the case of manifestly unfounded or excessive requests (in particular because of their repetitive nature). In this exceptional case we reserve the right, in accordance with the provisions of the GDPR (Article 12, 5)), to require payment of a reasonable fee or to refuse your request.

You can exercise your rights by contacting our Data Protection Officer electronically at: dibbdpo@dibb.fr

If are in France and you feel that we have not responded satisfactorily to your request, you can contact the Commission Nationale de l’Informatique et des Libertés (CNIL), via its website www.cnil.fr or by post at the following address CNIL – 3, Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07. Otherwise you can contact :

Belgium

The competence for complaints is split among different data protection supervisory authorities in Belgium.

Autorité de la protection des données – Gegevensbeschermingsautoriteit (APD-GBA)

Mr David Stevens- President of APD-GBA
Rue de la Presse 35 / Drukpersstraat 35
1000 Bruxelles / 1000 Brussel

Tel. +32 2 274 48 00
Fax +32 2 274 48 35
commission@privacycommission.be

Italy

Garante per la protezione dei dati personali

Prof. Pasquale Stanzione – President of Garante per la protezione dei dati personali
Piazza di Monte Citorio, 121
00186 Roma

Tel. +39 06 69677 1
Fax +39 06 69677 785
segreteria.stanzione@gpdp.it

Spain

Agencia Española de Protección de Datos (AEPD)

Ms María del Mar España Martí – Director of the Spanish Data Protection Agency
C/Jorge Juan, 6
28001 Madrid

Tel: +34 91 266 3517
Fax: +34 91 455 5699
internacional@agpd.es

7. WHO HAS ACCESS TO YOUR DATA?

Some of your data may be accessed, or at least hosted, by the following people:

• Our authorized personnel;
• Our subcontractors and technical service providers providing services that contribute to the operation of the Site, the Mobile Applications and/or the achievement of the purposes described in Article 3 above;
• Our legal service providers (jurists, lawyers), accountants or other consultants;
• Our payment service providers and banking institutions;
• Owners or operators of charging stations (user data of the relevant charging service);
• Our business partners.

Your personal data will not be transferred to recipients outside the European Union (hereafter “EU”) or the European Economic Area (hereinafter “EEA”).

In the event that we process your data outside the EU and the EEA, we undertake to implement the necessary measures to ensure the protection of your data, in particular through the implementation of the European Union’s standard contractual clauses approved by the European Union Commission.

8. MODIFICATIONS

The present document is subject to updates. We invite you to consult this page regularly in this regard.