Personal Data

How do we collect your data ?

Most of the data we collect is provided by you directly to Electra. We collect data and process data when:

• You contact us via email.

• You use or view our website or service via cookies and browser requests.

• You sign up, log in or use any of our products or services.

• You fill in a client satisfaction survey.

• You call the hotline.

• You subscribe to our newsletter.

• You apply to a job offer.

What data do we collect?

On the Electra website:

• by browsing: IP address;

• by indicating your contact information in “Hosting a hub”: email address;

• by applying to a job offer: email address;

• by subscribing to our newsletter: email address.

On the Electra apps:

• by using it: IP address;

• by registering: phone number;

• by registering: first name;

• by adding personal data: surname;

• by adding a vehicle: license plate;

• by searching for a charging station booking: GPS coordinates.

In our stations, on our charging stations :

• by charging : unique identifier of your vehicle (MAC address of the network device of the vehicle), the people's image, and the vehicle's license plate.

Through a form (satisfaction, customer experience)

• title (Mr., Ms., etc.), age range, telephone number

Via the hotline

• telephone number

How will we use your data?

Electra and its partners collect your data so that we, Electra, can:

• Manage your account;

• Monitor the proper functioning and technical performance of our services;

• Compile analyses and statistics to improve our services;

• Set up action logs to debug our services and provide you with technical support;

• Fight against fraud;

• Meet legal and regulatory obligations;

• Respond to your requests;

• Send newsletters (to offer you new products or inform you about new features).

Legal grounds for processing

In accordance with Article 6 of the GDPR, each processing of personal data must be based on at least one of the six legal grounds provided for by the said Regulation: legal obligation, contract, legitimate interest, consent, public interest, safeguarding vital interests. The personal data collected and used for the above-mentioned purposes are collected based on the following legal grounds:

• Consent

• Legitimate interest

• Performance of a contract (TOS)

How do we store your data?

Electra does not store your data directly, but uses the services of partners/providers to do so. We systematically choose secure data storage and, when possible, it gets stored on European servers.

How long do we retain your data?

Electra will retain your data for 24 months after you last use our service and for 1 month the images captured in our EV charging stations equipped with video protection devices. Once this term has expired, we will process your data through deletion or de-identification.

What about our recipients, service providers and partners?

The Personal Data collected on Electra's website are mainly intended for Electra, however they may be shared with our partners, our service providers.

In order to carry out the maintenance of the website, some of your data may also be shared with our subcontractors.

We ensure that all our partners, service providers and subcontractors are subject to adequate personal data protection mechanisms and comply with the RGPD Regulation. A list of our partners and service providers is available upon request.

Personal data will only be processed by authorised personnel who are bound by a confidentiality clause or any other equivalent contractual document.

What are your data protection rights?

Electra wants to make sure that you are fully aware of all your data protection rights. Every user is entitled to the following benefits: Your right to access and rectify your data: you have the right to access and rectify your personal data.

In this respect, you have confirmation as to whether or not your personal data is being processed and, if it is, you have access to your data as well as to information regarding:

• the purposes of processing;

• the categories of the relevant personal data;

• the recipients or categories of recipients as well as the international organisations to whom the personal data has been or will be communicated, in particular recipients who are based in third-party countries/non-EU countries;

• where possible, the intended period of retention of personal data or, where this is not possible, the criteria used to determine this period;

• the existence of the right to ask the data controller to rectify or erase your personal data, the right to request a limitation of the processing of your personal data, the right to object to such processing;

• the right to file a complaint to a control authority;

• information about the source of the data when it is not collected directly from the data subjects;

• the existence of automated decision-making, including profiling, and in this case, relevant information about the rationale behind it, as well as the importance and the expected consequences of this processing for the data subjects.

You can ask us to rectify or complete your personal data if it is inaccurate, incomplete, ambiguous or no longer valid. Your right to the deletion of your data.

You can ask us to delete your personal data in any of the following cases:

• the personal data is no longer needed for the purposes for which it was collected or otherwise processed;

• you withdraw your previously given consent;

• you object to the processing of your personal data when there are no legal grounds for such processing;

• the processing of personal data does not comply with the provisions of the applicable laws and regulations;

• your personal data has been collected in the context of the provision of information society services to children under the age of 16.

Your right to restrict data processing. You can request the restriction of the processing of your personal data in the cases provided for by the laws and regulations. Your right to object to data processing. You have the right to object to the processing of your personal data when such processing is based on the legitimate interests of the data controller.

Your right to the portability of your data. You have the right to the portability of your personal data.

The data on which this right can be exerted is:

• only your personal data, which excludes de-identified personal data or data that does not pertain to you;

• the self-reported personal data as well as the operating personal data mentioned above;

• personal data that does not infringe on the rights and freedoms of third parties, such as those protected by business confidentiality.

This right is limited to processing based on consent or contract and to personal data that you have personally generated.

This right does not include derived or inferred data, which is personal data created by ELECTRA.

Your right to withdraw your consent. Where our data processing operations are based on your consent, you may withdraw it at any time. We will then stop processing your personal data without affecting the previous operations to which you had consented. Your right to appeal. You have the right to file a complaint to the CNIL (National Commission on Information Technology and Civil Liberties) on French soil, regardless of any other administrative or legal recourse.

Your right to set post-mortem instructions. You have the ability to set up instructions regarding the retention, deletion and disclosure of your personal data after your death with a trusted, certified third party who is responsible for carrying out the wishes of the deceased person in accordance with the requirements of the applicable legal framework.

How to enforce your rights. All the rights listed above can be exerted at the email address dpo@go-electra.com or by mail with a copy of an ID document to ELECTRA at the following address: 7 rue Henri Rochefort 75017 PARIS.

Communication via email and SMS

Transactional

Transactional communications are necessary for the proper functioning of the Electra services or to inform you of the status of your charges/purchases/... using the Electra services. Electra does not currently send any transactional emails. Electra sends transactional SMS in the following cases:

• Sending a code to log in to the Electra mobile and web apps.

• Sending a code to access restricted hubs.

Marketing

Electra would like to send you information about our products and services which we think you might like. If you have agreed to receive marketing communications, you can always unsubscribe later. You have the right to prevent Electra from contacting you for marketing purposes at any time. To this end, each marketing email includes a link to manage this marketing communication so that you can unsubscribe with immediate effect.

Cookies

Cookies are text files placed on your computer to collect standard Internet log information and visitor behaviour information. When you visit our websites, we do not collect any information about you via cookies or any similar technology.

Privacy policies of other websites

The Electra website contains links to other websites. Our privacy policy is applicable to our website and our app; so if you click on a link to another website, you should read their privacy policy.

Changes to our privacy policy

Electra regularly reviews its privacy policy and posts any updates on this web page. This privacy policy was last updated on March 23, 2023.

How to contact us

If you have any questions about Electra's Privacy policy or the data we retain about you, or if you wish to exert any of your data protection rights, you can contact us at the following email address: dpo@go-electra.com.