This Privacy Statement provides information about the processing of personal data by EV Grasen Charge (hereinafter referred to as "we", "us", or "our").
In this Privacy Statement, we describe who we are, how, when, and for what purposes we process your personal data, how you can exercise your privacy rights, and all other information that may be relevant to you.
This Privacy Statement may be amended over time. This Privacy Statement applies from 30 May 2023.
Grasen Charge processes personal data for the purposes indicated in this Privacy Statement. These personal data depend on the service provided by Grasen Charge. For more information about these services and to understand which service(s) Grasen Charge provides to you, please visit https://ocpp.grasencharger.com.
This is the Privacy Statement for customer and/or user data (also referred to as "user"), to the extent that such data are personal data processed in the GrasenCSMS software environment. This Privacy Statement also applies to the processing of personal data in that environment through our Grasen Charge application. Please note that this Privacy Statement does not address the processing of personal data of individuals by Grasen Charge outside of these environments.
Grasen is the entity responsible for the processing of all personal data covered by the scope of this Privacy Statement. This Privacy Statement indicates which personal data are processed by Grasen Charge and for what purposes, and to which persons or entities such data may be disclosed. Grasen Charge may share your personal data with external entities to the extent indicated in this Privacy Statement.
To offer you our services as a Charge Point Operator (CPO) and E-Mobility Service Provider (EMSP), including through the use of our Grasen Charge application, the following categories of personal data are processed:
Grasen Charge collects your personal data:
The following scenarios define when and for what purposes Grasen Charge processes your personal data.
For you to use our products and/or services, your personal data are entered into our systems for you to use them. We will also administer your account and ensure that your account information remains confidential and adequately secure.
Categories of personal data processed:
When you use our product and/or service, we process personal data to offer you our products and/or services, their functionalities, and to enable our product administrators to manage the performance of our product and/or service. We also process your personal data to provide you with necessary maintenance and support for our products and/or services. When you use the Grasen Charge application and have given your consent, we also use your real-time location to be able to provide you with all the services of our application.
Categories of personal data processed:
We process your personal data to evaluate, analyze, and improve our products and (customer) services. We use aggregated personal data to analyze customer accounts and adjust our products and services accordingly. When you use our products and/or services, we also process your personal data to compile analytical reports for internal development purposes.
Categories of personal data processed:
If you contact us through our contact details or through our website or Grasen Charge application, we will use your personal data to respond to your question.
Categories of personal data processed:
In some cases, we process your personal data to comply with applicable laws and regulations. In addition, to comply with relevant laws and regulations, we may need to disclose your personal data following a request from a regulatory agency or supervisory authority.
Categories of personal data processed:
We ensure that your personal data are shared internally only to the extent necessary to serve the purposes set out in this Privacy Statement. Our employees are aware of the need to respect your privacy and are authorized to access personal data only when necessary for the performance of their respective duties.
The following categories of external entities may have access to personal data, only if relevant, for the provision of their products or services to us:
When external entities have access to your personal data, we will take the necessary contractual, technical, and organizational measures to ensure that your personal data are only used by those external entities to the extent that such use is necessary for the purposes set out in this Privacy Statement. External entities may only access your personal data in accordance with their contractual obligations with Grasen Charge and applicable law.
If your personal data are transferred to an external entity in a country outside the European Economic Area (EEA) that does not provide an adequate level of protection for personal data, we take measures to ensure that your personal data are adequately protected. We do this by entering into EU Standard Contractual Clauses with such external entities or by ensuring that appropriate safeguards are in place, such as the EU-US Privacy Shield.
In other cases, your personal data will not be provided to external entities, except when required or permitted by law.
When an external entity processes your personal data following exclusively the instructions of Grasen Charge, it acts as a sub-processor. Before engaging with such sub-processors, we enter into a data processing agreement with them for the processing of personal data. In this agreement, we include obligations to ensure that your personal data are processed by the sub-processor only to provide services to us and that this is done subject to the same level of protection as granted to you by Grasen Charge.
Grasen Charge has taken appropriate safeguards to ensure the confidentiality and security of your personal data. We have implemented appropriate technical, physical, and organizational measures to protect personal data against accidental or unlawful destruction or accidental loss, damage, alteration, unauthorized disclosure or access, as well as all other forms of unlawful processing (including, but not limited to, unnecessary collection) or further processing.
Grasen Charge ensures that personal data are retained only if necessary for specific purposes. Your personal data will be deleted or anonymized when your personal data are no longer necessary for the purposes for which they were collected.
You have the right to request access to an overview or copy of your personal data and, under certain conditions, the rectification and/or erasure of personal data. In addition, you may also have the right to restriction of processing of your personal data, the right to object to processing, as well as the right to data portability.
To invoke your right of access, rectification and/or erasure of personal data, your right to restriction of processing, and/or your right to object to processing, as well as to invoke your right to data portability, please contact us using the contact details at the end of this Privacy Statement. Please remember that we may request additional information to verify your identity.
If you have given your consent for a specific purpose, you may withdraw your consent at any time. Please remember that withdrawal does not have retroactive effect. You can contact us using the contact details at the end of this Privacy Statement.
You may file a complaint with your local data protection supervisory authority if you have a complaint about the use of your personal data by Grasen Charge. For example, if you believe that we do not process your personal data carefully, or because you have sent us a request for access or rectification of your personal data and are not satisfied with our response or we have not responded in a timely manner.
If you have any questions about how we process your personal data, please read this Privacy Statement first. For additional questions or complaints, please contact us at: