General

This privacy notice describes how EV DOT ENERGY Limited (“ev.energy”, “we”, “us”)processes your personal data related to your use of the “Pando” platform and related services (jointly “Pando Services”). In this privacy policy, we explain who we are, why and how we collect, store, share and use (together, "process") your personal data, your rights and how to contact us.

ev.energy as the Data Controller

We are the Data Controller when processing personal data related to the provision of the Pando Services to you. We have detailed the circumstances in which we are a Data Controller. We’ll only use the personal data you have provided for purposes for which we collected it, namely, the provision of the Pando platform and any additional services requested.

This list will be updated periodically and therefore may not be exhaustive at the point of viewing it. For an up to date list of processing activities for which we are a Data Controller, please contact us at the details below. Where there is any change in our processing activities, we will notify the main account holder in writing to inform them of the changes, thepurpose and the legal basis for processing.

PERSONAL DATA TYPE
● Contract information
PURPOSE
● To perform or enter into any contract we have with you
LEGAL BASIS FOR PROCESSING
● Contract
PERSONAL DATA TYPE
● Information relating to payments and/or billing
PURPOSE
● To administrate yours or your company's accounts with us.
● To verify payments and bills.
LEGAL BASIS FOR PROCESSING
● Consent
PERSONAL DATA TYPE
● Information relating to transactions
PURPOSE
● In the event that we sell or buy any business or assets that will provide Pando Services or we are the subject of acquisition by a third party.
LEGAL BASIS FOR PROCESSING
● Contract
PERSONAL DATA TYPE
● Contact information
PURPOSE
● To provide support for the Pando platform;
● To comply with any data rights requests you make;
● To send you promotional or marketing updates (you can opt-out here!).
LEGAL BASIS FOR PROCESSING
● Legitimate Interest
PERSONAL DATA TYPE
● Usage Analytics and Statistics
PURPOSE
● To help us understand usage and performance of the Pando platform and improve it. You can opt out.
LEGAL BASIS FOR PROCESSING
● Legitimate Interest

ev.energy as the Data Processor

We are the Data Processor when processing data related to your use of the Pando Platform. It is your responsibility as the Data Controller to comply with and perform your obligations under data protection Law, including with regard to Data Subject rights, data security and confidentiality, and ensure you have an appropriate legal basis for the Processing of Personal Data. ev.energy bears no responsibility for ensuring that your use of the Pando platform is in accordance with the relevant laws and regulations.
PROCESSING ACTIVITY
● Contact information provided by an account administrator
PURPOSE
● To provide user administration and enrolment.
PROCESSING ACTIVITY
● End user personal data provided by a Pando business m user
PURPOSE
● To provide the Pando platform.
PROCESSING ACTIVITY
● Any other personal data provided by a Pando user
PURPOSE
● To provide the Pando platform;
● To comply with any lawful requests you make.
PROCESSING ACTIVITY
● Any other personal data provided by a Pando user
PURPOSE
● To provide the Pando platform;
● To comply with any lawful requests you make.
PROCESSING ACTIVITY
● Hardware Integration Data
PURPOSE
● To provide the Pando platform;
PROCESSING ACTIVITY
● Use of the platform to further process end user personal data
PURPOSE
● To perform services under the contract;
● To process end user personal data in accordance with your instructions;
● To provide insights, analytics or statistics based on the aggregation of personal data.

ev.energy and you as Separate Data Controllers

There will be situations where your use of the Pando Platform coincides with the End Customer User’s use of the B2C ev.energy mobile application. Unless there is prior agreement between the Parties, access to the Pando platform will not give you access to the data obtained from the End Customer User for which ev.energy is and will always remain the Data Controller for. In the event an agreement between the parties is made for access to the data for which we are a Controller, the Parties will be Controllers of the personal data lawfully shared, each using it for the predetermined purposes.

Data Retention

We will retain data under the Agreement for as long as there is a commercial relationship between the Parties relevant to this Privacy Policy. If there is no longer a relevant commercial relationship then we will provide you with the option to export your data or have it permanently deleted.

Subprocessors

This list of subprocessors is updated periodically. If you require an up to date version, please contact us at the details below.

Name Data Purpose of processing Region
Amazon Web Services All Business User data and End Customer data Cloud service provider Republic of Ireland
Freshworks The information included by the user reaching out to ev.energy,vsuch as contact information forself other users within their organisation and affected End Customer data Customer service platform supporting customerinteractions by email or telephone EEA
Zoom Business User data and any data shared about third parties by the business user. To enable virtual face-to-face customer support or for pre-contractual EU
Hotjar Business User analytics and usage data, IP address and UUID To understand usage and improve the platform EU
Datadog Data pertaining to actions taken on the platform, such asuser ID, name, email, end user data, charger serial number, To monitor the health of the Pando platform and efficiently resolve issues USA (DPA with SCCs)
Sentry User IDs and personal identifiers for Business Users and End Customer Users To resolve vulnerabilities and errors on the platform USA (DPA with SCCs)
Google Workspace All Business User data and End Customer data Internal email, file storage and productivity software provider EU
Slack All Business User data and End Customer data Internal instant messaging application EU
Codibly All Business User data and End Customer data Software engineering support Poland
Braze User IDs, email, names and organisation data for Business End Users CRM tool EU
Notion All Business User data and End Customer data Internal wiki for documentation, bug tracking,incident response, project management and communications USA (DPA with SCCs)
Atalssian / JIRA All Business User data and End Customer data Internal issues tracking and project management tool EU
Stripe Name, email, bank account details Payment processing USA (DPA with SCCs)

Data protection rights

As a data subject, you have rights related to the processing of your personal data. If you would like to exercise any of these please contact us at support@ev.energy. Your rights include the following:
● Right to Access information collected about you through the Pando Service.
● Right to rectify or update any information about you that is inaccurate or incomplete.
● Right to request that we restrict processing of your personal data.
● Right to delete data about you.
● Right to withdraw consent that you may have given.
● Right to request that we provide data about you in structured, commonly used format so that it can be transferred to another company.
● Right to file a complaint about the processing of your personal data with a supervisory authority.
Additionally, you have the right to complain to the UK Information Commissioner's Office (https://www.ico.org.uk).

Further information

If you have inquiries regarding this privacy policy and previous versions of it or how we process personal data, please reach out to dpo@ev.energy.