Last update: 22/11/2024 - general revisions of the text.

PRIVACY POLICY

Under Article 13 of the European Regulation No. 679/2016

According to the EU Regulation 2016/679 (GDPR), we indicate how Go Electric Stations S.r.l.s. processes personal data. In compliance with the legislation mentioned above and consequent rights and obligations, we inform you:

1. Data Controller

The Data Controller is Go Electric Stations S.r.l.s., with registered office Via di Corticella 184/10 40128 - Bologna (BO), in the person of its legal representative, E-mail info@goelectricstations.it - Website: goelectricstations.it

2. Data Protection Officer

The Data Protection Officer is domiciled at the registered office of Go Electric Stations S.r.l.s. and can be reached at the following e-mail address: dpo@goelectricstations.it

3. Purpose of processing

Personal data are processed and collected for the following purposes:

1. Service delivery, namely:
   1. Allow you to download and upload, register, use, update, and maintain the App on supported devices and to take advantage of all related services;
   2. Provide, administer, and manage all services you request, providing where necessary for related billing, sending service notices and assistance;
   3. Provide you with technical support and customer care activities;
   4. Make the App's performance optimal at all times.
2. Fulfillment by the data controller of legal obligations imposed by industry and national and European regulations, such as laws, rules, and measures of competent authorities.
3. pursuit of a legitimate interest of the data controller, namely:
   1. Exercise the rights of the Controller, such as the right of defense in court;
   2. Handle complaints and possible litigation;
   3. Prevent and/or suppress fraud and/or illegal activities

4. Legal basis of data processing

For the above purposes, the processing of personal data is carried out:

• For the purpose A according to Article 6(1)(b) of EU Regulation 2016/679, as the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
• For purpose B under Article 6(1)(c) of EU Regulation 2016/679, as the processing is necessary for compliance with a legal obligation to which the Controller is subject;
• For purpose C under Article 6(1)(f) of EU Regulation 2016/679, as the processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

5. Source of personal data

Personal data are collected by the Data Controller directly from the data subject and processed under the obligations of fairness, lawfulness, and transparency imposed by the legislation mentioned above, protecting the confidentiality and rights of the data subjects.

6. Providing data and refusal

Providing data to the Data Controller is necessary to pursue the abovementioned purposes, and refusal will result in the inability to perform services through the NextCharge app.

7. Personal Data

The personal data collected by the Data Controller for the above purposes are necessary for the use of the NextCharge app features decided by the data subject from time to time.

8. Modalities of processing

The processing of personal data is carried out through manual, computer, and telematic tools (web management software), with logic strictly related to the purposes mentioned above and, in any case, in such a way as to guarantee their security and confidentiality in compliance current regulation. The Data Controller undertakes to guard and control the personal data by adopting the appropriate technical and organizational measures necessary to counter the risks of destruction or loss, unauthorized access, or processing that is not permitted or does not conform to the purposes for which it was collected.

9. Period of retention of personal data

Personal data is kept, following the principles of proportionality, necessity, and minimization, for the entire duration of the processing for the pursuit of the relevant purposes and also after that for the time necessary for the discharge of the obligations incumbent on the Data Controller Go Electric Stations S.r.l.s. and the fulfillment of any related legal obligations. Therefore, personal data is retained, as a rule, as long as the negotiation relationship with the Data Controller subsists, subject to the hypothesis of any disputes or complaints, and the possible retention of the same personal data, where necessary, for their processing for ongoing legal actions, as well as the fulfillment of specific legal obligations. In any case, the data controller Go Electric Stations S.r.l.s. does not retain data indefinitely.

10. Special categories of personal data

The Data Controller does not process data under special categories of data according to Article 9 of the EU Regulation 2016/679 or data relating to criminal convictions and offenses according to Article 10 of the same Regulation.

11. Recipients

The personal data processed by the Data Controller may be disclosed to public bodies and entities under current regulations and to consultants and professionals appointed by the company itself. In particular, your personal data will be processed by the following categories of subjects:

• Employees of the Data Controller, as persons authorized to process the data;
• Third-party companies or other entities that perform certain outsourced activities on behalf of the Data Controller in their capacity as external data controllers, such as but not limited to IT and cloud service providers;
• Subjects to whom disclosure is required by law.

12. Transfer of data abroad

Personal data may be transferred outside the European Economic Area (EEA) to third countries outside the European Union or international organizations. In this case, if the transfer takes place outside the European Economic Area (EEA) to non-EU third countries or international organizations in the absence of an adequacy decision by the European Commission, the Data Controller shall comply with the provisions outlined in Chapter V of the GDPR and take appropriate technical and organizational measures.

13. Rights of the data subject

The rights of the data subject are provided for in Articles 15 to 22 of EU Regulation 2016/679 including the rights to: To request confirmation of the existence or non-existence of your personal data (art. 15). To have access at any time to the data concerning you (Art. 15). Obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the storage period (art. 15). Obtain rectification updating, supplementation, (Art. 16) or, if data are processed in violation of the law or incomplete or incorrect, deletion of data or blocking (Art. 17). Obtain restriction of processing (art. 18). Obtain portability of data, that is, receive them from a data controller, in a structured, commonly used and machine-readable format, and transmit them to another data controller without hindrance (Art. 20). Object to the processing of one's own data at any time for legitimate reasons (Art. 21). Object to automated decision-making regarding natural persons, including profiling (Art. 22). To lodge a complaint with the "Garante per la protezione dei dati personali" (http://www.garanteprivacy.it) (art. 77). The aforementioned rights may be exercised at any time by writing to the Data Controller at the postal address where he or she is based or at the e-mail address as indicated in Section 1.