Gridio Privacy Policy

This privacy policy describes the principles of processing the personal data of the users of SmartCharge+ platform provided by Gridio 2.0 OÜ (Gridio) in cooperation with TotalEnergies Gaz & Electricité Holdings (Total).

The processor of personal data is Gridio 2.0 OÜ, registry code 14494626, address Harju maakond, Tallinn, Põhja-Tallinna linnaosa, Peetri tn 11, 10414 (“Gridio”) and the controller of personal data is TotalEnergies SE.

What personal information we collect

During the use of Gridio’s service, we collect, but do not store, the following personal information:

• e-mail address of your device account
  

• password of your device account
  

During the use of Gridio’s service, we collect and store, the following personal information:

• your smart device location (if available),
  

• technical data used to improve our services,
  

• connected Device account data required to provide our service.
  

• Electric Vehicle (EV) make and model
  

• EV consumption
  

• EV name
  

• EV VIN code
  

The legal basis for processing this data is the performance of contract in order to provide you with our services.

You will also have the option to sign up using other third party platforms. If you choose to do so, we will ask permission to access basic information from that account. You can stop sharing that information with us at any time by removing Gridio’s access to that account.

For what purpose do we collect personal information

Gridio processes personal data for the following purposes:

• to provide and maintain our services;
  

• to ensure and fulfill the terms of service with Total;
  

• to promote safety and security;
  

• to develop and improve our services
  

Access and transfer of personal data

Gridio employees have access to personal data to the extent necessary for the performance of their duties.

Security

Personal data is stored on servers located in the European Union. Personal data may be transferred to third parties in the United States but only to companies that have signed up to the Privacy Shield agreement, which provides a sufficient level of security.

To provide our Service to you, Gridio uses selected third parties to provide you with the service, and shall share some information with them, under strict confidentiality obligations, to provide you with the services. Our service providers include among others Amazon Web Services to enable us to run our cloud based platform.

Gridio has implemented appropriate technical and organizational measures to ensure the security of personal data, including unauthorized or unlawful processing, and accidental loss, destruction or damage of personal data. For example, the GPS location of your EV is never stored by Gridio, except when you first set up the service, and this information is never shared with any other parties. This information is only used to verify whether or not the vehicle is at your designated smart charge location.

If a personal data breach occurs and such violation may pose a high risk to your privacy, Gridio informs you and the relevant authorities of such breach.

Rights

You have the right to request the rectification, access and, if necessary, objection to the processing of personal data.

You may request the deletion of personal data, after which we will inform you about the terms and time limit for deleting the personal data. The personal data will not be deleted if there is a legal basis for its retention.

You have the right to receive personal data in machine-readable form and to transfer such data to another data processor.

You have the right to withdraw your consent to processing personal data at any time. 

In order to exercise your rights on personal data, please contact Gridio at support@gridio.io. 

You also have the right to appeal to your local Data Protection Inspectorate.

Retention

Your personal data shall be retained until you ask to delete your personal data. After some time, we may renew your consent in order to keep it active and valid.  Personal data may be stored anonymized for statistical and analytical purposes.

In the event of a dispute, the personal data will be retained until an agreement is reached or until the due date for the claim expires.

Direct marketing

If you have given your consent, Gridio may send direct marketing messages to your email address. You can opt out of direct marketing messages at any time by either contacting us or by clicking “Unsubscribe” button at the end of the marketing messages.