Welcome to the Enel X Way Germany GmbH. (“JuiceNet”) Privacy Policy (“Privacy Policy”). JuiceNet respects your privacy and is committed to protecting your Personal Data (defined below). It is important that you read this Privacy Policy, so that you are fully aware of how and why your Personal Data is processed in connection with the range of products and applications offered by JuiceNet, including JuiceBox, JuiceBox OpenPay, JuiceStation, JuiceNet, WattBox (collectively, “JuiceNet Products”). JuiceNet Products include our mobile and web applications, collectively “JuiceNet software”.
This Privacy Policy also tells you about your privacy rights and how the law protects you. If you have any questions, or would like to exercise your privacy rights, please follow the instructions in this Privacy Policy. See How to Contact JuiceNet About Privacy below.
The Privacy Policy contains the following information:
JuiceNet, an Enel X Company, is an electric vehicle charging infrastructure company that provides smart electric vehicle (EV) charging stations and grid-connected EV charging solutions for utilities, OEMs, residential customers, public charging, workplaces and apartment buildings. This Privacy Policy tells you how we use your Personal Data when you visit our website at https://evcharging.enelx.com/eu (“Site”) and interact with our platform, which includes our JuiceNet servers and services, JuiceNet web and mobile applications for the JuiceNet Products (collectively with the Site, the “Platform”). When we mention “JuiceNet”, “we”, “us” or “our” in this Privacy Policy, we are referring to Enel X Way Germany GmbH’s data collection practices through the Platform.
“Personal Data” (or personal information) means any information about an individual from which that person can be identified. For instance, it may include your name, telephone number, email address, or payment information, and in some places like the European Economic Area (“EEA”) even your IP address. However, it does not include anonymous data – where any identifiers connected to an individual have been permanently removed.
We collect and process a variety of Personal Data about our customers and visitors to the Platform in different ways in order to provide the JuiceNet Products.
Categories of Personal Data that We Collect
The Personal Data that we collect falls into these general categories (with some overlap in some instances):
We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your Personal Data but is not considered Personal Data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific feature on the Platform. However, if we combine or connect Aggregated Data with your Personal Data so that it can directly or indirectly identify you, we treat the combined data as Personal Data which will be used in accordance with this Privacy Policy.
We do not – and do not wish to – collect any special categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
Know that if you choose not to share certain Personal Data with us, or refuse certain contact permissions, we might not be able to provide the services you need. This is especially true of Identity Data, which is necessary for us to enable your use of the Platform, or of Financial Data, which we need to collect and retain in order to validate and record any financial transactions on the Platform.
How and When We Collect Your Personal Data
We use different methods to collect Personal Data from and about you:
Direct interaction with the Platform. When you create an account with us, we collect and store data that will enable us to provide you with access to the Platform and JuiceNet Products, namely Identity, Contact and Financial Data. From that point forward, your email address is used for communications from JuiceNet. Some JuiceNet products may also allow you to invite other people such as friends or family to share access to your content, in which case we will ask you for that person's email address and enable sharing if both individuals agree. JuiceNet stores this information to register your friend if your invitation is accepted, and to track the success of our invitation services.
To access your JuiceNets Product over the internet from a computer, smartphone or tablet, you will need to connect it to your WiFi or other electronic network. During setup, the JuiceNet Product will ask for your network name and password to connect to the internet. It will save this information on the device, along with your IP address, so that you can access it and control it from your computer, smartphone or tablet, and so that it can communicate with JuiceNet servers and download software updates. Once connected to your network, your JuiceNet Product regularly collects and stores elements of data described above, including Identity Data, Contact Data, Transactional, Technical and Historical Usage Data in order to provide you with the services, and to optimize the Platform for you. Like all internet sites, we routinely record Technical and Historical Usage Data for troubleshooting and analytics, in order to improve the Platform as needed. We will also collect and store data when you engage with us on social media or contact customer services.We enable feedback and customer service, via our third-party vendor Zendesk, which will collect Personal Data where applicable and in order to fulfill any customer service requests.
Automated technologies or interactions. As you interact with us, such as browsing our Site, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We may also collect Tracking Data when you use our Site, regardless of whether you have a registered account.
Third parties or publicly available sources. We may receive Personal Data about you from various types of third parties, including:
JuiceNet recognises the privacy interests of children and we encourage parents and guardians to take an active role in their children’s online activities and interests.
Our Platform and services are not intended for minors and JuiceNet does not target any of its services to minors. JuiceNet does not knowingly collect Personal Data from minors. If you are under the age of 18, please do not register to use the JuiceNet Products and do not provide us with any Personal Data
We will only use your Personal Data as allowed by applicable law. In general, we will use your Personal Data in the following circumstances (examples are provided):
Generally, we do not rely on consent as a legal basis for processing your Personal Data other than where the law requires it. Where our legal basis is consent, it will be communicated to you separately in a clear, manner, and will require an affirmative action on your part. Where consent is obtained, you will always have the right to withdraw it any time.
For our EEA users and visitors, see Legal Bases for Processing Personal Data to find out more about the lawful bases that we will rely on to process your Personal Data.
We may use your Identity, Contact, Technical, Tracking, Usage and Profile Data to better tailor our services or provide you with more relative information about what may be of interest to you. This is what we call direct marketing.
We may carry out direct marketing by email if you are a registered user. For example, you might receive our newsletter, which will always contain a link to unsubscribe that you can click on if you no longer wish to receive the newsletter.
JuiceNet's website server is located in the United States. The Personal Data that we collect is sent to and stored on secure servers located in the United States. Such storage is necessary in order to process the information.
In addition, JuiceNet operates globally. As such, JuiceNet may transfer Personal Data collected in different jurisdictions (including the EEA) to its servers in the United States. We may also process or transfer your Personal Data to the third parties mentioned in the circumstances described above (see Information We Share), which are also likely to be situated outside of your country or regional area. In particular, information provided to us or collected by us likely will be transferred to and processed in the United States by us or our agents and contractors. Please consider that your Personal Data may be subject to legal requirements, including lawful requirements to disclose Personal Data to government authorities, in those jurisdictions.
You are advised that the United States uses a sectoral model of privacy protection that relies on a mix of legislation, governmental regulation, and self-regulation. The European Union’s General Data Protection Regulation (“GDPR”) allows for transfer of Personal Data from the European Union to a third country in certain situations. By agreeing to the terms of use and this Privacy Policy, you agree and consent to the transfer to the United States of America, which may not offer an equivalent level of protection to that required in other countries, particularly the EEA, including the processing (as described in this Privacy Policy) of your Personal Data by JuiceNet (as well as its agents or third-party processors) on servers located in the United States. JuiceNet will take reasonable steps to ensure that your privacy rights continue to be protected, including, in our discretion, adopting other means, such as entering into Model Contract Clauses (as defined in the GDPR), or enter into different certification programs such as the Privacy Shield under applicable law for ensuring adequate safeguards.
JuiceNet complies with the EU-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal data transferred from the European Union to the United States. We have certified to the Department of Commerce that we adhere to the Privacy Shield Principles. If there is any conflict between the terms in this Privacy Policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, the Privacy Shield Principles and to view our certification, please visit www.privacyshield.gov.
As described in the Privacy Shield Principles, JuiceNet is accountable for personal data that it receives and subsequently transfers to third parties. If third parties that process personal data on our behalf do so in a manner that does not comply with the Privacy Shield Principles, we are accountable, unless we prove that we are not responsible for the event giving rise to the damage.
In compliance with the Privacy Shield Principles, JuiceNet commits to resolve complaints about our collection or use of your personal data. European Union individuals with inquiries or complaints regarding our Privacy Shield policy should first contact us at: dpo.enelx@enel.com
JuiceNet commits to cooperate with the panel established by the EU Data Protection Authorities (DPAs) and comply with the advice given by the panel with regard to personal data transferred from the EU. Please contact us to be directed to the relevant DPA contacts.
As further explained in the Privacy Shield Principles, binding arbitration will also be made available to you in order to address residual complaints not resolved by any other means. JuiceNet is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).
The table below shows the different ways that we use Personal Data, and which of the legal bases we rely on to do so.
Purpose/Activity | Details |
---|---|
To sign you up and register you as a new customer, to enable the use of the JuiceNet Products | Type of Personal Data (non-exhaustive list)
Lawful basis for processing |
To process and deliver your payments including: (a) Manage payments, fees and charges; (b) Collect and recover money owed to us or our partners. | Type of Personal Data (non-exhaustive list)
Lawful basis for processing Necessary for our legitimate interests – i.e., to enable a variety of services on the Platform, and to recover debts due to us. |
To manage our relationship with you which will include: (a) Notifying you about changes to our terms or Privacy Policy; (b) Asking you to leave a review or take a survey. | Type of Personal Data (non-exhaustive list)
Lawful basis for processing Necessary to comply with a legal obligation – i.e., to inform you of any changes to our terms of use or this Privacy Policy. Necessary for our legitimate interests – i.e., to keep our records updated and to study how customers use our Platform and services. |
To deliver direct marketing to you | Type of Personal Data (non-exhaustive list)
Lawful basis for processing |
To administer and protect the Platform, including: hosting of data, troubleshooting and bug fixes, analysis, testing, maintenance, and reporting | Type of Personal Data (non-exhaustive list)
Lawful basis for processing Necessary for our legitimate interests – i.e., to run our business and provide a functional and secure Platform, to provide administration and IT services, for network security, to prevent fraud and to ensure that the JuiceNet Products operate seamlessly. Necessary to comply with a legal obligation – i.e., if there are any specific security issues with the Platform. |
To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you | Type of Personal Data (non-exhaustive list)
Lawful basis for processing |
To improve our Platform, services, user experience and marketing strategy by using data analytics | Type of Personal Data (non-exhaustive list)
Lawful basis for processing |
To make suggestions and recommendations to you about additional features or services that may be of interest to you | Type of Personal Data (non-exhaustive list)
Lawful basis for processing |
To detect, prevent and report unlawful acts, including fraud and bad actors | Type of Personal Data (non-exhaustive list)
Lawful basis for processing Necessary to comply with a legal or contractual obligation – i.e., to report bad actors or unlawful acts, to share Personal Data for the purposes of law enforcement. |
In order to resolve legal claims (including existing claims/litigation and potential disputes) involving you or JuiceNet | Type of Personal Data (non-exhaustive list)
Lawful basis for processing Necessary to bring or defend a claim |
Note that we may process your Personal Data for more than one lawful ground depending on the specific purpose for which we are using the Personal Data.
We do not carry out any automated decision making.
We have implemented – and continually improve – a number of security measures to protect your Personal Data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. For instance, we may use firewalls, password protection, secure socket layer, database encryption, and other security measures to help prevent unauthorized access to your personal data.
In addition, we limit access to your Personal Data to our employees, agents, contractors and other third parties who have a business need to know. They will only process your Personal Data on our instructions and they are subject to a duty of confidentiality.
We have implemented procedures to handle any suspected Personal Data breach (or unauthorized access) and will notify you and any applicable regulator of a breach as legally required.
We will only keep your Personal Data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. This means, for instance, that we will retain your Personal Data for as long as you use the JuiceNet Products. Once you decide to terminate your use of the JuiceNet Products, we will delete or anonymize your Personal Data within a reasonable timeframe, unless we are required to retain it for other reasons as explained below. In some circumstances you can ask us to delete your data; see EEA Rights: Staying in Control of Your Information: Your Legal Rights below for further information.
Exceptions
There are exceptions from static retention periods that have to be taken into consideration. For instance, we cannot delete Personal Data when there are legal obligations to retain the Personal Data (e.g. arising from tax or commercial law). This is particularly true of data Financial Data and payment information. Additionally, we cannot delete Personal Data when it is needed for the establishment, exercise or defense of legal claims (“litigation hold”). In this case, the Personal Data can be retained as long as needed for exercising respective potential legal claims.
Anonymization
In some instances, we may choose to anonymize your Personal Data instead of deleting it, for statistical use, for instance. When we choose to anonymize, we make sure that there is no way that the Personal Data can be linked back to you or any specific user.
If the General Data Protection Regulation applies to you because you are in the EEA, you have specific rights in relation to your Personal Data, beginning with a right to be informed, which is an obligation on us to inform you how we use your Personal Data (and that’s what we’re doing in this Privacy Policy).
With respect to all of the rights listed below, please click contact us in order to exercise your rights.
Your right to rectification
You have a right to rectify, update or complete any inaccurate Personal Data, pending verification of your identification. Most of this can be accomplished by going to your “Account Settings” and making any changes there. For instance, if your contact details change, or if you spot any errors in the information we hold about you, we recommend starting with your “Account Settings”. If, after visiting your “Account Settings”, you are still unable to rectify the information, please contact us directly.
Your right of access
You have the right to obtain a copy of all Personal Data that JuiceNet holds about you, such as personal details, correspondence, marketing preferences, consent information, complaints, queries and payment history, generally, within a 30 day time limit and free of charge. You may limit the amount of data that you would like to obtain if you do not wish to access all of the records.
Your right to move your data (portability)
Under certain circumstances you can request that a data collector move your data to another service provider. This is not an automatic right.
Your right to object to processing
You have to right to request that JuiceNet stop certain data processing activities that involve processing your Personal Data. This isn’t an automatic right, and JuiceNet's ability to restrict processing will depend on the type of data that for which you are making this request.
Your right to request deletion
You have a right to request that JuiceNet delete your Personal Data that it holds. This isn’t an automatic right, and what JuiceNet is able to delete will depend on the type of data that JuiceNet holds about you, whether it was obtained via consent, what purpose it serves, and whether JuiceNet has an obligation to keep the data, among other things.
Note that unless you request deletion, and such request is determined to be appropriate, while you remain a user, we’ll process and retain your data as described in this Privacy Policy in order to enable you to use the Platform. Once you stop being a user, we will hold your data as described in the data retention section.
These rights are subject to certain rules around when you can exercise them. You can see a lot more information on them, if you are interested, on the UK Information Commissioner’s Office website, for instance.
In some instances, we may choose to anonymize your Personal Data instead of deleting it, for statistical use, for instance. When we choose to anonymize, we make sure that there is no way that the Personal Data can be linked back to you or any specific user.
For all requests mentioned above, we may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
You will not have to pay a fee to access your Personal Data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
In addition:
You have a right to lodge a complaint with a Supervisory Authority
If you feel that JuiceNet is not processing your Personal Data in a manner that complies with the GDPR, you have a right to lodge a complaint with the supervisory authority of your country of residence. Of course, we would appreciate the chance to deal with your concerns before you approach a supervisory authority, so please contact us in the first instance.
You have a right to withdraw your consent
For activities where you have provided consent to JuiceNet, you have a right to withdraw your consent at any time.
Your rights in relation to automated decision making and profiling
That’s a right you have for us to be transparent about any profiling we do, or any automated decision making.
If you are an individual in the EEA and wish to exercise any of the rights set out above, please contact us (see How to Contact JuiceNet About Privacy).
If you have any questions about this Privacy Policy, or would like to exercise any of your rights, please contact us or write to us at privacy.enelx@enel.com. If you need help about our products and services, or this Site generally, please contact us.
JuiceNet may update this Privacy Policy from time to time. If we decide to change our Privacy Policy, we will post those changes to this Privacy Policy on the home page, and other places we deem appropriate, along with a change notice where we feel that it is necessary so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it. We may also elect to send users a notice of any changes via e-mail. If any modification is unacceptable to you, you should stop using the Platform. Also, the GDPR is very recent, and new guidance on how organizations such as ours should apply it is likely to be issued on a piecemeal basis, so you may see small updates to our Privacy Policy as this evolves. We recommend to all of our users and visitors to check in on occasion and review this Privacy Policy, as well as those of the different partners discussed above.
Last updated on 06 Aug 2019.
Social Plugins on Our Platform
We may use social plugins on our Platform and may include icons that allow you to interact with third party social networks. For example, you may sign in using your Facebook account. If you use any social plug-ins, the relevant third party may set a cookie when your browser creates a connection to the servers of such social networks and the plugin may transmit your data to the social networks.
Your use of these social plugins is subject to the privacy policies of the third party social networks. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the Privacy Policy of every website you visit.