Privacy Notice - Go Platform Limited
In our updated privacy notice, you can read more on how we treat your personal data. This, together with any other documents referred to within, sets out the basis on which we will process any personal data that we collect from you, or that you provide to us. Please read the following carefully to understand our views and practices regarding your perasonal data and how we will treat it.
Privacy Notice Content
1.0 The Data controller
2.0 How does Go Platform Limited process your personal data?
2.1 What kind of data does Go Platform Limited collect
2.2 What sources are the personal data obtained from
2.3 What are the purposes for processing personal data
2.4 On what legal basis do we process your personal data
2.5 Automated decision-making
2.6 How long do we store the personal data
2.7 Who processes your personal data
2.8 Does Go Platform Limited transfer personal data to third countries
2.9 How does Go Platform Limited protect the personal data
3.0 How do we handle personal data from IP addresses, cookies and similar technologies
3.1 Cookies used on websites
3.2 Third party access to data collected on Go Platform Limited’s websites
3.3 Location data
4.0 What rights do you have in respect of your personal data?
4.1 The rights of the user
4.2 Blocking of direct marketing
4.3 Automated decision-making
5.0 Changes to our privacy notice
6.0 Contact
1.0 The Data Controller
For the purpose of the EU General Data Protection Regulation 2016 ("GDPR"), the data controller is Go Platform Limited, 5 Chapel Street, Bennettsbridge, Co. Kilkenny R95 YD45, Ireland (herein after "Go Platform Limited").
2.0 How does Go Platform Limited process your personal data?
2.1 What kind of data does Go Platform Limited collect?
Go Platform Limited collects data that is necessary for the relationship you have with us and the purposes for which the data are used. Go Platform Limited collects the following personal data categories.
>Permission data - such as marketing permissions;
>Preference data - such as contract type, contact language, payment method, pricing type;
>Security data - such as passwords, security incident information;
>Transactional detail data - such as invoicing details;
>Financial data - such as payment card details;
>Identifying data - such as name, RFID key number;
>Behavioral data - such as customer profiling and other information derived from your use of our services, login details;
>Communications - such as your answers to surveys, and other feedback and communications you send us;
>Data on your use of our services - such as energy / electricity consumption data;
>Computer device data - such as IP address, cookie data;
>Contact data - such as email address, telephone number, billing address, delivery address for e.g. RFID keys;
>Contract data - such as payment terms.
2.2 What sources are the personal data obtained from?
The processed personal data include data that are received from you at the time of the order, at the time of joining our service, or during the customer relationship. We also receive observed data from your use of our devices and services. Go Platform Limited may also process derived data which have been derived from or concluded based on the received data. In addition, we use Google Analytics, Hotjar, and HubSpot to track and analyse user online behaviour.
2.3 What are the purposes for processing personal data?
We process personal data only for predefined purposes. The purposes for which we process personal data are:
>Customer relationship management (e.g sending of contract related notifications, product or service related notifications or updates, customer guidance)
>Contract and product management
>Providing, managing and maintaining the service (e.g. end-user license management, investigating and fixing technical issues)
>Identification of data subjects
>Suspension of provided services
>Receipt and transaction information storing
>Contract and invoice archiving
>Delivering goods and services, including returns' management
>Complaint and Dispute management, including compensation demands
>Transferring personal data (to include transfers and disclosures)
>Profiling, segmentation, and direct marketing (for existing and prospective customers)
>Sales and Marketing (including e.g. organizing seminars)
>Billing and debt collection
>Refunds of payments to customers
>Internal reporting
>Establishment, exercise or defense of legal claims
>Partner reporting
>Product and Service development, including feedback and surveys
>Customer satisfaction surveys
>Vendor communications
>Fraud protection
2.4 On what legal basis do we process your personal data?
In order for us to be able to process your personal data, we rely on different legal bases, including:
>Your consent. If we rely on your consent as a legal basis for processing of your data, you may withdraw your consent at any time;
>The necessity to establish a contractual relationship with you and to perform our contractual obligations;
>The necessity for us to comply with a legal obligation (for instance, we are required by law to store certain data for a specific period of time) and to establish, exercise, or defend Go Platform Limited against legal claims;
>The necessity to pursue our legitimate interests, including:
>Internal reporting
>Partner reporting
>Product and service development including feedback and surveys
>Transferring personal data (to include transfers and disclosures)
>Compensation demands
>Customer profiling or segmentation
>Direct marketing for existing and prospective customers
>Debt collection
>The necessity to protect the vital interests of any person;
2.5 Automated decision-making
We may make decisions about you through automated decision making. Such include e.g. automated checking of the validity of your payment card or your eligibility to use invoicing as a payment method; automated pattern detection in the use of your payment card to detect, investigate and prevent potential frauds; automated tracking of your potential debt to Go Platform Limited from previous unpaid use of our services; and automated tracking of your inactivity in using our services so that we can deactivate and/or delete your account and related data from our system if you no longer use them. We also automatically check the validity of the verification code you will have inserted in the mobile application, after having received it by Go Platform Limited, in order for your account registration process to be completed.
Our automated decision-making procedures may affect your ability to use our services. We may need to do this either to perform our legal obligations or because it is necessary for entering into, or the performance of, a contract between you and us. We also carry out profiling to provide our customers with better targeted sales and marketing communication.
If we have made a decision about you solely on the basis of an automated process (e.g. through automatic profiling) and that affects your ability to use the services or has another significant effect on you, you can ask to not be subject to such a decision unless we can demonstrate to you that such decision is necessary for entering into, or the performance of, a contract between you and us.
2.6 How long do we store the personal data?
Go Platform Limited seeks to limit the period for which the personal data are stored to a minimum. Thus, Go Platform Limited processes your personal data only to the extent and as long as is necessary to meet the purposes of the data processing.
The specific retention periods may be different depending on the categories of data. As a general rule, your personal data are stored for the duration of the customer relationship as well as for a period of three (3) years from the end of the customer relationship. Whereas e.g. information about transactions will be kept for at least five (5) years on legal basis. Also, when using SMS as a payment method, your mobile subscription number, subject to certain conditions (e.g. insufficient prepaid balance or blocked Premium SMS), might be added onto a so-called black list, where we are required to retain your number for at least half a year.
Go Platform Limited sets out and regularly re-evaluates data type specific retention periods for the personal data it holds. Once personal data is no longer necessary, Go Platform Limited will delete it or anonymise it as soon as possible.
Also, if a user has not been active during a period of three (3) years, the system will automatically consider that user's account to be inactive. The user will be notified of this change of account status. If the account is not re-activated by the user, either by logging into the app or using another identifier to access one of Charge & Drive's chargers, the user account will automatically be terminated. By terminating the account, the user account is forgotten, and all the data included in it is deleted or anonymised in accordance with the retention periods described above. This is to ensure that users who may have registered but forgotten that they did so, are not required to take any action in order to have their account deleted, if the account remains inactive for sufficiently long.
2.7 Who processes your personal data?
Principally, we do not sell, trade or license any personal data to third parties. Companies belonging to the Go Platform Limited group of companies may process personal data in accordance with existing privacy laws. Personal data may be disclosed to our authorized employees or affiliates to the extent necessary for the purpose of processing. The data will never be available to all employees but to a limited number of authorized persons.
We also use third parties as our data processors to help us develop, deliver and maintain our products and services, and fulfill our other purposes as defined in this privacy notice. When a third party processes personal data on our behalf, we always ensure via contractual arrangements that the processing of personal data is always conducted safely and in accordance with privacy laws and data processing best practices.
List of categories of the third parties processing data (=data processors):
>Service providers, such as printing services, customer service, installation partners
>Sales and marketing partners
>Payment Service Providers
>Cloud Service Providers
>Charger Manufacturers
>Roaming platform providers
>IT service providers and Consultancies (e.g. developers, designers, and testers)
>Service and maintenance partners (e.g. HW repair and maintenance)
>Charger Cloud systems providers
>Invoicing and debt collection service and system providers
>Data hosting system providers (e.g. Amazon Web Services)
>Warehouse service and management system providers
>Software and tool providers (e.g. for software development, business analytics, sales, marketing, work order management, customer relationship management, online conferencing and communication)
>Operational companies such as the post office or delivery couriers
>Research companies (for e.g. conducting customer satisfaction or product and service development surveys)
>Telecommunications system providers In addition, personal data may be disclosed to authorities when we are required to do so by law, based on demands made by competent authorities in accordance with existing privacy laws
2.8 Does Go Platform Limited transfer personal data to third countries?
Principally, Go Platform Limited does not transfer personal data outside the European Union or the European Economic Area (EEA). However, if personal data is transferred outside the EU or the EEA, Go Platform Limited uses appropriate safeguards in accordance with existing privacy legislation, such as the standard contractual clauses provided by the European Commission. When using the Gocharge Digital Solution, your payment card information is stored and processed in the United States via Stripe, Inc. Stripe is subscribed to the EU-U.S. Privacy Shield Framework and to the Swiss-U.S. Privacy Shield Framework, which is a policy that describes privacy practices for handling personal data received from the EEA or Switzerland in the United States. You can find more information on Stripe's subscription and on the principles of the Privacy Shield at the below link.
https://stripe.com/privacy-shield-policy
2.9 How does Go Platform Limited protect the personal data?
Go Platform Limited fulfills the necessary technical and organizational measures, which ensure and demonstrate that privacy laws are being followed in the processing of personal data.
These measures include the use of Identity and Access Management systems to ensure that only authorized persons have access to personal data, the use of firewalls, IP filtering, multi-factor authentication, pseudonymisation of data, encryption of data, detailed instructions and training for personnel on protection of personal data, and careful consideration when selecting our service providers that are involved in the processing of personal data on our behalf.
3.0 How do we handle personal data from IP addresses, cookies and similar technologies
3.1 Cookies used on websites
Go Platform Limited may collect data on the user’s devices via cookies and other applicable technologies.
Cookies are data, which the server of the service provider sends to the user’s web browser asking the browser to store the data on the user’s device and which the server can later request to receive back. In practice, cookies contain a small amount of data, typically a short piece of text. With cookies we can identify and count the browsers visiting our websites, user preferences and other patterns of user behaviour.
The user can block the use of cookies by changing the settings in his or her web browser. Blocking the use of cookies may affect the functionality of our services.
3.2 Third party access to data collected on Go Platform Limited’s websites
Third parties are entities outside of Go Platform Limited, such as marketers, advertisement networks and providers of measurement and tracking services. Third parties may process the user’s personal data for example when the user visits our websites or uses the services we provide. A third party may then use the user’s personal data, for example, to provide the user with targeted advertisements or to compile statistics on the user counts of different websites.
We ensure via contractual arrangements that the third parties comply with existing privacy laws.
3.3 Location data
The location data of the user’s device may be used to provide services based on the location of the device, if the user has given a clear consent to the processing of location data.
The user has the right to withdraw the consent at any time by changing appropriate settings on their device.
4.0 What are your rights when it comes to your personal data?
4.1 The rights of the user
You have the right to demand Go Platform Limited as a data controller to allow access to your personal data and the right to ask for the correction or deletion of said data. Additionally, if no legal limitations apply, you have the right to restrict the processing, to object to the processing and to request for your personal data to be transferred to another system.
When the processing of personal data has been based on your consent, you have the right to withdraw your consent at any time.
Finally, you have the right to lodge a complaint with the supervisory authority concerning the processing of personal data by Go Platform Limited.
4.2 Blocking of direct marketing
You always have the right to forbid the processing of your personal data for direct marketing purposes. The prohibition of direct marketing can be expressed by sending an email to privacy@gocharge.ie or by calling us, tel. 01-254 6126.
4.3 Automated decision-making
If we have made a decision about you solely on the basis of an automated process (e.g. through automatic profiling) and that affects your ability to use the services or has another significant effect on you, you can ask to not be subject to such a decision unless we can demonstrate to you that such decision is necessary for entering into, or the performance of, a contract between you and us.
5.0 Changes to our privacy notice
We reserve the right to amend this Privacy Notice.
Any changes to our Privacy Notice will be communicated to our customers mainly through the Gocharge Mobile Application. In some cases, we may choose to inform of these changes also by email and / or on our website.
Amendments may be necessary due to the development of our services or, for example, changes in the relevant laws.
6.0 Contact
Questions, comments and requests regarding this privacy notice are welcome and should be addressed as instructed below.
By post: Go Platform Limited, 5 Chapel Street, Bennettsbridge, Co. Kilkenny R95 YD45, Ireland
By email: privacy@gocharge.ie