Data protection declaration (DSE)

Version 13.12.2018

 

1 Privacy Policy

We take the protection of your personal data very seriously. We treat your data confidentially and exclusively on the basis of the legal regulations (DSGVO, DSG 2000, TKG 2003). In this privacy statement we inform you about the most important aspects of data processing in connection with your use of our website and the use of our products and services.

2 You can reach us at the following contact details

ENIO GmbH
Geyschlägergasse 14
1150 Vienna
Phone: +43 1 934 6681 810
Email: office@enio.at
www.enio.at

3 Purpose and legal basis of data processing

Your data will be processed by us for the following purposes:

  • Fulfilment of existing contracts
  • Answering your questions and follow-up questions
  • Preparation of offers for contracts for our products and services as well as conclusion of contracts
  • Creation and delivery of advertisements and descriptions of our products
  • Operation and optimisation of our websites

The data processing for the fulfilment of existing contracts and for the answering of your inquiries and follow-up questions, including the preparation of offers for contracts as well as the conclusion of contracts takes place on the basis of the respective contract or pre-contractual measures with the respective customer according to Art. 6 para. 1 lit b DSGVO.

Data processing for advertising purposes is carried out on the basis of the legal provisions of § 96 Para. 3 TKG and on the basis of consent pursuant to Art. 6 Para. 1 lit a DSGVO.

The data processing for the operation and optimisation of our websites is based on the legitimate interests of ENIO GmbH pursuant to Art. 6 Para. 1 lit. f DSGVO, whereby the data is pseudonymised for the optimisation of our websites.

The data provided by you is necessary for the fulfilment of the contract or for the implementation of pre-contractual measures. Without these data we cannot conclude the contract with you.

4 Data collection and recipients of data

The personal data you enter on our websites will only be passed on to the following persons for the provision of the services in accordance with our offers on our websites: IT service providers (for cloud computing or hosting) and web agencies (for hosting and as domain providers).

When using our products - in particular for charging electric vehicles - ENIO GmbH as the person responsible within the meaning of DSGVO is entitled to process the personal data disclosed and received within the scope of the business relationship for the purpose of fulfilling the contract and to transmit this data - in whole or in part - in connection with the fulfilment of this contract to suppliers, IT service providers, customer service, banks, accountants, tax consultants, auditors as well as collection companies, insurance companies and legal representatives if necessary.

This concerns first and last name, academic degree, postal address, e-mail contact, telephone number, date of birth, contract data, billing data, order data, payment data, user data, customer ID numbers (UID), chargingcards, charging location, charge start, charge end, charge point used, roaming partner, identification of the terminal device when using the ENIO-APP, consumption data, vehicle data.

In order to process the billing of charging processes at charging stations of ENIO GmbH's roaming partners, ENIO GmbH transmits the customer ID number pseudonymised to the roaming partners. The roaming partners therefore do not have access to the personal data stored by ENIO GmbH.

For payment by credit or Maestro card, you must provide the card number, expiry date and card verification number. ENIO GmbH does not process these data, but they are collected directly by the processing payment service provider by means of a secure data connection. The payment service provider checks the validity of the credit/maestro card and the correctness of the data provided and processes the payment. Without this data a credit card payment cannot be carried out.

In this context, the payment service provider acts as the controller within the meaning of Article 4(7) of the GDPR.

5 Duration of data storage

The personal data you enter on our websites will be stored on our websites for as long as it is necessary to fulfil reporting and verification obligations (7 years, tax retention period) in order to provide the services in accordance with our offers on our websites.

When using our products, the necessary data will be stored for the duration of the contract and thereafter for as long as is necessary for the execution of the contract, in the event of disputes or for the fulfilment of reporting and verification obligations (10 years, duration until expiry of product liability).

If a purchase process is aborted, the data stored by us will be deleted.

6 Your rights.

As a data subject within the meaning of data protection law, you have a right under the DSGVO to information from the person responsible (ENIO GmbH) about the personal data processed, as well as to correction or deletion or restriction of processing, a right of objection to processing and a right to data transfer (Art. 15 to 21 DSGVO). There is also a right of appeal to the data protection authority (Art 77 DSGVO). In order to safeguard their rights under data protection law, any person concerned can contact ENIO GmbH using the contact data mentioned in point 2 above.

If the data processing is based on your consent, you can revoke your consent to data processing at any time in writing (e-mail sufficient) to the contact data of ENIO GmbH mentioned in point 2 above. The further use of the data will be discontinued immediately after ENIO GmbH has received the revocation, without prejudice to existing legal obligations. A revocation does not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation.

7 Linking to other websites

Our websites also contain links to other websites. However, this Privacy Policy does not apply to these websites. We therefore request that you visit these other websites directly in order to obtain the data protection information required for the other websites there. ENIO GmbH cannot be held liable for measures taken from these websites or for their content.

8 Cookies

Some of our websites use so-called cookies. Cookies do not damage your computer/mobile device and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer/mobile device and saved by your browser.

Most of the cookies we use are so-called "session cookies". They will be deleted automatically after the end of your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.

You can set your browser so that you are informed when cookies are set and only allow cookies in individual cases, accept cookies for specific cases or generally exclude them and activate automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.

9 website analysis

Our websites use functions of the web analysis services Google Analytics.

Cookies are used for this purpose, which enable an analysis of the use of the website by your users. The information generated in this way is transferred to the provider's server and stored there.

You can prevent this by setting your browser so that no cookies are stored.

Google Analytics
Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043
USA

Data is transferred to third countries (outside Austria and the European Economic Area). Google collects and processes personal data in the United States of America or any other country in which Google or Google's subcontractors maintain facilities.

Google will ensure that for data transfers outside the EEA and Switzerland:

(a) the parent company of the Google Group, Google LLC, remains certified under the Privacy Shield Principles and for its wholly owned US subsidiaries; and

(b) the scope of Google LLC's Privacy Shield certification captures the customer's personally identifiable information.

10 Newsletter

You have the possibility to subscribe to our newsletter via our websites. For this we need your e-mail address, title, first name, surname and your declaration that you agree to receive the newsletter.

In order to provide you with targeted information, we also collect and process the following voluntarily provided information about your interest (information for private customers or companies).

Once you have subscribed to the newsletter, we will send you a confirmation email with a link to confirm your subscription.

You can cancel your subscription to the newsletter at any time. Please send your cancellation to the following e-mail address: office@enio.at. We will then immediately delete your data in connection with the newsletter dispatch.

11 Data security

Your data will be hosted by a provider located within the European Union. ENIO GmbH and the provider use technical and organizational security measures to protect your data against unauthorized or unlawful processing and against accidental loss, destruction or damage.

We would like to point out that the transmission of data on the Internet can be unsecured and that data could be intercepted and used by third parties. Our security measures are continuously optimised in line with technological developments. You are welcome to contact us using the above contact options to obtain more information about the security measures.

12 Changes to this Privacy Policy

We reserve the right to adapt the content of these data protection provisions from time to time in order to be able to ensure protection also in the future, in particular on the basis of new legal requirements or technical developments. The use of your data is subject to the current version.

Valid from: December 2018

By concluding a contract with ENIO, the client acknowledges that ENIO is authorised as the responsible party within the meaning of the basic data protection regulation (EU) 2016/679 ("DSGVO"), to process the personal data disclosed and received in the course of the business relationship (in particular also from public ENIO electric charging stations and/or electric charging stations of ENIO roaming partners) for the purpose of fulfilling the contract and to transmit this data - in whole or in part - in connection with the fulfilment of this contract to suppliers, IT service providers, customer service, banks, accounting, tax advisors, as well as, if necessary, insurance companies, collection agencies and legal representatives This includes first name and surname, academic degree, postal address, e-mail contact, telephone number, date of birth, billing data, account data, customer ID number, location and identification of the electrical charging station/electrical device used, start of the e-service, end of the e-service, ENIO roaming partner, identification of the CL's terminal device(s) when using the ENIO-APP, consumption data, electric vehicle charging service if applicable.

In order to process the billing of "e-services" for charging processes at charging points of ENIO roaming partners, ENIO transmits the customer ID number pseudonymised to the corresponding ENIO roaming partners. The ENIO roaming partners are therefore not given access to the personal data stored by ENIO.

If the AG does not provide the data according to this point, the contract cannot be fulfilled.

Duration of data processing and data subjects' rights

All data will be stored for the duration of the contract and thereafter for as long as is necessary for the execution of the contract, in the event of disputes or for the fulfilment of reporting and verification obligations.

According to the DSGVO, data subjects have a right of access by the data controller to the processed personal data, as well as a right of rectification or deletion or restriction of the processing, a right of objection to the processing and a right of data transfer (Art. 15 to 21 DSGVO). There is also a right of appeal to the data protection authority (Art 77 DSGVO). In order to protect the rights of the AG under data protection law, each person concerned can send an e-mail to office@enio.at or by post to ENIO GmbH, Geyschlägergasse 14, 1150 Vienna.