Privacy Policy

1. Data controller

The controller of personal data is:

3D-lasertec s.r.o.
Starý Klíčov 143, 345 01 Mrákov, Czech Republic
Czech Republic

Company ID: 25223445
VAT ID: CZ25223445
E-mail: info@sunaffairs.eu
Phone: 00420778796773

(the "Controller")

2. What personal data we process

In connection with operating the application we may process in particular: name and surname, e-mail address, phone number, billing details, company and VAT IDs (for businesses), vehicle registration plate, identification of RFID cards or virtual charging tags, charging-session history, reservation history, payment records, IP address, technical device data and operational and diagnostic data of the application.

The Controller does not process payment-card data.

3. Purposes of processing

We process personal data in order to: register the user account, provide the EV charging service, reserve charge points, keep records of charging sessions, bill the services, issue accounting documents, provide customer support, handle complaints, prevent fraud, fulfil legal obligations, secure the application and, where a legal basis or consent exists, send commercial communications.

4. Legal basis of processing

We process personal data in particular on the basis of: performance of a contract under Art. 6(1)(b) GDPR, compliance with legal obligations under Art. 6(1)(c) GDPR, legitimate interest under Art. 6(1)(f) GDPR (e.g. application security, fraud prevention, protection of legal claims) and the data subject's consent under Art. 6(1)(a) GDPR where required.

5. Retention period

We keep personal data only for the time necessary to fulfil the purpose of processing. In particular: account data for the lifetime of the account, accounting documents for the period required by law, charging-session data for the time necessary for billing, complaints and protection of legal claims, and consent-based data until the consent is withdrawn. After the relevant period the data is securely erased or anonymised.

6. Recipients of the data

Personal data may be disclosed only to parties that need it to perform their tasks, in particular: the payment service provider, cloud service providers, IT support providers, charge point operators (where necessary to provide the service), accounting and tax advisors and public authorities where required by law. The Controller has concluded appropriate agreements under Art. 28 GDPR with all processors.

7. Payment services

Payments are processed through a secure payment service provider. The Controller does not store payment-card numbers or security codes.

8. Data security

The Controller has adopted appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration and unauthorised disclosure.

9. Your rights

You have the right to: request access to your personal data, request rectification of inaccurate data, request erasure where the law allows, request restriction of processing, object to processing, request data portability, withdraw consent and lodge a complaint with the Czech Office for Personal Data Protection (www.uoou.cz).

10. Contact

All data-protection requests can be sent to info@sunaffairs.eu or in writing to the Controller's registered office.

11. Cookies

The application and website may use technical cookies necessary for the service to function. Any analytics or marketing cookies are used only in accordance with applicable law and after the relevant consent has been given where required. Details are in the Cookie Policy.

12. Final provisions

This Privacy Policy is effective from the date of its publication. The Controller may reasonably amend it, in particular in the event of changes in legislation or an extension of the services provided. The current version will always be published on the website and in the application. In case of any discrepancy, the Czech version prevails.