Privacy Policy
Source EV UK Ltd is the controller responsible for the Apps in the UK.
Our full details are:
Full name of legal entity: Source EV UK Ltd
Email address: marketing@source-ev.com
Postal address: 19th Floor 10 Upper Bank Street, London, England, E14 5BF
The data will be processed in accordance with applicable legislation.
1. The personal data we collect about you
- Identity and Contact data: full name, postal address, phone number;
- Profile data: your email address, username and password
- Transaction data: credit/debit card number, expiry date, history of your payments and details of any refunds;
- Device data: the type of device you use, mobile network information and IP address;
- Usage data: connection logs, analytics, and any error or debugging information;
- Location data: your current location as disclosed by GPS technology, WiFi connections and/or your IP address. This will also be one of the permissions asked for by the Apps in order to provide the location of the charging points and other relevant part of our Services;
- Security data: information we collect about your use of the Apps or our Services in order to ensure your and our other users' safety and security, Usage data, Cookies data and the information provided to us by our payment processing provider;
- Cookies data: the information collected through the cookies and similar technologies listed in the “Cookie management” section set out below;
- Direct Marketing data: your direct marketing preferences, consents for receiving direct marketing from us or our third parties and the history of the direct marketing communications we have sent to you;
- Personalisation data: Cookies data, Transaction data, Usage data, Location data, and the preferences we have inferred you have and use to personalise the Apps and Services, being the preferences noted on your account;
2. How we collect your personal data
- Registration: when you register your account with us;
- Communications: when you communicate with us via email or telephone, or if you contact us through the Apps;
- Information you generate when using our Apps and/or our Services: please see the “Cookie management” section below for further details
- Information we collect through monitoring the use of our Apps and/or our Services
- Additional information: we otherwise collect through our Apps and/or our Services where we have your consent to do so, where you change preferences or where you interact with our Apps and/or our Services in other ways
3. Purpose of processing, legal basis, storage period and types of data collected
- Performance of a contract with you: where we need to perform the contract, we are about to enter into or have entered into with you;
- Legitimate interests: where necessary for our legitimate interests or those of a third party to whom we may provide your personal data in connection with operating the Apps or our Services provided such interests are not overridden by your own rights and interests;
- Legal obligation: where necessary for compliance with an obligation that applies to us by applicable law
- Consent: we rely on consent only where we have obtained your active agreement to use your personal data for a specified purpose.
3.1 Data processed for a “Pay As You Go” user
| Purpose | Personal data categories | Lawful basis |
|---|---|---|
| Payment for the charging service | Transaction data | Performance of the contract |
| Locating a charging point | Location data | Performance of the contract |
| Sending of a charging session identifier code | Profile data | Performance of the contract |
| Processing of various requests: technical support, monitoring of charge status, complaints and incidents. | Identity and Contact data Profile data Vehicle data | Legitimate interest (to ensure we provide our customers with necessary support to charge their vehicles) |
Personal data categories
Transaction data
Lawful basis
Performance of the contract
Personal data categories
Location data
Lawful basis
Performance of the contract
Personal data categories
Profile data
Lawful basis
Performance of the contract
Personal data categories
Identity and Contact data
Profile data
Vehicle data
Lawful basis
Legitimate interest (to ensure we provide our customers with necessary support to charge their vehicles)
3.2 Data processed for a Member
| Purpose | Personal data categories | Legal base |
|---|---|---|
| Creating a customer account | Identity and Contact data Profile data | Performance of the contract |
| Locating a charging point | Location data | Performance of the contract |
| Payment for the charging service | Transaction data | Performance of the contract |
| To provide you with your membership benefits | Identity and Contact data Profile data Transaction data | Performance of the contract |
| Sending of a charging session identifier code | Email address | Performance of the contract |
| Processing of various requests: technical support, monitoring of charge status, complaints, and incidents | Identity and Contact data Device data Profile data Vehicle data | Legitimate interests (to ensure we provide our customers with necessary support to charge their vehicles) |
| Enforcing our terms and conditions, including to collect money owed to us | Identity and Contact data Transaction data Location data | Legitimate interests (to ensure that the terms and conditions are being followed by our customers and to recover debts due to us) |
| To send you direct marketing communications via email or push notification | Identity and Contact data Direct Marketing data Social Media data | Consent |
| To analyse patterns, create business insights and improve our advertising through aggregated and anonymised personal data | Identity and Contact data Profile data Transaction Data Location Data | Legitimate interests (to improve our products and services and grow our customer base) |
| To administer, monitor and improve our business, Services and Apps, including troubleshooting, data analysis and system testing, and deploying security measures | Identity and Contact data Device data Usage data Security data | Legitimate interests (for running our business, provision of administration and IT services, network security, maintaining the security of our Apps or Services, providing a secure service to users and preventing fraudulent and other misuse of our Apps) |
| Applying security measures to our processing of your personal data, including processing in connection with the Apps | All personal data under this privacy notice | Legal obligation (applying appropriate technical and organisational measures under Article 32 of the UK GDPR) |
| To notify you of changes to the Apps or our Services | Identity and Contact data | Legitimate interests (in servicing current and prospective customers) |
| To notify you of updates to this privacy notice | Identity and Contact data Transaction data | Legal obligation (to inform you of our processing under Articles 13 and 14 of the UK GDPR) |
| To respond to your requests to exercise your rights under this notice | As relevant to your request | Legal obligation (complying with data subject requests under Chapter 3 of the UK GDPR) |
| To deploy and process personal data collected via cookies that are strictly necessary, as set out in the “Cookies management” section below | Cookies data | Legitimate interests (delivering and securing the Apps and our Services) |
| To deploy and process personal data collected via cookies that are not strictly necessary, as set out in the “Cookies management” section below | Cookies data | Consent |
| To develop and improve our products and services and inform our marketing strategy, including through the use of aggregated and anonymised data | Identity and Contact data Profile data Transaction data Usage data Location Data Cookies data (all data will be aggregated and anonymised) | Legitimate Interests (to improve our products and services and grow our customer base) |
| For the purpose of marketing our products and services to new customers through social media (for example, by creating lookalike audiences) | Aggregated and anonymised Social Media data | Legitimate interests (to effectively market to prospective customers) |
| Profile our customers to offer the most appropriate charging tariff based on their activity while using the App and our Services | Identity and Contact data Profile data Transaction data Usage data Location data Vehicle data | Consent |
Personal data categories
Identity and Contact data Profile data
Legal base
Performance of the contract
Personal data categories
Location data
Legal base
Performance of the contract
Personal data categories
Transaction data
Legal base
Performance of the contract
Personal data categories
Identity and Contact data
Profile data
Transaction data
Legal base
Performance of the contract
Personal data categories
Email address
Legal base
Performance of the contract
Personal data categories
Identity and Contact data
Device data
Profile data
Vehicle data
Legal base
Legitimate interests (to ensure we provide our customers with necessary support to charge their vehicles)
Personal data categories
Identity and Contact data
Transaction data
Location data
Legal base
Legitimate interests (to ensure that the terms and conditions are being followed by our customers and to recover debts due to us)
Personal data categories
Identity and Contact data
Direct Marketing data
Social Media data
Legal base
Consent
Personal data categories
Identity and Contact data
Profile data
Transaction Data
Location Data
Legal base
Legitimate interests (to improve our products and services and grow our customer base)
Personal data categories
Identity and Contact data
Device data
Usage data
Security data
Legal base
Legitimate interests (for running our business, provision of administration and IT services, network security, maintaining the security of our Apps or Services, providing a secure service to users and preventing fraudulent and other misuse of our Apps)
Personal data categories
All personal data under this privacy notice
Legal base
Legal obligation (applying appropriate technical and organisational measures under Article 32 of the UK GDPR)
Personal data categories
Identity and Contact data
Legal base
Legitimate interests (in servicing current and prospective customers)
Personal data categories
Identity and Contact data
Transaction data
Legal base
Legal obligation (to inform you of our processing under Articles 13 and 14 of the UK GDPR)
Personal data categories
As relevant to your request
Legal base
Legal obligation (complying with data subject requests under Chapter 3 of the UK GDPR)
Personal data categories
Cookies data
Legal base
Legitimate interests (delivering and securing the Apps and our Services)
Personal data categories
Cookies data
Legal base
Consent
Personal data categories
Identity and Contact data
Profile data
Transaction data
Usage data
Location Data
Cookies data
(all data will be aggregated and anonymised)
Legal base
Legitimate Interests (to improve our products and services and grow our customer base)
Personal data categories
Aggregated and anonymised Social Media data
Legal base
Legitimate interests (to effectively market to prospective customers)
Personal data categories
Identity and Contact data
Profile data
Transaction data
Usage data
Location data
Vehicle data
Legal base
Consent
3.3 Data processed for a Subscriber
| Purpose | Personal data categories | Legal base |
|---|---|---|
| Creating a customer account | Identity and Contact data Profile data | Performance of the contract |
| Locating a charging point | Location data | Performance of the contract |
| Payment for the charging service | Transaction data | Performance of the contract |
| Processing of various requests: technical support, monitoring of charge status, complaints and incidents | Identity and Contact data Device data Profile data Vehicle data | Legitimate interests (to ensure we provide our customers with necessary support to charge their vehicles) |
| Enforce our terms and conditions including to collect money owed to us | Identity and Contact data Transaction data Location data | Legitimate interests (to ensure that the terms and conditions are being followed by our customers) |
| To send you direct marketing communications via email or push notifications | Identity and Contact data Direct Marketing data Social Media data | Consent |
| To analyse patterns, create business insights and improve our advertising through aggregated and anonymised personal data | Identity and Contact data Profile data Transaction data Location data | Legitimate interests (to improve our products and services and grow our customer base) |
| To administer, monitor and improve our business, Services and this Apps including troubleshooting, data analysis and system testing, and deploying security measures | Identity and Contact data Device data Usage data Security data | Legitimate interests (for running our business, provision of administration and IT services, network security, maintaining the security of our Apps or Services, providing a secure service to users, and preventing fraudulent and other misuse of our Apps) |
| Applying security measures to our processing of your personal data, including processing in connection with the Apps | All personal data under this privacy notice | Legal obligation (applying appropriate technical and organisational measures under Article 32 of the UK GDPR) |
| To notify you of changes to the Apps or our Services | Identity and Contact data | Legitimate interests (in servicing current and prospective customers) |
| To notify you of updates to this privacy notice | Identity and Contact data Transaction data | Legal obligation (to inform you of our processing under Articles 13 and 14 of the UK GDPR) |
| To respond to your requests to exercise your rights under this notice | As relevant to your request | Legal obligation (complying with data subject requests under Chapter 3 of the UK GDPR) |
| To deploy and process personal data collected via cookies that are strictly necessary, as set out in the “Cookies management” section below | Cookies data | Legitimate interests (delivering and securing the Apps and our Services) |
| To deploy and process personal data collected via cookies that are not strictly necessary, as set out in the “Cookies management” section below | Cookies data | Consent |
| To develop and improve our products and services and inform our marketing strategy, including through the use of aggregated and anonymised data | Identity and Contact data Profile data Transaction data Usage data Location Data Cookies data (all data will be aggregated and anonymised) | Legitimate Interests (to improve our products and services and grow our customer base) |
| For the purpose of marketing our products and services to new customers through social media (for example, by creating lookalike audiences) | Aggregated and anonymised Social Media data | Legitimate interests (to effectively market to prospective customers) |
| Profile our customers to offer the most appropriate charging tariff based on their activity while using the App and our Services | Identity and Contact data Profile data Transaction data Usage data Location data Vehicle data | Legitimate interests (to offer our customers the most appropriate tariff) |
Personal data categories
Identity and Contact data
Profile data
Legal base
Performance of the contract
Personal data categories
Location data
Legal base
Performance of the contract
Personal data categories
Transaction data
Legal base
Performance of the contract
Personal data categories
Identity and Contact data
Device data
Profile data
Vehicle data
Legal base
Legitimate interests (to ensure we provide our customers with necessary support to charge their vehicles)
Personal data categories
Identity and Contact data
Transaction data
Location data
Legal base
Legitimate interests (to ensure that the terms and conditions are being followed by our customers)
Personal data categories
Identity and Contact data
Direct Marketing data
Social Media data
Legal base
Consent
Personal data categories
Identity and Contact data
Profile data
Transaction data
Location data
Legal base
Legitimate interests (to improve our products and services and grow our customer base)
Personal data categories
Identity and Contact data
Device data
Usage data
Security data
Legal base
Legitimate interests (for running our business, provision of administration and IT services, network security, maintaining the security of our Apps or Services, providing a secure service to users, and preventing fraudulent and other misuse of our Apps)
Personal data categories
All personal data under this privacy notice
Legal base
Legal obligation (applying appropriate technical and organisational measures under Article 32 of the UK GDPR)
Personal data categories
Identity and Contact data
Legal base
Legitimate interests (in servicing current and prospective customers)
Personal data categories
Identity and Contact data
Transaction data
Legal base
Legal obligation (to inform you of our processing under Articles 13 and 14 of the UK GDPR)
Personal data categories
As relevant to your request
Legal base
Legal obligation (complying with data subject requests under Chapter 3 of the UK GDPR)
Personal data categories
Cookies data
Legal base
Legitimate interests (delivering and securing the Apps and our Services)
Personal data categories
Cookies data
Legal base
Consent
Personal data categories
Identity and Contact data
Profile data
Transaction data
Usage data
Location Data
Cookies data
(all data will be aggregated and anonymised)
Legal base
Legitimate Interests (to improve our products and services and grow our customer base)
Personal data categories
Aggregated and anonymised Social Media data
Legal base
Legitimate interests (to effectively market to prospective customers)
Personal data categories
Identity and Contact data
Profile data
Transaction data
Usage data
Location data
Vehicle data
Legal base
Legitimate interests (to offer our customers the most appropriate tariff)
4. Data retention
5. Automated decision making and profiling
6. Data recipient
- other companies within our corporate group for the purpose of them providing services to us;
- our service providers, customer relationship management providers (including their subcontractors) that help us to manage our relationship with you, provide our services to you and operate our business (such as our payment service providers, our App and hosting service providers, mobile network providers, our IT service providers);
- professional advisors (accountants, auditors, lawyers, tax advisers or business consultants) to help us operate and manage our business;
- debt collection agencies in order to recover any outstanding debts owed to us;
- marketing and promotional materials from third parties where you have expressly subscribed to receive marketing from
- regulators, law enforcement, public authorities or other third parties in order for us to comply with any legal orders, legal or regulatory requirements and any investigation.
7. Data transfers
- If there are UK adequacy regulations in respect of that country (France, Germany), we will rely on those to undertake our transfer; or
- In the case of transfers of personal data to a third party in the United States, we may rely on that third party’s certification to the EU-US Data Privacy Framework and the UK extension to the Framework to transfer your personal data.
8. Data security and privacy
9. Failure to provide personal data
10. Cookie management
- Strictly necessary cookies. These are cookies that are required for the operation of our Apps. These essential cookies are always enabled because our Apps won’t work properly without them. They include, for example, cookies that enable you to log into secure areas of our Apps or make use of e-billing services. You can switch off these cookies in your settings, but you may then not be able to access all or parts of our Apps
- Analytical or performance cookies. These allow us to recognise and count the number of visitors and to see how visitors move around our Apps when they are using it. This helps us to improve the way our Apps work, for example, by ensuring that users are finding what they are looking for easily.
- Functionality cookies. These are used to recognise you when you return to our Apps. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
- Targeting cookies. These cookies record your visit to our Apps, the pages you have visited and the links you have followed. We will use this information to make our Apps and the advertising displayed on it more relevant to your interests.
| Cookie type | Cookie name | Purpose of the cookie | Supplier | Storage period |
|---|---|---|---|---|
| Technical cookie: authentication | AUTH_LEGACY_SESSION | This information is necessary to enable the authentication | TotalEnergies charging services | Session duration |
| Geolocation Cookie | SPK MapBox | Users may decide to enable the application to collect their location to enable the application to indicate the closest charging stations. (subject to their consent) | MapBox | Session duration |
| Geolocation Cookie | Website browser interface | Users may decide to share their location in order to improve their experience with the application (subject to their consent) | User's browser | Session duration |
| Technical and functional cookies | utag_main, utag_main_, tealium_segment, utag_env_ | Enables the customer to manage its preferences for the cookies | Tealium | 13 months |
| Statistical cookies | atuserid | Customer-side visitor identification cookie (replaces server-side) | AT Internet | 6 months |
| Statistical cookies | Atauthority | Cookie for storing/logging visitor consent | AT Internet | 6 months |
| Statistical cookies | Idirxvr | Visitor identifier history (server-side visitor identifier storage cookie) | AT Internet | 13 months |
| Statistical cookies | Atidx | Secure visitor identification (server-side visitor identifier cookie storage) | AT Internet | 13 months |
| Statistical cookies | Atid | Primary visitor identifier (server-side visitor identifier storage cookie) | AT Internet | 13 months |
| Statistical cookies | Atreman | Used to keep a prior attribution campaign in memory | AT Internet | 30 days |
| Statistical cookies | Atsession | Used to record the list of new campaigns encountered during a visit, in order to avoid measuring the same campaign several times | AT Internet | 30 days |
Cookie name
AUTH_LEGACY_SESSION
Purpose of the cookie
This information is necessary to enable the authentication
Supplier
TotalEnergies charging services
Storage period
Session duration
Cookie name
SPK MapBox
Purpose of the cookie
Users may decide to enable the application to collect their location to enable the application to indicate the closest charging stations. (subject to their consent)
Supplier
MapBox
Storage period
Session duration
Cookie name
Website browser interface
Purpose of the cookie
Users may decide to share their location in order to improve their experience with the application (subject to their consent)
Supplier
User's browser
Storage period
Session duration
Cookie name
utag_main, utag_main_, tealium_segment, utag_env_
Purpose of the cookie
Enables the customer to manage its preferences for the cookies
Supplier
Tealium
Storage period
13 months
Cookie name
atuserid
Purpose of the cookie
Customer-side visitor identification cookie (replaces server-side)
Supplier
AT Internet
Storage period
6 months
Cookie name
Atauthority
Purpose of the cookie
Cookie for storing/logging visitor consent
Supplier
AT Internet
Storage period
6 months
Cookie name
Idirxvr
Purpose of the cookie
Visitor identifier history (server-side visitor identifier storage cookie)
Supplier
AT Internet
Storage period
13 months
Cookie name
Atidx
Purpose of the cookie
Secure visitor identification (server-side visitor identifier cookie storage)
Supplier
AT Internet
Storage period
13 months
Cookie name
Atid
Purpose of the cookie
Primary visitor identifier (server-side visitor identifier storage cookie)
Supplier
AT Internet
Storage period
13 months
Cookie name
Atreman
Purpose of the cookie
Used to keep a prior attribution campaign in memory
Supplier
AT Internet
Storage period
30 days
Cookie name
Atsession
Purpose of the cookie
Used to record the list of new campaigns encountered during a visit, in order to avoid measuring the same campaign several times
Supplier
AT Internet
Storage period
30 days