PRIVACY POLICY

EVenergia Consulting, SL
Avenida Diagonal 532, Planta 2
08006 Barcelona, Spain

Email: info@cargea.com
Company registration number: B13803390

Introduction

At EVenergia Consulting, SL, Avenida Diagonal 532, Planta 2, 08006 Barcelona, Spain ("Cargea", "we", "us", "our"), we understand the importance of treating the personal data of our customers, vendors, business partners, visitors to our website and other persons we interact with in a confidential and private manner. Transparency is a fundamental value at Cargea, and Cargea is committed to following the requirements and obligations in relation to data privacy in accordance with applicable law, including the EU General Data Protection Regulation ("GDPR"). Therefore, we have secure and adequate data processing procedures in place.

Cargea is the data controller for the processing of your personal data. This privacy policy will explain how Cargea uses the personal data we collect from you when you use our website, user portals and mobile applications.

When we talk about our "Website" we mean www.cargea.com and the other sites and applications we own and operate. When we refer to "user portals" and "mobile applications", we mean our product "Cargea".

If you have any question to this Privacy Policy or you wish to exercise your data subject rights pursuant to Chapter III of the GDPR and according to section 7 of this Privacy Policy, please contact Cargea on info@cargea.com.

Categories of personal data, purpose, and legal basis

2.1 Visitors on our Website, user portals, and/or mobile applications, and newsletter

recipients

When you visit our Website, user portals, and/or mobile applications Cargea will process personal data about you, for instance, cookies, browser type and version, IP-address, and length of visit. The purpose of using cookies is, i.a., to improve your user experience on our Website, user portals, and/or mobile applications to provide functionality, to generate statistics, to target the marketing of our products to your needs, and to remember your preferences.

The legitimate interests pursued are to provide you with products and services that work optimally, a good website experience and marketing activities. The legal basis for the

processing of your personal data is Art. 6(1)(f) of the GDPR. In certain cases, the legal basis for the processing of your personal data in this regard is your consent, which you will be asked to give when you visit the Website, user portals, and/or mobile applications, cf. Art. 6(1)(a) of the GDPR.

If you wish to receive a newsletter or book a demo, we also process the following information about you: name and surname, subject(s) of interest and your email address in order to tailor the content of and to send our newsletters to you. The legal basis for the processing of your personal data in this respect is our legitimate interests in branding our products and business and the relevant marketing material that you have requested, cf. Art. 6(1)(f) of the GDPR.

2.2 Customers

When you register your profile, Cargea will process personal data about you, including your name, email address, telephone number, your postal address, bank and payment information, and information on the services purchased. The purpose of the processing of your personal data is to supply you with our services.

When you use our services, Cargea will further process information related to date and time, frequency, location, and pattern of EV charging. Information related to purchases include name, contact details, address, cost, and transaction details.

We use Stripe as a third party credit card payment processing company to collect payment information. If you submit payment information, we will share with Stripe information such as your debit/credit card number, billing address, phone number, and installed application information in order to process payments.

The legal basis for the processing of your personal data in that regard is Art. 6(1)(b) of the GDPR.

2.3 Contact persons at a vendor or another business partner

As a contact person at a vendor or another business partner, Cargea processes your personal data when you communicate with Cargea, e.g., via emails in connection with Cargea's existing contractual relation with the company you are employed with or in connection with the conclusion or termination of a contract.

Cargea processes ordinary personal data about you, including your name, email address, telephone number, position, etc.

The legal basis for such processing of your personal data is that the processing is necessary for the purposes of legitimate interests pursued by Cargea pursuant to Art. 6(1)(f) of the GDPR.

2.4 Inquiries via chat function in our user portals and mobile applications

If you submit an inquiry relating to Cargea's services via Cargea's chat function, Cargea will process personal data about you e.g., your IP-address, geographic location, and the personal data you include in your inquiry, e.g., name, email address and telephone number.

The legitimate interests pursued are to provide customer support by answering the inquiries and business development. The legal basis for the processing of your personal data is Art. 6(1)(f) of the GDPR.

Recipients of your personal data

Where relevant, Cargea may disclose or transfer your personal data to affiliates, business partners or other collaborators for business purposes.

Cargea uses third-party service providers, such as hosting providers, payment processors, and technology partners to provide the software, networking, marketing, infrastructure, and other services required to operate and maintain our services.

Transfer of your personal data to a third country (outside of EU/EEA)

In certain cases, your personal data may be transferred to countries outside of the EU/EEA. Cargea ensures that such transfer will be carried out in accordance with the applicable data protection laws.

Storage of your personal data

Cargea will only store your personal data as long as it is deemed necessary to fulfil the purposes for the processing of your personal data.

Cargea maintains industry standard security safeguards to protect your data. We encrypt data in transit and at rest, where appropriate, to ensure that your information is kept private.

Cargea securely stores your data on secure servers. All payment information is fully encrypted and handled only by PCI certified organizations.

5.1 Visitors on our Website, user portals, and/or mobile applications, and newsletters recipients

Personal data related to your newsletter account is stored until you withdraw your consent and no longer wish to receive newsletters from us.

5.2 Customers

Personal data about customers are generally deleted when they are no longer necessary for the purpose of collection. Personal data is generally deleted 3 years after termination of the contractual relationship between Cargea and the customer unless storage is required for legal or documentation purposes.

5.3 Contact person at a vendor or another business partner

If you are a contact person at a vendor or another business partner, Cargea will store personal data about you as long as Cargea communicates with you because you are Cargea's point of contact.

5.4 Inquiries via chat function in our user portals and mobile applications

The inquiries from potential customers will generally be deleted 3 years after the inquiry is resolved unless storage is required for documentation purposes.

5.5 Bookkeeping material

Cargea will store your personal data to the extent it is necessary for bookkeeping purposes such as personal data related to invoicing. Such personal data will be stored for the legally required retention period under applicable Spanish accounting regulations.

Social media

Our Website may use social media plug-ins from social networking sites such as Facebook, Instagram and LinkedIn.

If you access our Website using such a plug-in, your browser may contact the server of the underlying social networking site and transfer certain information such as your IP address.

For more information, please consult the relevant privacy policies of the social media providers.

Your rights

Cargea has implemented several measures to protect your personal data and ensure your rights.

As a data subject you have the following rights under the GDPR:

  • Right of access
  • Right of rectification
  • Right of erasure
  • Right to restriction of processing
  • Right to data portability
  • Right to object

Right to complain

If you disagree with the way in which Cargea processes your personal data, you may file a complaint with the Spanish Data Protection Agency (AEPD).

Right to withdraw consent

If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time.

If you wish to exercise any of the above-mentioned rights, you are welcome to contact us at info@cargea.com.

Questions or complaints

If you have any questions relating to this Privacy Policy or you disagree with the way Cargea processes your personal data, you can contact us at:

info@cargea.com

You can also file a complaint with the Spanish Data Protection Agency (AEPD): https://www.aepd.es

Amendments to this privacy policy

Cargea has the right to modify this Privacy Policy regarding new technologies, regulatory requirements, or other purposes.

Date of the most recent version of this Privacy Policy: 8 May 2026.