PRIVACY POLICY

I. Privacy statement

This privacy statement applies to the mobile app MCharger wallbox (“Wallbox”) (the “App”) and MRS Electronic Group website that can be visited through the App (the “Website”). Both together are referred to as “Services”.

We respects the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our mobile application. Please read this Privacy Policy carefully. IF YOU DO NOT AGREE WITH THE TERMS OF THIS PRIVACY POLICY, PLEASE DO NOT ACCESS THE APPLICATION.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the “Last updated” date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates. You will be deemed to have been made aware of, will be subject to, and will be deemed to have accepted the changes in any revised Privacy Policy by your continued use of the application after the date such revised Privacy Policy is posted.

This Privacy Policy does not apply to the third-party online/mobile store from which you install the application, which may also collect and use data about you. We are not responsible for any of the data collected by any such third party.

II. General

With regard to the Services, MRS Electronic is the data controller in terms of the General Data Protection Regulation (“GDPR”).

The MRS Electronic GmbH & Co. KG, Klaus-Gutsch-Str. 7, 78628 Rottweil, Germany; Telephone: +49 (0)741 / 2807 – 0, Email: info@mrs-electronic.com, Website: www.mrs-electronic.com.

This privacy statement provides information about how we collect and process personal data in connection with our Services.

III. Access and storage of information

By using our App, access to information or storage of information in your terminal equipment may occur. This access or storage may involve further processing of personal data pursuant to the GDPR.

In cases where such access to information or such storage of information is strictly necessary for the technically error-free delivery of our Services, this is done on the basis of § 25 para. 1 s. 1, para. 2 no. 2 TTDSG.

In cases where such a process serves other purposes (e.g. the needs-based design of our App), this will only be carried out on the basis of § 25 para. 1 TTDSG with your consent pursuant to Art. 6 para. 1 lit. a GDPR. The consent can be revoked at any time with effect for the future.

IV. Data that we collect and process

Account and registration information that you voluntarily submit to us and that identifies you personally, including contact information, such as your name, e-mail address, company name, address, phone number, and other information about yourself or your business.

The data you provide during a registration or login are used and managed by us to:

- to verify your right to use your account,

- to realize the terms of use of the App with all connected rights and responsibilities,

- to be able to get in touch with you to provide technical or legal notes, updates, security messages or other messages regarding the management of your account.

When you visit our Website or use our App, some information is automatically collected. This may include information such as the Operating System (OS) running on your device, Network, WI-FI, Internet Protocol (IP) address (which may be used to obtain your geolocation), access times, browser type, time zone, and language, Bluetooth and the website you visited before our Website. We also collect information about how you use our application and Services, including the elements you have interacted with, metadata and other details about these elements, clicks, change states and other user actions.

When you use our App, we use mobile analytics software to allow us to better understand the functionality of our App on your mobile device. This software may record information such as how often you use the application, the events that occur within the application, aggregated usage, performance data, and where the application was downloaded from. In addition to information, we collect on our Website, when you use our App we may also collect your city location, device model and version, device identifier (or “UDID”), and OS version.

We and our authorized partners may use cookies and other information gathering technologies for a variety of purposes. These technologies may provide us with personal information, information about devices and networks you utilize to access our Website, and other information regarding your interactions with our Website.

We partner with third parties to either display advertising on the Website or to manage our advertising on other sites. Our third-party partners may also use technologies such as cookies to gather information about your activities on our Website and other sites in order to suggest advertisements based upon your browsing activities and interests.

Web beacons, tags and scripts may be used on our Website or in email or other electronic communications we send to you. These assist us in delivering cookies, counting visits to our Website, understanding usage and campaign effectiveness, and determining whether an email has been opened and acted upon. We may receive reports based on the use of these technologies by our third-party service providers on an individual and aggregated basis.

We use Local Storage Objects (“LSOs”) such as HTML5 to store content information and preferences. Various browsers may offer their own management tools for removing HTML5 LSOs. Third parties with whom we partner to provide certain features on our Website or to display advertising based upon your web browsing activity use LSOs such as HTML5 to collect and store information.

As is true with most websites and Services delivered over the Internet, we gather certain information and store it in log files when you interact with our Website and Services. This information includes internet protocol (IP) addresses as well as browser type, internet service provider, URLs of referring/exit pages, operating system, date/time stamp, information you search for, locale and language preferences, identification numbers associated with your devices, your mobile carrier, and system configuration information. Occasionally, we connect personal information to information gathered in our log files as necessary to improve our Website and Services. In such a case, we would treat the combined information in accordance with this Policy.

We may also obtain other information, including personal information, from third parties and combine that with information we collect through our Website and application. For example, we may have access to certain information from a third-party social media or authentication service if you log into our Services through such a service or otherwise provide us with access to information from the service. Any access that we may have to such information from a third-party social media or authentication service is in accordance with the authorization procedures determined by that service. By authorizing us to connect with a third-party service, you authorize us to access and store your name, email address(es), current city, profile picture URL, and other personal information that the third-party service makes available to us, and to use and disclose it in accordance with this Policy.

External sensing capabilities are:

  • Voltage, Current and Energy Consumption of a charging process
  • Brightness to adjust the backlight illumination.
  • Temperature to observe the operating conditions of the device
  • Vehicle communication Signals (CP and PP)
  • States and system logs of the device based on the measured values

When diagnostic data transmission is activated, the measured values are saved for 7 days in the MRS-Cloud.

Further a RFID Sensor is used for user authentication and release of a charging process. The RFID token is stored locally on the device in hashed form.

V. How we use information

If you are an individual from the European Economic Area (EEA), our legal basis for collecting and using the personal information will depend on the personal information concerned and the specific context in which we collect it. However, we will normally collect personal information from you only where: (a) we have your consent to do so, (b) where we need the personal information to perform a contract with you (e.g., to deliver the services you have requested), or (c) where the processing is in our or a third party’s legitimate interests (and not overridden by your data protection interests or fundamental rights and freedoms). In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person.

Where we rely on your consent to process the personal information, you have the right to withdraw or decline your consent at any time. Please note that this does not affect the lawfulness of the processing based on consent before its withdrawal.

We will only disclose personal data if and to the extent that we are required to do so by law or by court or administrative order. The legal basis for this is Art. 6 (1) lit. c GDPR (legal obligation).

We share information, including personal information, with our third-party service providers that we use to provide hosting for and maintenance of our Website, application development, backup, storage, customer support, technical support, analytics, and other services for us. These third-party service providers may have access to or process your personal information for the purpose of providing these services for us. The legal basis for data processing described in this section 4 is Art. 6 (1) lit. b GDPR (lawfulness of processing) and Art. 28 GDPR (processor). We do not permit our third-party service providers to use the personal information that we share with them for their marketing purposes or for any other purpose than in connection with the services they provide to us.

In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We may disclose personal information to respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims. We may also share such information if we believe it is necessary in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our Terms of Service, or as otherwise required by law.

We may share your information with other affiliated companies. These companies use your information as described in this Privacy Policy.

We may share personal information with third parties only when we have consent to do so.

In the event that MRS Electronic GmbH & Co. KG is acquired by or merged with a third-party entity or undergoes a change of control or any form of sale or transfer of some or all of its assets, we reserve the right, in any of these circumstances, to transfer or assign the information that we have collected from users as part of that merger, acquisition, sale, or other change of control.

We may transfer your personal information to countries other than the one in which you live. We deploy the "International Data Localization Obligations" if we transfer personal information originating from the European Union or Switzerland to other countries not deemed adequate under applicable data protection law.

If you reside in a jurisdiction that imposes “data localization” or “data residency” obligations (i.e., requiring that personal information of its residents be kept within the territorial boundaries of such jurisdiction), and we become aware of that, we may maintain your personal information within such territorial boundaries, if we are legally obligated to do so.

You acknowledge and agree that while doing so, we may continue to collect, store and use your personal information elsewhere as explained above.

VI. Storage period

We will retain your personal information for no longer than necessary for the purposes for which it is processed, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

For personal information that we process on behalf of our Customers, we will retain such personal information in accordance with the terms of our agreement with them, subject to applicable law.

VII. Your privacy rights

You have the following rights regarding your personal data:

Right to information

You have the right to request information about your personal data processed by us in accordance with Art. 15 GDPR.

Right to rectification

The right to immediately request the correction of incorrect or complete personal data stored by us in accordance with Art. 16 GDPR.

Right to have data erased

You have the right to have your personal data erased in according with Art. 17 GDPR. According to this provision, your right to have your data erased may be excluded due to a conflicting interest.

Right to restriction

You have the right to have the processing of personal data concerning you limited in accordance with Art. 18 GDPR.

Right to withdraw the given consent

You have the right to withdraw your given consent to the processing of your personal data at any time according to Art. 7 para. 3 GDPR.

Right to data portability

The right to receive your personal data that you have provided to us in a structured, current, and machine-readable format or to request its transfer to another person responsible in accordance with Art. 20 GDPR.

The right to receive your personal data that you have provided to us in a structured, current, and machine-readable format or to request its transfer to another person responsible in accordance with Art. 20 GDPR.

Right to complain to a data protection regulatory authority

The right to complain to a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state in which we have our registered office or, if applicable, that of your usual place of work or usual residence.

Right to object

Right of objection If your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, insofar as this is for reasons resulting from your particular situation. If the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement to indicate a special situation.

Requests to access, change, or remove your information will be handled within thirty (30) days.

Upon receipt of a request from one of our Customers for us to remove the data, we will respond to their request within thirty (30) days. We will retain personal information that we store and process on behalf of our Customers for as long as needed to provide the Services to our Customers. We will retain and use this personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

If you are a Customer or otherwise provide us with personal information in connection with your use of our Website, application or Services, we will delete this information upon your request, provided that, notwithstanding such request, this information may be retained for as long as you maintain an account for our Services, or as needed to provide you with our Services, comply with our legal obligations, resolve disputes and enforce our agreements.

VIII. Data security & updates to this policy

We attach great importance to the protection of all personal data related to the App or its use. We have security measures in place for protection against the loss, misuse, and alteration of the data we store. Our security measures and privacy statement are reviewed and, where appropriate, updated, and improved. Only authorized employees have access to personal data.

We have taken additional, extensive precautions regarding the App and its use. Regardless of these precautions, the user should be aware that, regardless of any security measures, the exchange of information via the Internet can never be completely secure. We cannot guarantee the security of data transmitted via the App while it is being transmitted over the Internet.

In general, we only use your personal information in the manner described in the Privacy Policy in effect when we received that personal information. Your continued use of our Services constitutes your agreement to this Privacy Policy and any future revisions.