Kiunga cha sera ya faragha

 ZOLA Electric
Privacy Statement

 

  1. Introduction

We add great importance to your privacy. This Privacy Statement, provides information on the processing of personal data by companies belonging to the ZOLA Electric group of companies, hereafter also referred to as ‘ZOLA’, ‘we’ or ‘us’. ZOLA is committed to protecting the privacy of individuals who visit our website and make use of our products and/or services.

In this Privacy Statement we describe who we are, how, when and for which purposes we process your personal data, how you can exercise your privacy rights and all other information which allows you to understand how your personal data are processed at ZOLA.

All references to data protection related terminology (such as ‘personal data’, ‘processing’, ‘controller’, ‘processor’) are to be read in line with the definitions given under the European General Data Protection Regulation (GDPR; 2016/679).

This Privacy Statement may be changed over time, we encourage you to consult this Privacy Statement regularly for any changes. We will always inform you in the event of significant changes to this Privacy Statement. This Privacy Statement applies since June 1st 2019. The last modifications to this Privacy Statement were made on May 27th 2019.

 

  1. When does this privacy statement apply?

This Privacy Statement is applicable to the processing by ZOLA of all personal data of its customers, suppliers and business partners. This Privacy Statement does not address the processing of personal data of applicants or employees in the context of their employment relationship with ZOLA.

The information provided in this Privacy Statement is applicable in relation to the use of ZOLA’s website and to the use of ZOLA’s products and/or services. It applies to the processing of personal data for the purposes as set out under this Privacy Statement.

 

  1. WHAT is personal data?

Personal data as mentioned in this Privacy Statement means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as for example a name, an identification number, location data or an online identifier.

 

  1. Who is responsible for your personal data?

ZOLA Electric Netherlands B.V. (ZOLA), registered in the Netherlands, is the controller for the processing that falls within the scope of this Privacy Statement. ZOLA will only share your personal data with external parties insofar as this is indicated in this Privacy Statement.

 

  1. How do we collect your personal data?

ZOLA may collect your personal data:

  • From you when you interact with us through our website or mobile apps; or
  • From you when you buy or make use of our services and/or products; or
  • Through our sales partners.

When processing personal data on the basis of consent, we do not knowingly collect personal data from, or direct any of our content specifically to, children under the age of 16. If you are under the age of 16 and processing is based on consent, we only process your personal data with parental consent. If we learn or have reason to suspect that you are under the age of 16 and if we have no record of parental consent, we will promptly take action to gain such consent or delete your personal data.

 

  1. For which purposes do we process your personal data?

At ZOLA we take measures to only collect and process personal data which is necessary for specific purposes. In doing so we avoid processing more personal data than is necessary. The following section sets out when and for which purposes ZOLA may process your personal data.

      6.1. When you do business with us

     a) For the conclusion and execution of our business agreement

When you have purchased a product or service from us as a customer, either online, via telephone or on location, or when you work together with us as a supplier or business partner, we process your personal data for administrative purposes such as registering you in our systems and sending invoices. We also use your personal data in order to deliver and administer our products or services to you and to ensure the confidentiality and security of your account.

For this purpose, we process the following personal data categories about you:

  • Contact details (such as name, address details, telephone number, email address)
  • Payment information (such as bank account details, overview of payment transactions)
  • Background information (such as current job status, income details, household information)

This purpose has a legal basis under Article 6(1)(b) and (c) GDPR, processing is necessary in order to be able to provide you our products and/or services or based on a legitimate interest pursued by ZOLA.

On the basis of this legitimate interest, we process personal data in order to verify the eligibility of our customers before delivering our products and/or services.

     b) For you to be able to make use of our products and/or services and for their technical, functional and operational management

If you make use of our products and/or services, we process personal data in order for you to be able to make use of them and for their technical, functional and operational management. We also process personal data through the use of our mobile app used by our customers. For this purpose, we process the following personal data categories about you:

  • Contact details (such as name, address details, telephone number, email address, GPS location)
  • Product usage (such as current and historical energy consumption and generation)
  • App usage information (such as visited pages, frequency of use)

This purpose has a legal basis under Article 6(1)(b) and (f) GDPR, processing is necessary in order to be able to provide you our products and/or services or based on a legitimate interest pursued by ZOLA.

On the basis of this legitimate interest, we process personal data to manage our products and services in order for us to be able to provide them to you in the best possible way.

     c) For relationship management and marketing

We use the information stored in our customer database to provide customer services and to perform account management and to send you suitable offers. We also use your personal data internally in order for us to conduct and develop marketing strategies and analyses. For this purpose, we process the following personal data categories about you:

  • Contact details (such as name, address details, telephone number, email, address)

This purpose has a legal basis under Article 6(1)(a), (b) and (f) GDPR, processing is based on consent, necessary in order to be able to provide you our products and/or services or based on a legitimate interest pursued by ZOLA.

On the basis of this legitimate interest, we process personal data to conduct market analyses and develop internal marketing strategies for our customers.

     d) For the development and improvement of our business

We process your personal data in order to assess, analyse and improve our business. We use personal data to analyse and gain further insight into customer accounts and to develop or adjust our products and services accordingly.

For this purpose, we process the following personal data categories about you:

  • Customer details (such as address, purchase history, overview of payment transactions, interaction history)
  • Product usage (such as current and historical energy consumption and generation)
  • Mobile App and website usage information (such as visited pages, frequency of use)

This purpose has a legal basis under Article 6(1)(f) GDPR, processing is based on a legitimate interest pursued by ZOLA.

On the basis of this legitimate interest, we process personal data internally to improve our products and services in order for us to optimize our business and the functioning of our products and services.

      6.2. When you interact with ZOLA

     a) For organisational management

We process your personal data in the daily operations and organisation of our business. This includes general management, order management and management of our assets. ZOLA also processes your personal data for its internal management. We provide central processing facilities in order to work more efficiently. We conduct audits and investigations, implement business controls, and manage and use customer, supplier and business partner directories. Also, we process your personal data for finance and accounting, archiving and insurance purposes, legal and business consulting and in the context of dispute resolution.

For this purpose, we process the following personal data categories about you:

  • Contact details (such as name, address details, telephone number, email address)
  • Payment information (such as overview of payment transactions)

This purpose has a legal basis under Article 6(1)(b) and (f) GDPR, processing is necessary in order to be able to provide you our products and/or services and based on a legitimate interest.

On the basis of this legitimate interest, we process personal data to manage and organise our organisation.

     b) To communicate with you (online and offline)

If you get in touch with us via our contact details or via our website, we will use your personal data in order to reply and answer your question.

For this purpose, we may process the following personal data categories about you:

  • Contact details (such as name, address details, telephone number, email address)
  • Other personal data as communicated by you through your correspondence with us

This purpose has a legal basis under Article 6(1)(f) GDPR, processing is based on a legitimate interest pursued by ZOLA.

On the basis of this legitimate interest, we process personal data to be able to communicate with you.

     6.3. To comply with the law

In some cases, we process your personal data to comply with applicable laws and regulations. Also, in order to comply with applicable laws and regulations, we may need to disclose your personal data as a consequence of a request of a regulatory agency or supervisory authority. We will only adhere to such requests if there is a legal obligation to do so.

For this purpose, we may process the following personal data categories about you:

  • Contact details (such as name, address details, telephone number, email address)
  • Purchase history (such as delivered products and/or services)

This purpose has a legal basis under Article 6(1)(c) GDPR, processing is necessary for the compliance with a legal obligation.

 

  1. Who has access to your personal data?

      7.1. Access to your personal data within ZOLA

personal data is shared internally within ZOLA only to the extent necessary to serve the purposes set out in this Privacy Statement. Our employees are aware of the need to respect your privacy and are authorized only to access personal data when it is necessary for them to carry out their respective functions.

Is your personal data transferred internationally?

We may use internal central databases where your personal data are stored. Through the use of these central databases, personal data may be shared with our entities outside of the European Economic Area (EEA). If your personal data are transferred to a country outside of the EEA, we take measures to ensure that your personal data are adequately protected. We do this by entering into EU Standard Contractual Clauses or by ensuring that there is an EU adequacy decision in place.

     7.2. Access to your personal data by external parties

The following categories of external parties may have access to personal data for the provisioning of their products or services to us for the purposes set out in this Privacy Statement:

  • IT partners;
  • Logistics partners;
  • Technical installation partners;
  • Distributors, resellers and agents;
  • Financing institutes;
  • Third-party analytics tools (to obtain analytics on the use and functioning of the ZOLA app or website);
  • Government entities (if required by law);
  • Contractors

If an external party processes your personal data solely following instructions from ZOLA, it acts as a data processor. Prior to interacting with and prior to sharing any personal data with such data processors, we enter into a data processing agreement with them. In a data processing agreement we include obligations and safeguards to ensure that your personal data are processed by the data processor solely to provide services to us in line with the purposes set out in this Privacy Statement and that this is done subject to the same level of protection as awarded to you by ZOLA.

Is your personal data transferred internationally?

If your personal data are transferred to an external party in a country outside of the European Economic Area (EEA), we take measures to ensure that your personal data are adequately protected. We do this by entering into EU Standard Contractual Clauses with these external parties or by ensuring that there is an EU adequacy decision in place.

In other cases, your personal data will not be supplied to external parties, except where required by law.

 

  1. How are your personal data secured?

ZOLA has taken adequate safeguards to ensure the confidentiality and security of your personal data. We have taken steps to implement technical, physical and organizational measures to protect personal data against accidental or unlawful destruction or accidental loss, damage, alteration, unauthorized disclosure or access as well as all other forms of unlawful processing or further processing.

 

  1. How long are your personal data retained?

ZOLA ensures that it retains personal data only if it is necessary for any of the specific purposes as set out in this Privacy Statement. Your personal data will be made anonymous or deleted when your personal data is no longer necessary for the purposes for which these personal data were collected.

 

  1. How can you exercise your privacy rights?

You have the right to request access to an overview of your personal data, and under certain conditions, rectification and/or erasure of personal data. In addition, you may also have the right of restriction of processing concerning your personal data, the right to object to processing as well as the right to data portability.

To invoke any of these rights, please contact us by using the contact details at the bottom of this Privacy Statement. Please keep in mind that we may ask for additional information to verify your identity.

If you have given your consent to a certain purpose, you can withdraw your consent at any time. Please keep in mind that withdrawal does not have retrospective effect. You can contact us by contacting privacy@zolaelectric.com.

 

  1. How can you contact us?

If you have any remaining questions about the way we process your personal data or if you have a complaint, please contact ZOLA first via privacy@zolaelectric.com.

 

Should you believe that we do not process your personal data carefully or are not satisfied with the information you received from us, you can lodge a complaint with your data protection authority. ZOLA Electric Netherlands B.V. is registered in the Netherlands. Should you wish to contact the Dutch data protection authority, please see their contact details below:

 

Dutch Data Protection Authority

Bezuidenhoutseweg 30

2594 AV The Hague

The Netherlands.