This Privacy Policy explains how BEV_r Global AB, registered in Sweden (“BEV_r”, “we”, “us” or “our”), collects, uses, shares and protects your personal data when you use the BEV_r CHARGE mobile application (the “App”), the CHARGE-ROUTE portal/platform, our RFID tokens, ad-hoc payment via QR code, autocharge, payment terminals and the electric-vehicle charging stations within our network (collectively, the “Services”).
This Policy should be read together with our Terms & Conditions and End-User Licence Agreement (the “Terms”) and our Cookie Policy. Capitalised terms not defined here have the meaning given to them in the Terms. BEV_r acts as the data controller for the personal data described in this Policy.
IMPORTANT — We process your personal data in accordance with the EU General Data Protection Regulation (GDPR), the Swedish Data Protection Act (lag (2018:218) med kompletterande bestämmelser till EU:s dataskyddsförordning) and other applicable data-protection law.
1. Data Controller
The controller responsible for processing your personal data is:
BEV_r Global AB Gasverksgatan 1, 531 60 Lidköping, Sweden Corporate registration number: 559447-3059 Data-protection contact: privacy@bevr.se Customer support: support@bevr.se — Telephone: +46 510 302 880
2. Personal Data We Collect
Depending on how you use the Services, we collect the following categories of personal data. We collect most of this data directly from you; some is generated automatically when you use the Services, and some may be received from our partners and payment providers.
2.1 BEV_r CHARGE customers
When you register and use a CHARGE Account, we typically process:
| Category | Examples |
|---|---|
| Account and identity data | Name, email address, password/login credentials, PIN or biometric authentication settings (stored on your device), phone number where provided. |
| Vehicle data | Vehicle information you add (e.g. make, model, registration or MAC address) where applicable. |
| Payment data | Payment card token/reference, billing information and transaction records. Full card numbers are handled by our payment service provider, not stored by us. |
| Charging session data | Charging station ID and location, start/stop times, energy (kWh) delivered, duration, tariff, RFID token identifier and session cost. |
| Device and technical data | Device identifiers, app version, operating system, IP address, log data, and — where you grant permission — location, camera (QR scanning), Bluetooth/NFC and push-notification data. |
| Support data | The content of your communications with our customer support. |
2.2 CHARGE-ROUTE portal customers
When you use the CHARGE-ROUTE portal/platform, including where you place customer orders, we typically process your name, contact details, delivery address, order and billing details, and the account and usage data needed to administer the portal and fulfil your order.
2.3 Data from third parties
We may receive personal data from our payment service providers (payment confirmation and fraud signals), from roaming and eMobility Service Providers (eMSPs) and charging partners whose stations you use, from identity-verification providers, and from public or credit-reference sources where necessary for fraud prevention or debt collection.
3. How and Why We Use Your Data
We process your personal data for the purposes and on the legal bases set out below (GDPR Article 6):
| Purpose | Legal basis |
|---|---|
| Create and administer your Account, authenticate you and provide the Services | Performance of a contract (Art. 6(1)(b)). |
| Enable and record charging sessions and fulfil CHARGE-ROUTE orders (incl. delivery) | Performance of a contract (Art. 6(1)(b)). |
| Process payments, pre-authorisations, invoicing and refunds | Performance of a contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)). |
| Comply with accounting, tax and consumer-protection obligations | Legal obligation (Art. 6(1)(c)). |
| Prevent, detect and investigate fraud, misuse and security incidents | Legitimate interests (Art. 6(1)(f)). |
| Provide customer support and handle complaints and disputes | Performance of a contract and legitimate interests (Art. 6(1)(b)/(f)). |
| Operate, maintain, secure and improve the Services and Network | Legitimate interests (Art. 6(1)(f)). |
| Send service messages (session status, billing, service updates) | Performance of a contract (Art. 6(1)(b)). |
| Send marketing and use optional cookies/analytics | Consent (Art. 6(1)(a)), which you can withdraw at any time. |
| Establish, exercise or defend legal claims | Legitimate interests (Art. 6(1)(f)). |
Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms. You may object to such processing as described in Section 8.
4. Location Data, Device Permissions and Notifications
To provide certain features the App may request device permissions, including location services (to find and route you to nearby charging stations), camera (to scan QR codes), Bluetooth/NFC (for autocharge or authentication), push notifications, and biometric authentication. You can grant or revoke these permissions at any time in your device settings; disabling a permission may limit or prevent certain features. Charging sessions inherently generate location data tied to the charging station used.
5. Who We Share Your Data With
We do not sell your personal data. We share it only as necessary for the purposes above, with the following categories of recipients:
- Payment service providers, for processing transactions and fraud prevention;
- IT, hosting and cloud-infrastructure providers who operate our systems on our behalf;
- Charging partners, roaming partners and eMSPs whose stations you use, to enable and settle sessions;
- Mapping, analytics and communications providers supporting the App and portal;
- Identity-verification providers, where verification is required;
- Debt-collection agencies and credit-reference agencies in the event of late or failed payment (see Section 13 of the Terms);
- Professional advisers, auditors and insurers; and
- Public authorities, courts and law-enforcement bodies where required by law or to defend legal claims.
Where a recipient processes personal data on our behalf, we put in place a data-processing agreement as required by GDPR Article 28.
6. International Transfers
We aim to keep your personal data within the EU/EEA. Where a provider processes data outside the EU/EEA, we ensure an adequate level of protection through an EU adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses, together with supplementary measures where required. You may request a copy of the relevant safeguards using the contact details in Section 11.
7. How Long We Keep Your Data
We keep your personal data only for as long as necessary for the purposes for which it was collected, and thereafter as required by law. In particular:
- Account data is kept for the life of your Account and deleted without undue delay after you close it, subject to the exceptions below;
- Accounting and transaction records (including invoices) are retained for seven (7) years following the end of the relevant financial year, in accordance with the Swedish Bookkeeping Act (bokföringslagen (1999:1078));
- Charging-session and CHARGE-ROUTE order data is retained for as long as needed to operate, bill and support the Services and to meet statutory obligations;
- Support communications are kept for as long as needed to handle your matter and any follow-up; and
- Data needed to establish, exercise or defend legal claims is kept until the relevant limitation periods expire.
When personal data is no longer required, we delete it or irreversibly anonymise it. As stated in the Terms, aggregated and anonymised data may continue to be used for analytics, reporting and statutory purposes.
8. Your Rights
Subject to applicable law, you have the right to:
- access the personal data we hold about you and obtain a copy;
- rectify inaccurate or incomplete data;
- erase your data (“right to be forgotten”) where the conditions are met;
- restrict or object to certain processing, including processing based on our legitimate interests;
- data portability, i.e. receive certain data in a structured, commonly used, machine-readable format;
- withdraw consent at any time, where processing is based on consent, without affecting prior processing; and
- lodge a complaint with a supervisory authority.
You can exercise most of these rights directly in the App or by contacting us at privacy@bevr.se. You can delete your Account at any time via “Settings → Account → Delete account” or by contacting support. Outstanding balances must be settled, and we may retain data where required to complete billing, comply with statutory obligations, or defend legal claims.
You may also lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, 104 20 Stockholm, www.imy.se, or with the supervisory authority in your country of residence.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure, including encryption in transit, access controls, and the use of vetted payment providers who handle full card details on our behalf. You are responsible for keeping your login credentials, PIN and any biometric authentication confidential, and must notify us immediately at support@bevr.se if you suspect unauthorised access to your Account, RFID token or device.
10. Cookies and Analytics
Our App, CHARGE-ROUTE platform and website use cookies and similar technologies to provide the Services, remember your preferences, measure performance and improve our offering. Full details, and how to manage your choices, are provided in our Cookie Policy at https://bevr.se/cookies/.
11. Children
The Services are not directed at children under 16. Access is not permitted for children under 16, and users under 18 may only register with verifiable consent from a parent or legal guardian, as set out in the Terms. We do not knowingly collect personal data from children under 16 without such consent.
12. Automated Decision-Making
We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. We may use automated checks to detect fraud and verify payment capacity; where relevant, these are reviewed by staff and do not replace your ability to contact us.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified to you in the App, on CHARGE-ROUTE or by email before they take effect. The current version is always available at https://bevr.se/privacy-policy/. Your continued use of the Services after the effective date constitutes acknowledgement of the updated Policy.
14. Contact Us
If you have any questions about this Policy or how we handle your personal data, please contact:
BEV_r Global AB Gasverksgatan 1, 531 60 Lidköping, Sweden Email: privacy@bevr.se (data protection) / support@bevr.se (support) Web: bevr.se
End of Privacy Policy