Skip to content
Demo

Voltaback Privacy Policy

Last updated: 27 March 2026

Who are we? VOLTABACK, a simplified joint-stock company (société par actions simplifiée) with share capital of EUR 1,447.83, registered with the Nanterre Trade and Companies Register under number 938 589 512, with its registered office at 120 rue Jean Jaurès, 92300 Levallois-Perret (hereinafter "VOLTABACK" or "we"), provides a platform accessible at https://app.volta-back.com/ (hereinafter the "Platform") for tracking and reimbursing home charging of business electric vehicles (hereinafter the "Services"). The Platform is made available to you by the company that employs you or for which you provide services (the "Company"). In this context, VOLTABACK acts as a processor for the Company and processes personal data concerning you on behalf of the Company, which acts as data controller. VOLTABACK and the Company attach great importance to the protection of your personal data and take great care to comply with the provisions protecting privacy and the processing of personal data, in particular the French Data Protection Act (Loi Informatique et Libertés) No. 78-17 of 6 January 1978 and Regulation (EU) 2016/679 of 27 April 2016, known as the "GDPR" (the "Applicable Legislation"). This privacy policy (the "Privacy Policy") sets out how VOLTABACK processes your data on behalf of the Company, as well as the measures taken to protect your privacy. If you have any questions or requests about our Privacy Policy or, more generally, about how we process your data, you can contact our data protection officer at the following email address: contact@volta-back.com

WHAT PERSONAL DATA DO WE COLLECT AND HOW DO WE USE IT?

We collect and process the following personal data when you submit a request to exercise your rights (see article 6):

  • Last name
  • First name
  • Email address
  • Proof of identity

As data controller, we process the following data:

  • Purpose: management of browsing information on the Platform (cookies)
  • Categories of personal data processed: IP address, browsing data
  • Legal basis for our processing: Legitimate interest

HOW LONG IS YOUR PERSONAL DATA KEPT?  

Your data will be kept for a period not exceeding that necessary to fulfil the purposes set out in this policy. This period will be determined in particular by the applicable laws and regulations, any CNIL recommendations on the matter, the time needed to achieve the objective pursued, etc.

As data controller, we keep your data for the following periods:

  • Browsing information. Retention period: 12 months.

WHO IS YOUR PERSONAL DATA SHARED WITH?

We may disclose your personal data to our partners and processors, in particular for the purposes of performing the Services.  

We ensure that our partners and processors process your personal data in accordance with the Applicable Legislation.

We may also pass your personal data on to the competent authorities when required to do so by law, or to our external advisers in the event of a dispute.

For the purposes set out above, your personal data may be transferred outside the European Union. In that case, we ensure that the partner or processor offers sufficient guarantees with regard to the Applicable Legislation (in particular through the conclusion of standard contractual clauses of the European Commission).

If our business is sold or merged with another company, your data may be transferred to the new owners of the business.

‍

HOW DO WE PROTECT YOUR PERSONAL DATA?

We take appropriate technical and organisational measures to ensure a level of security appropriate to the risks associated with your personal data. We ensure that personal data is not accidentally or unlawfully destroyed, lost, altered, disclosed without authorisation or accessed without authorisation.

In this context, we take the following measures in particular:

  • Access control: access to data limited to employees with a strictly professional need (RBAC (Role-Based Access Control) model supplemented by an Identity and Access Management (IAM) system), with logging and regular audits.
  • Infrastructure security: hosting in secure data centres in the EU, with redundancy, firewalls and protection against common attacks.
  • Data encryption: all data is encrypted at rest and in transit (AES-256, TLS 1.3 enabled by default). Passwords are stored in hashed form using robust algorithms.
  • Employee training: all employees are trained in the GDPR and security, with regular awareness-raising and disciplinary measures in the event of a breach.
  • Isolation and backups: isolated development, test and production environments, use of anonymised data in testing, daily backups and regular continuity tests.
  • Detection and updates: logs and automatic alerts, regular audits and security checks before any release to production.

Although we undertake to use our best efforts to protect your personal data, you acknowledge that using the Internet involves risks for data security (hacking, phishing, etc.).

OUR COOKIE POLICY

A cookie is a small text file that is downloaded to your computer when you visit certain websites or applications and that allows a website or application to recognise a user's computer, phone or tablet. Cookies are used to help users browse websites and applications more efficiently and to use certain features, as well as to provide information to the owners of the website or application.

The list below sets out the cookies and tracers used by the Site, subject to your choices, together with their purposes and retention periods:

  • amp_ . Purpose: Support & Maintenance : Technical diagnosis and bug resolution by analysing the user journey. Retention period: 12 months  
  • crisp-client. Purpose: Functional / Support : Continuity of chat conversations and real-time user support. Retention period: 6 months  

Before using cookies or tracers, we ask for your consent for cookies and tracers that are not strictly necessary for the use of our Platform, and you can filter cookies according to their purpose.

Your Internet browser may also allow you to block or delete cookies placed by the Platform. Your browser's Help function should tell you how to do this. Otherwise, you can visit the website www.allaboutcookies.org which provides general information on cookies and how you can manage them on your computer.

WHAT ARE YOUR RIGHTS?

You have various rights, listed below, which you can exercise at any time by sending your request to contact@volta-back.com or by post to the following address: 120 Rue Jean Jaures, 92300 Levallois-Perret.

  • Right of access : You can request disclosure of the personal data we hold about you.
  • Right to rectification : You can request that your personal data be updated if it is incorrect, incomplete or out of date.
  • Right to object : You can object to the processing of your personal data where it is based on our legitimate interest or where it involves profiling.
  • Right to erasure : You can request that your personal data be deleted, provided you can justify a legitimate reason.
  • Right to restriction : You can request that the use made of your personal data be restricted.
  • Right to portability : You can, within the limits provided by law, request to receive the personal data you have provided to us in a structured, commonly used format and to transmit that data to another data controller.
  • Right to withdraw : You can withdraw your consent at any time.
  • Post-mortem instructions : You can set instructions regarding the retention, erasure and communication of your personal data after your death.

‍

Any request must specify the personal data you wish to access, rectify, erase or replace, or whose processing you wish to restrict or for which you wish to invoke portability.

Notwithstanding the exercise of your right to erasure, we may keep certain personal data about you where the law requires or authorises it, where we have a legitimate reason to do so, or for the establishment, exercise or defence of legal claims.

In order to respond to your request, we reserve the right to ask for further information and/or supporting documents.

You may also lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (www.cnil.fr - 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07) if you consider that the processing of your personal data infringes your data protection rights.

‍

CHANGES TO THE PRIVACY POLICY

If our Privacy Policy changes, we will set out the changes on this page, so that you can find out at any time what data we collect and how we use it.