Skip to content
Demo

Voltaback Privacy Policy

Last updated: 27 March 2026

Who are we? VOLTABACK, a French simplified joint-stock company (société par actions simplifiée) with share capital of €1,447.83, registered with the Nanterre Trade and Companies Register under number 938 589 512, whose registered office is at 120 rue Jean Jaurès, 92300 Levallois-Perret, France (hereinafter "VOLTABACK" or "we"), provides a platform accessible at https://app.volta-back.com/ (hereinafter the "Platform") for tracking and reimbursing the home charging of business electric vehicles (hereinafter the "Services"). The Platform is made available to you by the company that employs you or for which you provide services (the "Company"). In this context, VOLTABACK acts as a processor for the Company and processes personal data about you on behalf of the Company, which acts as the controller. VOLTABACK and the Company attach great importance to protecting your personal data and take great care to comply with the provisions protecting privacy and the processing of personal data, in particular French Data Protection Act No. 78-17 of 6 January 1978 (loi Informatique et Libertés) and Regulation (EU) 2016/679 of 27 April 2016, known as the "GDPR" (the "Applicable Legislation"). This privacy policy (the "Privacy Policy") explains how VOLTABACK processes your data on behalf of the Company, and the measures taken to protect your privacy. If you have any questions or requests about our Privacy Policy or, more generally, about how we process your data, you can contact our data protection officer at the following email address: contact@volta-back.com

WHAT PERSONAL DATA DO WE COLLECT AND HOW DO WE USE IT?

We collect and process the following personal data when you submit a request to exercise your rights (see article 6):

  • Last name
  • First name
  • Email address
  • Proof of identity

As controller, we process the following data:

  • Purpose: management of browsing information on the Platform (cookies)
  • Categories of personal data processed: IP address, browsing data
  • Legal basis for our processing: Legitimate interest

HOW LONG IS YOUR PERSONAL DATA KEPT?

Your data will be kept for no longer than is necessary to achieve the purposes set out in this policy. This period will be determined in particular by the applicable laws and regulations, any recommendations from the CNIL (the French data protection authority) on the matter, the time needed to achieve the objective pursued, etc.

As controller, we keep your data for the following periods:

  • Browsing information. Retention period: 12 months.

WHO IS YOUR PERSONAL DATA SHARED WITH?

We may share your personal data with our partners and processors, in particular to perform the Services.

We make sure that our partners and processors process your personal data in accordance with the Applicable Legislation.

We may also pass your personal data to the competent authorities when required to do so by law, or to our external advisers in the event of a dispute.

For the purposes set out above, your personal data may be transferred outside the European Union. In that case, we make sure that the partner or processor offers sufficient safeguards under the Applicable Legislation (in particular by entering into the European Commission's standard contractual clauses).

If our business is sold to or merged with another company, your data may be transferred to the new owners of the business.

‍

HOW DO WE PROTECT YOUR PERSONAL DATA?

We take appropriate technical and organisational measures to ensure a level of security appropriate to the risks to your personal data. We make sure that personal data is not accidentally or unlawfully destroyed, lost, altered or disclosed without authorisation, and that it is not accessed without authorisation.

In this context, we take the following measures in particular:

  • Access control: access to data limited to staff with a strictly professional need (RBAC (Role-Based Access Control) model supplemented by an Identity and Access Management (IAM) system), with logging and regular audits.
  • Infrastructure security: hosting in secure data centres in the EU, with redundancy, firewalls and protection against common attacks.
  • Data encryption: all data is encrypted at rest and in transit (AES-256, TLS 1.3 enabled by default). Passwords are stored in hashed form using robust algorithms.
  • Staff training: all staff are trained in the GDPR and security, with regular awareness sessions and disciplinary measures in the event of a breach.
  • Isolation and backups: isolated development, test and production environments, anonymised data used in testing, daily backups and regular continuity tests.
  • Detection and updates: automatic logs and alerts, regular audits and security checks before any release to production.

Although we are committed to doing our utmost to protect your personal data, you acknowledge that using the Internet carries data security risks (hacking, phishing, etc.).

OUR COOKIE POLICY

A cookie is a small text file downloaded to your computer when you visit certain websites or apps, which allows a website or app to recognise a user's computer, phone or tablet. Cookies are used to help users navigate websites and apps more efficiently and to use certain features, as well as to provide information to the owners of the website or app.

The list below sets out the cookies and trackers used by the Site, subject to your choices, together with their purposes and retention periods:

  • amp_ . Purpose: Support & Maintenance: Technical diagnosis and bug fixing through analysis of the user journey. Retention period: 12 months
  • crisp-client. Purpose: Functional / Support: Chat conversation continuity and real-time user support. Retention period: 6 months

Before using cookies or trackers, we ask for your consent for any cookies and trackers that are not strictly necessary to use our Platform, and you can filter cookies according to their purpose.

Your web browser may also let you block or delete cookies placed by the Platform. Your browser's Help function should tell you how. Otherwise, you can visit the website www.allaboutcookies.org which gives general information on cookies and how you can manage them on your computer.

WHAT ARE YOUR RIGHTS?

You have various rights, listed below, which you can exercise at any time by sending your request to contact@volta-back.com or by post to the following address: 120 Rue Jean Jaures, 92300 Levallois-Perret, France.

  • Right of access: You can ask for a copy of the personal data we hold about you.
  • Right to rectification : You can ask us to update your personal data if it is incorrect, incomplete or out of date.
  • Right to object: You can object to the processing of your personal data when it is based on our legitimate interest or involves profiling.
  • Right to erasure: You can ask us to delete your personal data, provided you have a legitimate reason.
  • Right to restriction : You can ask us to restrict the use made of your personal data.
  • Right to data portability: Within the limits set by law, you can ask to receive the personal data you have provided to us in a structured, commonly used format and to transmit that data to another controller.
  • Right to withdraw consent: You can withdraw your consent at any time.
  • Post-mortem instructions: You can set instructions regarding the retention, erasure and communication of your personal data after your death.

‍

Any request must specify the personal data you wish to access, rectify, erase or replace, or whose processing you wish to restrict, or for which you wish to invoke portability.

Notwithstanding the exercise of your right to erasure, we may keep certain personal data about you where the law requires or permits it, where we have a legitimate reason to do so, or for the establishment, exercise or defence of legal claims.

To respond to your request, we reserve the right to ask for further information and/or supporting documents.

You can also lodge a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (www.cnil.fr - 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07, France) if you consider that the processing of your personal data infringes your data protection rights.

‍

CHANGES TO THE PRIVACY POLICY

If we change our Privacy Policy, we will set out the changes on this page, so that you can find out at any time what data we collect and how we use it.