Skip to content
Demo

Voltaback Terms of Use

Last updated: 27 March 2026

Who are we? VOLTABACK, a société par actions simplifiée (simplified joint-stock company) with share capital of €1,447.83, registered with the Nanterre Trade and Companies Register under number 938 589 512, with its registered office at 120 rue Jean Jaurès, 92300 Levallois-Perret (hereinafter “VOLTABACK” or “we”), provides a platform accessible at https://app.volta-back.com/ (hereinafter the “Platform”) for tracking and reimbursing the home charging of business electric vehicles (hereinafter the “Services”). The Platform is made available to you by the company that employs you or for which you provide services (the “Company”). In this context, VOLTABACK acts as a processor of the Company and processes personal data concerning you on behalf of the Company, which acts as the controller. VOLTABACK and the Company attach great importance to the protection of your personal data and take great care to comply with the provisions protecting privacy and governing the processing of personal data, in particular the French Data Protection Act (Loi Informatique et Libertés) no. 78-17 of 6 January 1978 and EU Regulation 2016/679 of 27 April 2016, known as the “GDPR” (the “Applicable Legislation”). This privacy policy (the “Privacy Policy”) sets out how VOLTABACK processes your data on behalf of the Company, as well as the measures taken to protect your privacy. If you have any questions or requests about our Privacy Policy or, more generally, about how we process your data, you can contact our data protection officer at the following email address: contact@volta-back.com

WHAT PERSONAL DATA DO WE COLLECT AND HOW DO WE USE IT?

We collect and process the following personal data when you submit a request to exercise your rights (see article 6):

  • Surname
  • First name
  • Email address
  • Proof of identity

As controller, we process the following data:

  • Purpose: management of browsing information on the Platform (cookies)
  • Categories of personal data processed: IP address, browsing data
  • Legal basis for our processing: Legitimate interest

HOW LONG IS YOUR PERSONAL DATA KEPT?  

Your data will be kept for a period not exceeding what is necessary to achieve the purposes set out in this policy. This period will be determined in particular by the applicable laws and regulations, any CNIL recommendations on the matter, the time needed to achieve the objective pursued, etc.

As controller, we keep your data for the following periods:

  • Browsing information. Retention period: 12 months.

WHO IS YOUR PERSONAL DATA SHARED WITH?

We may share your personal data with our partners and processors, in particular for the purposes of performing the Services.  

We ensure that our partners and processors process your personal data in accordance with the Applicable Legislation.

We may also pass on your personal data to the competent authorities where we are required to do so by law, or to our external advisers in the event of a dispute.

For the purposes set out above, your personal data may be transferred outside the European Union. In that case, we make sure that the partner or processor offers sufficient guarantees under the Applicable Legislation (in particular through the conclusion of the European Commission's standard contractual clauses).

If our business is sold to or merged with another company, your data may be transferred to the new owners of the business.

‍

HOW DO WE PROTECT YOUR PERSONAL DATA?

We take appropriate technical and organisational measures to ensure a level of security appropriate to the risks associated with your personal data. We make sure that personal data is not accidentally or unlawfully destroyed, lost, altered or disclosed without authorisation, and that it is not accessed without authorisation.

In this context, we take the following measures in particular:

  • Access control: access to data limited to staff with a strictly professional need (RBAC (Role-Based Access Control) model supplemented by an Identity and Access Management (IAM) system), with logging and regular audits.
  • Infrastructure security: hosting in secure data centres in the EU, with redundancy, firewalls and protection against common attacks.
  • Data encryption: all data is encrypted at rest and in transit (AES-256, TLS 1.3 enabled by default). Passwords are stored in hashed form using robust algorithms.
  • Employee training: all staff are trained in the GDPR and security, with regular awareness-raising and disciplinary measures in the event of a breach.
  • Isolation and backups: isolated development, test and production environments, use of anonymised data in testing, daily backups and regular continuity tests.
  • Detection and updates: automatic logs and alerts, regular audits and security checks before any release to production.

Although we undertake to use our best efforts to protect your personal data, you acknowledge that using the Internet involves data security risks (hacking, phishing, etc.).

OUR COOKIE POLICY

A cookie is a small text file that is downloaded to your computer when you visit certain websites or applications and that allows a website or application to recognise a user's computer, phone or tablet. Cookies are used to help users navigate websites and applications more efficiently and to use certain features, as well as to provide information to the owners of the website or application.

The list below sets out the cookies and trackers used by the Site, subject to your choices, together with their purposes and retention periods:

  • amp_ . Purpose: Support & Maintenance: Technical diagnosis and bug fixing through analysis of the user journey. Retention period: 12 months  
  • crisp-client. Purpose: Functional / Support: Continuity of the chat conversation and real-time user support. Retention period: 6 months  

Before using cookies or trackers, we ask for your consent for any cookies and trackers that are not strictly necessary for the use of our Platform, and you can filter cookies according to their purpose.

Your Internet browser may also allow you to block or delete cookies placed by the Platform. Your browser's Help function should tell you how to do this. Otherwise, you can visit the website www.allaboutcookies.org which provides general information about cookies and how you can manage them on your computer.

WHAT ARE YOUR RIGHTS?

You have various rights, listed below, which you can exercise at any time by sending your request to contact@volta-back.com or by post to the following address: 120 Rue Jean Jaures, 92300 Levallois-Perret.

  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can ask for your personal data to be updated if it is incorrect, incomplete or out of date.
  • Right to object: You can object to the processing of your personal data where it is based on our legitimate interest or where it involves profiling.
  • Right to erasure: You can ask for your personal data to be deleted, provided that you can show a legitimate reason.
  • Right to restriction: You can ask for the use made of your personal data to be restricted.
  • Right to portability: Within the limits provided for by law, you can ask to receive the personal data you have provided to us in a structured, commonly used format and to transmit that data to another controller.
  • Right to withdraw consent: You can withdraw your consent at any time.
  • Post-mortem instructions: You can set out instructions regarding the retention, erasure and disclosure of your personal data after your death.

‍

Any request must specify the personal data you wish to access, rectify, erase or replace, or whose processing you wish to restrict or for which you wish to invoke portability.

Notwithstanding the exercise of your right to erasure, we may keep certain personal data concerning you where the law requires or permits it, where we have a legitimate reason to do so, or for the establishment, exercise or defence of legal claims.

In order to respond to your request, we reserve the right to ask for further information and/or supporting documents.

You can also lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (www.cnil.fr, 3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07) if you consider that the processing of your personal data infringes your data protection rights.

‍

CHANGES TO THE PRIVACY POLICY

If our Privacy Policy changes, we will set out the changes on this page, so that you can find out at any time what data we collect and how we use it.