Terms and Conditions of Use of VoltaBack
Last updated: March 27, 2026
Who are we?
VOLTABACK, a simplified joint-stock company (Société par actions simplifiée) with a share capital of €1,447.83, registered with the Nanterre Trade and Companies Register under number 938 589 512, with its registered office at 120 rue Jean Jaurès, 92300 Levallois-Perret, France (hereinafter “VOLTABACK” or “we”), provides a platform accessible at https://app.volta-back.com/ (the “Platform”) enabling the tracking and reimbursement of professional electric vehicle charging at home (the “Services”).
The Platform is made available to you by the company that employs you or for which you provide services (the “Company”). In this context, VOLTABACK acts as a data processor on behalf of the Company, which acts as the data controller, and processes your personal data on its behalf.
VOLTABACK and the Company attach great importance to the protection of your personal data and carefully ensure compliance with applicable data protection laws, in particular French Data Protection Act No. 78-17 of January 6, 1978, and Regulation (EU) 2016/679 of April 27, 2016 (GDPR) (the “Applicable Legislation”).
This privacy policy (the “Privacy Policy”) explains how VOLTABACK processes your data on behalf of the Company and the measures implemented to protect your privacy.
If you have any questions or requests regarding this Privacy Policy or more generally about how we process your data, you may contact our Data Protection Officer at: contact@volta-back.com
WHAT PERSONAL DATA DO WE COLLECT AND HOW DO WE USE IT?
We may collect and process the following personal data when you submit a request to exercise your rights (see Article 6):
- Last name
- First name
- Email address
- Proof of identity
We also process, as data controller, the following data:
- Purpose: management of browsing information on the Platform (cookies)
- Categories of personal data: IP address, browsing data
- Legal basis: legitimate interest
HOW LONG DO WE KEEP YOUR PERSONAL DATA?
Your data will be retained only for the time necessary to fulfill the purposes described in this policy. This duration depends in particular on applicable laws and regulations, recommendations of the CNIL, and the time required to achieve the intended purpose.
As data controller, we retain your data for the following periods:
- Browsing information: 12 months
WITH WHOM IS YOUR PERSONAL DATA SHARED?
We may share your personal data with our partners and subcontractors, particularly for the provision of the Services.
We ensure that our partners and subcontractors process your data in compliance with the Applicable Legislation.
We may also disclose your data to competent authorities where required by law, or to external advisors in the event of a dispute.
Your data may be transferred outside the European Union. In such cases, we ensure that appropriate safeguards are in place, particularly through the use of the European Commission’s standard contractual clauses.
If our business is sold or merged, your data may be transferred to the new owners.
HOW DO WE PROTECT YOUR PERSONAL DATA?
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risks associated with your personal data. We ensure that your data is not accidentally or unlawfully destroyed, lost, altered, disclosed, or accessed without authorization.
In particular, we implement the following measures:
- Access control: access restricted to employees with a strict business need (RBAC model combined with Identity and Access Management (IAM)), with logging and regular audits
- Infrastructure security: hosting in secure EU data centers, with redundancy, firewalls, and protection against common attacks
- Data encryption: all data encrypted at rest and in transit (AES-256, TLS 1.3 enabled by default); passwords stored in hashed form using robust algorithms
- Employee training: all staff trained in GDPR and security, with regular awareness and disciplinary measures in case of breach
- Isolation and backups: separate development, testing, and production environments; anonymized data in testing; daily backups and regular continuity testing
- Monitoring and updates: logging and automated alerts, regular audits, and security checks before deployment
Despite our best efforts, you acknowledge that the use of the Internet involves risks (e.g., hacking, phishing).
OUR COOKIE POLICY
A cookie is a small text file downloaded to your device when visiting certain websites or applications, enabling recognition of the device. Cookies help users navigate efficiently and enable certain features, as well as provide information to the site owner.
Below is a list of cookies and trackers used by the Platform, subject to your choices, along with their purposes and retention periods:
- amp_
- Purpose: support & maintenance (technical diagnostics and bug resolution through user journey analysis)
- Retention: 12 months
- crisp-client
- Purpose: functional/support (chat continuity and real-time user support)
- Retention: 6 months
Prior to using non-essential cookies, we obtain your consent. You may manage or refuse cookies at any time.
Your browser also allows you to block or delete cookies. You can consult your browser’s help section or visit www.allaboutcookies.org for more information.
WHAT ARE YOUR RIGHTS?
You have the following rights, which you may exercise at any time by contacting us at contact@volta-back.com or by post at: 120 rue Jean Jaurès, 92300 Levallois-Perret, France:
- Right of access: obtain a copy of your personal data
- Right to rectification: correct inaccurate or outdated data
- Right to object: object to processing based on legitimate interest or profiling
- Right to erasure: request deletion of your data, subject to valid grounds
- Right to restriction: limit the processing of your data
- Right to portability: receive your data in a structured, commonly used format and transfer it to another controller
- Right to withdraw consent: withdraw consent at any time
- Post-mortem directives: define instructions regarding your data after your death
Any request must specify the data concerned and the right you wish to exercise.
We may retain certain data where required by law or for legal claims. To process your request, we may ask for additional information or proof of identity.
You also have the right to lodge a complaint with the French Data Protection Authority (CNIL) if you believe your rights have been violated.
CHANGES TO THIS PRIVACY POLICY
In the event of changes to this Privacy Policy, we will indicate the updates on this page so that you remain informed about the data we collect and how we use it.