Privacy Policy

Nuvve, in its capacity as Data Controller, is particularly attentive to the protection and respect of your privacy. The purpose of this data privacy policy is to explain how we collect, use, and share your personal data in accordance with the Regulation. We invite you to read this document carefully in order to know and understand our practices regarding the processing of your personal data.

  1. Definitions

“Controller” means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing. In this case: Nuvve;

“Personal Data” or “Data” means any information relating to an identified or identifiable natural person. An “identifiable natural person” is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an on-line identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity;

“Regulation” means Regulation No. 2016/679 of the European Parliament and Council of 27 April 2016 on the protection of individuals with regard to the processing and transfer of personal data (GDPR) and the Data Protection Act No. 78-17 of 6 January 1978 as amended.

“Sensitive Data” means Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, health data or data concerning the sexual life or sexual orientation of a natural person. Nuvve does not process any sensitive data;

“Sites” refers to all websites published and managed by Nuvve.

  1. Data we collect in the course of serving individuals

We may collect and process the following Data:

2.1 Data we collect when you register for our service

In order to create an account and give you access to our service, we need to collect and process the following Data:

  • Identification data: email address, title, first name, last name, address, date of birth, telephone number, VIN of the vehicle, name assigned to the vehicle; These Data allow us to create your account and to register your vehicle for our service. If you provide us with personal information about a third party, you will be required to provide them with a copy of this policy.

2.2 Data we collect when your vehicle is connected to one of our Nuvve charging stations

As soon as your vehicle is connected to one of our Nuvve charging stations, we collect and process the following Data:

  • Name assigned to the vehicle connected to the said charging station;
  • VIN of the vehicle connected to the said charging station;
  • Fixed GPS position of the said charging station;
  • State of charge of the vehicle connected to the said charging station; Indeed, these Data enable us to provide you with our V2G service, namely: to display the state of charge of your vehicle, to control the charging process while ensuring your mobility needs, to enable you to force the charge at any time, to follow the charging schedule of your vehicle for billing purposes.

2.3 Data we collect when you subscribe to our newsletter

When you subscribe to our newsletter, we collect the following Data:

  • Last name;
  • First name;
  • Email address;
  • Phone number. These Data will allow us to contact you by email, mail, phone or SMS to inform you about Nuvve news, to invite you to our events.

2.4 Data we collect in the context of our customer relationship

In order to best respond to the various requests that you may send to us, particularly in the context of our after-sales service, we may have to process any type of Data communicated during exchanges with our Nuvve employees.

2.5 Data we collect through cookies and other trackers

Nuvve Sites use cookies installed on your computer when you browse. A cookie is a small file that records information about your browsing on a Site. The data thus obtained is intended to facilitate subsequent browsing on the Site and is also intended to enable various measures of traffic. To learn more about how we manage cookies and how to object to them, please consult our cookie policy.

2.6 Sensitive Data

Nuvve doesn’t process any Sensitive Data.

  1. Data we collect in the course of serving businesses

We may collect and process the following Data:

3.1 Data we collect when you register for our service

In order to create an account and give you access to our service, we need to collect and process the following Data:

  • Professional email address (provided by your company);
  • Name assigned to the vehicle. These Data allows us to create your account and to register the vehicle for our service.

3.2 Data we collect when your vehicle is connected to one of our Nuvve Charging Stations

As soon as the vehicle is connected to one of our Nuvve charging stations, we collect and process the following Data:

  • Name assigned to the vehicle connected to the said charging station;
  • VIN of the vehicle connected to the said charging station;
  • Fixed GPS position of the said charging station;
  • State of charge of the vehicle connected to the said charging station; Indeed, these Data enable us to provide you with our V2G service, namely: to display the state of charge of your vehicle, to control the charging process while ensuring your mobility needs, to enable you to force the charge at any time, to follow the charging schedule of your vehicle for billing purposes. These Data will also be used by your company’s fleet manager, in charge of the administration of the company’s vehicle fleet.

3.3 Data we collect in the context of our customer relationship

In order to best respond to the various requests that you may send to us, particularly in the context of our after-sales service, we may have to process any type of Data communicated during exchanges with our Nuvve employees.

3.4 Data we collect through cookies and other trackers

Nuvve Sites use cookies installed on your computer when you browse. A cookie is a small file that records information about your browsing on a Site. The data thus obtained is intended to facilitate subsequent browsing on the Site, and is also intended to enable various measures of traffic. To learn more about how we manage cookies and how to object to them, please consult our Cookie Policy.

3.5 Sensitive Data

Nuvve doesn’t process any Sensitive Data.

  1. Retention periods

Customers Data will be kept for 2 years after the end of the contract. During this period, your email address may be used to send you news about Nuvve, invite you to events, etc. Beyond this period, anonymized data for statistical studies will be kept. Visitors browsing Data will be kept for 13 months.

  1. Purposes and legal bases on which our processing is based

Purposes and legal bases on which our processing is based

Paragraph Purpose Legal basis
2.1 · Customer account creation

· Customer billing

Execution of a contract
2.2 · Display the state of charge of your vehicle

· Manage your mobility needs

· Follow your vehicle’s charging locations for billing purposes

Execution of a contract
2.3 · Sending newsletters Consent
2.4 · Customer relationship (e.g. after-sales service) Lawful interest
3.1 · Customer account creation Execution of a contract
3.2 · Display the state of charge of your vehicle

· Manage your mobility needs

· Supervise the vehicle fleet

Execution of a contract
3.3 · Customer relationship (e.g. after-sales service) Lawful interest
  1. Recipients of your Data

Your Data may be sent to:

  • Our subcontractors in charge of payment operations;
  • Our data collection service providers (third party charging point operators, car manufacturers);
  • Our IT service providers. In the event of reorganization or restructuring, whether planned or finalized, certain auditors, advisors, and purchasers may also have access to your Data.
  1. Data transfer

Nuvve does not transfer your Data outside the European Union. However, your Data may be hosted on servers located outside the European Union. In this case, Nuvve undertakes to take all necessary measures to preserve the integrity and security of your Data so that they are:

  • Located in a State considered adequate by the European Commission;
  • Sent to entities with sufficient guarantees regarding Data protection by implementing and signing standard contractual clauses approved by the European Commission.
  1. Security of treatment

Nuvve ensures that your Data is treated confidentially and securely by implementing the technical and organizational measures necessary to preserve its security, confidentiality, and integrity under optimal conditions. Only persons strictly authorized by Nuvve will have access to your Data. No unauthorized third party may have access to your Data, except for legal or union obligations incumbent on the Data Controller.

  1. Your rights

In application of the French Data Protection Act and the GDPR, you have at any time the right to access, modify or oppose commercial prospecting and, in the event of legitimate reasons, the right to limit the processing of your Data and the right to request the deletion of Data concerning you. You also have the right to the portability of your Data, the right to define guidelines concerning your Data in case of death and the right to withdraw your consent. You may exercise your rights by writing to dpo@Nuvve.com. If you are not satisfied with the processing of your Data or the exercise of your rights, you have the possibility to refer the matter to the CNIL.

  1. Update

This policy may be updated by Nuvve in the event of new treatments, including on the basis of:

  • Significant changes in legislation and/or case law as well as technical standards applicable to the information system;
  • Risk assessment;
  • Readjustments suggested by the implementation of internal information management procedures.

 

California Residents and the California Consumer Privacy Act

 

Last Updated 19 October 2021

 

This Privacy Policy is required by the California Consumer Privacy Act (“CCPA”).  For purposes of this Privacy Policy, “consumer” or “you” means individuals who are in California for other than a temporary or transitory purpose, and individuals who are domiciled in California who are outside California for a temporary or transitory purpose (“California Residents”) and “we” or “us” means Nuvve Holding Corp., and our subsidiaries (“Nuvve”).

 

The purpose of this Privacy Policy is to provide consumers with a comprehensive description of our online and offline practices regarding the collection, use, disclosure, and sale of personal information and of the rights of consumers regarding their personal information.

 

Right to Know About Personal Information Collected, Disclosed, or Sold

You have the right to request that we disclose what personal information we collect, use, disclose, and sell.

 

Access.  If you want to submit a verifiable consumer request under the CCPA, please use this button CONTACT US.

 

Verification. If you have a password protected account with us, we will verify your account through our existing authentication practices for your account and we will require you to re-authenticate yourself before disclosing your data. You must provide a copy of your vehicle registration.

 

If you do not have a password protected account with us and you submit a request to know, we will verify your identity to a reasonable degree of certainty by matching two reliable data points provided by you with data points we maintain. You must provide a copy of your vehicle registration.

 

If you do not have a password protected account with us and you submit a request to know specific pieces of personal information, we will verify your identity to a reasonably high degree of certainty by matching three reliable pieces of personal information provided by you with personal information we maintain. You will also be required to submit a signed declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request. You must provide a copy of your vehicle registration.

 

Children’s Personal Information. We do not have actual knowledge that we sell the personal information of minors under 16 years of age.

 

 

 

Right to Request Deletion of Personal Information

You have a right to request the deletion of your personal information collected by us. To submit a verifiable consumer request to delete by using this form CONTACT US.

 

Deletion of personal information collected by us may render the services we provide to You inoperable.

If you have a password protected account with us, we will verify your account through our existing authentication practices for your account and we will require you to re-authenticate yourself before deleting your data.  You must provide a copy of your vehicle registration.

 

If you do not have a password protected account with us and you submit a request to delete, we will verify your identity to a reasonable degree or a reasonably high degree of certainty depending on the sensitivity of the personal information and the risk of harm to you posed by unauthorized deletion.

 

Right to Opt-Out of the Sale of Personal Information

You have the right to opt-out of the sale of your personal information by us.

To opt-out of the sale of personal information, use this contact button CONTACT US.

 

Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights

You have the right not to receive discriminatory treatment by us for the exercise of the privacy rights conferred by the CCPA.

 

Authorized Agent

An authorized agent can make a request under the CCPA on your behalf. To designate an authorized agent, you must:

  • Provide your authorized agent signed permission to make a request to know or request to delete;
  • Verify your own identity directly with us; and
  • Directly confirm with us that you provided the authorized agent permission to submit the request.

This process does not apply when you have provided your authorized agent with power of attorney pursuant to California Probate Code sections 4000 to 4465.