This privacy policy (“Privacy Policy”) governs the data collection, processing, and usage of data made by Energy Plus NY., including its affiliated companies and subsidiaries (collectively “Energy Plus”, “Company”, “we” or “us”).
This Privacy Policy concerns the data we collect from individuals:
- who access and use our website available at: www.energyplusny.com (respectively “Website” and “Visitors”);
- users who have installed and are interacting with our end-user mobile application or our back-office mobile application or web interface (respectively “App”, and
“Users” – all together “Services” or “Product”);
Each of the Visitors and Users shall also be referred to herein as “you”.
This Privacy Policy constitutes an integral part of the Website Terms of Use and the Energy Plus Product End User License Agreement (EULA) (together “Terms”). Definitions used herein but not defined herein shall have the meaning ascribed to them in the Terms.
If you have any questions about this Privacy Policy, please contact us at: ev@energyplusny.com.
Business Partners
You may get access to our Products through a “Business Partner” who is the entity providing you with our products as part of their service. Please note that in some cases this may be your house board.
AMENDMENTS
We reserve the right to periodically amend or revise the Privacy Policy, which will immediately affect the implementation of the revised Privacy Policy on our Website or App. The last revision date will be reflected in the “Last Modified” heading located at the top of the Privacy Policy. We will make a reasonable effort to notify you if we implement any changes that substantially change our privacy practices. We recommend that you review this Privacy Policy periodically to ensure that you understand our privacy practices and to check for any amendments.
WHO ARE WE AND CONTACTING US
Energy Plus NY
670 Flushing Ave.
Brooklyn, NY 11206
Tel: 718-383-9255
Email: ev@energyplusny.com
Questions, comments, requests, and complaints regarding this Privacy Policy and the information we hold are welcome and should be addressed to us by using the contact details above. All requests will be dealt with promptly and efficiently.
DATA CONTROLLER / DATA PROCESSOR FOR EU RESIDENTS
We are the Data Controller of our direct Customers’ Personal Data and certain types of User’s Personal Data. If and when you use our Services as an end-user under a Business Partner we are the Processor of some of the Personal Data processed on behalf of the Business Partner, who is the Controller of the Personal Data, while we are still the Controller of other parts of the Data.
COLLECTION OF NON-PERSONAL DATA
We may collect aggregated, non-personal, and non-identifiable information which may be made available or gathered via your use of the Website or App (“Non-Personal Data”). We are not aware of the identity of the individual from which the Non-Personal Data is collected.
Also, we may sometimes process and anonymize or aggregate personal data and identifiable information in a manner that shall create a new set of data that will be Non-Personal Data. Such a new data set can no longer be associated with any identified person.
Non-Personal Data may be used by us without limitation and for any purpose, including for commercial, research, or statistical purposes, without further notice to you.
COLLECTION OF PERSONAL DATA
During your use of the Website or the App, some individually identifiable information may be collected, namely information that identifies an individual or may with reasonable effort be used to identify an individual (“Personal Data” or “Personal Information” as defined under applicable law).
This may include online identifiers, names, emails, etc., subject to applicable law.
If we combine Personal Data with Non-Personal Data, we will treat the combined data as Personal Data.
You are not obliged to provide us with any of your Personal Data. However, if you refrain from doing so, we may not be able to provide all of our Services to its full extent.
PROCESSING OF PERSONAL DATA
We have included in the table below information about which data is processed, how we process and use your data and the lawful basis for which we do so subject to the GDPR.
COOKIES USAGE
Like many other websites, the Website and parts of our System use cookies to improve your experience while you navigate the Website. We may use various types of Cookies:
- Essential Cookies – which are necessary for the site to work properly (usually appear under our name/cookie tag);
- Functional Cookies – designated to save your settings on the site – your language preference or other view preferences (also, under our name/cookie tag);
- Session Cookies – used to support the Website’s functionality – such Cookies are stored only temporarily during a browsing session and are deleted from your device when you close the browser.
- Targeting Cookies – These cookies are used to collect information from you to help us improve our products and services and serve you with targeted advertisements that we believe will be relevant to you (e.g., Google’s Cookies).
- Social networks Cookies – Social Plug-In Cookies (e.g., Facebook, Twitter, Linkedin Cookies, or pixels, etc.) enable sharing your usage information with your social networks accounts.
- Analytics Cookies – give us aggregated and statistical information to improve the Website and System and further develop it e.g., Google Analytics, Google Firebase Crashlytics, etc.
- Third-party services used by us – for example, an external service supporting our career and recruiting options through the Website (e.g., Comeet or Workday), or an external service that allows us to screen short videos on our Website (e.g., YouTube or Vimeo).
Please note that the data collected by the use of Cookies may be linked to and combined with any other data, including Personal Data.
Also note, that Cookies data is usually collected through third-party services, like Google, Facebook, etc. In those cases, your Personal Data might be transferred to those third parties, which might use it, as a “joint controller” of the data, meaning that the data is also “owned” and processed by them under their terms and conditions. Under those terms and conditions and the direct accounts or subscriptions you have with those third parties, your Personal Data might be linked to other data collected by the
relevant third party and processed in its systems, for its purposes, and under its management. For example, suppose you have a Facebook account, the Personal Data collected through Facebook’s Cookies on Our Website might be linked to other data Facebook collects and might be used by Facebook per the independent agreements between you and Facebook.
Managing cookies and opting out: aside from the Essential Cookies described above, you can always configure your browser or use the “cookies bar” installed in the Website to reject all cookies or notify you when a cookie is set, but sometimes, in that case, specific services, features, and functionality in the Website may not be available to you.
SHARING DATA WITH THIRD PARTIES
We do not share any Personal Data collected from you with third parties or any of our partners except in the following events:
- Sharing of Data with a Business Partner. As explained before, and as per your authorization, we will share your usage data with the Business Partner providing you services, to allow for the usage of our Services properly. The Business Partner (directly, or indirectly by us where instructed by the Business Partner) may share usage data with third parties governmental entities (such as energy departments, etc.) for the purpose of complying with certain environmental incentive plans or similar funding projects). Note that this usage data will include your identifying information such as name or contact details, rather solely information related to the charger you are using, its location and usage information;
- Legal Requirement: We will share your information in this situation only if we are required to do so to comply with any applicable law, regulation, legal process, or governmental request (e.g., to comply with a court injunction, comply with tax authorities, etc.);
- Policy Enforcement: We will share your information, solely to the extent needed to i) enforce our policies and agreements; or (ii) to investigate any potential violations thereof, including without limitations, detect, prevent, or take action regarding illegal activities or other wrongdoings, suspected fraud or security issues;
- Company’s Rights: We will share your information to establish or exercise our rights, to prevent harm to our rights, property, or safety, and to defend ourselves against legal claims when necessary, subject to applicable law,
- Third Party Rights: We will share your information, solely to the extent needed to prevent harm to the rights of our users, yourself, or any third party’s rights, property, or safety,
- Business Purpose – we may disclose your personal information to a third party for a business purpose, as detailed above. In addition, we may share usage data with governmental entities (such as energy departments, etc.), independently or on behalf of the Business Partner, for the purpose of complying with or participating in certain environmental plans, incentive plans or similar funding projects. Note that, this usage data will not include identifying information such as your name or
contact details, rather solely information related to the charger, such as its location and usage information (plug in and out times, energy rate, etc.). - Service Providers – we share your information with third parties that perform services on our behalf (e.g. storage and computing infrastructure, customer service, tracking, servers, service functionality, marketing, and support, etc.) these third parties may be located in different jurisdictions.
- Corporate Transaction – we may share your information in the event of a corporate transaction (e.g. sale of a substantial part of our business, merger, consolidation, or asset sale). In the event of the above, our affiliated companies or acquiring company will assume the rights and obligations as described in this Privacy Policy.
- Authorized Disclosures – we may disclose your information to third parties when you consent to a particular disclosure. Please note that once we share your information with another company, that information becomes subject to the other company’s privacy practices.
YOUR DATA SUBJECTS’ RIGHTS UNDER PRIVACY PROTECTION LAWS
Under EU law, EU residents and individuals have certain rights to apply to us to provide information or make amendments to how we process data relating to them. Those rights might include:
- right to access your Personal Data – you can ask us to confirm whether or not we have and use your Personal Data, and if so, you can ask for a copy of your data;
- right to correct your Personal Data – you can ask us to correct any of your Personal Data that is incorrect, after verifying the accuracy of the data first;
- right to erase your Personal Data – you can ask us to erase your Personal Data if you think we no longer need to use it for the purpose we collected it from you. You can also ask for such erasure in any case in which the process of your data was based on your consent, where we have used it unlawfully, or where we are subject to a legal obligation to erase your Personal Data. any request for such erasure will be subject to our obligations under the law (e.g., our obligation to keep some records for tax or customs purposes);
- right to restrict our use in your Personal Data – you can ask us to restrict our use of your Personal Data in certain circumstances;
- right to object to how we use your Personal Data – you can object to any use of your Personal Data which we have justified by our legitimate interest if you believe your fundamental rights and freedoms to data protection outweigh our legitimate interest in using the information;
- you can always require us to refrain from using your data for direct marketing purposes;
- you can ask us to transfer your information to another organization or provide you with a copy of your Personal Data (Portability Right);
We may not always be able to do what you have asked. Also, not all those rights apply in every jurisdiction. Yet, we encourage you to contact us with any such request, and we will be happy to assist you.
You have the right to complain at any time before the relevant supervisory authority for data protection issues. However, we will appreciate the chance to deal with your concerns before you approach the authorities, so please feel free to contact us in the first instance.
DATA RETENTION
Unless you instruct us otherwise, subject to applicable laws, we retain the information we collect for as long as needed to provide our services and to comply with our legal obligations, resolve disputes and enforce our agreements if applicable. We may keep some of your Personal Data as a user of our Services for more extended periods for protecting our legal interests or under any safety or other legal requirements.
Please note that where we act as a Processor on behalf of an account owner, the retention periods are under the sole discretion of the account owner, as the Data Controller.
Upon request, Energy Plus will delete personal identifiable data (PID) within 30 days.
Other non-identifiable data may take longer (up to 90 days).
SECURITY
We use physical, technical, and administrative security measures for the services that we believe comply with applicable laws and industry standards to prevent your information from being accessed without the proper authorization, improperly used or disclosed, unlawfully destructed, or accidentally lost.
However, unfortunately, the transmission of information via the Internet and online data processing cannot be 100% secure. As such, although we will do our best to protect your Personal Data, we cannot guarantee the security of data transmitted via the Website, or App and any transmission of your data shall be done at your own risk.
DATA PROCESSING LOCATION
We may store or process your Personal Data in a variety of countries, including the United States. Any such transfer of data shall be done in accordance with relevant and applicable law, and only after we have ensured the security and privacy of your data.
LINKS TO OTHER SITES
Our Website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our Website, we encourage you to read the privacy notice of every Website you visit.
CHILDREN
Our App and Website are not directed, nor is it intended for use by children or minors and we do not knowingly process a child’s information. We will discard any information that we receive from a user who is considered a “child” immediately upon our discovery that such a user shared information. Please contact us if you have reason to believe that a child has shared any information with us.
EFFECTIVE AS OF: February, 2024
