Privacy Policy

1. Introduction and Data Controller

TAKE A CHARGE, SL respects your privacy. This Privacy Policy explains how we collect, use and protect your personal data when you use our website, the App and the Service, in accordance with Regulation (EU) 2016/679 (the "GDPR") and Spanish Organic Law 3/2018 ("LOPDGDD").

2. Data controller:

TAKE A CHARGE, SL, Carrer d’Aribau 258, 08006 Barcelona, Spain. Email for privacy matters: support@takeacharge.com.

3. Data We Collect

Information you provide: full name, email address, phone number, the content of your messages and company details (in partner applications).

Service and App data: rental history (duration, Station, times), approximate location data (only if you grant permission, in order to show nearby Stations), device information (IP address, operating system, device type) and App usage data.

Payment data: payments are processed by Stripe as an independent payment provider; we receive only transaction confirmations and the last digits of your card, never your full card details.

We do not collect special categories of personal data, and we ask you not to send us such data.

4. Purposes and Legal Bases (Article 6 GDPR)

Performance of a contract (Art. 6(1)(b)): creating and managing your account, providing Rentals, processing payments and providing customer support.

Legal obligation (Art. 6(1)(c)): keeping the invoicing, accounting and tax records required by Spanish law and responding to legitimate requests from the authorities.

Legitimate interest (Art. 6(1)(f)): preventing fraud and abuse, ensuring network and information security, managing unreturned or damaged devices and improving the Service. You may object at any time to processing based on legitimate interest.

Consent (Art. 6(1)(a)): for access to your device’s location and camera and for any optional communications. You may withdraw your consent at any time via your device settings or by contacting us, without affecting the lawfulness of prior processing.

We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you, and we never sell your personal data.

5. Disclosure of Data

We share personal data only with service providers acting as processors on our behalf, under contracts compliant with Article 28 GDPR — in particular Stripe (payment processing) and our cloud hosting providers — as well as with public authorities where required by law. Processors may process the data only in accordance with our documented instructions and must apply appropriate security measures.

6. International Transfers

Where personal data is transferred outside the European Economic Area, we ensure an adequate level of protection by means of European Commission adequacy decisions or Standard Contractual Clauses (SCCs), supplemented where necessary with additional safeguards. You may request a copy of the applicable safeguards at support@takeacharge.com.

7. Data Retention

Account data: retained while the account is active and deleted or anonymised within a reasonable period after closure, unless the law requires a longer period or the data is needed for the establishment, exercise or defence of legal claims.

Invoicing, transaction and accounting records: retained for 6 years in accordance with Article 30 of the Spanish Commercial Code and for at least 4 years for tax purposes in accordance with the Spanish General Tax Law.

Support communications: retained for as long as necessary to handle your request and any follow-up.

8. Data Security

We apply appropriate technical and organisational measures in accordance with Article 32 GDPR, including encryption in transit, access controls and periodic review of our security practices. In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority and, where applicable, the affected users, in accordance with Articles 33 and 34 GDPR.

9. Your Rights

Under the GDPR, you have the right to: access your personal data; rectify inaccurate data; obtain erasure ("right to be forgotten"); restrict processing; object to processing based on legitimate interest; data portability; and withdraw your consent at any time. To exercise these rights, write to support@takeacharge.com; we may need to verify your identity. We will respond within one month, extendable by two further months for complex requests, in which case we will inform you. Exercising these rights is free of charge.

If you believe your rights have been infringed, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or with the supervisory authority of your place of residence.

10. Minors

The Service is intended for users aged 18 or over and is not directed at minors. We do not knowingly process personal data of children under 14 (the age of digital consent in Spain under Article 7 of the LOPDGDD). If you believe a minor has provided us with personal data, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version, with its "Last updated" date, will always be published on our website and in the App, and material changes will be notified to you in advance.