Chargitect AS is committed to protecting the personal data of the people we work with: customers, partners, the people they invite to use our portal, and visitors to our website. This statement explains which personal data we process, why we process it, how long we keep it and which rights you have. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act.
1. Who is responsible
Chargitect AS (organisation number 932 874 415) is the data controller for the processing described in this statement, unless section 5 says otherwise.
Chargitect AS
Solheimsgaten 7C
5058 Bergen, Norway
contact@chargitect.com
If you have questions about how we handle personal data, or want to exercise your rights, contact us at the address above.
2. What this statement covers
This statement covers three places where we process personal data:
- Our public website at www.chargitect.com.
- The Chargitect portal at charge.chargitect.com, where our customers monitor and manage charging at their locations.
- Our ordinary business contact with customers, partners and suppliers, including email and meetings.
3. The website
Contact and demo forms
When you send a request through a form on our website, we receive the details you enter: your name, company, email address and message. We use them to answer your enquiry and to follow up on a possible customer or partner relationship. The legal basis is our legitimate interest in responding to people who contact us (GDPR article 6(1)(f)) and, where relevant, taking steps at your request before entering into a contract (article 6(1)(b)).
Form submissions are delivered to our mailbox through the form service Web3Forms, which acts as our processor.
Cookies and analytics
The website does not use analytics tools, advertising cookies or other tracking. It sets no cookies.
Third-party content
The website loads fonts and style resources from Google Fonts and a content delivery network. When your browser fetches those files, your IP address is sent to the provider. We use these services because they are reliable and widely cached; the legal basis is our legitimate interest in running a fast, consistent website (article 6(1)(f)).
4. The Chargitect portal
The portal is used by employees of our customers and partners, and by installers and other people a customer chooses to give access to. You get access because a customer, a partner or Chargitect has invited you.
Account and login
To give you access we process your name, your work email address and the identifier Microsoft assigns to your account. Sign-in happens through Microsoft Entra ID, using your existing work account or a Microsoft account created for the invitation. We store which organisations, locations and functions you may access, and who granted that access. The legal basis is our contract with the customer or partner that invited you (article 6(1)(b)) and our legitimate interest in controlling access to the portal (article 6(1)(f)).
Invitation emails
When you are invited, Microsoft sends an invitation email on our behalf. The email contains the name of the person who invited you and a short message from us. Your email address is shared with Microsoft for this purpose.
Cookies and browser storage
The portal only uses cookies and browser storage that are strictly necessary for it to work:
| Name | Purpose | Lifetime |
|---|---|---|
| portal-session | Keeps you signed in between page loads. | Session, or until you sign out. |
| NEXT_LOCALE | Remembers your language choice. | 1 year. |
| Microsoft sign-in tokens | Stored in the browser by the Microsoft sign-in library to keep your session valid. | Until the token expires or you sign out. |
The portal does not use analytics or advertising cookies.
Maps
When the portal shows a location on a map, the map tiles are fetched from OpenStreetMap, and in some views a static map image is fetched from Google Maps. Your IP address is sent to those providers when the map loads.
Technical logs
To keep the portal secure and to troubleshoot problems, we log requests to the portal with your IP address, browser type, time and which pages or data you accessed. The legal basis is our legitimate interest in operating a secure service (article 6(1)(f)).
5. When we process data on behalf of a customer
The core data in the portal describes our customers' charging infrastructure: charge points, charging sessions, energy consumption, batteries, solar production, schedules and alerts. Most of it is technical data about equipment. Some of it can be linked to a person, for example when a charging session is started with an RFID tag or an app account that belongs to a named driver, or when a vehicle is registered to a driver.
For this data, our customer is the data controller and Chargitect AS is the data processor. We process it only according to the customer's instructions and the data processing agreement that is part of our customer contract. If you are a driver or employee and have questions about this data, contact the company that operates the charging location. We will help them respond.
6. Customers, partners and suppliers
When you represent a customer, partner or supplier, we process your contact details, your role and our correspondence with you, in order to manage the relationship, deliver our services, invoice and comply with our own legal obligations, such as bookkeeping law. The legal basis is the contract with the company you represent (article 6(1)(b)), our legal obligations (article 6(1)(c)) and our legitimate interest in maintaining business relationships (article 6(1)(f)).
7. Service providers and transfers
We use the following service providers to deliver our services. Each acts as our processor and is bound by a data processing agreement.
| Provider | What it is used for | Location |
|---|---|---|
| Microsoft Azure | Hosting of the portal, databases and logs. | Norway and the EU/EEA. |
| Microsoft Entra ID | Sign-in, accounts and invitations to the portal. | EU/EEA (Microsoft EU Data Boundary). |
| Microsoft 365 | Email, documents and internal collaboration. | EU/EEA (Microsoft EU Data Boundary). |
| Web3Forms | Delivery of website form submissions. | May process data outside the EEA. |
| OpenStreetMap, Google Maps | Map tiles and map images in the portal. | May process data outside the EEA. |
| Google Fonts | Fonts on the website. | May process data outside the EEA. |
Where a provider processes data outside the EEA, the transfer is based on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We do not sell personal data, and we do not share it with third parties for their own marketing.
8. How long we keep data
- Website enquiries: until the enquiry is handled, and no longer than 12 months after our last contact, unless it leads to a customer or partner relationship.
- Portal accounts: for as long as you have access. When your access is removed, the account and its access history are deleted within 90 days, except for records we must keep for security or audit purposes.
- Technical logs: normally 90 days.
- Data we process for a customer: according to the customer's instructions and the data processing agreement, and returned or deleted when the customer contract ends.
- Business records: for as long as the relationship lasts, plus the period required by bookkeeping law, which in Norway is up to five years.
9. How we protect data
All traffic to the website and the portal is encrypted. Access to the portal is limited to the organisations, locations and functions each user has been granted. Our staff access customer data only when it is needed to deliver, support or improve the service, and access is logged. Our infrastructure runs on Microsoft Azure with the security controls the platform provides.
10. Your rights
Under the GDPR you have the right to:
- ask for access to the personal data we hold about you,
- have inaccurate data corrected,
- have data deleted where we no longer have a lawful reason to keep it,
- have processing restricted in certain situations,
- receive the data you have provided to us in a machine-readable format,
- object to processing based on our legitimate interest.
To exercise a right, email contact@chargitect.com. We answer within one month. If you believe we process your data unlawfully, you can complain to the Norwegian Data Protection Authority, Datatilsynet. We would appreciate the chance to resolve the matter with you first.
11. Changes to this statement
We update this statement when our services or the law change. The date at the top shows when it was last revised. Material changes to how the portal processes data will also be communicated to our customers.