Effective date: 26 August 2025
Last updated: 22 December 2025
OCEAN EV Charging d.o.o. (“we”, “us”, “our”)
OCEAN EV Chargingd.o.o. is the company incorporated under the law of Republic of Slovenija, having its registered seat at Cesta ob Bregu 6, 1291 Škofljica, Slovenia, with registration number: 9964592000
Email: hello-at-oceanevcharging-dot-com
This policy applies to https://oceanevcharging.com (the “Service”).
OCEAN EV CHARGING collects and processes Personal Data in theday-to-day operations of its business. This Policy has been implemented tosubscribe Ocean’srelevant data privacy principals for the protection of Personal Data during theprocessing of Personal Data of its customers, contractors and other businesspartners.
This Policy applies to all users of our Ocean platform and its corresponding mobile application when ordering and performing subscription contracts for services provided by Ocean EV Charging and/or registering for the notifications about product news and organized events (Ocean EV ChargingNewsletter) and/ or when using any of technical support or services.
Ocean system as a part of Ocean Platform is the central system and this policy correspond to frontend part of Ocean Platform. Frontend system is connected with backend system and uses the charging station infrastructure information from Ocean backend and displays it to the end users on their mobile apps for their use to charge their electric vehicles (EV).
Personal data will be handled carefully and in accordance with (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC) (hereinafter: General Data Protection Regulation,GDPR) and applicable Slovenian data protection law and other legal regulations governing the protection of personal data.
“Personal Data”means any information relating to an individual that can be used to identify that individual
“User” means any individual, whose Personal Data are collected by Ocean EV Charging under this Policy.
“Processing” means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection,recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination orotherwise making available, alignment or combination, restriction, erasure or destruction.
“Operators” for the meaning of this Policy are OCEAN’s clients who manage their users via the back-end OCEAN system and can grant access to OCEAN EV CHARGING for 2nd and 3 rd level of support also by processing the Personal data of their users. When OCEAN EV CHARGING is giving the 2nd and 3rd level of support to Operators, OCEAN EV CHARGING will have access to certain PersonalData by connecting to the person’s Ocean instance via administrative role and OCEAN EV CHARGING is acting as the Data Processor.
We do not intentionally collect special category data. The controller collects and processes personal data based on consent, contractual relationship, and/or for the purpose of conducting its activities and legitimate interests of the controller. Personal data is also collected for the purpose of safeguarding the legitimate interests of the controller or third parties or for protecting the interests of the user, including, among other things, for the detection and prevention of fraud, ensuring the security of information technology and networks.
Personal data is also processed for technical, administrative, and operational reasons in to provide the user with content and support and services given to users of Ocean Platform that is most effectively presented on the user's application and or computer, to improve the operation of the app, website, including its usability, to manage the website, for troubleshooting purposes, data analysis for marketing purposes (including targeted marketing), service and technical support, to display and ensure content that would interest the user, and to ensure the security and protection of the website and app.
Providing personal data is mandatory for the performance of a contractual relationship or legal obligations. If an individual does not provide personal data, the controller will not be able to provide the service sit offers or the services under valid contract concluded with user.
Where we rely on legitimate interests, we balance them against your rights and expectations.
3.1.1. Collection of personal data for the purpose of mutual communication
The controller collects and processes personal data if the user has addressed a question to the controller and established contact with the controller, whereby it is considered that the user consents to the provision of personal data. This Policy is also applicable to the Ocean’s operators and customers (including its customer’s end- users), suppliers and other business partners. Ocean EV Charging may process Personal Data for the following purpose
The controller also collects personal data through the web/app interface if user has wanted to establish contact with the controller on the website or through e-mail/app and has provided requested personal data for this purpose.
Based on personal consent, the controller can collect and processes the following personal data:
•Identity data; name and surname, date of birth,
• street address, postal code, city;
• email address;
• phone number;
• Electric vehicle data (manufacturer, model, type, battery capacity)
The processing of Personal Data as defined in this 3.1.1. point affects the customers, employee’s business partners’ users, system operators’ employees’, contact persons (for the payer-company, business partner).
In the event of marketing to prospective customers, as may be conducted by the Ocean EV Charging or its partners (operators) Ocean EV Charging will first obtain user’s consent and ensure provisions are made to opt-out of such marketing for any time.
3.2. CATEGORIES OF PERSONALDATA THAT THE CONTROLLER COLLECTS FOR THE PURPOSE OF PROVIDING SERVICES TOUSERS
The controller also processes personal data for the purpose of:
➢ fulfilment of the Ocean’s contractual obligations;
➢provision of after-saleservices after the purchase of Ocean Platform;
➢processing support;
➢ processing customer/user’srequest;
➢invoicing and billing management;
➢ executing a contract or pre-contractual measures
This shall effect of the following groups of individuals:
- Customers;
- Employee’s;
- Payers (if not the same person as customer);
- Business partners’ users;
- System operators’ employees;
- Contact persons (for the payer – company,operators, other business partners).
The controller may collect and processes the following category of Personal Data:
• Identity data for invoicing:first name, last name, date of birth, e-mail, language, phone number, country,region, city, zip code, house/apartment number, username, payer ID, paymentmethods, location, nation ID number, tax ID number, contact ID;
• Data relating to theservices provided (including metering data), feedback the partner/operatorsprovide, metering related data (including electricity consumption):location, date and time of charging, duration of charging, value charged;
• Data relating to the vehicle data:manufacturer, model, type, battery capacity, driving range.
3.3. COLLECTION AND PROCESSINGOF PERSONAL DATA BASED ON LEGITIMATE INTERESTS
The controller collects andprocesses personal data based on the legitimate interests of the controller inorder to improve services, operator’s or customer experience, namely for the following purposes:
➢ statistical analysis ofwebsite/app visit;
➢ detection and prevention offraud, ensuring the security of information technology and network;
➢ ensuring and improving theoperation of the website/app and services of the controller;
➢ interacting with user for the customer management purpose;
➢ processing customer’s request;
➢ evaluation of data collected by our products/services.
For the specified purposes, thec ontroller collects and processes the following personal data:
• Identity data first name, last name, date of birth, e-mail, language, phone number, country, region, city, zip code, house/apartment number, username, payer ID, payment methods, location, nation ID number, tax ID number, contact ID, IP address;
• Data relating to the services provided : location, date and time of charging, duration of charging, value charged, electricity consumption;
• Data relating to the vehicle data:manufacturer, model, type, battery capacity, driving range.
3.4. PROCESSING OF PERSONALDATA FOR THE PURPOSES OF FULFILLING THE LEGAL OBLIGATIONS OF THE CONTROLLER
The controller collects and processes the user's personal data based on the legal obligations binding onthe controller, namely for the purpose of complying with applicable legislation in the field of Consumer protection rights, fraud, and deceit.
For the stated purposes, the controller collects and processes the following personal data:
• Identity data: first name, last name, date of birth, e-mail, language, phone number, country, region, city, zip code, house/apartment number, username, payer ID, payment methods, location, nation ID number, tax ID number, contact ID;
• Data relating to the services provided (including metering data), feedback the partner provides, metering related data (including electricity consumption): location, date and time of charging, duration of charging, value charged
• Data relating to the vehicle data:manufacturer, model, type, battery capacity, driving range.
We use essential cookies for the site to work. All other cookies (analytics/ads) are used only with your prior consent, which you can give, refuse, or withdraw at any time via our Cookie banner or Cookie Settings link in the footer.
Details of each cookie/vendor appear in our Cookie Policy (purposes, retention, provider, and how to opt out).
We share data with service providers acting as processors under contracts that require confidentiality and security, e.g.: hosting & infrastructure, content delivery, email/SMS providers, CRM/helpdesk tools, analytics/advertising vendors (only if you consent), security/anti-fraud tools, and professional advisers (lawyers/accountants).
We may also share where required by law or for mergers/restructuring (we’ll notify you where legally required). We do not sell personal data.
4. DISCLOSURE OF PERSONAL DATA TOTHIRD PARTIES, TO THIRD COUNTRIES, OR INTERNATIONAL ORGANIZATIONS
At the controller, a limited number of employees orcontractual partners have access to personal data for the purpose of carryingout business processes (employees in marketing departments, marketing,accounting,). These employees or contractual partners are bound byconfidentiality obligations regarding the protection of personal data. Thecontroller has established appropriate technical and organizational processesand measures to:
➢ protect the applicationsoftware used to process personal data,
➢prevent unauthorized access topersonal data during their transmission, including transmission viatelecommunications means and networks,
➢ensure an effective method ofarchiving, destroying, erasing, or anonymizing personal data,
➢ protect premises, hardware, andsoftware,
➢ enable later determination ofwhen individual personal data were processed and by whom, for the period duringwhich the individual data are stored.
The controller may disclose personal data to stateauthorities and law enforcement authorities if required by applicable law or ifnecessary to assert the controller's rights, including the terms of use of thecontroller or to protect the legitimate interests of the controller inaccordance with applicable law.
The controller may disclose personal data to stateauthorities authorized to conduct various investigations in accordance withapplicable law.
The controller also discloses user personal data to thirdparties, including:
Ø support in the field of IT,security, and business resources (these providers act as processors of personaldata, and the controller has signed appropriate data processing agreements withthem),
Ø business partners, operators,suppliers, and subcontractors to execute any contract concluded by thecontroller with the user (these providers act as processors of personal data,and the controller has signed appropriate data processing agreements withthem),
➢ Advertisers and advertising networks that need personal data to select and display relevant ads. The controller does not disclose identifiable individual data to advertisers but provides them with aggregate user data (with such aggregate data, advertisers can reach specific types of their target audience. The personal data collected by the controller from the user may be used and disclosed to advertisers, thus targeting their ads to the desired target audience),
➢ Analytics and search engine providers who try to improve and optimize the website/app for the controller.
The controller may, if necessary, share personal data with external consultants (e.g., lawyers, accountants, auditors), who provideappropriate protective measures against any unauthorized disclosure of personal data. The controller endeavours to exercise due diligence in selecting unrelated service providers and requires these service providers to maintain appropriate technical and organizational security measures to protect personal data and to process personal data only in accordance with the controller'sinstructions. Service providers may use subcontractors in providing services tothe controller, with the subcontractor being required to meet the same data protection requirements as the service provider itself.
If Personal Data may is to be used for a new purpose(other then covered by this Policy) and that purpose is materially different from which Personal Data was originally collected and processed or authorized or if the Personal Data should be disclosed to third party, not specified invalid Policy, Ocean EV Charging will obtain your prior consent. Requests for opt-ut of such collection of Personal Data should be sent to OCEAN EV CHARGING hello-at-oceanevhcarging.com or on address of OCEAN EV CHARGING– Cesta ob bregu 6,1291 Škofljica, with the addendum “Personal data protection in relation tousers of services of Ocean Platform
.
4.1. DATA TRANSFER TO THIRD COUNTRIES OR INTERNATIONALORGANIZATIONS
The controller may transfer personal data to third parties, to third countries, or international organizations. An exception is statistical data on website visits and usage, for which Google Analytics andFacebook online platforms are used for sending electronic notifications and informing about news and offers, as well as the controller's e-publications.
The Google Analytics online platform, in its Terms ofService and Privacy Policy, ensures compliance with the rules of the GeneralData Protection Regulation (GDPR) and confirms that it has obtained certification of compliance with the EU-U.S. Privacy Shield Framework.
Google Analytics allows users to adjust their data processing settings using the Google Analytics tool. All information aboutGoogle's terms of service and privacy policy is available in Terms of Service and Privacy Policy on Google website.
The use of third parties may involve the transfer of Personal Data across country borders. Also, business processes may require the transfer of Personal Data within the Company internationally.
IfPersonal Data is processed within the EU/ EEA, and in the event Personal Data is disclosed to third parties or to a country not considered as providing a sufficient level of protection according to applicable law OCEAN EV CHARGING will ensure, as necessary, that it implements Standard Contractual Clauses (SCC) as approved by the EU Commission or as approved by another Supervisory Authority according to Applicable Law and completes self-certification registration under the EU-US Data Privacy Framework Agreement and takes supplementary measures, such as an adequacy assessment, or adopts a Data Processing Addendum.
For Personal Data not processed within the EU/EEA, and in the event Personal Data are disclosed to third parties located outside the user’sJurisdiction, OCEAN EV CHARGING will ensure it obtains the required consents, implements necessary safeguards to protect Personal Data, and / or obtains Supervisory Authority approval as maybe required. Those mechanisms may differ depending on the country and relevant applicable law.
We keep personal data only as long as necessary for each purpose or as required by law. Typical periods:
If legal claims arise, we may retain relevant data until they are resolved.
You have the right to access, rectify, erase, restrict processing, object (including to direct marketing), and data portability, and to withdraw consent at any time (withdrawal does not affect prior processing).
We respond within one month (extendable once by two months for complex requests).
To exercise rights, email hello-at-oceanevcharging-dot-com.
Based on the General Data Protection Regulation and applicable legislation, the user has the following rights:
➢The individual ‘s right of access to their personal data
The user/individual person has the right to obtain confirmation from the controller as to whether or personal data concerning the mare being processed and, if so, access to the personal data.
➢ Right to rectification
The user/ individual person has the right to have inaccurate personal data concerning them rectified without undue delay by the controller. Considering the purposes of the processing, the user/individual person has the right to have incomplete personal data completed.
➢ Right to erasure
The user/individual person has the right to obtain fromthe controller the erasure of personal data concerning them without unduedelay, and the controller shall have the obligation to erase personal datawithout undue delay.
➢ Right to restriction of processing
The user/ individual person has the right to obtain from the controller restriction of processing where the accuracy of the data is contested by the data subject, where the processing is unlawful and the user/individual person opposes the erasure of the personal data and requests the restriction of their use instead, where the user/individual person has objected to processing pending the verification of whether the legitimate grounds of the controller override those of the data subject, or where the controller no longer needs the personal data for the purposes of the processing but they are required by the user/individual person for the establishment, exercise or defence of legal claims.
➢ Right to data portability
The user/ individual person has the right to receive the personal data concerning them, which they have provided to the controller, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.
➢ Right to object
The user/individual person has the right to object, on grounds relating to their particular situation, at any time to processing ofpersonal data concerning them which is based on the legitimate interests pursued by the controller, including profiling.
➢ Automated individual decision-making, including profiling
The user/individual person has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
➢ Right to lodge a complaint with a supervisory authority
The user/ individual person has the right to lodge a complaint concerning the processing of their personal data with the competent supervisory authority, i.e., the Information Commissioner of the Republic ofSlovenia.
Our Service is not directed to children. In Slovenia, a child can consent to online services from age 15; below that, consent must come from a parent/guardian. If we learn we have collected data from a child contrary to this rule, we will delete it.
We use appropriate technical and organisational measures (e.g., encryption in transit, access controls, least-privilege, backups, logging). No method is perfectly secure, but we work to protect your data against unauthorised access, alteration, disclosure, or destruction.
We will post updates here and, if changes are material, we will notify you by email or in-product notice before they take effect.
Questions or requests: hello-at-oceanevcharging-dot-com
Postal: OCEAN EV Charging d.o.o., Cesta ob bregu 6, 1291 Škofljica, Slovenia
