Información Legal

Privacy Policy

At CargaPark we value your privacy and are committed to protecting the personal data you entrust to us. This Policy explains who the data controller is, what data we collect, for what purpose and legal basis, with whom we share it and what rights you have. It applies to the CargaPark website, mobile app and charging services.

1. Data controller

Manuel Alba Garcés (hereinafter, "CargaPark"), trading as "CargaPark".
Tax ID (NIF): 53361689X.
Address (Spain): Calle San Juan Bautista 10 – 2, 46210 Picanya, Valencia.
Operations in Colombia: Carrera 11 # 82 – 01, Bogotá.
Privacy contact e-mail: info@cargapark.com.

No Data Protection Officer (DPO) has been appointed, as the conditions requiring one do not apply. For any matter regarding the processing of your data, please contact the e-mail address above.

2. Applicable law

We process your data in accordance with the law applicable to you based on your place of residence:

• Users in the European Economic Area (including Spain): Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Data Protection (LOPDGDD).
• Users in Colombia: Law 1581 of 2012, Decree 1377 of 2013 and related data protection regulations.

3. Data we collect

• Identification and contact data: first name, last name, e-mail, phone number.
• Account data: access credentials (your password is stored encrypted).
• Payment data: handled and tokenised by our payment gateway; CargaPark does not store your full card number.
• Location data: device location, when you authorise it, to show nearby charging points, the map and the route planner.
• Charging session data: station and connector used, energy consumed, duration, amount and date.
• Vehicle and identification data: vehicle details and, where applicable, RFID card/tag identifiers.
• Device technical data: model, operating system, IP address and push notification identifiers.
• Support data: the communications you exchange with our support team.

4. Purposes and legal basis

Purpose	Legal basis
Create and manage your account and provide the charging service.	Performance of the contract.
Process payments, issue invoices and keep accounting records.	Performance of the contract and compliance with legal obligations.
Show nearby points, the map and routes using geolocation.	Consent (revocable in your device settings).
Send notifications about the status of your charging sessions.	Performance of the contract.
Send marketing communications and news.	Consent.
Ensure security and prevent fraud and misuse.	Legitimate interest.
Handle your enquiries and support requests.	Performance of the contract and legitimate interest.

5. Recipients and processors

To provide the service we share data, strictly as necessary, with:

• Payment gateway providers, to process transactions.
• Hosting and technology infrastructure providers.
• Push notification providers and map/geocoding services.
• The owners of the charging points (operators or "hosts", CPOs) where necessary to start, manage or settle a charging session.
• Public authorities and courts, where there is a legal obligation.

These providers process the data on behalf of CargaPark under the corresponding data processing agreements.

6. International transfers

As CargaPark operates in Spain and Colombia, and some providers may be located outside the European Economic Area, your data may be subject to international transfers. In such cases we apply appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission or adequacy decisions. For users in Colombia, transfers are carried out with the safeguards required by Law 1581 of 2012.

7. Retention periods

We keep your data while your account remains active. After you close it, we will keep it blocked for the applicable legal periods (in particular tax and accounting obligations, which in Spain can reach up to 6 years, and the equivalent periods in Colombia) and for as long as necessary to address potential liabilities. After those periods, we will delete or anonymise your data.

8. Your rights

You may exercise at any time the rights of access, rectification, erasure, objection, restriction of processing, portability and to withdraw consent. Users in Colombia also have the rights to know, update, rectify and delete their data and to revoke authorisation.

To exercise them, write to info@cargapark.com stating the right you wish to exercise and attaching proof of your identity. You can request the deletion of your account directly from the app, under "Settings › Delete account".

9. Complaints to the supervisory authority

If you believe we have not properly handled your rights, you may file a complaint with the competent authority: the Spanish Data Protection Agency (AEPD, www.aepd.es) in Spain, or the Superintendence of Industry and Commerce (SIC) in Colombia.

10. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or destruction, including encryption of communications and access controls.

11. Minors

Our services are intended exclusively for persons over 18. We do not knowingly collect data from minors; if we detect that a minor has registered, we will delete the account.

12. Changes to this Policy

We may update this Policy to reflect legal or service changes. We will publish the current version on this page, indicating the date of the last update.