PotatoCharge respects your privacy. This policy explains what data we collect, why, and your rights under the General Data Protection Regulation (GDPR — EU regulation 2016/679).
1. Data controller
Data is processed by PotatoCharge, a peer-to-peer EV charging platform operating in Wallonia. Contact: hello@potatocharge.com.
2. Data collected and purposes
We only collect the data strictly needed to run the service:
| Category | Purpose | Legal basis |
|---|---|---|
| Identity (first name, last name, email) | Account creation and management, transactional communications, reminders to finish signing up (you can refuse them from any such email) | Contract performance |
| Postal address, ZIP code | Charger geolocation, host/driver matching | Contract performance |
| Vehicle (brand, model, battery capacity) | Charging session estimation, compatibility | Contract performance |
| Charger data (address, photos, power) | Publishing on the map for drivers | Contract performance |
| Bookings, sessions, dashboard photos | Billing, consumption proof, dispute resolution | Contract performance, legal obligation |
| Stripe customer ID | Payment processing | Contract performance |
| Charging receipt (driver and host names, full charger address, vehicle, times, energy, amounts, last 4 digits of the card) | Proof of payment given to the driver, who may forward it to their employer | Contract performance, legal obligation |
3. Retention period
Account data is kept while your account is active. Billing data (bookings, sessions, payments) is kept for 10 years in accordance with Belgian accounting law. Upon account deletion, personal data is erased within 30 days, except where legal retention obligations apply. Charging receipts are kept for 10 years from 1 January following their issue, including after account deletion, with restricted access, then deleted.
4. Sharing with third parties
We never sell your data. It's only shared with processors strictly needed for the service:
- Stripe (Ireland, EU adequate) — payment processing and secure payment-method storage. Stripe's privacy policy.
- Brevo (France) — transactional email delivery (confirmations, reminders, notifications). Brevo's privacy policy.
- OpenStreetMap / Nominatim — charger address geocoding. Requests are sent client-side from your browser.
- European cloud hosting — encrypted storage of photos (dashboard, chargers).
- Mercure Hub — real-time delivery of charger status and chat messages, with no persistent personal content.
- Google Analytics 4 (Google Ireland Limited) — anonymous audience measurement with IP anonymisation, only if you accepted in the cookie banner. Retention 14 months. See our cookie policy for details and opt-out.
All processors are bound by a contract compliant with article 28 of the GDPR.
The charging receipt shows the driver the host's name and the full charger address. The driver may forward it to their employer or any third party of their choice, who then receives it under their own responsibility.
5. Your rights
At any time, you can exercise the following rights:
- Right of access to your data
- Right to rectification if any data is inaccurate
- Right to erasure ("right to be forgotten")
- Right to restriction of processing
- Right to portability (export your data)
- Right to object to processing
- Right to lodge a complaint with the Belgian Data Protection Authority
To exercise these rights, write to dpo@potatocharge.com. We reply within 30 days maximum.
6. Security
Passwords are hashed (bcrypt). Communications are encrypted with TLS 1.3. The site supports two-factor authentication (TOTP) for additional protection.
7. PIN code orders
Buying a PIN code requires no account. We process your email address, the charger's PN and SN, the photo of the label and its digital fingerprint (a string of characters that lets us spot the same photo sent several times), the proof of your waiver of the right of withdrawal (date, time, IP address, browser) and the payment reference. The PIN code itself is not stored: it is recalculated when it must be shown or resent. Tip: frame the label tightly in the photo, so that the inside of your garage or home is not visible.
We deliver the code and correct input errors to perform the contract. We prove the waiver and keep the accounts to meet a legal obligation. We check that a real person is making the request and spot a reused photo or an already served serial number under our legitimate interest in preventing fraud. Such a case only raises a flag, which a team member then reviews: the order is delivered normally and no automated decision is made.
The photo is deleted 12 months after the order. The email, PN, SN, fingerprint and proof of waiver are deleted or anonymised after 3 years. An order abandoned before payment is deleted with its photo after 24 hours. The amount and payment reference are kept for 10 years for accounting.
The recipients are Stripe (payment, on its own page), Brevo (sending the email that contains the code), Cloudflare Turnstile (anti-bot check on the form) and the Platform's host, which stores the photo in a private space that is never publicly accessible.
You can exercise your rights without an account: write to dpo@potatocharge.com from the order's email address, quoting the order reference shown in the delivery email.
8. Changes
This policy may be updated. Any substantial change will be notified by email before it takes effect.