Privacy policy

Last updated: 9 September 2026

This page explains what personal data askacharge.com processes, what for, who it is shared with and how long it is kept. It is written to be read, not to tick a box.

One distinction matters from the start: when an operator uses askacharge.com to run its chargers, the data of its customers and drivers belongs to that operator, not to us. We process it on their behalf, as a processor. For the operator's own account data we are the controller.

Controller

OwnerJavier Ojanguren Otazua
Tax ID (NIF)30622841C
AddressBº Libao 23, 48114 Arrieta (Bizkaia), Spain
Emailinfo@askacharge.com
ActivitySaaS charge point management system (CSMS) for electric vehicle charging

What we process, and why

If you create an operator account

Name, email address, password (stored hashed with bcrypt, never in clear text), your brand's tax details and, if you enable two-factor authentication, the TOTP secret and backup codes. Legal basis: performance of the service contract.

If you are an operator's customer or driver

Name, email, phone, company, your charging sessions and, if you save a card, the customer and payment method identifiers Stripe returns to us. Card numbers never reach our servers — Stripe captures them directly. Legal basis: the contract between you and the operator, for which we act as processor.

If you charge by QR without an account

No account is created and you are not asked to identify yourself. We keep the charging session and the payment under an identifier of our own (of the form PAY-XXXXXXXXXX) so that a receipt can be issued and a refund handled.

Charging sessions and RFID cards

Charger, start and end times, energy delivered, meter readings and amount charged. For RFID cards we keep the tag code and the name of the person the operator issued it to. Legal basis: performance of the contract and tax obligations.

Technical records

The web server keeps access logs including IP addresses. Writes and rejected attempts made with each API key are recorded with IP, operation and result, and deleted after 90 days. Application errors are sent to our error tracking system. Legal basis: legitimate interest in the security and correct operation of the service.

Browsing the public website

The public site may use Google Tag Manager and Google Analytics (identifiers GTM-57HHVL33 and G-K0Q4RT1WFP) to measure visits in aggregate. They are not loaded until you accept: on your first visit a notice offers accept or reject, and until you choose, no analytics cookie is set and Google is not contacted. If you reject, nothing loads; if you accept, you can change your mind at any time from the Cookies link in the home page footer, which also deletes any that were set. Your choice is stored in your browser and expires after 24 months. Videos are embedded in no-cookie mode and do not contact YouTube until you press play. Legal basis: your consent.

Who it is shared with

Only with those needed to provide the service, and only what is needed:

RecipientPurpose
Stripe Payments Europe, Ltd.Driver payments, subscriptions and transfers to operators. This involves an international transfer to the United States, covered by the European Commission's standard contractual clauses.
Bizkaia Provincial Tax Authority (TicketBAI/Batuz) and the Spanish Tax Agency (Verifactu)Filing of issued invoices where the law requires it. Legal obligation.
HostingerEmail service for info@askacharge.com.
GlitchTipApplication error tracking so faults can be fixed.
Google Ireland Ltd.Visit measurement on the public website.
Other charging operatorsOnly if you use roaming: charging a session made on another operator's network requires sending that operator the session record, over the OCPI 2.2 protocol.

We do not sell personal data and do not share it for advertising purposes.

Where it is stored

On our own servers hosted in the European Union. The only transfers outside that scope are the ones listed above, mainly Stripe.

How long it is kept

DataRetention
Operator account and its contentsWhile the account is active, then for as long as needed to wind the relationship down.
Invoices and tax recordsThe statutory commercial and tax retention periods (up to 6 years).
Charging sessionsWhile the account exists, plus the tax periods where the session was invoiced.
API key activity trail90 days.
Web server access logsThe server's usual rotation, a few weeks.

Your rights

You can ask us for access to your data, its rectification or erasure, restriction of or objection to processing, and portability, by writing to info@askacharge.com. If you are an operator's customer, contact that operator: the platform gives them tools to export and delete their customers' data, and we help them if needed.

If you believe your request was not handled properly, you can complain to the Spanish Data Protection Agency (aepd.es).

Children

The service is aimed at businesses and professionals. It is not intended for minors and we do not knowingly collect their data.

Changes to this policy

If anything material changes, this page and its date are updated. Changes affecting active accounts are also notified by email.