Privacy Policy

Last updated: 5 July 2026

Introduction

This Privacy Policy explains how Gaia Charge collects, uses, stores and protects your personal data when you visit https://gaiacharge.com/ or buy our electric-vehicle (EV) charging products and services. We process your personal data in line with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”), Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (“LOPDGDD”), and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (“LSSI-CE”).

Please read this policy carefully. By using our website and services, you confirm that you have read and understood how we handle your personal data.

Data Controller

The data controller responsible for your personal data is:

Gaia Charge SL
NIF: B21797311
Calle de Felipe Salvador 11, Pta 9
46022 Valencia, Spain
Phone: +34 960 135 709
Email: support@gaiacharge.com

If you have questions about this policy or want to exercise your rights, contact us using the details above.

What Personal Data We Collect

Depending on how you interact with us, we may collect the following types of personal data:

• Identification and contact data, such as your name, surname, email address, telephone number, and postal or billing address.
• Billing and transaction data, such as your order details, purchase history, the products or services you buy, amounts paid, invoicing information, and payment confirmation. We do not store your full card details; these are handled directly by our payment processor (see “Who We Share Your Data With”).
• Account data: if you create an account, the credentials and preferences linked to it.
• Technical and navigation data, such as your IP address, browser type and version, device information, operating system, referring pages, and the date and time of your visit. This is collected automatically through server logs and cookies.
• Communications data: anything you tell us when you contact our support team, send us an email, or otherwise get in touch.

Why We Process Your Data and Our Legal Basis

We only process your personal data where we have a valid legal basis under Article 6 GDPR. The purposes and their legal bases are:

• To process and manage your orders, payments and any refunds, and to provide the products and services you buy. Legal basis: performance of a contract to which you are a party (Article 6(1)(b) GDPR).
• To meet our legal obligations, including tax, accounting and invoicing requirements. Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR).
• To send you commercial communications and marketing about our products and services, where you have opted in. Legal basis: your consent (Article 6(1)(a) GDPR).
• To use non-essential cookies and similar technologies for analytics and functionality. Legal basis: your consent (Article 6(1)(a) GDPR and Article 22.2 LSSI-CE).
• To keep our website secure, prevent fraud, and analyse and improve how our services are used. Legal basis: our legitimate interest in running a secure and effective service (Article 6(1)(f) GDPR).
• To answer your enquiries and provide customer support. Legal basis: performance of a contract or our legitimate interest in responding to you (Article 6(1)(b) or 6(1)(f) GDPR).

Refunds and Digital Sales

Our sales are digital only. There are no cancellations or returns; only refunds apply. We process your transaction and payment data to complete your purchase and to handle any refund under Royal Legislative Decree 1/2007 approving the consolidated text of the General Law for the Defence of Consumers and Users. The conditions that govern refunds are set out in our Terms and Conditions and Refund Policy, which are separate documents and not part of this Privacy Policy.

Is Providing Your Data Mandatory?

Providing certain personal data is a contractual requirement for completing a purchase. If you do not give us the identification, contact and billing data we ask for, we cannot process your order, deliver the service, issue an invoice, or handle a refund. Providing data for marketing is always optional and based on your consent; declining does not affect your ability to buy from us.

Who We Share Your Data With

We do not sell your personal data. We share it only with the recipients below, and only where necessary:

• Payment processor: payments are processed through MONEI (payment gateway). When you pay, your payment data is sent to and processed by MONEI as an independent recipient to complete the transaction and any refund.
• Hosting and IT service providers who host our website and store data on our behalf under a data processing agreement.
• Tax authorities and public bodies, where we are legally required to disclose information, for example to the Spanish Tax Agency (Agencia Tributaria).
• Professional advisers, such as accountants or legal advisers, where necessary and under appropriate confidentiality obligations.

International Data Transfers

We aim to keep your personal data within the European Economic Area (EEA). Where a recipient or service provider processes data outside the EEA, we put appropriate safeguards in place as required by Chapter V GDPR, such as an adequacy decision by the European Commission or Standard Contractual Clauses (SCCs). You can request more information about these safeguards using the contact details above.

How Long We Keep Your Data

We keep your personal data only for as long as we need it for the purposes it was collected for:

• Transaction, invoicing and accounting data is kept for the legally required period, which under the Spanish Commercial Code (Código de Comercio) and applicable tax legislation is generally six years.
• Account data is kept for as long as your account stays active. If you close your account, we delete or anonymise the data, except where we must keep certain records to meet legal obligations.
• Marketing data is kept until you withdraw your consent or object to receiving communications.
• Support and communications data is kept for as long as we need it to handle your enquiry and for a reasonable period afterwards.

Once these periods expire, we securely delete or anonymise your personal data.

Your Rights

Under the GDPR and the LOPDGDD, you have the following rights over your personal data:

• The right of access, to confirm whether we process your data and get a copy of it.
• The right to rectification of inaccurate or incomplete data.
• The right to erasure (the “right to be forgotten”), to have your data deleted where the legal conditions are met.
• The right to restriction of processing in certain circumstances.
• The right to data portability, to receive your data in a structured, commonly used and machine-readable format.
• The right to object to processing based on our legitimate interests or to direct marketing.
• The right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects. We do not carry out this kind of automated decision-making.

To exercise any of these rights, contact us at support@gaiacharge.com. We may ask you to verify your identity before we respond, and we will respond within the timeframes set by law.

Withdrawing Your Consent

Where we process your data based on your consent, you can withdraw that consent at any time. Withdrawing consent is as easy as giving it, for example by using the unsubscribe link in our emails or by contacting us at support@gaiacharge.com. Withdrawing consent does not affect the lawfulness of any processing we carried out before you withdrew it.

Right to Lodge a Complaint

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), C/ Jorge Juan 6, 28001 Madrid, Spain, website www.aepd.es. We would appreciate the chance to address your concerns directly first, so please feel free to contact us before you approach the AEPD.

Cookies

Our website uses cookies and similar technologies. Essential cookies are needed for the website to work and do not require consent. Non-essential cookies, such as those used for analytics, are only installed with your consent, which we request through our cookie banner in line with Article 22.2 of the LSSI-CE. You can accept, reject or manage your choices at any time through the cookie banner or your browser settings.

The cookies we use are:

We also use Plausible Analytics to measure website traffic. Plausible is privacy-focused and does not use cookies or collect personal data.

Security Measures

We have put in place appropriate technical and organisational measures, as required by Article 32 GDPR, to protect your personal data against unauthorised access, loss, alteration or disclosure. These measures include encryption of data in transit, access controls, and secure handling of payment data through our certified payment provider. We take reasonable steps to safeguard your data, but no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Minors

Our website and services are meant for adults and are not intended for minors. In line with Article 7 of the LOPDGDD, we do not knowingly collect personal data from anyone under the age of 14 without the authorisation of a parent or legal guardian. If you believe a minor under 14 has given us personal data, contact us at support@gaiacharge.com and we will take steps to delete that information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. Any updated version will be published on this page with a revised “Last updated” date. We encourage you to check this policy from time to time.

Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, contact us at:

Gaia Charge SL
Calle de Felipe Salvador 11, Pta 9, 46022 Valencia, Spain
Email: support@gaiacharge.com
Phone: +34 960 135 709