Privacy Policy
INFORMATION ON PERSONAL DATA
1. Introduction – Information about the Data Controller
This policy of the société anonyme under the name “ERMIS SOCIÉTÉ ANONYME FOR TRANSPORTATION, EXPLOITATION, TRADE OF PETROLEUM PRODUCTS AND PROVISION OF SERVICES” and the distinctive title “ERMIS A.E.M.E.E.”, based in Amaroussion, 12A Irodou Attikou street, with VAT number 094025320 of KEFODE Athens Tax Office and General Commercial Registry (“G.E.M.I.”) No. 121988401000, concerns the collection of personal data through the website www.incharge.gr, the website https://drive.incharge.,gr, the incharge application, the internet in general, and the telephone.
With this policy, we want to explain to you as simply and clearly as possible:
- What data we process
- For what purposes and on what legal basis we process it
- How long we keep it
- Who are the recipients of your data, and
- What your rights are in relation to your data and how you can exercise them.
In the context of operating our services, we may collect and process personal data that may lead to your direct or indirect identification, through:
- our website www. incharge. gr;
- our Facebook page
- https://www.facebook.com/profile.php?id=61582637048198#;
- the website https:// drive. incharge. gr (for electric vehicle services) and the corresponding application;
- telephone communications in general; as well as
- our electronic promotional activities, According to EU and national legislation, some of this information constitutes personal data (e.g., name, postal address, contact telephone number, email address) and can be used to identify you (hereinafter referred to as “Personal Data” or “Data”).
As users of our services and visitors to our websites, you are referred to as “data subjects,” while we are the “data controllers” of your personal data.
“Processing of Personal Data” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, and destruction.
The Controller of your personal data is the société anonyme under the name “ERMIS SOCIÉTÉ ANONYME FOR TRANSPORTATION, EXPLOITATION, TRADE OF PETROLEUM PRODUCTS AND PROVISION OF SERVICES” based in Amaroussion, Attica, 12A Irodou Attikou street, Postal Code 15124, with VAT Number 094025320, Athens Tax Office, General Electronic Commercial Registry (GEMI) number 121988401000, telephone: 218 88 18102** (*charges depend on the price list of your telecommunications provider, ** local call charges) – (For calls from abroad or mobile phones, call +30 218 88 18102), E-mail: [email protected].
“ERMIS SOCIÉTÉ ANONYME FOR TRANSPORTATION, EXPLOITATION, TRADE OF PETROLEUM PRODUCTS AND PROVISION OF SERVICES” is
registered in the Register of Electric Mobility Infrastructure and Market Operators, pursuant to Article 13 of Law 4710/2020 “Promotion of electric mobility and other provisions” (A’ 142).
Our company owns and manages the website www.incharge.gr, the website https://drive.incharge.gr, and other websites. For any clarification or additional information regarding this privacy policy, as well as the exercise of your rights and requests arising from EU and national legislation, you can contact our company’s Data Protection Officer at the email address [email protected] or at the postal address 12A Irodou Attikou street, Amaroussion, Postan Code 15124, (for the attention of the Data Protection Officer).
2. Basic principles of processing your data
We process your data in a lawful and transparent manner, in accordance with EU legislation (General Data Protection Regulation 679/2016) and national legislation. We collect and process your data only for explicit, legitimate, and specified purposes and only to the extent necessary for the purposes for which we process it.
We retain data only for as long as necessary, in accordance with the law, the company’s purposes and policy, and we ensure that it is as accurate as possible.
We make every effort to ensure that your data is secure and protected from unlawful processing, accidental or malicious loss and destruction, and unauthorized access. We have implemented a comprehensive information security program. We have adopted appropriate internal security policies and procedures, policies and technologies that ensure data security, and we have trained our executives and staff to comply with data confidentiality and privacy rules. Our staff and third-party partners are committed to maintaining the confidentiality and privacy of the data to which they have access.
The websites www.incharge.gr and https://drive.incharge.gr use the latest updated version of the TLS (Transport Layer Security) protocol,, which uses methods to encrypt the data exchanged between two devices (usually computers), establishing a secure connection between them via the internet, which results in the protection of your personal data. You can recognize that you are on a secure connection by seeing the characters https:// and the lock symbol that appears in your browser’s address bar.
3. Purpose and legal basis for processing your data.
As a rule, our company collects and processes your data when you provide it directly and voluntarily, either through the website www.incharge.gr, or via the website https://drive.incharge.gr or by telephone (e.g., by submitting a Connection Request or filling in a contact form, if you indicate that you wish to receive updates about the Company’s products). Additionally, our company collects and processes your data when there is a legal basis that requires the collection of specific data in order for the service to be provided (e.g., for the invoicing of the service), as well as more generally based on the company’s legitimate interest.
However, this rule cannot be strictly applied in two cases within the context of the Website’s operation:
- certain data, which is collected automatically when you visit our websites, and
- data collected with the help of cookies and similar technologies.
3.1. Automatic data collection when you visit our websites and, in general, when you use our other applications or services
When you visit our website www.incharge.gr and its sub-sections, and the website https:// drive. incharge. gr and its sub-applications, we collect:
- The date and time of your visit to the website.
- Your IP (Internet Protocol) address when you enter the website. Your IP address is personal data, along with the date and time of your visit, even though we cannot identify you solely on the basis of this information.
The reason (legal basis and purpose) for which we collect your IP address and store it in special files (log files) is, on the one hand, our legitimate interest in processing this data in order to ensure the security of networks, information, and services from accidental events or illegal or malicious actions that jeopardize the availability, authenticity, integrity, and confidentiality of stored or transmitted data, and on the other hand, our legal obligation to provide the most secure environment possible for the processing of your personal data (Article 6(1)(f) and (c) of the GDPR).
The data will not be transferred or used in any other way. However, we reserve the right to check the server log files if there are specific indications of illegal use.
Like most websites, we use cookies and similar technologies when you access and browse the websites www.incharge.gr and https:// drive. incharge. gr, when you use it via your computer, in order to make it as comfortable and effective as possible.
Cookies are small text files stored on the hard drive of the computer or other electronic device with which the user accesses the website. Cookies are unique to each web browser (e.g., Google Chrome, Mozilla Firefox, Internet Explorer, Opera, etc.) and contain anonymous information about the websites you visit and the devices you use.
For more information, see our cookie policy here https://www.incharge.gr/el/cookies-policy.
3.2. Data collection when you register on the website https:// drive. incharge. gr and/or the “incharge” application and when you use them to receive electromobility services
For the purpose of registering on our website https:// drive. incharge. gr and/or our “incharge” application, as well as for receiving electromobility services, we collect and process the personal data you provide us with, on a case-by-case basis, depending on whether you are conducting the relevant transaction as a registered user or a visitor. Indicatively, we collect and store the following information about you:
A) Basic identification data (such as your name),
B) Contact details necessary for the provision of our services (such as your home address and email address, telephone number, etc.),
C) Any other information you provide to us through our website, either during registration or at any other time in the future (e.g., your vehicle type).
However, we do not collect or store your full credit card details. In this case, we automatically redirect you to the payment gateway of the online electronic payment management platform (https://www.stripe.com/en-gr) in whose secure environment you complete your payment. For more information about the policies of the above electronic payment management platform, please visit: https://stripe.com/en-gr/legal/ssa.
Our company collects and stores only some of the digits of your credit card number, your full name, and its expiration date in order to allow you, through its website, to freely search for and select the credit card from among those registered on the above electronic payment platform, with which you wish to pay for the electromobility services you receive or to renew your account balance.
The purpose of processing the data we collect through our website is to provide electromobility services (Article 6(1)(b) GDPR).
In addition, our company reserves the right, either itself or through third parties cooperating with it, to use unrecognizable – anonymized information related to the registration and/or use of the website https://drive.incharge.gr/ and/or the “incharge” application for the purposes of: (i) analyzing market trends and using this analysis for its business purposes, (ii) improving its services or products, (ii) research, testing, development, testing, and operations related to electric vehicle charging services. In any case, the above additional activities will be provided solely and exclusively on the condition that the data used cannot identify any individual or specific personal information, but focus on market trends.
3.3. Website Contact Forms – Contact by Telephone
In the context of our communication via the website www. incharge. gr, the website https://drive.incharge.gr, and our other websites (via the special contact form, click2call or email) as well as by telephone, we collect the personal data you provide us with, e.g. by filling in an online contact form (if you indicate that you wish to receive updates about the Company’s products) or participating in an online competition. This data includes your name, telephone number, email address, and any other information you may provide to us during our communication. This data is stored and used exclusively to respond to your request or for contact and technical management by us. The legal basis for the processing of this personal data is your consent, in accordance with Article 6(1)(a) of the GDPR. Your data will be deleted after the final processing of our communication. This will happen if it can be inferred from the circumstances that the purpose of the communication has been fulfilled, provided that there are no legal requirements to store this data.
3.4. Customer Categorization and Provision of Personalized Services
Within the context of providing our services and with the aim of improving the customer experience, developing new products, and offering personalized offers, the Company may, based on customers’ consent and their reasonable expectation to receive personalized services and offers, carry out customer categorization according to their service usage characteristics, preferences, and transactional behavior.
3.5. Commercial communication
If you give us your consent, we may process data for additional purposes related to the Company’s activities, such as information, promotion and commercial communication of products and services, as well as surveys to assess the quality of the services provided by various means, including automated means (via email, SMS, MMS, fax, telephone). The legal basis for processing is consent, Article 6(1)(a) of the General Data Protection Regulation (GDPR). You may withdraw your consent at any time and in any subsequent communication with us.
3.6. Contests and promotions
When you participate, via the internet or by telephone, in a competition or other promotional activity, we process the personal data you provide us with, such as your name, surname, and contact details, for the purpose of your participation in the competition, the publication of the results of the contest or to contact and inform you if you are the winner of the contest and, in particular, with regard to the existence of a Prize, to take all necessary actions for the delivery of the Prize.
We store your data for the period until the end of the competition, the selection of the winner, and the delivery of your prizes, i.e., usually for a period not exceeding six (6) months from the end of the competition. The legal basis for processing is your consent and the contract, with your acceptance of the terms of the contest (Article 6(1)(a) and (b) of the GDPR).
3.7. Telephone order for products.
When you call our company to order one or more products that we have for sale, your order is processed by a strictly limited number of our employees who: (a) contractually committed to maintaining the confidentiality of the information you disclose during your transactions and (b) specially trained to provide this service. In such a case, the employee who will serve you will collect only the data necessary for the conclusion and execution of the relevant contract, i.e. your full name, your address, your email address, your telephone number (landline and/or mobile) and, in a few cases, some additional information that will be requested from you (e.g., tax identification number).
Your call for the purpose of ordering products by telephone will be recorded and kept encrypted in a secure environment for a period of ninety (90) days, after which it will be deleted, unless there are legal claims that justify its further storage.
The legal basis for the processing is the performance of a sales contract to which you are a party (Article 6(1)(b) of the GDPR). We retain this data for the entire duration of the contract and after its termination, for as long as required by any relevant (legislative, tax, etc.) provisions, and/or until the statute of limitations on our legal claims under the contract expires.
3.8. Facebook page
The Company maintains an official page on the social networking platform “Facebook” under the name “incharge.evc” (https://www.facebook.com/profile.php?id=61582637048198#).
You can contact us via our Facebook page to receive more information about our services in the following ways:
- by selecting “send message”
- via the “call now” option
In order to respond to your questions, our Company collects and processes your Facebook username and other information that is publicly available through your profile (e.g., phone number, email, etc.). Sending a message for the purpose of communicating with us implies your consent to the above processing of your data, which is the legal basis for the processing (Article 6(1)(a) of the GDPR). Access to and use of our website is subject to our company’s Privacy Policy. In the case of a call, the provisions of paragraph 3.4. “Contact Forms – Contact by Telephone” of this policy apply.
If you choose to click “LIKE” on the Company’s page, this means that you give your consent to see the news and promotional activities (via newsfeed) carried out by the Company through its Facebook page. If you do not wish to receive such updates, you can click on the “UNLIKE” button at any time.
The Company takes all necessary security measures (technical and organizational) for the security of data processing through Facebook, such as, for example, restricting the number of people who have access to the management of its Facebook account.
Finally, we inform you that the Company is only responsible for the manner and means of processing your data for the above purposes (communication, information, and promotional activities). Our Company bears no responsibility for the manner or means by which the Facebook social networking platform processes your data. You can find out about the processing of your data by the Facebook social networking platform via the following links:
https://el-gr.facebook.com/policy.php?CAT_VISITOR_SESSION=c7b73ebc78d1681ade25473632eae199
https://el-gr.facebook.com/business/GDPR
4. Who has access to your data - Transfers
The Data is accessible to company personnel who are absolutely necessary, depending on the request you submit each time, to become aware of it and at the same time have been authorized to respond to your requests. If necessary, the Data may also be accessible to company personnel dealing with administrative and accounting issues, IT and internal audit department staff, as well as any other authorized person who needs to process your data in the course of their work. In addition, for the operation of our websites, the processing of your requests, the execution of contracts, the provision of electromobility services, etc., we work with third-party service providers, legal or natural persons, professionals, independent consultants who provide us with commercial, professional, or technical services (e.g., IT services, electronic payment platform, installation of photovoltaic systems and electric vehicle chargers) for the purposes mentioned above and to support the Company, in whole or in part, in providing the services you request.
Furthermore, in the event of outstanding debts to our company, your personal data may also be transferred to third parties, natural persons and/or legal entities, appointed to support our company in its work of informing debtors about their relevant debts and/or in the task of managing the relevant debts and/or, in general, in the task of extrajudicial and/or judicial pursuit of the relevant debts, and/or, in general, in the legal support of our claims, namely, by way of indication: to debtor information companies under Law 3758/2009, as applicable, to Loan and Credit Claim Management Companies (EDADP), as well as to law firms and lawyers, bailiffs, etc. Where applicable, these natural/legal persons will act as performing the processing or persons authorized to process personal data for the same purposes as mentioned above, with the same safeguards and in accordance with applicable law.
Before the third party receives the Personal Data, we: (i) complete a legal privacy audit to assess the privacy practices and risks associated with these third parties, (ii) obtain guarantees (e.g., contractually) from these third parties that they will process Personal Data in accordance with our company’s instructions, and in accordance with this Policy and applicable law, that they will promptly notify our company of any Privacy Incident, including any inability to comply with the standards set out in this Policy and applicable law, or Security Incident, that they will cooperate in the timely remediation of any documented Incident, that they will assist us in responding to the individual rights of data subjects as set out below, and that they will allow our company to audit and monitor their practices during processing for compliance with these requirements.
In some cases, data may be transferred to other companies affiliated with “ERMIS SOCIÉTÉ ANONYME FOR TRANSPORTATION, EXPLOITATION, TRADE OF PETROLEUM PRODUCTS AND PROVISION OF SERVICES” within the meaning of Article 99 of Law 4548/2018, as amended, for purposes permitted by law and/or on the basis of legitimate interest (administrative and accounting needs, legal claims, business development, etc.).
Finally, the data may be further transferred to institutions, authorities, and public bodies for lawful purposes, to local government organizations and/or, in general, administrative, tax, customs, arbitration authorities or other public authorities and regulatory bodies, if this is necessary to comply with the law or to establish, exercise or defend our company’s legal claims.
With the exception of the above, the Data will not be disclosed to third parties, natural or legal persons, and will not be disseminated.
Furthermore, in the event that our company needs to transfer Personal Data (e.g., for the use of Cloud services), this will be done under the terms and safeguards provided for in Articles 44 et seq. of the GDPR.
5. Data of minors.
We do not process data or conduct transactions with persons under the age of 18.
6. Your rights
You can contact our Company’s Data Protection Officer at the email address [email protected] or at the postal address 12A Irodou Attikou street, Amaroussion, Postal Code 15124, at any time, to exercise your rights under Articles 15-22 of the GDPR, namely the rights of access, rectification, erasure (where permitted), restriction of processing, disclosure, portability, as well as the right to withdraw consent in accordance with Article 7(3) of the GDPR.
You may contact our Company through any available communication channel, such as our customer support at [email protected], our call center at +30 218 88 18102, or the Data Protection Officer at [email protected] to receive confirmation of the existence or non-existence of personal data relating to you, to check their content, origin, accuracy, and location (also in relation to any third country), request a copy, request their correction and, in the cases provided for in the GDPR, request the restriction of their processing, their erasure, to object to direct marketing activities (sending newsletters) by our company, and to report observations as to specific uses of your data that are considered incorrect or unjustified.
You may withdraw your consent at any time, without affecting the lawfulness of the processing carried out prior to the withdrawal of consent. However, we reserve the right to further process your data if we can demonstrate compelling legitimate grounds for the processing which override your interests, your fundamental rights and freedoms, or if the processing serves to exercise or defend legal claims.
Finally, you can lodge complaints with the Data Protection Authority, 1-3 Kifissias avenue, Postan Code 11523, Athens, Call Center: +30-210 6475600 or at the email address http://www.dpa.gr/.
7. Changes to this privacy policy
This Personal Data Protection Policy may be amended at any time deemed necessary by the Company. Any upcoming significant changes to our policy will be posted on our website www. incharge. gr and our other websites. Finally, you can request a copy of this policy by mail or telephone.
Amaroussion, February 2026