Privacy Policy
Last Updated and Effective Date: 3rd of October 2024
Overview
1. Introduction
This Privacy Policy describes how Monta Platform Inc. and its affiliate Monta ApS (together, "Monta," "we," "our," or "us") collect, use and disclose personal data about you and your data privacy rights. Personal data is sometimes also referred to as personal information, personally identifiable information or other like terms that mean any information that directly or indirectly identifies you or is reasonably capable of being associated with you or your household. This Privacy Policy applies to personal data we collect from our customers, vendors, business partners, visitors to our website and other persons we interact with, including when they use our website, user portals and mobile applications in the United States. When we talk about our "Website," we mean https://monta.com/en-us and the other sites and applications we own and operate. When we refer to "user portals" and "mobile applications," we mean our product "Monta."
2. Categories of personal data we collect, source of collection and processing purpose
2.1. Visitors on our Website, user portals and/or mobile applications, and newsletter recipients
2.2. Customers
When you register your profile, Monta will process personal data about you, including your name, email address, telephone number, your postal address, bank and payment information and information on the services purchased. The purpose of the processing of your personal data is to supply you with our services. When you use our services, Monta will further process information related to date and time, frequency, location and pattern of EV charging. Information related to purchases include name, contact details, address, cost and transaction details. We use Stripe as a credit card payment processing company to collect payment information. If you submit payment information, we will share with Stripe information, such as your debit/credit card number, billing address, phone number and installed application information in order to process payments. In such circumstances, the external provider, and not Monta, stores your payment information on our behalf acting as a data processor, in order to process payments to your wallet inside of the application. The payment processor also processes your phone number and installed application information.
2.3. Contact persons at a vendor or another business partner
As a contact person at a vendor or another business partner, Monta processes your personal data when you communicate with Monta, e.g., via emails in connection with Monta's existing contractual relationship with the company you are employed with or in connection with the conclusion or termination of a contract. Monta processes ordinary personal data about you, including your name, email address, telephone number and position. Monta processes this personal data to fulfill our contractual obligations, maintain and enhance business relationships, invoice for the services your company provides to Monta and/or vice versa, communicate with you if you have any questions related to our services or vice versa and for documentation purposes in the event you agree on matters relating to our services in writing via email. In some cases, processing of personal data is necessary in order to comply with a legal obligation to which Monta is subject, for instance in relation to the obligation on the preservation of accounting records
2.4. Inquiries via chat function in our user portals and mobile applications
If you submit an inquiry relating to Monta's services via Monta's chat function, Monta will process personal data about you, such as your IP-address, geographic location and the personal data you include in your inquiry, e.g., name, email address and telephone number. In furtherance of data minimization and to protect your privacy, Monta requests that you not provide sensitive or other unnecessary personal data through the chat function. Monta engages in this processing activity to provide customer support by answering the inquiries and for business development.
3. Recipients of your personal data
4. Safeguards and retention of personal data
Monta will only store your personal data as long as it is deemed necessary to fulfill the purposes for the processing of your personal data. Monta maintains industry standard security safeguards to protect your data. We encrypt data in transit and at rest, where appropriate, to ensure that your information is kept private. Monta securely stores your data on our password- and firewall-protected servers. Payment information is encrypted and handled by PCI certified organizations. You acknowledge that the transmission of information over the internet is inherently insecure, and Monta cannot guarantee the security of data sent over the internet. Emails sent via the internet might not be encrypted, so we advise you not to include any confidential or sensitive information in your emails to us. Access controls are in place to limit access to your information to those who need it to perform their jobs. For example, information about you may be provided to our customer support team to help you with your requests.
4.1. Visitors on our Website, user portals and/or mobile applications, and newsletters recipients
Personal data related to your newsletter account is stored until you withdraw your consent and no longer wish to receive newsletters from us. Personal data collected via cookies through use of our Website, user portals, and/or mobile applications are stored for different periods depending on the type and purpose of the cookie in question. Personal data collected in relation to the use of social media will be erased when the content is deleted or when you withdraw your response to our content (likes, sharing, etc.). See more in section 5 below.
4.2. Customers
4.3. Contact person at a vendor or another business partner
If you are a contact person at a vendor or another business partner, Monta will store personal data about you as long as Monta communicates with you because you are Monta's point of contact, 3 years after termination of the contractual relationship or until it is no longer necessary for the establishment, exercise or defense of a legal claim.
4.4. Inquiries via chat function in our user portals and mobile applications
The inquiries from potential customers will be deleted 3 years after the inquiry is resolved, unless it is deemed necessary to store such inquiries for documentation purposes, e.g., due to a dispute, including for the establishment, exercise or defense of legal claims. The inquiries from existing customers will be deleted 3 years from the termination of the contractual relationship, unless it is deemed necessary to store such inquiries for documentation purposes, e.g., due to a dispute, including for the establishment, exercise or defense of a legal claim.
4.5. Bookkeeping material
Monta will store your personal data to the extent it is necessary for bookkeeping purposes, such as personal data related to invoicing. Such personal data will be stored for a period of 5 years from the end of the financial year to which the accounting records relate. The purpose is to comply with our legal obligations.
5. Social media
6. Children
This Website is not intended for or directed at children under the age of 18. In addition, we do not knowingly collect personal data from children under the age of 18.
7. Categories of personal data collected and disclosed in the prior 12 months
In the preceding 12 months, we have collected the categories of personal data set forth in the table below. For details about the precise data points we collect, the categories of sources, and the business and commercial purposes for the personal data processing, please see section 2 above. In the preceding 12 months, we have disclosed the following categories of personal data for business purposes to the following categories of recipients, which we also describe in greater detail in section 3 above: Category of Personal Data We Collect Business
Category of Personal Data We Collect | Business Purpose for Disclosure and Processing | Categories of Recipients |
Identifiers, such as name, address, phone number, unique personal identifier, online identifier, IP address, email address, account name or other identifiers. | We process these categories of personal data and disclose them for the reasons described in greater detail in sections 2 and 3 above. | These categories of personal data may have been disclosed to the recipients described in greater detail in section 3 above. |
Commercial information, including records of products or services purchased, obtained or considered, or other purchasing or consuming histories or tendencies. | These categories of personal data may have been disclosed to the recipients described in greater detail in section 3 above. | These categories of personal data may have been disclosed to the recipients described in greater detail in section 3 above. |
Internet or other electronic network activity information. | These categories of personal data may have been disclosed to the recipients described in greater detail in section 3 above. | These categories of personal data may have been disclosed to the recipients described in greater detail in section 3 above. |
Geolocation data. | These categories of personal data may have been disclosed to the recipients described in greater detail in section 3 above. | These categories of personal data may have been disclosed to the recipients described in greater detail in section 3 above. |
Professional or employment-related information, such as business contact information and position. | These categories of personal data may have been disclosed to the recipients described in greater detail in section 3 above. | These categories of personal data may have been disclosed to the recipients described in greater detail in section 3 above. |
Inferences drawn from any of the information identified herein. | These categories of personal data may have been disclosed to the recipients described in greater detail in section 3 above. | These categories of personal data may have been disclosed to the recipients described in greater detail in section 3 above. |
Sensitive information, such as precise geolocation data and bank, credit card and payment information, including as pro cessed by our credit card payment processor. | These categories of personal data may have been disclosed to the recipients described in greater detail in section 3 above. | These categories of personal data may have been disclosed to the recipients described in greater detail in section 3 above. |
8. Selling or sharing of personal data
We do not sell your personal data or share your personal data for targeted advertising and have not done so in the prior 12 months. We also do not knowingly sell or share the personal data of children under the age of 16 and have not done so in the prior 12 months.
9. "Do Not Track"
Some browsers have incorporated “Do Not Track” features. Most of these features, when turned on, send a signal or preference to the websites you visit indicating that you do not wish to be tracked. Because there is not yet a common understanding of how to interpret the do not track signal, we currently do not respond to the browser do not track signals.
10. Sensitive personal data
Monta collects precise geolocation data and bank, credit card and payment information, which may be considered "sensitive" personal data under US privacy laws. Where required by law, we will obtain your consent before processing sensitive personal data. You may withdraw your consent by emailing us at privacy@monta.com. We will also only use the sensitive personal data for certain permitted purposes, such as to provide the goods or services you requested; prevent, detect and investigate security incidents; resist malicious, deceptive, fraudulent or illegal actions and prosecute those responsible; verify or maintain the quality or safety of a product, service or device and ensure physical safety of natural persons. Because Monta uses sensitive personal data for these permitted purposes, we do not offer a limit use and disclosure of sensitive personal data right under the California Consumer Privacy Act.
11. Data privacy rights and instructions
11.1. Your rights
Data privacy laws may afford consumers residing in the United States certain rights with respect to their personal data, subject to certain exceptions. If you reside in the United States, this section may apply to you. Subject to certain limitations and depending on your state of residence, you may have the following rights:
• (1) Right to Delete. You may have the right to request us to delete the personal data we have collected about you.
• (3) Right to Confirm Processing, Know and Access. You may have the right to confirm whether we are processing your personal data and know and access the personal data we have collected about you, including the categories of personal data; the categories of sources from which the personal data is collected; the business or commercial purpose for collecting, selling or sharing personal data; the categories of personal data and service providers, contractors and third parties to whom we disclosed personal data and the specific pieces of personal data we have collected about you.
• (4) Right to Data Portability. You may have the right to receive the information under right (3) in a format, to the extent technically feasible, that is portable, usable and allows you to transmit the personal data to a person without impediment or hindrance.
• (5) List of Specific Third Parties. You may have the right, at our option, to receive a list of the specific third parties, other than natural persons, to which we have disclosed either (a) your personal data or (b) any personal data.
• (6) Right to Opt-Out of Profiling. US privacy laws may provide the right to opt out of the processing of your personal data for profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. Please note, however, that we currently do not engage in this practice.
• (7) Rights Related to Sharing for Targeted Advertising or Sale. We do not share your personal data for targeted advertising or sell your personal data. As such, you do not need to submit an opt-out of sale or sharing for targeted advertising request.
• (8) Rights Related to Sensitive Personal Data. Data privacy laws may afford additional rights related to sensitive personal data. Please see section 10 above for more information.
• (9) Right to No Discrimination. You have the right not to be discriminated against for exercising any of your privacy rights. This includes us not: (a) denying you goods or services; (b) charging you different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; (c) providing you a different level or quality of goods or services; (d) suggesting to you that you will receive a different price or rate for goods or services or a different level or quality of goods or services and (e) retaliating against you for exercising your privacy rights.
• (10) Right to Appeal. If we decline to take action in response to your exercise of a privacy right, we may inform you of the reason for denying your request and provide you instructions on how to appeal the decision.
11.2. Instructions on how to exercise your privacy rights
You may exercise your privacy rights by calling our toll-free phone number at (888) 426-4947 or emailing us at privacy@monta.com. In some instances, such as for a right to delete, correct and access, we will need to verify your identity before honoring your privacy right request. We will verify your identity by asking you to provide personal data related to your recent interactions with us. We will honor your privacy rights request within 45 calendar days of receipt, unless we request an extension as permitted by data privacy laws.
11.3. Appealing a denial of a privacy right request
11.4. Authorized agents
If permitted or required by applicable law, you may exercise your privacy rights through an authorized agent (which may include a guardian or conservator). If we receive your request from an authorized agent, we may ask for evidence that you have provided such agent with a power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf. If you are an authorized agent seeking to make a request, you may call us at (888) 426-4947 or email us at privacy@monta.com.
11.5. "Shine the Light" disclosure for California residents
California law permits residents of California to request certain details about how their information is shared with third parties for direct marketing purposes. If you are a California resident and would like to make such a request, please call us at (888) 426-4947 or email us at privacy@monta.com.