Privacy Policy

1. Operator and scope

The data operator is individual entrepreneur Alen Prepodobnyy (INN 861001236321, OGRNIP 321508100604655), hereinafter "we". Full details are given in the Public Offer and are available on request via the contacts in the "Contacts" section.

The Policy applies to all OCPP CSS services: the ocpp-css.ru and ocpp-css.com websites, the station owner portal cloud.ocpp-css.com, the driver app driver.ocpp-css.com, the payment page pay.ocpp-css.com and the related programming interfaces (APIs).

2. What data we process

Station owner and staff account data: name or company name, e-mail, phone, login and password (stored in protected form), portal role, details needed for the contract and settlements.

Driver account data: name, e-mail and/or phone, RFID tag identifiers, charging session and payment history, app settings.

Guest QR payment data: the minimum set needed to process the payment and deliver the receipt (e-mail), without creating an account.

Payment data: bank card details are processed by the YooKassa payment service; we do not collect or store full card numbers - we only see masked data and payment statuses.

Technical data: IP address, browser and device information, access logs, cookies (see "Cookies and analytics").

Charging station telemetry over the OCPP protocol: connector states, meter readings, session events. This data relates to the equipment, but linked to a driver's account it becomes part of their charging session history.

Support requests: name, e-mail, phone, portal login, the message text and attachments.

3. Purposes and legal grounds

Conclusion and performance of a contract (item 5 part 1 art. 6 of 152-FZ): account registration and service, station connection, charging sessions, settlements and invoicing, user support.

Compliance with legal obligations (item 2 part 1 art. 6 of 152-FZ): accounting and tax records, responses to requests from state authorities.

Our legitimate interests (item 7 part 1 art. 6 of 152-FZ): service security, prevention of fraud and abuse, improving the platform.

Consent (item 1 part 1 art. 6 of 152-FZ): website analytics and informational mailings. Consent can be withdrawn at any time.

4. Processing on behalf of station owners

When a station owner invites their drivers or issues RFID tags for them, the owner acts as the operator of their personal data, and we process that data on the owner's behalf (part 3 art. 6 of 152-FZ) - to the extent needed for authorization and accounting of charging sessions at their stations. The terms of such processing are set by the contract (the Public Offer).

5. Who we share data with

The YooKassa payment service - to process payments and issue receipts.

Infrastructure service providers (hosting, e-mail and SMS notifications) - to the extent needed to run the service, under contracts with confidentiality obligations.

State authorities - only on the grounds and in the manner provided by the legislation of the Russian Federation.

We do not sell personal data and do not share it with third parties for marketing purposes.

6. Data storage and security

The service databases are located in the Russian Federation; recording, systematization, accumulation, storage and updating of Russian citizens' PD is carried out using these databases (part 5 art. 18 of 152-FZ).

We apply legal, organizational and technical safeguards: encrypted connections (TLS), access control, password hashing, activity logging.

Data is kept while your account is active and, after it is closed, for the periods required by law (in particular for accounting and tax records), after which it is deleted or anonymized.

7. Cookies and analytics

The websites use essential cookies (they keep the site working and remember your choices) and - only after your consent in the banner - analytics counters (Google Analytics, Yandex Metrica) to measure traffic.

Declining analytics cookies does not limit your access to the service. Cookie settings can also be changed in your browser.

8. Your rights

You have the right to obtain information about the processing of your PD, to demand its correction, blocking or destruction, to withdraw consent, and to appeal our actions or inaction to Roskomnadzor or in court (art. 14, 17 of 152-FZ).

You can view and change part of your data yourself in your account.

Send requests via the contacts in the "Contacts" section. We respond within 10 business days; if needed, the period may be extended by no more than 5 business days with notice of the reasons.

9. Changes to this Policy

We may update this Policy; the current version is always published on this page with the date of the update. We will additionally notify you of material changes through the service or by e-mail.

10. Contacts

Website: https://ocpp-css.com

E-mail: info@ocpp-css.com

Telegram: @apostoldevel