Privacy Policy
Last updated August 25, 2026
Thank you for choosing to be part of our community at Power Dot, S.A., doing business as Powerdot (“Powerdot”, “we”, “us”, or “our”). We are committed to protecting your personal information and your right to privacy.
When you visit our website https://www.powerdot.eu, and use our services, you may trust us with your personal information. We take your privacy very seriously.
In this privacy notice, we describe our privacy policy. We seek to explain to you in the clearest way possible what information we collect, how we use it, and what rights you have in relation to it. We hope you take some time to read through it carefully, as it is important.
This privacy policy applies to all information collected through our website (such as http://www.powerdot.pt), and/or any related services, sales, marketing or events (we refer to them collectively in this privacy policy as the “Sites“). Please read this privacy policy carefully as it will help you make informed decisions about sharing your personal information with us.
1. Who are we?
2. What information do we collect?
3. How do we use your information?
4. Will your information be shared with anyone?
5. How long do we keep your information?
6. How do we keep your information safe?
7. What are your privacy rights?
8. Do we make updates to this Privacy Policy?
9. How can you contact us about this Policy or to exercise your rights?
Who are we?
Powerdot , is a company organized and existing under the laws of Portugal, with its registered office located at Rua Mouzinho da Silveira, no. 15, 1250 - 166 Lisboa, and registered with the Commercial Registry Office under 514790342.
These are our contacts:
Power Dot, S.A.
Address: Rua Carlos Alberto da Mota Pinto nº 17, 6B, 1070-313, Lisboa, Portugal.
Powerdot is the controller of your personal data, deciding which personal data is collected and the means and purposes for which it is processed.
What information do we collect?
Personal information you disclose to us
In Short: We collect personal information that you choose to provide to us such as name, address, contact information, passwords and security data, and payment information.
We collect personal information that you voluntarily provide to us when using our products or services, when expressing an interest in obtaining information about us or our products and services, when participating in activities on the Sites or otherwise contacting us.
The personal information that we collect depends on the context of your interactions with us and the Sites, the choices you make and the products and features you use. The personal information we collect can include the following:
Identification and Contact Data. We collect your first and last name, email address, postal address, phone number, taxpayer number and other similar contact data.
Credentials. We collect passwords, password hints, and similar security information used for authentication and account access.
Payment Data. We collect data necessary to process your payment if you make purchases, such as RFID card number of the eMobility Service Provider (EMSP). Card payments are processed by our payment providers. We do not store full card numbers (PAN) or CVV. Where you choose to save a card for future payments, our payment provider stores the card details and we retain only tokenised and/or masked information (such as a payment method token/identifier, the last four digits and expiry date), as provided by the payment provider. Saved payment methods may be used for future payments, including off-session and recurring payments where authorised by you.
Subscription Data. If you subscribe to Subscription Services, we may process additional data related to your Subscription (as those capitalised terms are defined in the Adhoc App Terms & Conditions), such as: the selected Subscription Plan and Subscription Country, Subscription Start Date, Free Trial eligibility and duration, Billing Cycle and Billing Date, subscription status (active/cancelled/suspended), payment failure status and recovery actions, and subscription-related communications (e.g., activation/cancellation confirmations).
Billing Details. If you choose to provide billing details for subscription invoicing (where applicable), we may collect and process information such as billing name/company name, address and VAT/tax number, to issue invoices/receipts in accordance with tax obligations.
Closed-Circuit Television (CCTV) and Video Surveillance. In certain locations, we use CCTV cameras at our charging stations to ensure the security of our infrastructure, monitor usage, and enhance the quality of our services. These recordings may capture images of individuals and vehicles using our services. All recordings are securely stored with access restricted to authorized personnel only, in compliance with data protection laws
Technical Identifiers. We collect certain technical identifiers generated by your vehicle or device when interacting with our charging stations, such as the electric vehicle’s Media Access Control (EV MAC) address, session tokens, web identifiers, and credit card fingerprints (through our payment providers). These identifiers are used to recognize vehicles or sessions, enable functionalities like Autocharge, and ensure the security and integrity of transactions. Credit card fingerprints are technical identifiers generated by payment providers and used for security, fraud prevention and transaction integrity.
All personal information that you provide to us must be true, complete and accurate, and you must notify us of any changes to such personal information.
How do we use your information?
In Short: We process your information in a lawful and transparent manner and for specific purposes.
We only use personal information collected via our Sites when there is a legal basis for the processing and for specific purposes.
Below you can find the purposes for which we process your personal data and the respective lawful basis for such processing:
Performance of a contract
Purposes | Description |
Onboarding on web app | Registration and activation of a User Account in the App (optional). Authentication may take place through social login (Google, Apple) or other methods such as phone/email with one-time password (OTP). In the case of OTP authentication, no password is created or stored and no password recovery mechanism is available. For this reason, Users registering via OTP are required to provide a recovery email address, which will be used exclusively to restore access if the registered phone number is lost or changed. Powerdot receives only the minimum identifiers required to enable login (e.g., name, email, provider ID). |
Guest invoicing | Collection of personal data (such as name, email, address and VAT/tax number) from Users charging as guests, in order to issue invoices in compliance with tax obligations. No Account is created, and the data is processed solely for billing and legal retention purposes. |
Processing your payments | Processing payment-related data to charge for Charging Sessions and other services you request. Where you choose to save a payment method, we use tokenised payment method identifiers provided by our payment provider to enable future payments. This may include payments initiated off-session and, where authorised by you, recurring payments. This includes processing subscription fee payments, including recurring and off-session charges where authorised by you. Where a payment for any Charging Session (including a post-session, off-session charge for a non-subscription session) is unsuccessful, we also process payment-failure status, outstanding-balance (pending debt) and account-restriction status, and related recovery actions, in order to collect amounts due in respect of any Charging Session and not only subscriptions. |
Subscription Services management | Enrolment in subscription services, free trial eligibility and administration, recurring/off-session billing of the subscription fee, handling cancellations, managing payment failures (including suspension/restoration of benefits), providing subscription status in the App and issuing subscription invoices/receipts (where applicable). Where a Subscription payment is unsuccessful, the Subscription is suspended pending payment for future use of the Subscription Service, this does not constitute a debt for services already rendered, which is addressed separately above in respect of Charging Sessions. |
Autocharge functionality | Processing EV MAC addresses and session tokens to automatically recognize your vehicle and initiate charging sessions. |
Charging session history | Linking Charging Sessions (location, date, time, duration, kWh consumed, price paid) to the User’s Account, in order to provide access to session history and enable invoice requests. This processing applies only to users who have created an account in the Powerdot App. |
Compliance with legal obligations
Purposes | Description |
Invoicing | We collect and process personal data for billing charging services. |
Providing information and response to requests from public authorities | If we receive a subpoena or other legal request, we may need to inspect the data we hold to respond. |
Consent
Purposes | Description |
Sharing information with business partners | If you provide us with your consent, we will share information with business partners (such as managing entities or owners of parking lots) to improve the service provided, namely by providing you with access to promotions and other offers. |
Support and follow-up of customer service interactions | If you provide your email to our customer service and consent to its use, we will use it exclusively to follow up on your request and ensure you receive the necessary support. |
Direct Marketing | Where you have given us your consent, we may contact you through automated calling and communication systems, SMS, email, and other types of similar applications, to promote the acquisition of products and services that may interest you. You can withdraw your consent at any time by using the consent management tools available on our website, through your App settings (where available), or by contacting us directly. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. |
Legitimate interests of Powerdot
Purpose | Legitimate interest | Description |
Performance of commercial and contract communications | Execution of contracts between Powerdot and other companies | We identify the legal representatives and contact points of counterparties in contracts in which Powerdot is a party to execute such contracts and contact the counterparties. |
Audit and technical analysis | Ensuring the systems used by Powerdot are secure and that technical issues are properly addressed | We have implemented processes to manage and monitor information systems and processes to detect, analyze and respond to incidents involving the systems security or bugs. |
Analysis and detection of potential fraud | Ensuring that the execution of the services is performed in a lawful and regular manner | We have implemented processes to detect fraud within the usage of our services. |
Debt recovery and management of unpaid Charging Sessions | Recovering amounts due for Charging Sessions and preventing non-payment and abuse of the Service, protecting Powerdot against fraud, and managing the credit risk of recurrently defaulting Users | Where a payment for a Charging Session fails, we process payment-failure status, outstanding balances (pending debt) and account-restriction status, and enable the User to settle the pending debt through the App, and take recovery actions, including, where necessary, restricting the initiation of new Charging Sessions until the debt is settled and engaging debt-collection service providers. This processing is based on our legitimate interest in collecting sums owed for services rendered, in protecting Powerdot against fraud and misuse of the Service, and in managing the credit risk associated with Users who recurrently fail to settle amounts due. You may object at any time on grounds relating to your particular situation. |
Evaluation of the satisfaction of services | Assessing and ensuring the satisfaction of its clients | We perform inquiries on the satisfaction of our clients regarding Powerdot services and products. |
Direct Marketing | Providing relevant information on Powerdot services and products that may be of interest to the users, in strictly limited circumstances | In specific situations where we have determined, following a documented legitimate interest assessment, that our interest in contacting you is not overridden by your rights and freedoms, and where consent is not legally required, we may contact you through email to promote the acquisition of products and services that may interest you. This processing is limited to users with an existing commercial relationship with Powerdot, only where lawful under applicable data protection and e-privacy legislation, and only for products and services directly related to those previously acquired. You can object to this processing at any time, including at the moment of collection of your data, through the consent management tools available on our website or by contacting us directly. |
CCTV and Video Surveillance | Ensuring security and service quality at charging stations | We use CCTV cameras at certain charging stations to maintain the security of our infrastructure, prevent misuse, and monitor service quality, ensuring safe and efficient usage. |
Personalization of support interactions | Improving the customer experience and service quality. | We may store your name to personalize future support interactions, including greeting you by name when you contact us. You may object to this processing at any time. |
Use of technical identifiers (EV MAC, tokens, fingerprints) | Ensuring functionality, security, and efficiency of charging services | We process technical identifiers (including EV MAC addresses) to enable functionalities such as Autocharge, and to ensure the stability, efficiency, and lawful use of our services, subject to appropriate safeguards and balancing tests. This processing may also result in the creation of session histories and usage patterns (e.g., frequency and location of charging), which could indirectly reflect user behaviour. In certain cases, the creation of session histories and usage patterns may constitute profiling within the meaning of Article 4(4) GDPR. Such profiling is strictly limited to operational, security and analytical purposes, or to provide functionalities requested by the user (such as Autocharge). It is never used to evaluate personal characteristics of users or to make automated decisions with legal or similarly significant effects. |
Service and operational communications | Improving the customer experience, service reliance and user information. | Where you have used one of our charging stations, we may use your e-mail address to send you operational communications about that station or the network more broadly. This includes notifications about service disruptions, maintenance, or restoration of service at stations you have previously used. The legal basis for this processing is our legitimate interest (GDPR Art. 6(1)(f)) in maintaining service reliance and keeping users informed. We will only contact you in this way where we consider that our interest is not overridden by your rights and freedoms, and we limit contact to communications that are directly relevant to your prior use of the service. You have the right to object to this processing at any time. |
Will your information be shared with anyone?
In Short: We only share information with other entities (different from Powerdot) if we have a legal basis to do it.
We may share your personal information with the following entities:
Companies of Powerdot Group: We may share or transfer your information with other companies of the Group when information or procedures are needed from one of the Group companies to proceed with the purposes provided for in this Policy.
Public Authorities: we may share or transfer your information with public authorities whenever there is a legal obligation to do so (for example, if we receive a subpoena).
Service providers: we may share or transfer your information to our service providers, which act on behalf and under the instructions of Powerdot (for example, invoicing entities). We may also use analytics and product experimentation providers to process pseudonymised interaction data, in order to understand usage patterns, run A/B tests, and improve our services. We may share your name and call metadata with voice assistant technology providers (e.g. call routing or greeting systems), solely for the purpose of enhancing support interactions. These providers act under strict Data Processing Agreements and are not allowed to use your data for other purposes.
Business partners: if you provide us with your consent, we may share information with our business partners (such as managing entities or owners of parking lots) to improve the service provided, namely by providing access to promotions and other offers.
How long do we keep your information?
In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy policy unless otherwise required by law.
We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy unless a longer retention period is required or permitted by law.
Reasons for keeping your information | Retention period |
Performance of a contract | Duration of the contract. Powerdot may keep your personal data for periods longer than the duration of the contractual relationship, namely to ensure rights or duties related to the contract (for example, for the defense of Powerdot in legal proceedings related to the performance of the contract). |
Compliance with legal obligations | Period provided for by law (for example, invoices will be retained for 10 years). |
Audit and technical analysis | 1 year. |
Analysis and detection of potential fraud | 1 year. |
Evaluation of the satisfaction of services | 2 years, from the last acquisition of Powerdot products. |
Direct Marketing | 2 years, from the last acquisition of Powerdot products or from your last interaction with us, whichever is later, and in any case until you withdraw your consent or object to the processing. |
CCTV footage | Retained for a maximum period of 30 days, from the day of the recording of the footage, unless required for ongoing investigations or legal claims. After this period, the footage is securely deleted. |
Customer support and follow-up interactions | We retain your email only for the time necessary to provide follow-up support, up to a maximum of 6 months after the last interaction. After this period, the email is securely deleted unless required for legal purposes. |
Service and operational communications | We retain your email for 4 months from the last acquisition of Powerdot products to send you operational communications about that station or the network status. After this period, the email is securely deleted unless required for legal purposes. |
EV MAC addresses and session tokens | Technical identifiers (e.g., EV MAC addresses, session tokens) are retained only for as long as necessary to provide functionalities such as Autocharge and maintain session history. In practice, EV MAC data is kept for the duration of the Autocharge account and automatically renewed if the user continues charging, up to a maximum of two (2) years. After this period, identifiers are deleted or irreversibly anonymised. We conduct regular reviews to assess ongoing necessity and ensure compliance with the GDPR’s storage limitation principle (Art. 5(1)(e)). |
Saved payment methods (tokenised identifiers) | Where you save a payment method, tokenised payment method identifiers are retained for as long as you keep them saved in your Account or until you delete them, subject to longer retention where required for dispute handling, fraud prevention or legal obligations. |
Charging Session debt-recovery records (including non-subscription sessions) | Records relating to failed Charging Session payments – payment-failure status, retry attempts, outstanding balance (pending debt), account-restriction status and recovery actions – are retained for as long as the debt remains recoverable, namely for the limitation period applicable to the claim in the relevant country, and in any event no longer than the statutory retention period for the related billing/accounting records (e.g., 10 years, where applicable). Applicable limitation periods differ by market (for example, shorter periods may apply in France) and are confirmed under local law. Once the debt is settled or time-barred, active debt-tracking data is deleted or anonymised, without prejudice to billing records retained to comply with legal obligations. |
Subscription Services management (Subscription Data) | Duration of the Subscription and, where necessary, for additional periods to manage disputes, chargebacks, fraud prevention and to establish, exercise or defend legal claims. Subscription invoices/receipts and legally required billing records will be retained for the period provided by law (e.g., 10 years, where applicable). |
When your personal information is no longer needed for fulfilling the processing purposes specified in this privacy policy, we will either delete or anonymize it.
How do we keep your information safe?
In Short: We aim to protect your personal information through a system of organisational and technical security measures.
We have implemented appropriate technical and organisational security measures designed to protect the security of any personal information we process, namely against its unauthorized destruction, access and alteration, including: encryption of data for the transmission and the storage, control of accesses to the data, use of digital signatures, and the implementation of monitoring and audits processes.
What are your privacy rights?
In Short: You have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time.
You have the following rights under applicable data protection laws:
Right to access and to obtain a copy of your personal information
Without prejudice of third parties’ rights, you have the right to access to your personal data and to obtain information on how such data is processed (for example, the purposes of the processing, the categories of data concerned, the recipients or categories of recipient of such data, the envisaged retention periods and your rights in relation to such processing).
Right to rectification
You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data and to have incomplete personal data completed.
Right to erasure
You have the right to obtain the erasure of your personal data in the situations provided for in the applicable laws and unless any of the legal grounds for the retention of the data is verified (for example, when the processing is necessary for compliance with a legal obligation to which Powerdot is subject or for the exercise or defense of legal claims).
You may request the deletion of your Account (“Delete my Account”) either by contacting Powerdot support via email or, if available, through a self-service tool in the App.
Personal data will be erased without undue delay, except for data that Powerdot must retain to comply with legal obligations. If you request deletion of your Account, we will delete or anonymise your personal data where possible. However, deletion of your Account will not affect personal data that we must retain to comply with legal obligations (e.g., invoices and mandatory billing records) or to establish, exercise or defend legal claims (e.g., chargebacks, disputes or fraud investigations).
Right to restriction of the processing
You have the right to obtain the restriction of processing where (i) you have contested the accuracy of the personal data, for a period enabling Powerdot to verify its accuracy, (ii) the processing is unlawful and you have opposed the erasure of the personal data, (iii) Powerdot no longer needs the personal data for the purposes of the processing, but they are required for the establishment, exercise or defence of your legal claims, (iv) you have objected to processing of your personal data, pending the verification whether the legitimate grounds of Powerdot override yours.
Right to data portability
In some cases, you have the right to receive the personal data that you have provided to Powerdot in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.
Right to object:
Whenever the processing is performed based on a legitimate interest of Powerdot you have the right to object to such processing, on grounds relating to your situation.
You also have the right to object to the processing of your personal data for direct marketing purposes at any time, in which case Powerdot will no longer process data for such purposes. This includes the right to object to the use of your name for personalizing support interactions.
You have the right to object to the use of your data for profiling purposes and to request information about whether such profiling occurs. Where profiling is carried out for legitimate interests (e.g., operational analytics or fraud prevention), you may object at any time on grounds relating to your particular situation. If profiling were ever to be based on your consent (e.g., for marketing or personalised offers), you would have the right to withdraw that consent at any time. Powerdot does not carry out automated decision-making with legal or similarly significant effects under Article 22 GDPR.
Right to withdraw consent:
Whenever Powerdot is relying on your consent to process your personal information, you have the right to withdraw your consent at any time. Please note however that this will not affect the lawfulness of the processing before its withdrawal.
Right to lodge a complaint with the Data Protection Supervisory Authority:
If you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority. You can find their contact details here:http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm
Rights related to CCTV recordings
If you believe that you have been recorded by our CCTV system, you have the right to request access to the footage, as well as to request its deletion or restriction, where applicable and in compliance with legal exceptions.
Do we make updates to this Privacy Policy?
In Short: Yes, we will update this policy as necessary to stay compliant with relevant laws.
We may update this privacy policy from time to time. The updated version will be indicated by an updated “Revised” date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.
How can you contact us about this Policy or to exercise your rights?
If you have questions or comments about this policy, or if you want to exercise any of your rights, referred to on section 7. above, you may:
Email us at support@powerdot.e
Contact us by post to:
Power Dot SA.
Rua Carlos Alberto da Mota Pinto n.º 17, 6B
1070-313, Lisboa, Portugal