CESC Power Privacy Policy

Last updated: [March 15th, 2024]

CESC power. and its affiliates (“CESC,” “we,” “our,” or “us”) respect your privacy and treat your information with the utmost care.

This Privacy Policy contains information about how we collect, use and share your information through our websites, mobile applications, customer support and other services (collectively, “Services”), as well as other third-party services or products that link to this Privacy Policy . This Privacy Policy applies to all Services, except those for which a separate Privacy Policy exists. The separate Privacy Policy takes precedence over this Privacy Policy, and anything not specifically addressed in the separate Privacy Policy shall be governed by the terms of this Privacy Policy.

By agreeing to this Privacy Policy when setting up your account or by using our Services or other third-party services or products that reference this Privacy Policy, you consent to the processing of your data as described in this Privacy Policy.

1. Information we collect

At CESC power we believe you can have great products and excellent privacy. Therefore, we strive to collect only the personal information we need. We may collect a variety of information including:

• Account Information. Your CESC power account and associated account information, including your country, contact telephone number, email address, username, passwords, social media account and third party avatar. If you act as an installer, we also collect your name, your company name and your address.
• Device information. Data that could be used to identify your mobile phone, such as: Such as the WiFi list information, Mac address, CPU information, memory information, SD card information and operating system version.
• Power consumption information. When the CESC power device is connected to your household grid, we can record solar power production and the flow of electricity between the grid, the house and the battery.
• Contact information. When you place an order or contact customer service, we may need your contact information such as your name, email address, shipping address and telephone number.
• Photo and video. When dealing with certain issues and changing personal information, we may need to upload your personal photos and videos.
• Location. We may need your location information for installation, activation and management of your CESC power devices, Wi-Fi connection, time zone setting and receive your latitude, longitude and altitude details for data analysis to provide better marketing promotion services.
• Other information you provide to us. Details such as the timing, topic and content of your communications with CESC power.

You are not required to provide the personal information we request. However, if you choose not to, in many cases we will not be able to provide you with our products or services or respond to your inquiries.

2. Collection of your data

You provide most of the data we collect directly to CESC power. There are four ways we collect your data with your consent :

• Information collected from you personally
  We may collect the following personal information that you provide directly to us, including your name, birthday, contact telephone number, email address, shipping address, passwords, social media account, location of your devices, Your location information, your photos and videos.
  
• Automatic capture
• To the extent necessary, we may automatically collect information about your devices, including device location information, Wi-Fi list information, Mac address, CPU information, memory information, SD card information and operating system version.
• From third party sources
• We collect and use information we receive from Facebook, Google, and other accounts you use to log in to the Services (“Third-Party Accounts”), such as: Such as your name, username, avatar, social media account and other details you have in your third-party account profile. We do not have access to your third-party account passwords.
• Device permissions
• When collecting and using the above personal data, we will primarily access the device permissions of the mobile phone. When you grant permission, you authorize us to collect and use relevant personal information to provide you with the relevant services. You can request a list of your device permissions from us as described under “Contact Us” below. 
• In addition, you have the option to change the scope of your consent or to revoke your consent at any time. Once authorization is withdrawn, we will no longer collect the personal data associated with these authorizations and will no longer be able to provide you with the corresponding services.
• However, your decision to withdraw consent or authorization will not affect our prior collection and use of personal information based on your authorization. If we use the information for other purposes not listed in this policy, we will ask for your prior consent.

3. How we use your information

CESC Power uses personal information to operate our services, process your transactions, communicate with you, provide security and fraud prevention, and comply with laws. With your consent, we may also use personal information for other purposes.

CESC may use your personal data on the following legal bases:

• Performance of a contract: We process personal data in large part to fulfill our contractual obligations to our users or to take steps, at the request of the users, to enter into a contract with them. On this basis, we process personal data, for example, to enable you to use our services.
• Consent: Where required by law, and in some other cases, we process personal data based on your implicit or explicit consent.
• Legitimate interests: In a variety of cases, we process personal data on the grounds that this serves our legitimate interests in commercial activities in a way that is not overridden by the interests or fundamental rights and freedoms of the data subjects. These legitimate interests include, but are not limited to: the operation of our business and services, the security of our websites, products, software or applications, marketing, receiving payments, preventing fraud and knowing the customer to whom we provide services.
• Legal compliance: To comply with our legal obligations (for example, to disclose information to tax authorities), we must use and disclose personal information in certain ways.

CESC Power may use your personal data for the following purposes:

• account registration and management;
• providing access to certain areas, functions and features of our Services, such as: B. Monitoring the usage of your IoT devices in real time via your mobile phone;
• processing orders and payments as well as enabling shipping and delivery services for goods;
• on-site installation and maintenance services for energy storage products;
• sending emails, text messages, push notifications and in-app messages to market or promote CESC products, services, promotions, competitions and events;
• responding to requests for customer or technical support;
• and communicating with you about your account, activities on our Services, and policy changes.

Administrative purposes
Your data will be used by us for various administrative purposes, including but not limited to:

• pursuing our legitimate interests such as direct marketing, research and development (including market research), network and information security and fraud prevention;
• detecting security incidents, protecting against malicious, deceptive, fraudulent or illegal activities and prosecuting those responsible for such activities;
• measuring interest and engagement in our services;
• improving, updating or expanding our services;
• the development of new products and services;
• ensuring internal quality control and safety;
• the authentication and verification of individual identities, including requests to exercise your rights under this policy;
• troubleshooting to identify and correct errors in our Services;
• reviewing interactions, transactions and other compliance activities;
• the transfer of information to third parties to the extent necessary for the provision of the services;
• the enforcement of our agreements and policies;
• compliance with our legal obligations.

Other purposes
We also use your information for other purposes requested by you or permitted by applicable law.

• Approval. We may use personal information for other purposes that we expressly disclose to you at the time you provide your personal information or with your consent.
• Automated decision making. We may carry out automated decision-making, including profiling. CESC power will not make a decision when processing your personal data that is based solely on automated processing and that significantly affects you, unless such a decision is necessary as part of a contractual agreement with you, we have your consent or we are required by law entitled to such automated decision-making. If you have any questions about our automated decision-making, you can contact us as described under “Contact Us” below.
• Anonymized and Aggregated Information. We may use Personal Information and other information about you to create anonymized and/or aggregated information, such as: B. anonymized demographic information, anonymized location information, information about the device from which you access our Services, or other analytics we may create.
• Legal Obligations. We may process your personal data in certain circumstances to comply with our legal obligations, including but not limited to:
• disclosure to law enforcement authorities, governmental or public bodies or officials, regulatory authorities and/or any other person or entity with appropriate legal authority or justification to receive such information if required or permitted by law;
• when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity;
• if the information is necessary for the prevention, investigation, detection or prosecution of criminal offenses or the enforcement of criminal sanctions or for the enforcement of civil claims.

4. How we store your information

The information we collect about you is processed primarily in the EU.

We will retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including as described in this Privacy Policy or in our service-specific privacy notices, or as required by law.

We will retain your personal information for as long as necessary to fulfill the purposes set out in this Privacy Policy and our service-specific privacy overviews. When assessing retention periods, we first carefully consider whether it is necessary to retain the personal data collected and, if retention is necessary, endeavor to retain the personal data for the shortest possible period permitted by law.

5. Marketing

You may opt out of CESC power's use of your information for marketing purposes at any time by clicking on the “unsubscribe” link at the bottom of each email or following other specific instructions. Once you log out, you will no longer receive information about CESC power products, services, promotions and events until you log in again. You may still see CESC power ads on other platforms, but they will not be displayed based on your personal information collected by CESC power.

When using the CESC app you can receive push notifications. If you prefer not to receive push notifications, you can adjust your settings on your mobile phone to determine whether you would like to receive these notifications.

6. Disclosure and Transfer

Transfer
We will not share your personal information with companies, organizations or individuals other than CESC, except in the following cases:

• Sharing with Explicit Consent: After obtaining your express consent, we will share your personal information with other parties.
• Compliance with legal obligations: We may disclose your personal data to third parties in accordance with laws and regulations or the mandatory requirements of government authorities.
• Disclosure to Protect Us or Third Parties: We may access, preserve, and disclose the information we hold to outside parties if we believe in good faith that doing so is necessary or appropriate to: law enforcement requests or to comply with national security and legal process such as court orders or subpoenas; protect your, ours or others’ rights, property or safety; enforce our policies or contracts; collect amounts owed to us; or assist in the investigation or prosecution of suspected or actual illegal activities.
• Disclosure in Case of Mergers, Sales or Other Asset Transfers: Should we participate in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, purchase or sale of assets, or transfer of services to another Providers are involved, your information may be sold or transferred as part of such a transaction where permitted by law and/or contract.
• Sharing with our affiliates: To the extent permitted by law, we may share your information with our affiliates to provide the CESC Services to you. We will only share personal information that is necessary and only for the purposes set out in this Privacy Policy. If the affiliated company wants to change the purpose of processing personal data, it will ask for your consent again.
• Sharing with Authorized Partners: Some of our services are provided by authorized partners only for the purposes set out in this Policy. We may share some of your personal information with our partners to provide better customer service and a better user experience. We only share your personal data for lawful, lawful, necessary, specific and explicit purposes and only share personal data necessary for the provision of services. Our partners are not authorized to use the shared personal information for any other purposes. Our partners usually include:
• Third-Party Service Providers: These service providers provide us with payment facilitation, package shipping, application development, electronic message processing and other services. Some of your personal information may be collected directly by third parties and is subject to their privacy policies.
• Advertising Materials Providers: We work with third-party advertising providers to help market our business. This also includes the use of cookies and other technologies to display personalized advertising on third-party websites.
• Installers (including the dealer and the installer acting on behalf of the dealer): The information collected is exchanged between us and our partner installers so that the installers can provide services to users through the CESC Platform. Some of your personal information may be collected directly by Installers and is subject to their privacy policies.

Transmission
We will not share your personal information with any company, organization or individual without obtaining your express consent. In the event of a merger, acquisition or bankruptcy, we will require that a new owner of your companies and organizations with personal information continue to be bound by this Privacy Policy, otherwise we will require the company and organization to obtain your authorization and consent again. 

If we transfer your data to other countries, we will protect the data as described in the Privacy Policy and comply with applicable legal provisions that provide adequate protection for international data transfers, including the Standard Contractual Clauses (“SCC”) approved by the EU Commission .

7. Cookies

Cookies are small text files that are sent to or accessed from your Web browser or your computer's hard drive. Cookies typically include the name of the domain (Internet address) from which the cookies came, the “lifespan” of the cookies (i.e. when they expire), and a randomly generated unique number or similar identifier. Cookies may also contain information about the device, e.g. B. User preferences, browsing history and activities carried out while using the Services.

Our services use the following cookies:

• Strictly necessary cookies that are necessary for the operation of the services. For example, without these cookies you would not be able to use your account.
• Analytical/performance cookies that allow CESC power to recognize and count the number of visitors, learn how visitors navigate the Services, and improve the Services.
• Functional cookies that CESC uses to recognize you when you return to the Services.

8. Privacy policies of websites/applications

Third party providers
The Services may contain links to other websites/applications, and other websites/applications may reference or link to our Services. We do not control these third-party services. We encourage our users to read the privacy policies of every website and application with which they interact. We do not endorse, review or approve and are not responsible for the privacy practices or content of these other websites or applications. Providing personal information to third party websites or applications is at your own risk.

9. Changes to our Privacy Policy

This Privacy Policy may be changed from time to time in our sole discretion. If there are any material changes to this privacy policy, we will notify you as required by law. You understand and agree that if you continue to use our Services after the new Privacy Policy becomes effective, you will be deemed to have accepted the updated Privacy Policy.