Privacy Policy – Baaswise Oyj

1. Data Controller and Data Protection Officer

Baaswise Oyj (“Baaswise”), located at Rautatienkatu 20, 15110 Lahti, Finland (Business ID FI34423685), is the provider of your Battery-as-a-Service agreements and the controller of your personal data under Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”).

You may contact our Data Protection Officer via email: info@baaswise.com

2. Processing of Personal Data and Purpose of Processing

2.1. Provision of Battery-as-a-Service Agreements

Baaswise processes personal data solely for the purpose of providing Battery-as-a-Service agreements and related additional services. Under EU data protection law, personal data refers to information relating to an identified or identifiable natural person.

Our service providers operate independently and are responsible for the personal data they process. Baaswise and its providers maintain separate agreements restricting the use of data strictly to the purposes described in this Privacy Policy.

2.2. Customer Number

To order a Battery-as-a-Service contract, you must authenticate yourself. Upon your first login, a personal customer number is created. Certain mandatory personal data is required to deliver the service.

You may also voluntarily provide additional details to optimize your service (e.g., EV driving profiles).

2.3. Customer Profile and Privacy Center

Through the Privacy Center, you can review how your data has been processed, including processing purposes, responsible personnel, and the categories of data used. You may also manage and withdraw consent centrally.

2.4. Personal Data Processing and Access Control

You may always choose who can access your personal data. All changes made to your settings are applied across all services immediately.

Primary personal data: name, address, contact information, national ID
Business information: company identifier, billing details, contact persons
Accessibility data: preferred contact times, service visit permissions
Payment data: card details, billing provider, invoicing information
Privacy preferences: granted or withdrawn consents

2.5. Internal Messaging

The internal messaging channel allows you to send and receive secure messages related to your service. We do not disclose personal data through insecure channels such as unverified email.

2.6. Statistical Analysis

We may process anonymized and aggregated data for statistical purposes. Identifiable data is always stored separately and removed before analysis outputs are shared.

3. Legal Basis for Processing Personal Data

Personal data is processed based on the performance of a contract, legitimate interest, compliance with a legal obligation, or consent, depending on the case.

4. Transfer of Personal Data

Personal data may be transferred to service providers, partners, or authorities when necessary to provide services or comply with legal requirements.

4.1. Service Providers

External service providers process data only according to our documented instructions.

4.2. Other Third Parties

Data may be disclosed to partners or authorities when legally required or when necessary to fulfill contractual commitments.

4.3. International Transfers

Data may be transferred outside the EU/EEA only to countries with adequate protection or through approved safeguards such as Standard Contractual Clauses.

5. Data Retention

Personal data is stored for the duration of the contractual relationship or for as long as required by law. When the data is no longer required, it is deleted or anonymized.

6. Joint Processing of Personal Data

We work jointly with selected service providers when delivering services, the Privacy Center, and communications. Responsibilities are agreed in accordance with GDPR.

7. Your Rights

You have the right to access, rectify, delete, restrict, and transfer your data, to object to processing, and to file a complaint with the supervisory authority.