Privacy Policy

This Privacy Policy applies to the application of Greenline Power Generation Equipment Trading LLC (hereinafter – the “Application”), as well as to the practices of Greenline Power Generation Equipment Trading LLC regarding the processing of personal data (hereinafter – the “Policy”). Greenline Power Generation Equipment Trading LLC (hereinafter – the “Controller”) shall collect, store, and use the personal data of the data subject (hereinafter – the “Client”) strictly in accordance with this Privacy Policy, Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data in the UAE (hereinafter – the “UAE Personal Data Law”), and other applicable legislation.

1. Definitions and Interpretation

1.1. Unless expressly stated otherwise in this document, the capitalized terms used in this Policy shall have the following meanings:
  Personal Data – any data related to an identified natural person or a natural person who can be identified directly or indirectly by reference to such identifiers as name, voice, image, identification number, online identifier, geographic location, or to one or more physical, physiological, economic, cultural, or social characteristics.
  Processing – any operation or set of operations performed on personal data, including collection, storage, recording, structuring, adaptation, alteration, use, disclosure by transmission, dissemination, or otherwise making available, alignment, restriction, erasure, or destruction.
  Personal Data Breach (Leakage) – any security breach leading to the destruction, loss, alteration, unauthorized disclosure of, or access to personal data.
  Controller – a legal or natural person who determines the purposes and means of processing personal data.
  Data Subject – a natural person to whom the personal data relates.

2. Processing of Personal Data

2.1. The Controller collects personal data provided by the Client when accessing the Application or otherwise. Depending on the nature of the interaction, the types of personal data that may be collected include:

  Contact Information: contact and identification details (e.g., name, address, email address, telephone and fax numbers, employer information, job title(s), and others) related to your expression of interest in receiving information about the Controller’s services.
  Technical Data: information about the device, application usage statistics.
·  Location Data: requested in order to determine nearby charging stations.
  Account Information: if the Client uses the Application to create an account, information requested in the account application form is collected. This information is used for internal purposes such as account creation, order fulfillment, and customer service.
2.2. In processing personal data, the Controller undertakes to:
2.2.1. comply with all applicable UAE Personal Data Laws;
2.2.2. for the avoidance of doubt, under no circumstances shall the Controller process the Client’s Personal Data for its own purposes.

3. Confidentiality

3.1. Personal data requested by the Controller may be transferred to Stripe or a similar PCI-DSS-compliant processor for payment processing.
3.2. The Controller undertakes to take necessary measures to ensure the reliability of any employee, agent, contractor of the Controller, or any processor who may have access to Personal Data, ensuring in each case that access is strictly limited to those individuals who need to know or access the relevant Personal Data only to the extent necessary for the purpose of providing the Application’s services to the Client, as well as to comply with data protection laws in the course of performing that individual’s obligations to the Controller or processor.
3.3. The Controller undertakes to ensure that all such individuals are bound by confidentiality obligations, either professional or statutory. The Controller maintains signed NDAs (non-disclosure agreements) establishing the liability of employees, agents, or contractors for maintaining the confidentiality of personal data.

4. Security

4.1. Taking into account the current state of technological development, the cost of implementation, the nature, scope, context, and purposes of processing, as well as the risks of varying likelihood and severity for the rights and freedoms of natural persons, the Controller undertakes, with respect to Personal Data, to implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.
4.2. In determining the appropriate level of security, the Controller shall take into particular consideration the risks associated with processing, including risks arising from a Personal Data Breach.

5. Fundamental Rights and Obligations of the Controller

5.1. The Controller has the right to:
  receive from the Client accurate information and/or documents containing personal data;
  in the event that the Client withdraws consent to the processing of personal data, continue processing personal data without the Client’s consent where there are grounds provided for under the UAE Personal Data Law;
  independently determine the scope and list of measures necessary and sufficient to ensure compliance with the obligations established by the UAE Personal Data Law and the regulatory legal acts adopted pursuant thereto, unless otherwise provided by the UAE Personal Data Law or other federal laws.
5.2. The Controller is obliged to:
  process personal data in a lawful, fair, and transparent manner;
  retain personal data no longer than required to achieve the purposes of processing;
  document all processes related to the processing of personal data;
  notify the Data Protection Office and Clients of any personal data breaches in accordance with the requirements of the law;
  adopt legal, organizational, and technical measures to protect personal data from unlawful or accidental access, destruction, alteration, blocking, copying, provision, dissemination, as well as from other unlawful actions with respect to personal data;
  cease the transfer (dissemination, provision, access) of personal data, cease processing, and destroy personal data in the manner and cases provided for by the UAE Personal Data Law;
  fulfill other obligations provided for by the UAE Personal Data Law.

6. Fundamental Rights and Obligations of the Client

6.1. Clients have the right to:
  obtain information regarding the processing of their personal data, except in cases provided for by the laws of the UAE. Such information shall be provided to the Client by the Controller in an accessible form and must not contain personal data relating to other Clients, unless there are legal grounds for disclosing such personal data;
  request that the Controller clarify their personal data, block or delete it if such personal data is incomplete, outdated, inaccurate, unlawfully obtained, or not necessary for the declared purpose of processing, as well as take legal measures to protect their rights;
  withdraw their consent to the processing of personal data;
  file a complaint with the competent authority for the protection of Client rights or take legal action in case of unlawful acts or omissions by the Controller in processing their personal data;
  contact the support service (privacy@greenlinepg.ae) to access, update, and/or delete their personal data;
   exercise other rights provided for under UAE law.
6.2. Clients are obliged to:
  provide the Controller with accurate data about themselves;
  notify the Controller of any clarifications (updates, changes) to their personal data.
6.3. Persons who provide the Controller with inaccurate information about themselves, or information about another Client without that Client’s consent, shall be liable in accordance with the laws of the UAE.

7. Purposes of Personal Data Processing

7.1. The Client’s personal data is processed for the following purposes:
  informing the Client about the operation of the Application, services, and products of the Controller;
  entering into, performing, and terminating civil law contracts between the Client and the Controller;
  providing the Client with access to the services of the Application, including locating nearby charging stations, reserving charging points, initiating and completing charging sessions, processing payments for charging services, viewing transaction history, and managing their account;
  ensuring the operation of the internal account management system (creation and use of the Client’s account);
  improving the functionality of the Application and the user experience;
  complying with legal requirements regarding the processing and storage of personal data;
  protecting the rights, legitimate interests, and reputation of the Controller, as well as preventing unlawful or unauthorized use of the Application.

8. Prohibited Actions

8.1. Unauthorized use, copying, distribution, or modification of the Application is prohibited; uploading or transmitting malicious software, viruses, or other harmful code; interfering with the operation of charging infrastructure or access systems; impersonating another person or attempting to use the services fraudulently.

9. Final Provisions

9.1. The Controller reserves the right to amend these Terms of Use at any time. Continued use of the Application constitutes acceptance of the most current version.

9.2. Clients are solely responsible for monitoring updates to the Terms published within the Application.