.png){kind=logo}
This privacy policy relates to the processing of users' personal data (hereinafter “data subject”) by ChargeX GmbH (hereinafter “ChargeX”), Landsberger Str. 318a, 80687 Munich, in connection with the use of the Drop Smart Charging App (hereinafter “Drop App”).
For ChargeX, it is important to ensure the protection of personal data whenever data subject data is processed. To this end, ChargeX has taken technical and organizational measures to ensure that data protection regulations are met. ChargeX's approach is in accordance with the legal regulations of data protection law (GDPR, BDSG).
“Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); identifiable is a natural person who, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more specific characteristics, expresses the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural Are a person who can be identified.
“Processing” means any process or series of operations carried out with or without the aid of automated processes in connection with personal data, such as collecting, organizing, storing, adapting or modifying, reading, querying, using, disclosing through transmission, dissemination or any other form of provision, reconciliation, or linking, restriction, deletion, or destruction.
The person responsible is the person who, alone or together with others, decides on the purposes and means of processing personal data. For the Drop app, this is
ChargeX GmbH
Landsberger Strasse 318a
80687 Munich
data protection officer
Michael Hill
In order to use the Drop app (provision and functionality of the app), which enables the intelligent use of the charging system operator's aqueduct charging system (hereinafter “administrator”), ChargeX processes personal data of the person concerned to the extent necessary in each case. Personal data is all data relating to the person concerned. This includes, for example, the name, location data, IP address, device ID, SIM card number and email address of the person concerned.
When using the Drop app, ChargeX collects and processes the following data from the person concerned:
device information
Access data includes the IP address, device ID, device type, device-specific settings and app settings, date and time of retrieval.
Information provided:
When registering and creating a user account, the user's email address is saved. This also applies to the password individualized by the user, which is stored in encrypted form. If the user has provided first and last names, these are also saved. Information is also stored as to whether the person concerned is a charging system user (hereinafter “end user”) or the charging system operator (hereinafter “administrator”). To operate the respective user account, the individual consumption of the end user and the number of charging units (“drops”) assigned to the end user are also stored. When starting the charging process via the Drop app, both the user ID and the charging card ID of the end user are used.
Information provided as part of the consent given:
With consent given, further information can be processed, such as GPS position data.
If access to the above data is restricted, the functionality of the Drop app may be restricted.
The data provided by the end user can be transmitted to the administrator, i.e. the charging system operator. The administrator has access to the data provided by the end user via the Drop app and the backend, i.e. the SaaS platform, which is used to establish communication with the charging station.
Fulfilment of contract
The processing of personal data is necessary to use the Drop app and operate the Aqueduct charging system, in particular to enable intelligent, needs-based charging management for those involved alone. In addition, the processing of the data is necessary to authenticate the end user to the administrator (charging system operator). The legal basis for data processing is therefore the fulfilment of a contract in accordance with Article 6 (1) (b) GDPR.
Legitimate interest
In addition, ChargeX processes personal data to protect legitimate interests or to protect the legitimate interests of third parties, Art. 6 (1) (f) GDPR. One of these is maintaining the functionality and security of ChargeX's IT system.
legal obligations
In addition, ChargeX may be required in individual cases to transfer the collected personal data to third parties on the basis of official or court orders or applicable legislation, insofar as this is necessary to assert, exercise or defend legal claims, prosecute or prevent threats to state or public security, Art. 6 para. 1 S. 1 lit. c, e, f, Art. 9 para. 2 lit. g, f GDPR.
consent
If the data subject has given consent to the processing of personal data for further purposes, processing is based on the consent given, Art. 6 (1) (a).
To use the Drop app, ChargeX stores certain information on the data subject's device with which they use the Drop app.
The user ID and charging card ID, the email address and a security token, which is created when logging in, are saved. If the person concerned has also provided first and last names as part of the registration process, this will also be stored on the device.
The personal data will be stored for as long as they are required for the respective purpose under Section 3. As a rule, the personal data of the person concerned is stored via the Drop app for the duration of the usage relationship. If the legal basis for processing is consent given, processing ends with the withdrawal of consent. Withdrawal is possible at any time.
Storage and processing beyond the respective purpose will only take place if this is necessary to comply with legal requirements.
With regard to the personal data stored and processed by ChargeX, the person concerned has various rights, which he can assert:
Right to information
The right to information free of charge about the personal data processed about the person concerned and to make a copy of this data as well as to information about, among other things, their origin and recipient, the purpose of data processing and the duration of storage (Article 15 GDPR).
Right to correction, deletion and restriction
The right to correct incorrect or incomplete data (Art. 16 GDPR), the right to delete (Art. 17 GDPR) or the right to restrict the processing (blocking; Art. 18 GDPR) of this data.
Right to object
The right to object to processing, insofar as this is based on a legitimate interest of the controller or a third party (Art. 6 (1) (f) GDPR) and the data subject provides reasons that oppose processing or is processing for direct marketing (Article 21 GDPR);
Right to data portability
The right to request that the data you provide be transferred to yourself or another person responsible (Art. 20 GDPR).
Withdrawal of consent
The consent given can be withdrawn at any time with effect for the future. The lawfulness of the data processing carried out before the revocation remains unaffected.
The enforcement of a right is
ChargeX GmbH
Landsberger Strasse 318a
80687 Munich
to communicate.
In addition, the person concerned has the right to complain to a supervisory authority, for example at the location of the controller's registered office, his habitual residence, place of work or the alleged infringement, if he believes that his personal data is not being processed in accordance with data protection regulations (Article 77 GDPR).
Responsible data protection supervisory authority at the registered office of ChargeX GmbH:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Further information on the state data protection supervisory authorities is available at:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
You are welcome to contact ChargeX first before contacting the supervisory authority.
As part of the development of data protection law and technological or organizational changes, ChargeX regularly reviews this privacy statement for the need for adjustments and additions. ChargeX will inform the person concerned about changes to be made in good time.