Privacy policy

This statement informs you about the processing of personal data when using VoltExchange, in accordance with the General Data Protection Regulation (GDPR).

This is a convenience translation. In case of any discrepancy, the German version is legally authoritative.

1. Controller

Progressive Mind GmbH, Kattrepelsbrücke 1, 20095 Hamburg, Germany. Email: info (at) voltexchange.de. You can find the full provider details in the imprint.

2. Hosting and server log files

Our application is hosted by a processor in Germany. When the website is accessed, technical access data (IP address, date and time, requested resource, browser type) is automatically processed in server log files. The legal basis is our legitimate interest in secure and stable operation (Art. 6 (1) (f) GDPR).

3. User account

To use VoltExchange you create an account. In doing so, we process your email address, your display name and your password (stored solely as a cryptographic hash, never in plain text). Consumption and charging sessions are assigned to your kWh-credit account. The legal basis is performance of the contract (Art. 6 (1) (b) GDPR).

4. Cookies / session

After logging in, we set a technically necessary, httpOnly session cookie to keep you logged in for the duration of the session. It serves functional purposes only and is not used for tracking or advertising. Legal basis: § 25 (2) TDDDG and Art. 6 (1) (b)/(f) GDPR.

5. Location data

To show charge points near you, the application may request your approximate location via your browser's location feature. This only happens after your explicit consent in the browser (Art. 6 (1) (a) GDPR). You can revoke the permission at any time in your browser settings; without it, a default map view is shown.

6. Map display

The map is rendered with MapLibre GL and map tiles from an external map service (OpenFreeMap, based on OpenStreetMap data). When the tiles load, your IP address is transmitted to the map service for technical reasons. The legal basis is our legitimate interest in a functional map view (Art. 6 (1) (f) GDPR).

7. Storage period

We store account data for as long as your account exists. After you delete your account, personal data is deleted unless statutory retention obligations apply. Server log files are usually deleted shortly afterwards.

8. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You can withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.

9. Contact for data protection matters

If you have questions about data protection, you can reach us at info (at) voltexchange.de.