Privacy policy
Placeholder: this text must be replaced by the legally reviewed version before going live.
Controller
[The controller is [operator name, legal form], [street, postcode, city], email [address], phone [number]. A data protection officer [has been appointed: contact details / has not been appointed, as the conditions of § 38 BDSG are not met].]
Appointment booking
[When you book an installation we process your name, email address, phone number, the selected vehicle, the chosen location and the appointment. This data is required to perform the contract; the legal basis is Art. 6 (1) (b) GDPR. Without it no appointment can be made. We keep the booking for [number] years; invoice data is subject to the statutory retention periods of six and ten years (§ 147 AO, § 257 HGB).]
Compatibility requests
[If you use the form to ask whether your vehicle is supported, we process your name, email address or phone number, the vehicle details and your message in order to answer. The legal basis is Art. 6 (1) (b) GDPR, or Art. 6 (1) (f) GDPR for a pure information request — our legitimate interest in replying. We delete the request [number] months after it has been dealt with.]
Contact via WhatsApp
[The site offers a button that opens a chat with us in WhatsApp. The connection to WhatsApp Ireland Ltd., Merrion Road, Dublin 4, Ireland is only established when you click it. The content and metadata of the chat, including your phone number, are processed by WhatsApp; we have no influence over that processing. The legal basis for our own processing of the message is Art. 6 (1) (b) or (f) GDPR. If you would rather avoid this, please use the form, email or phone.]
Payment processing
[The deposit is handled by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. You enter your payment details directly with Stripe; we do not receive them, only whether the payment succeeded and a transaction ID. The legal basis is Art. 6 (1) (b) GDPR. Stripe may transfer data to affiliates in the USA on the basis of standard contractual clauses and the EU-US Data Privacy Framework.]
Email confirmations
[Appointment confirmations are sent via [Resend, Inc., 2261 Market Street, San Francisco, CA 94114, USA] as a processor. Your email address, name and appointment details are transmitted. The legal basis is Art. 6 (1) (b) GDPR; transfers to the USA rely on standard contractual clauses.]
Meta pixel
[To measure our advertising we use the Meta pixel of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland. It is loaded only after you have agreed in the cookie banner — without consent no script is loaded from Meta and no page view is transmitted. It then records your IP address, browser and device information, and two events: the click on the WhatsApp button and a confirmed booking. The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Meta also processes the data in the USA on the basis of standard contractual clauses and the EU-US Data Privacy Framework. You may withdraw your consent at any time with effect for the future by clearing this site's data in your browser.]
Consent and cookie banner
[Your choice in the banner is stored only locally in your browser (localStorage, key "as-consent"). No cookie is set and nothing is transmitted to us. If you decline, we store only that refusal so the banner does not appear again.]
Hosting and server logs
[The website is operated by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. On each request Vercel processes technically necessary connection data such as IP address, timestamp, requested address and user agent. The legal basis is Art. 6 (1) (f) GDPR — our legitimate interest in secure and stable operation. The database holding bookings and requests is hosted by Neon Inc. in the Frankfurt am Main region (Germany). Data processing agreements under Art. 28 GDPR are in place with both providers [verify and confirm].]
Recipients
[Beyond the processors named above we disclose your data only where we are legally obliged to. Data is never passed to third parties for advertising purposes.]
No automated decision-making
[There is no automated decision-making including profiling within the meaning of Art. 22 GDPR. The price shown in the configurator is simply a mapping of your vehicle to an installation class and has no legal effect.]
Your rights
[You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection to processing based on Art. 6 (1) (f) (Art. 21 GDPR). Consent once given may be withdrawn at any time with effect for the future. Please use the contact details above. You also have the right to lodge a complaint with a supervisory authority, for example [the authority competent for the operator's registered office].]