{"id":427943,"date":"2026-06-29T16:58:49","date_gmt":"2026-06-29T14:58:49","guid":{"rendered":"https:\/\/reev.com\/privacy-policy-reev-products\/"},"modified":"2026-07-22T15:38:19","modified_gmt":"2026-07-22T13:38:19","slug":"privacy-policy-reev-products","status":"publish","type":"page","link":"https:\/\/reev.com\/en\/privacy-policy-reev-products\/","title":{"rendered":"Privacy Policy &#8211; reev Products"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"427943\" class=\"elementor elementor-427943 elementor-424305\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-76d0be74 color-change e-flex e-con-boxed e-con e-parent\" data-id=\"76d0be74\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4dd4cd6d jet-breadcrumbs-align-left elementor-widget elementor-widget-jet-breadcrumbs\" data-id=\"4dd4cd6d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"jet-breadcrumbs.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-jet-breadcrumbs jet-blocks\">\n\t\t<div class=\"jet-breadcrumbs\">\n\t\t<div class=\"jet-breadcrumbs__content\">\n\t\t<div class=\"jet-breadcrumbs__wrap\"><div class=\"jet-breadcrumbs__item\"><a href=\"https:\/\/reev.com\/en\/\" class=\"jet-breadcrumbs__item-link is-home\" rel=\"home\" title=\"Home\">Home<\/a><\/div>\n\t\t<\/div>\n\t\t<\/div>\n\t\t<\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-98adf3f color-change e-flex e-con-boxed e-con e-parent\" data-id=\"98adf3f\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-d3d777e e-con-full e-flex e-con e-child\" data-id=\"d3d777e\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-367d5e0 elementor-widget elementor-widget-heading\" data-id=\"367d5e0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Privacy Policy - reev Products  <\/h1>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4eb940e elementor-widget elementor-widget-text-editor\" data-id=\"4eb940e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"color: #000000;\">This Privacy Policy explains how personal data is processed in connection with the products and services of reev GmbH. reev processes only such data as is necessary to provide and secure the respective services, applying the principle of data minimisation. \u201cPersonal data\u201d means any information relating to an identified or identifiable natural person (data subject), such as name, address, telephone number, date of birth, email address or IP address. Information that cannot be attributed to a particular person, for example as a result of anonymisation, is not regarded as personal data. <\/span><\/p><p><span style=\"color: #000000;\"><strong>This Privacy Policy applies to the following products and services: <\/strong><\/span><\/p><ul><li><span style=\"color: #000000;\">reev Energy Hub (formerly reev Dashboard) <\/span><\/li><li><span style=\"color: #000000;\">reev Living <\/span><\/li><li><span style=\"color: #000000;\">reev App <\/span><\/li><li><span style=\"color: #000000;\">reev Direct Pay (formerly reev Ad-hoc) <\/span><\/li><li><span style=\"color: #000000;\">reev Payment Terminal <\/span><\/li><li><span style=\"color: #000000;\">reev Companion (formerly eWizard) <\/span><\/li><li><span style=\"color: #000000;\">reev Companion Plus (formerly reev Partner Portal) <\/span><\/li><li><span style=\"color: #000000;\">reev Stromtarif <\/span><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-54dc6a9c color-change e-flex e-con-boxed e-con e-parent\" data-id=\"54dc6a9c\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-0aab972 e-con-full e-flex e-con e-child\" data-id=\"0aab972\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e49607f elementor-widget elementor-widget-text-editor\" data-id=\"e49607f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h3 aria-level=\"1\"><span style=\"color: #000000;\"><b>1. Controller<\/b> <\/span><\/h3><h6><span style=\"color: #000000;\"><b>Use within the scope of your employment relationship or contract with a reev business customer<\/b> <\/span><\/h6><p><span style=\"color: #000000;\">Where your employer or a company (e.g. a car park or fleet operator) provides the reev charging solution, that company is responsible for what happens to your data. In this case, reev acts only on behalf of that company and may process your data solely on the company&#8217;s instructions. <\/span><\/p><p><span style=\"color: #000000;\">This applies to the following reev products: the reev App, the reev Energy Hub, the reev.one web portal, the reev Payment Terminal, as well as reev Companion and reev Companion Plus. <\/span><\/p><p><span style=\"color: #000000;\"><strong>Exception<\/strong>: In certain cases, for example where the account data of administrators or the company&#8217;s own contract with reev is concerned, reev is itself the controller of the data. These cases are marked separately in Section 4 of this Privacy Policy. <\/span><\/p><h6><span style=\"color: #000000;\"><b>Independent \/ private use of the reev App or reev.one<\/b> <\/span><\/h6><p><span style=\"color: #000000;\">If you use the reev App or reev.one independently from the relevant app store \/ via the web, without a company having introduced reev for you or having required you to use it, reev is itself the controller for the processing of your personal data. In this case, we provide our services (e.g. management of your user account, recording and analysis of your charging sessions, payment processing) directly to you on the basis of the usage relationship between you and reev. <\/span><\/p><h6><span style=\"color: #000000;\"><b>Ad-hoc payment at the reev Payment Terminal<\/b> <\/span><\/h6><p><span style=\"color: #000000;\">If, as an ad-hoc driver, you charge by debit or credit card directly at the terminal of a charging station without creating a user account with reev, reev is itself the controller for the payment processing arising in this context. <\/span><\/p><h6><span style=\"color: #000000;\"><b>Joint controllership \u2013 reev Stromtarif<\/b> <\/span><\/h6><p><span style=\"color: #000000;\">For processing within the scope of the product \u201creev Stromtarif\u201d, reev and Nomos GmbH are joint controllers within the meaning of Art. 26 GDPR. For further details, see Section 4.7. <\/span><\/p><h6><span style=\"color: #000000;\"><b>Contact details of reev GmbH:<\/b> <\/span><\/h6><p><span style=\"color: #000000;\">reev GmbH <\/span><\/p><p><span style=\"color: #000000;\">Sandstra\u00dfe 3 <\/span><\/p><p><span style=\"color: #000000;\">80335 Munich <\/span><\/p><p><span style=\"color: #000000;\">Germany <\/span><\/p><p><span style=\"color: #000000;\">Phone: +49 (0) 89 21538970 <\/span><\/p><p><span style=\"color: #000000;\">Email: <a href=\"mailto:privacy@reev.com\">privacy@reev.com <\/a><\/span><\/p><h3 aria-level=\"1\">\u00a0<\/h3><h3 aria-level=\"1\"><span style=\"color: #000000;\"><b>2. Data protection officer<\/b> <\/span><\/h3><p><span style=\"color: #000000;\">reev has appointed as its data protection officer: : <\/span><\/p><p><span style=\"color: #000000;\">Kertos GmbH <\/span><\/p><p><span style=\"color: #000000;\">Brienner Str. 41 <\/span><\/p><p><span style=\"color: #000000;\">80333 Munich <\/span><\/p><p><span style=\"color: #000000;\">Email:<\/span> <a href=\"mailto:dataprivacy@kertos.io\"><span style=\"color: #000000;\">dataprivacy@kertos.io<\/span><\/a><\/p><h3 aria-level=\"1\"><span style=\"color: #000000;\"><b>3. General Information<\/b> <\/span><\/h3><h5 aria-level=\"2\">\u00a0<\/h5><h5 aria-level=\"2\"><span style=\"color: #000000;\"><b>3.1 Legal bases<\/b> <\/span><\/h5><p><span style=\"color: #000000;\">We process your personal data only where there is a legal basis for doing so. The following are particularly relevant: <\/span><\/p><ul><li>Art. 6(1)(a) GDPR \u2013 consent<\/li><li>Art. 6(1)(b) GDPR \u2013 performance of a contract \/ pre-contractual measures<\/li><li>Art. 6(1)(c) GDPR \u2013 compliance with a legal obligation<\/li><li>Art. 6(1)(f) GDPR \u2013 legitimate interests<\/li><li>Art. 28 GDPR \u2013 processing on behalf of the customer<\/li><li>Art. 26 GDPR \u2013 joint controllership (reev Stromtarif)<\/li><li>Section 25 TDDDG \u2013 access to, or storage of, information on terminal equipment<\/li><\/ul><h5 aria-level=\"2\">\u00a0<\/h5><h5 aria-level=\"2\"><span style=\"color: #000000;\"><b>3.2 Encryption<\/b> <\/span><\/h5><p><span style=\"color: #000000;\">For security reasons, our platforms, apps and websites use SSL\/TLS encryption. You can recognise an encrypted connection by the padlock symbol or by the https:\/\/ in the address bar of your browser. <\/span><\/p><h5><strong><span style=\"color: #000000;\">3.3 Hosting infrastructure <\/span><\/strong><\/h5><p><span style=\"color: #000000;\">All reev products are hosted on the cloud infrastructure of Amazon Web Services (Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg). We have concluded a data processing agreement with Amazon Web Services. The server location is in the EU (in particular Frankfurt and Ireland). <\/span><\/p><h3 aria-level=\"1\"><span style=\"color: #000000;\"><b>4. Processing activities<\/b> <\/span><\/h3><h5 aria-level=\"2\">\u00a0<\/h5><h5 aria-level=\"2\"><span style=\"color: #000000;\"><b>4.1 reev Energy Hub<\/b> <\/span><\/h5><p><span style=\"color: #000000;\">The reev Energy Hub is a SaaS application through which customers manage charging infrastructure, driver accounts, (energy) tariffs and billing. In this respect, reev is the customer&#8217;s processor (Art. 28 GDPR); for the establishment of the customer contractual relationship and the master data of the administrators, reev is itself the controller. The sub-processors engaged are set out in the respective processing descriptions. <\/span><\/p><h6 aria-level=\"3\">\u00a0<\/h6><h6 aria-level=\"3\"><span style=\"color: #000000;\"><b>4.1.1 Provision and hosting of the Energy Hub<\/b> <\/span><\/h6><p><span style=\"color: #000000;\">Processing on behalf within the meaning of Art. 28 GDPR. <\/span><\/p><p><span style=\"color: #000000;\"><b>Purpose: <\/b>provision of the reev Energy Hub as software-as-a-service, storage of the data uploaded by the customer <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li>usage data (e.g. IP address, date and time of the request)<\/li><li>master and contact data of the administrators (name, business email, telephone, role)<\/li><li>master, contract and infrastructure data uploaded by the customer<\/li><li>technical log data (request\/response data, error messages)<\/li><\/ul><p>\u00a0<\/p><p><b>Legal basis: <\/b>Art. 6(1)(b) GDPR (performance of the contract with the customer or administrator); Art. 6(1)(f) GDPR (ensuring operation)<\/p><p><span style=\"color: #000000;\"><b>Storage period: <\/b>For the duration of the usage relationship; thereafter erasure in accordance with the data processing agreement or upon expiry of statutory retention periods. <\/span><\/p><h6 aria-level=\"3\">\u00a0<\/h6><h6 aria-level=\"3\"><span style=\"color: #000000;\"><b>4.1.2 Login and user management<\/b> <\/span><\/h6><p><span style=\"color: #000000;\">For the customer&#8217;s administrators, reev processes as controller; for the driver\/employee accounts created by the customer, as processor. <\/span><\/p><p><span style=\"color: #000000;\"><b>Purpose<\/b>: authentication (login) and management of user profiles on the reev Energy Hub <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">login data (email address, password)<\/span><\/li><li>authentication data (IP address, login times, session ID)<\/li><li>profile information (first and last name, role, optionally telephone number)<\/li><li>system and session data (login time, device type, browser used)<\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><b>Legal basis: <\/b>Art. 6(1)(b) GDPR (performance of the contract); Art. 6(1)(f) GDPR (secure authentication and access protection) <\/span><\/p><p><span style=\"color: #000000;\"><b>Storage period:<\/b> Storage for the duration of the active user account or until erasure by the user or the customer; thereafter erasure within the customary period (as a rule, no more than 180 days).<\/span><\/p><h6><span style=\"color: #000000;\"><b>4.1.3 Activation of the chargeable Energy Hub access <\/b> <\/span><\/h6><p><span style=\"color: #000000;\">For B2C customers, reev is itself the\u202fcontroller\u202f(Art. 4(7) GDPR). The processing is carried out for the initiation and performance of the direct SaaS contract between reev and the B2C customer. For B2B customers, reev acts as a processor pursuant to Art. 28 GDPR. <\/span><\/p><p><span style=\"color: #000000;\"><b>Purpose<\/b>:\u202factivation of the chargeable Energy Hub access within the scope of self-service onboarding for non-enterprise customers. The activation process comprises registration (sign-up), acceptance of the General Terms and Conditions and the mandatory provision of a payment method. Full access is enabled only after these steps have been completed. <\/span><\/p><p><span style=\"color: #000000;\"><b>Recipient(s)<\/b>: Stripe Payments Europe, Limited, Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (for legally mandated processing operations (PSD2\/ZAG, anti-money-laundering\/sanctions-list screening), Stripe also acts as a separate controller) <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">company data (company name, address, legal form, where applicable VAT ID) <\/span><\/li><li><span style=\"color: #000000;\">master and contact data of the contractual contact person (first and last name, function, business email address, telephone number) <\/span><\/li><li><span style=\"color: #000000;\">login data (email address, password) <\/span><\/li><li><span style=\"color: #000000;\">means of payment and payment-method data (e.g. credit card data, IBAN\/BIC or other payment methods supported by Stripe \u2013 encrypted transmission to Stripe) <\/span><\/li><li><span style=\"color: #000000;\">tokens and transaction metadata from the payment-method verification <\/span><\/li><li><span style=\"color: #000000;\">authentication data within the scope of the 3D Secure 2.0 check <\/span><\/li><li><span style=\"color: #000000;\" data-contrast=\"auto\">evidence and timestamp of acceptance of the General Terms and Conditions (including the version of the Terms)<\/span><\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><b style=\"background-color: transparent;\">Legal basis: <\/b><span style=\"background-color: transparent;\" data-contrast=\"auto\">Art. 6(1)(b) GDPR (initiation and performance of the SaaS contract with the B2C customer); Art. 6(1)(c) GDPR in conjunction with PSD2 (Directive (EU) 2015\/2366) and the ZAG (strong customer authentication <\/span><b style=\"background-color: transparent;\">; <\/b><span style=\"background-color: transparent;\" data-contrast=\"auto\">anti-money-laundering and sanctions law) as well as in conjunction with commercial and tax-law obligations <\/span><b style=\"background-color: transparent;\">; <\/b><span style=\"background-color: transparent;\" data-contrast=\"auto\">Art. 6(1)(f) GDPR (fraud prevention and secure payment transactions) <\/span><\/span><\/p><p><span style=\"color: #000000;\"><b style=\"background-color: transparent; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, 'Noto Sans', sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol', 'Noto Color Emoji';\">Storage period:<\/b><span style=\"background-color: transparent; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, 'Noto Sans', sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol', 'Noto Color Emoji';\" data-contrast=\"auto\">For the duration of the contractual relationship; upon termination of the contract, erasure in accordance with internal policies. Contract, payment and invoice data are retained in accordance with commercial and tax-law retention obligations (as a rule, 10 years). Stored means of payment are retained for as long as they are actively on file, but at the latest until termination of the contractual relationship. <\/span> <\/span><\/p><h6>\u00a0<\/h6><h6><span style=\"color: #000000;\"><b>4.1.4 Processing of charging infrastructure, consumption and charging-session data<\/b> <\/span><\/h6><p><span style=\"color: #000000;\">Processing on behalf of the customer (Art. 28 GDPR). <\/span><\/p><p><span style=\"color: #000000;\"><b>Purpose<\/b>: management of charging stations and charging groups, authorisation and allocation of charging sessions, billing as well as, where applicable, the handling of the trading of greenhouse-gas reduction quotas <\/span><\/p><p><span style=\"color: #000000;\"><b>Recipient(s): <\/b>Stripe Payments Europe, Limited, Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (for legally mandated processing operations relating to payment transactions (strong customer authentication pursuant to PSD2\/ZAG, anti-money-laundering\/sanctions-list screening, fraud prevention), Stripe also acts as a separate controller) <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">master and contact data of the driver (first and last name, billing address, email address, optionally telephone number)<\/span><\/li><li>email address, RFID tag number, charge card number and name of the card<\/li><li>account details (account holder, IBAN) \u2013 in so far as required for billing or the GHG quota<\/li><li>means of payment and payment-method data (e.g. credit card data, IBAN\/BIC, where applicable other payment methods supported by Stripe)<\/li><li>payment and transaction data (amount, currency, time, payment status, tokens, transaction IDs)<\/li><li>authentication data within the scope of the 3D Secure 2.0 check<\/li><li>scan of the vehicle registration document (for the GHG quota)<\/li><li>vehicle data of company vehicles (registration number, RFID tag number, optionally manufacturer\/make)<\/li><li>data on charging sessions (station, connector, start\/end, energy charged, status, tariff)<\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><b>Legal basis: <\/b>Art. 6(1)(b) GDPR; processing is carried out on behalf of the customer (Art. 28 GDPR); Art. 6(1)(c) GDPR in conjunction with PSD2 (Directive (EU) 2015\/2366) and the ZAG (strong customer authentication, anti-money-laundering and sanctions law) as well as in conjunction with commercial and tax-law retention obligations; Art. 6(1)(f) GDPR (fraud prevention and secure payment transactions). <\/span><\/p><p><span style=\"color: #000000;\"><strong>Storage period:<\/strong> For the duration of the usage or contractual relationship between the driver and the customer; thereafter erasure in accordance with the requirements of the data processing agreement or upon expiry of statutory retention periods. <\/span><\/p><h6 aria-level=\"3\">\u00a0<\/h6><h6 aria-level=\"3\"><span style=\"color: #000000;\"><b>4.1.5 Smart Energy Forecast<\/b> <\/span><\/h6><p><span style=\"color: #000000;\">Processing on behalf of the customer (Art. 28 GDPR). <\/span><\/p><p><span style=\"color: #000000;\"><strong>Purpose<\/strong>: precise forecasts make it possible to optimise the use of the energy generated by small photovoltaic installations. With enercast SEF Smart Energy Forecast, output forecasts can be integrated into monitoring and energy-management systems with minimal effort via an efficient API. <\/span><\/p><p><span style=\"color: #000000;\">On the basis of the technical data of the installation and weather forecasts from the world&#8217;s leading weather models, enercast SEF calculates the PV generation expected over the coming hours and days. <\/span><\/p><p><span style=\"color: #000000;\"><b>Recipient(s)<\/b>: enercast GmbH, Universit\u00e4tsplatz 12, 34127 Kassel <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed: <\/b>location data (e.g. GPS coordinates, geographical position of the PV installation, in so far as conclusions about the personal charging location are possible) <\/span><\/p><p><span style=\"color: #000000;\"><b>Legal basis: <\/b>Art. 6(1)(b) GDPR; processing is carried out on behalf of the customer (Art. 28 GDPR) <\/span><\/p><p><span style=\"color: #000000;\"><b>Storage period:<\/b> For the duration of the use of the service <\/span><\/p><h6 aria-level=\"3\">\u00a0<\/h6><h6 aria-level=\"3\"><span style=\"color: #000000;\"><b>4.1.6 Collection of company and infrastructure information<\/b> <\/span><\/h6><p><span style=\"color: #000000;\">reev as controller in relation to the customer\/administrator. <\/span><\/p><p><span style=\"color: #000000;\"><b>Purpose<\/b>: correct configuration and personalisation of the platform (e.g. energy management, multi-account), ensuring consistent data management with the internal CRM, context-related improvement of support. <\/span><\/p><p><span style=\"color: #000000;\"><b>Recipient(s):<\/b> salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 M\u00fcnchen <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">information about the company and the users&#8217; position <\/span><\/li><li><span style=\"color: #000000;\">information about the company\/fleet size and group affiliation <\/span><\/li><li><span style=\"color: #000000;\">information about the technical infrastructure (e.g. PV installation, battery storage, smart meter, dynamic electricity tariff, electricity price, multi-account setup) <\/span><\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><b>Legal basis:<\/b> Art. 6(1)(b) GDPR (contract initiation\/performance); Art. 6(1)(f) GDPR (legitimate interest in a functional and personalised platform). <\/span><\/p><p><span style=\"color: #000000;\"><b>Storage period: <\/b>For the duration of the contractual relationship; upon termination of the contract, erasure in accordance with internal policies. <\/span><\/p><h6>\u00a0<\/h6><h6><span style=\"color: #000000;\"><b>4.1.7 Support<\/b> <\/span><\/h6><p><span style=\"color: #000000;\">Processing on behalf \u2013 Intercom is a sub-processor <\/span><\/p><p><span style=\"color: #000000;\"><b>Purpose<\/b>:\u202fprovision of a live-chat and customer-support widget for communication with website visitors and users, including the management of support requests, onboarding communication and the analysis of user behaviour to improve support <\/span><\/p><p><span style=\"color: #000000;\"><b>Recipient:<\/b>Intercom R&amp;D Unlimited Company, 124 St. Stephen&#8217;s Green, Dublin 2, DC02 C628, Ireland <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">contact and registration data (e.g. name, email address)<\/span><\/li><li>device data (e.g. operating system, browser type, IP address)<\/li><li>usage and session data (e.g. pages visited, session duration)<\/li><li>communication data (e.g. chat histories, support messages)<\/li><li>technical identifiers (e.g. cookie IDs, unique device IDs)<\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><strong>Legal basis:<\/strong> performance of the contract pursuant to Art. 6(1)(b) GDPR, in so far as the use of the support tool is necessary to provide the contractually agreed service; otherwise legitimate interest pursuant to Art. 6(1)(f) GDPR (optimisation of customer support and product quality); <b> <\/b>Cookies are set on the basis of Section 25(2) no. 2 TDDDG, as these cookies are technically necessary in order to provide the service expressly requested by you. <\/span><\/p><p><span style=\"color: #000000;\"><strong>Storage period:\u202f<\/strong>For as long as the contract with Intercom exists; upon termination of the contract, active data are automatically erased after 180 days. On request, erasure takes place within 30 days <\/span><\/p><p><span style=\"color: #000000;\"><b>Additional information:<\/b> Intercom uses the following cookies: \u201cintercom-session-[app_id]\u201d; \u201cintercom-device-id-[app_id]\u201d; \u201cintercom-id-[app_id]\u201d <\/span><\/p><h6 aria-level=\"3\">\u00a0<\/h6><h6 aria-level=\"3\"><span style=\"color: #000000;\"><b>4.1.8 Product and usage analysis<\/b> <\/span><\/h6><p><span style=\"color: #000000;\">Processing on behalf \u2013 PostHog and Sentry are sub-processors; the product analysis serves the maintenance and further development of the platform within the scope of the customer&#8217;s instructions. <\/span><\/p><p><span style=\"color: #000000;\"><b>Purpose<\/b>: analysis of the use of the reev Energy Hub (e.g. page views, click paths, feature usage) for the continuous improvement, error correction and further development of the platform. <\/span><\/p><p><span style=\"color: #000000;\"><b>Recipient(s):<\/b> PostHog Inc., 2261 Market St., #4008, San Francisco, CA 94114, USA (servers in Frankfurt, Germany); Functional Software, Inc. (\u201cSentry\u201d), 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA (servers in Frankfurt, Germany) <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">Browser\/operating system information, referrer URL, timestamp <\/span><\/li><li><span style=\"color: #000000;\">Error and log data (stack traces, error messages) \u2013 Sentry <\/span><\/li><li><span style=\"color: #000000;\">Pseudonymous usage data (page views, clicks, behavior) \u2013 PostHog <\/span><\/li><li><span style=\"color: #000000;\">IP address (anonymized\/truncated) <\/span><\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><b>Legal basis: <\/b>Article 6(1)(f) of the GDPR (quality assurance and further development). <\/span><\/p><p><span style=\"color: #000000;\"><strong>Storage period:<\/strong> Sentry: no more than 90 days; PostHog: erasure\/anonymisation once the purpose has been achieved. <\/span><\/p><p><span style=\"color: #000000;\"><strong>Transfer to a third country:<\/strong> processing on EU servers; both providers are certified under the EU-US Data Privacy Framework. <\/span><\/p><h6 aria-level=\"3\">\u00a0<\/h6><h6 aria-level=\"3\"><span style=\"color: #000000;\"><b>4.1.9 Disclosure to installation and service partners<\/b> <\/span><\/h6><p><span style=\"color: #000000;\">Processing on behalf; disclosure is carried out on behalf of the customer. <\/span><\/p><p><span style=\"color: #000000;\"><b>Purpose<\/b>: arrangement and performance of installation, maintenance and support services on behalf of the customer, including error analysis and commissioning via digital tools (e.g. \u201creev Companion\u201d). <\/span><\/p><p><span style=\"color: #000000;\"><b>Recipient(s):<\/b> qualified electricians and installation\/service partners acting on behalf of the customer <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">contact and address data of the installation site<\/span><\/li><li>technical information on the charging infrastructure, error messages<\/li><li>relevant contact information<\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><b>Legal basis<\/b>: Art. 6(1)(b) GDPR; Art. 6(1)(f) GDPR (efficient operation and support). <\/span><\/p><p><span style=\"color: #000000;\"><b>Storage period: <\/b>For the duration of the respective service operation; thereafter erasure in accordance with the data processing agreement or retention periods.<\/span><\/p><h5 aria-level=\"2\">\u00a0<\/h5><h5 aria-level=\"2\"><span style=\"color: #000000;\"><b>4.2 reev Living<\/b> <\/span><\/h5><p aria-level=\"2\"><span style=\"color: #000000;\">reev Living is reev&#8217;s digital charging service for residents of multi-family buildings, homeowners&#8217; associations, residential complexes and comparable properties. reev provides end users with app-based access to the charging equipment present at the property, the authorisation of charging sessions as well as billing. The installation, technical operation and maintenance of the charging equipment are not part of the charging service \u2013 these are the responsibility of the respective owner or technical operator. <\/span><\/p><p><span style=\"color: #000000;\">reev is itself the controller within the meaning of Art. 4(7) GDPR for the personal data of end users arising within the scope of the charging service. <\/span><\/p><h6>\u00a0<\/h6><h6><span style=\"color: #000000;\"><b>4.2.1 Performance of the charging service <\/b> <\/span><\/h6><p><span style=\"color: #000000;\"><b>Purpose<\/b>: creation and management of the user account, identification of the end user at the charging equipment, authorisation and recording of charging sessions as well as the creation and processing of invoices. <\/span><\/p><p><span style=\"color: #000000;\"><b>Recipient(s):<\/b> Stripe Payments Europe, Limited, Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (payment service provider, including 3D Secure 2.0). <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">master and contact data (first and last name, billing address, email address, optionally telephone number)<\/span><\/li><li>login and authentication data (email, password, session data)<\/li><li>assigned authorisations (e.g. residential unit, parking space, charging group, RFID tag\/charge card, app access)<\/li><li>data on the charging session (charge point, start\/end, energy charged, status, tariff)<\/li><li>payment data (IBAN, credit card data \u2013 transmitted in encrypted form)<\/li><li>invoice data (invoice amount, taxes, invoice date, charging sessions billed)<\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><b>Legal basis:<\/b> Art. 6(1)(b) GDPR (performance of the contract); Art. 6(1)(c) GDPR in conjunction with PSD2\/ZAG (strong customer authentication) as well as in conjunction with commercial and tax-law retention obligations; Art. 6(1)(f) GDPR (secure authentication and prevention of misuse). <\/span><\/p><p><span style=\"color: #000000;\"><b>Storage period: <\/b>For the duration of the active usage relationship; invoice and payment data in accordance with statutory retention periods (as a rule, 10 years). Other data are erased after termination of the contract within the customary period. <\/span><\/p><h5>\u00a0<\/h5><h6><span style=\"color: #000000;\"><b>4.2.2 Processing of meter and metering data<\/b> <\/span><\/h6><p><span style=\"color: #000000;\"><b>Purpose<\/b>: determination of the quantity of electricity drawn via the charging-infrastructure meter for the billing of charging sessions as well as for the plausibility check of total consumption vis-\u00e0-vis both reev and the property manager. The processing is carried out exclusively in the case of analogue meters or intelligent metering systems (iMSys); meters with registering load metering (RLM) are excluded. <\/span><\/p><p><span style=\"color: #000000;\"><b>Recipient(s):<\/b> the competent grid operator and metering point operator (for legitimation and data exchange under energy-industry law); Amazon Web Services EMEA SARL (server infrastructure). <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">meter number and market\/metering location<\/span><\/li><li>meter readings (manual readings or automated iMSys values; in the case of iMSys, up to quarter-hourly measured values)<\/li><li>consumption data of the charging equipment, allocation to charge points and residential units<\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><b>Legal basis: <\/b>Art. 6(1)(b) GDPR (performance of the contract); Art. 6(1)(c) GDPR (energy-law\/metering-point-law obligations); Art. 6(1)(f) GDPR (plausibility check of total consumption, prevention of misuse). <\/span><\/p><p><span style=\"color: #000000;\"><b>Storage period: <\/b>For the duration of the contractual relationship as well as in accordance with statutory retention periods. <\/span><\/p><h6>\u00a0<\/h6><h6><span style=\"color: #000000;\"><b>4.2.3 Contact details of the contact person of the property manager<\/b> <\/span><\/h6><p><span style=\"color: #000000;\"><b>Purpose<\/b>: performance and handling of the permission and site agreement with the property manager (e.g. clarification of property-related questions, communication of meter readings, information about authorised users, coordination of service operations \/ repairs). <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">first and last name of the contact person<\/span><\/li><li>function\/role<\/li><li>business telephone number and email address<\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><b>Legal basis:<\/b> Article 6(1)(b) of the GDPR (performance of the agreement) <\/span><\/p><p><span style=\"color: #000000;\"><b>Storage period: <\/b>For the duration of the agreement with the property manager; thereafter erasure in accordance with internal policies or statutory retention periods <\/span><\/p><h6>\u00a0<\/h6><h6><span style=\"color: #000000;\"><b>4.2.4 Product and usage analysis<\/b> <\/span><\/h6><p><span style=\"color: #000000;\"><b>Purpose<\/b>: analysis of usage (e.g. page views, click paths, feature usage) for the continuous improvement, error correction and further development of the platform. <\/span><\/p><p><span style=\"color: #000000;\"><b>Recipient(s):<\/b> PostHog Inc., 2261 Market St., #4008, San Francisco, CA 94114, USA (servers in Frankfurt, Germany); Functional Software, Inc. (\u201cSentry\u201d), 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA (servers in Frankfurt, Germany) <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">Browser\/operating system information, referrer URL, timestamp <\/span><\/li><li><span style=\"color: #000000;\">Error and log data (stack traces, error messages) \u2013 Sentry <\/span><\/li><li><span style=\"color: #000000;\">Pseudonymous usage data (page views, clicks, behavior) \u2013 PostHog <\/span><\/li><li><span style=\"color: #000000;\">IP address (anonymized\/truncated) <\/span><\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><b>Legal basis: <\/b>Article 6(1)(f) of the GDPR (quality assurance and further development). <\/span><\/p><p><span style=\"color: #000000;\"><strong>Storage period:<\/strong> Sentry: no more than 90 days; PostHog: erasure\/anonymisation once the purpose has been achieved. <\/span><\/p><p><span style=\"color: #000000;\"><strong>Transfer to a third country:<\/strong> processing on EU servers; both providers are certified under the EU-US Data Privacy Framework. <\/span><\/p><h5 aria-level=\"2\">\u00a0<\/h5><h5 aria-level=\"2\"><span style=\"color: #000000;\"><b>4.3 reev App<\/b> <\/span><\/h5><p><span style=\"color: #000000;\">The reev App enables drivers, among other things, to activate and control charging sessions, to manage charge cards and tariffs as well as to handle billing. Depending on the usage context (see Section 1), reev is either the customer&#8217;s processor or itself the controller. <\/span><\/p><h5 aria-level=\"3\">\u00a0<\/h5><h6 aria-level=\"3\"><span style=\"color: #000000;\"><b>4.3.1 Provision and download of the App<\/b> <\/span><\/h6><p><span style=\"color: #000000;\"><b>Purpose<\/b>: provision of the mobile app on the user&#8217;s terminal device <\/span><\/p><p><span style=\"color: #000000;\"><strong>Recipient(s):<\/strong> Apple Inc. (App Store) or Google Ireland Ltd. (Google Play) \u2013 as separate controllers <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">App Store data (user name, customer number, email address, download time, payment information)<\/span><\/li><li>device\/identification data (e.g. unique device number, operating system)<\/li><li>usage data (IP address, date\/time of the request)<\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><b>Legal basis: <\/b>Art. 6(1)(b) GDPR (performance of the contract); Art. 6(1)(f) GDPR (security\/operation of the App). <\/span><\/p><p><span style=\"color: #000000;\"><strong>Storage period:<\/strong> For the duration of the use of the App as well as in accordance with statutory retention periods. <\/span><\/p><h6 aria-level=\"3\"><span style=\"color: #000000;\"><b>4.3.2 Registration and login<\/b> <\/span><\/h6><p><span style=\"color: #000000;\"><b>Purpose<\/b>: creation and management of the user account, authentication in the App. <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">login data (email address, password)<\/span><\/li><li>profile information (first and last name)<\/li><li>authentication data (IP address, login times, session ID, device type)<\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><b>Legal basis:<\/b> Art. 6(1)(b) GDPR (performance of the contract); Art. 6(1)(f) GDPR (secure authentication). <\/span><\/p><p><span style=\"color: #000000;\"><b>Storage period:<\/b> For the duration of the active user account; following erasure, subsequent removal within the customary period. <\/span><\/p><h6 aria-level=\"3\">\u00a0<\/h6><h6 aria-level=\"3\"><span style=\"color: #000000;\"><b>4.3.3 Functions of the App \u2013 management of charging sessions and payment<\/b> <\/span><\/h6><p><span style=\"color: #000000;\"><b>Purpose<\/b>: activation and control of charging sessions, management of tariffs and charge cards, provision of the monthly billing statement. <\/span><\/p><p><span style=\"color: #000000;\"><b>Recipient(s)<\/b>: Stripe Payments Europe, Limited, Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (for payments arising from charging sessions, including 3D Secure 2.0) <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">address data (street, house number, postcode, town, country)<\/span><\/li><li>credit card data (encrypted, transmitted to the payment service provider)<\/li><li>data on the charging session (station, start\/end, energy charged, tariff, invoice amount)<\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><b>Legal basis:<\/b> Art. 6(1)(b) GDPR (performance of the contract); Art. 6(1)(c) GDPR in conjunction with PSD2\/ZAG (strong customer authentication). <\/span><\/p><p><span style=\"color: #000000;\"><b>Storage period:<\/b> For the duration of the contractual relationship as well as in accordance with statutory retention periods (in particular under commercial and tax law). <\/span><\/p><p><span style=\"color: #000000;\"><b>Further information: <\/b><a href=\"https:\/\/stripe.com\/de\/privacy\">https:\/\/stripe.com\/de\/privacy <\/a> <\/span><\/p><h6 aria-level=\"3\">\u00a0<\/h6><h6 aria-level=\"3\"><span style=\"color: #000000;\"><b>4.3.4 Vehicle connectivity<\/b> <\/span><\/h6><p><span style=\"color: #000000;\"><b>Purpose<\/b>: establishment and maintenance of a connection to the vehicle, retrieval of vehicle data within the App. <\/span><\/p><p><span style=\"color: #000000;\"><b>Recipient(s):<\/b> Smartcar, Inc., 650 Castro St STE 120-99699, Mountain View, CA 94041, USA <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">vehicle identifiers (e.g. vehicle identification number)<\/span><\/li><li>connection\/authentication data<\/li><li>vehicle and usage data (e.g. vehicle status, telemetry data) \u2013 depending on the authorisations granted<\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><b>Legal basis:<\/b> Art. 6(1)(a) GDPR (consent; withdrawal possible at any time by disconnecting the vehicle in the App). <\/span><\/p><p><b>Storage period:<\/b> Until withdrawal of consent or disconnection of the vehicle.<\/p><p><b>Transfer to a third country:<\/b> transfer to the USA on the basis of EU standard contractual clauses (Art. 46 GDPR).<\/p><h6>\u00a0<\/h6><h6><span style=\"color: #000000;\"><b>4.3.5 Special function \u201cCharging a company car at home\u201d<\/b> <\/span><\/h6><p><span style=\"color: #000000;\"><strong>Hybrid constellation:<\/strong> reev is the employer&#8217;s processor; the reimbursement relationship exists between the user and the employer <\/span><\/p><p><span style=\"color: #000000;\"><b>Purpose<\/b>: registration of the private charging station for charging the company vehicle and automated transmission of the billing-relevant data to the employer for cost reimbursement. <\/span><\/p><p><span style=\"color: #000000;\"><b>Recipient(s): <\/b>the respective employer\/customer <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">tariff information of the private electricity connection (electricity price, time-based rates)<\/span><\/li><li>data on charging sessions at the private charging station (charging duration, energy charged, stored price)<\/li><li style=\"list-style-type: none;\">\u00a0<\/li><\/ul><p><span style=\"color: #000000;\"><b>Legal basis:<\/b> Art. 6(1)(b) GDPR (performance of the usage relationship between reev and the user); Art. 28 GDPR in relation to the employer <\/span><\/p><p><span style=\"color: #000000;\"><b>Storage period: <\/b>For the duration of the registration of the private charging station or of the company-car programme <\/span><\/p><h6 aria-level=\"3\">\u00a0<\/h6><h6 aria-level=\"3\"><span style=\"color: #000000;\"><b>4.3.6 Error monitoring (Sentry)<\/b> <\/span><\/h6><p><span style=\"color: #000000;\"><b>Purpose<\/b>: automated logging and diagnosis of App errors to ensure the stability and quality of the App <\/span><\/p><p><span style=\"color: #000000;\"><b>Recipient(s):<\/b> Functional Software, Inc. (\u201cSentry\u201d), 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA (servers in Frankfurt, Germany) <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">name and version of the browser\/terminal device used, operating system<\/span><\/li><li>referrer URL, time of the server request<\/li><li>error and log data (stack traces, error messages)<\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><b>Legal basis:<\/b> Art. 6(1)(f) GDPR (quality assurance and error correction) <\/span><\/p><p><span style=\"color: #000000;\"><b>Storage period:<\/b> After no more than 90 days or in accordance with the contractual agreement <\/span><\/p><p><span style=\"color: #000000;\"><b>Transfer to a third country: <\/b>processing on EU servers; Sentry is certified under the EU-US Data Privacy Framework. The IP address is anonymised via Sentry <\/span><\/p><p><span style=\"color: #000000;\"><b>Further information: <\/b><a href=\"https:\/\/sentry.io\/privacy\/\">https:\/\/sentry.io\/privacy\/<\/a><\/span><\/p><h6 aria-level=\"3\">\u00a0<\/h6><h6 aria-level=\"3\"><span style=\"color: #000000;\"><b>4.3.7 Diagnostic\/crash data (Microsoft App Center)<\/b> <\/span><\/h6><p><span style=\"color: #000000;\"><b>Purpose: <\/b>analysis of usage as well as crash and performance diagnosis of the App <\/span><\/p><p><span style=\"color: #000000;\"><b>Recipient(s): <\/b>Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland <\/span><\/p><p><span style=\"color: #000000;\"><strong>Data processed:<\/strong> <span class=\"TextRun SCXW25061118 BCX0\" lang=\"DE-DE\" xml:lang=\"DE-DE\" data-contrast=\"auto\"><span class=\"NormalTextRun SpellingErrorV2Themed SCXW25061118 BCX0\">anonymised<\/span><span class=\"NormalTextRun SCXW25061118 BCX0\">\u00a0<\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW25061118 BCX0\">diagnostic<\/span><span class=\"NormalTextRun SCXW25061118 BCX0\">\u00a0<\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW25061118 BCX0\">data<\/span><span class=\"NormalTextRun SCXW25061118 BCX0\">\u00a0(crash\u00a0<\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW25061118 BCX0\">traces<\/span><span class=\"NormalTextRun SCXW25061118 BCX0\">,\u00a0<\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW25061118 BCX0\">number<\/span><span class=\"NormalTextRun SCXW25061118 BCX0\">\u00a0of\u00a0<\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW25061118 BCX0\">app<\/span><span class=\"NormalTextRun SCXW25061118 BCX0\">\u00a0<\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW25061118 BCX0\">launches<\/span><span class=\"NormalTextRun SCXW25061118 BCX0\">,\u00a0<\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW25061118 BCX0\">restarts<\/span><span class=\"NormalTextRun SCXW25061118 BCX0\">)<\/span><\/span><span class=\"EOP SCXW25061118 BCX0\" data-ccp-props=\"{&quot;335559739&quot;:240}\">\u00a0<\/span><\/span><\/p><p><span style=\"color: #000000;\"><b>Legal basis: <\/b>Art. 6(1)(f) GDPR (secure operation of the App) <\/span><\/p><p><span style=\"color: #000000;\"><b>Storage period:<\/b> In accordance with the requirements of Microsoft App Center; erasure once the purpose has been achieved <\/span><\/p><h6 aria-level=\"3\">\u00a0<\/h6><h6 aria-level=\"3\"><span style=\"color: #000000;\"><b>4.3.8 Product and usage analysis<\/b> <\/span><\/h6><p><span style=\"color: #000000;\">Processing on behalf \u2013 PostHog and Sentry are sub-processors and support the maintenance and further development of the App. <\/span><\/p><p><span style=\"color: #000000;\"><b>Purpose<\/b>: analysis of App usage for continuous improvement, error analysis and further development <\/span><\/p><p><span style=\"color: #000000;\"><b>Recipient(s):<\/b> PostHog Inc., 2261 Market St., #4008, San Francisco, CA 94114, USA (servers in Frankfurt, Germany); Functional Software, Inc. (\u201cSentry\u201d), 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA (servers in Frankfurt, Germany) <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">Browser\/operating system information, referrer URL, timestamp <\/span><\/li><li><span style=\"color: #000000;\">Error and log data (stack traces, error messages) \u2013 Sentry <\/span><\/li><li><span style=\"color: #000000;\">Pseudonymous usage data (page views, clicks, behavior) \u2013 PostHog <\/span><\/li><li><span style=\"color: #000000;\">IP address (anonymized\/truncated) <\/span><\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><b>Legal basis: <\/b>Art. 6(1)(f) GDPR (quality assurance and further development); processing within the scope of the customer&#8217;s instructions pursuant to Art. 28 GDPR or, in relation to the App user, on the basis of legitimate interests <\/span><\/p><p><span style=\"color: #000000;\"><strong>Storage period:<\/strong> Sentry: no more than 90 days; PostHog: erasure\/anonymisation once the purpose has been achieved. <\/span><\/p><p><span style=\"color: #000000;\"><strong>Transfer to a third country:<\/strong> processing on EU servers; both providers are certified under the EU-US Data Privacy Framework. <\/span><\/p><h6 aria-level=\"3\">\u00a0<\/h6><h6 aria-level=\"3\"><span style=\"color: #000000;\"><b>4.3.9 System permissions<\/b> <\/span><\/h6><p><span style=\"color: #000000;\">Certain functions of our App require access to specific interfaces and data on your device. Depending on the operating system, your express consent is required for this. You can manage and withdraw the permissions at any time in the system settings of your device. <\/span><\/p><ul><li><span style=\"color: #000000;\">Location Services \u2013 for location-based display of charging stations <\/span><\/li><li><span style=\"color: #000000;\">Push notifications \u2013 for status updates on charging sessions <\/span><\/li><li><span style=\"color: #000000;\">Bluetooth \u2013 for connecting to Bluetooth-enabled devices\/charging stations <\/span><\/li><li><span style=\"color: #000000;\">Camera \u2013 e.g., for scanning QR codes at charging stations <\/span><\/li><li><span style=\"color: #000000;\">Mobile data\/network connections \u2013 for data transmission to our servers <\/span><\/li><li><span style=\"color: #000000;\">Access to device storage \u2013 limited to the app-specific area <\/span><\/li><\/ul><h4 aria-level=\"2\">\u00a0<\/h4><h5 aria-level=\"2\"><span style=\"color: #000000;\"><b>4.4 reev.one (Web Portal)<\/b> <\/span><\/h5><p><span style=\"color: #000000;\">reev.one is the web portal for drivers\/end users with a largely similar range of functions to the reev App. The controllership role is determined in accordance with Section 1. <\/span><\/p><h6 aria-level=\"3\"><span style=\"color: #000000;\"><b>4.4.1 Provision of and access to the web portal<\/b> <\/span><\/h6><p><span style=\"color: #000000;\"><strong>Purpose<\/strong>: provision of the reev.one web portal and ensuring a smooth connection setup. <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">Date and time of access <\/span><\/li><li><span style=\"color: #000000;\">Name and URL of the file accessed <\/span><\/li><li><span style=\"color: #000000;\">Browser used and, if applicable, operating system; name of the Internet service provider <\/span><\/li><li><span style=\"color: #000000;\">IP address (deleted after 7 days at the latest or pseudonymized) <\/span><\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><b>Legal basis: <\/b>Article 6(1)(f) of the GDPR (ensuring stability, security, and error analysis). <\/span><\/p><p><span style=\"color: #000000;\">Storage period: IP address for a maximum of 7 days, thereafter erasure or pseudonymisation. <\/span><\/p><h6>\u00a0<\/h6><h6><span style=\"color: #000000;\"><b>4.4.2 Cookies<\/b> <\/span><\/h6><p><strong>Purpose:<\/strong> provision of the functionality of the web portal (session, consent, server stability) <br \/><strong>Recipient(s):<\/strong> storage on the user&#8217;s terminal device; no transmission to third parties. <br \/><strong>Data processed:<\/strong><\/p><ul><li><span style=\"color: #000000;\">IP address <\/span><\/li><li><span style=\"color: #000000;\">Session ID <\/span><\/li><li><span style=\"color: #000000;\">Authentication status (e.g., login status \u201clogged in\/logged out,\u201d user role flag) <\/span><\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><strong>Legal basis:<\/strong> Art. 6(1)(f) GDPR, Section 25(2) TDDDG (ensuring functions). <\/span><\/p><p><span style=\"color: #000000;\"><b>Storage duration: <\/b>Until the end of the session or according to the individual cookie&#8217;s lifetime.<\/span><\/p><h6 aria-level=\"3\">\u00a0<\/h6><h6 aria-level=\"3\"><span style=\"color: #000000;\"><b>4.4.3 Payment processing of charging sessions<\/b> <\/span><\/h6><p><span style=\"color: #000000;\">Purpose: processing of payments for charging sessions carried out. <\/span><\/p><p><span style=\"color: #000000;\">Recipient(s): Stripe Payments Europe, Limited, Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">email address and further data required for invoice processing <\/span><\/li><li><span style=\"color: #000000;\">information on the charging session (location, invoice amount, taxes) <\/span><\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><b>Legal basis: <\/b>Art . 6(1)(b) of the GDPR (performance of a contract); Art. 6(1)(f) of the GDPR (user-friendly payment processing). <\/span><\/p><p><span style=\"color: #000000;\"><strong>Storage period:<\/strong> For the duration of the contractual relationship as well as in accordance with statutory retention periods. <\/span><\/p><h6 aria-level=\"3\">\u00a0<\/h6><h6 aria-level=\"3\"><span style=\"color: #000000;\"><b>4.4.4 Error monitoring and product analysis<\/b> <\/span><\/h6><p><span style=\"color: #000000;\">Purpose: error analysis and analysis of usage for the continuous improvement of the web portal. <\/span><\/p><p><span style=\"color: #000000;\"><strong>Recipient(s):<\/strong> Functional Software, Inc. (\u201cSentry\u201d), 45 Fremont Street, San Francisco, CA 94105, USA; PostHog Inc., 2261 Market St., #4008, San Francisco, CA 94114, USA \u2013 servers in each case in Frankfurt, Germany. <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">Browser\/operating system information, referrer URL, timestamp <\/span><\/li><li><span style=\"color: #000000;\">Error and log data (stack traces, error messages) \u2013 Sentry <\/span><\/li><li><span style=\"color: #000000;\">Pseudonymous usage data (page views, clicks, behavior) \u2013 PostHog <\/span><\/li><li><span style=\"color: #000000;\">IP address (anonymized\/truncated) <\/span><\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><b>Legal basis: <\/b>Article 6(1)(f) of the GDPR (quality assurance and further development). <\/span><\/p><p><span style=\"color: #000000;\"><strong>Storage period:<\/strong> Sentry: no more than 90 days; PostHog: erasure\/anonymisation once the purpose has been achieved. <\/span><\/p><p><span style=\"color: #000000;\"><strong>Transfer to a third country:<\/strong> processing on EU servers; both providers are certified under the EU-US Data Privacy Framework. <\/span><\/p><h5 aria-level=\"2\">\u00a0<\/h5><h5 aria-level=\"2\"><span style=\"color: #000000;\"><b>4.5 reev Payment Terminal<\/b> <\/span><\/h5><p><span style=\"color: #000000;\">Via the reev Payment Terminal, ad-hoc drivers can charge by debit or credit card directly at the charging station without having to create a user account with reev. In relation to the ad-hoc driver, reev is itself the controller for the payment processing arising in this context. <\/span><\/p><h6 aria-level=\"3\">\u00a0<\/h6><h6 aria-level=\"3\"><span style=\"color: #000000;\"><b>4.5.1 Use of the user interface and payment processing<\/b> <\/span><\/h6><p><span style=\"color: #000000;\"><strong>Purpose<\/strong>: reading of the payment card data to check authorisation and to handle payment for the charging session. <\/span><\/p><p><span style=\"color: #000000;\"><strong>Recipient(s):<\/strong> Payter BV, Rozenlaan 115, 3051 LP Rotterdam, the Netherlands (payment-terminal backend); ELAVON Financial Services DAC, German Branch, Lyoner Str. 36, 60528 Frankfurt\/Main (payment service provider, separate controller pursuant to the GDPR). <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">Card Number (PAN) <\/span><\/li><li><span style=\"color: #000000;\">Date and Time <\/span><\/li><li><span style=\"color: #000000;\">Amount Charged <\/span><\/li><li><span style=\"color: #000000;\">Last Name and First Name (for ELAVON processing) <\/span><\/li><li><span style=\"color: #000000;\">Credit card or account information (depending on the selected payment method) <\/span><\/li><li><span style=\"color: #000000;\">Invoice amount, payment date <\/span><\/li><li><span style=\"color: #000000;\">Information about the charging station used <\/span><\/li><li><span style=\"color: #000000;\">Email address (optional, if a receipt is requested) <\/span><\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><strong>Legal basis:<\/strong> Art. 6(1)(b) GDPR (performance of the contract); Art. 6(1)(c) GDPR in conjunction with PSD2\/ZAG (strong customer authentication); Art. 6(1)(f) GDPR (user-friendly payment processing). <\/span><\/p><p><span style=\"color: #000000;\"><strong>Storage period:<\/strong> Storage by ELAVON for the handling of the payment and to comply with statutory retention obligations. <\/span><\/p><h5 aria-level=\"2\">\u00a0<\/h5><h5 aria-level=\"2\"><span style=\"color: #000000;\"><b>4.6 reev Companion (electrician tool)<\/b> <\/span><\/h5><p><span style=\"color: #000000;\">reev Companion is an onboarding and commissioning tool for electricians. For the electrician&#8217;s account data, reev is itself the controller; for the end-customer data transmitted within the scope of onboarding, reev is the respective customer&#8217;s processor. <\/span><\/p><h6>\u00a0<\/h6><h6><span style=\"color: #000000;\"><b>4.6.1 Collection and transmission of onboarding and installation data<\/b> <\/span><\/h6><p><span style=\"color: #000000;\"><strong>Purpose<\/strong>:\u202fsupport of the electrician in the commissioning of the charging infrastructure and the energy management, creation of the electrician account as well as collection and storage of the onboarding and installation data required for commissioning <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">email address of the electrician \/ installer (for account creation and communication within the scope of commissioning) <\/span><\/li><li><span style=\"color: #000000;\">email address and, where applicable, further contact data of the customer \/ end customer <\/span><\/li><li><span style=\"color: #000000;\">location data of the installation (address, town, where applicable precise location designation such as underground parking space, residential unit) <\/span><\/li><li><span style=\"color: #000000;\">information on the installed charging station (e.g. manufacturer, model, serial number, number of charge points, technical configuration, connection type) <\/span><\/li><li><span style=\"color: #000000;\">information on the activated energy management (e.g. grid connection capacity, topology, energy meter) <\/span><\/li><li><span style=\"color: #000000;\">commissioning and status information <\/span><\/li><\/ul><p aria-level=\"3\">\u00a0<\/p><p aria-level=\"3\"><span style=\"color: #000000;\"><strong>Legal basis:<\/strong> Art. 6(1)(b) GDPR (performance of the contract with the electrician for account creation and commissioning communication) <\/span><\/p><p aria-level=\"3\"><span style=\"color: #000000;\"><strong>Storage period:\u202f<\/strong>For the duration of the active electrician account or of the respective commissioning\/service operation. End-customer and installation data are erased in accordance with the data processing agreement with the customer; statutory retention periods (e.g. under commercial and tax law) remain unaffected. <\/span><\/p><h6 aria-level=\"3\">\u00a0<\/h6><h6 aria-level=\"3\"><span style=\"color: #000000;\"><b>4.6.2 Usage analysis<\/b> <\/span><\/h6><p><span style=\"color: #000000;\"><strong>Purpose<\/strong>: analysis of App usage to improve the tool <\/span><\/p><p><span style=\"color: #000000;\"><strong>Recipient(s):<\/strong> PostHog Inc., 2261 Market Street, Suite 4008, San Francisco, CA 94114 (servers in Frankfurt, Germany); Functional Software, Inc. (\u201cSentry\u201d), 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA (servers in Frankfurt, Germany) <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">Browser\/operating system information, referrer URL, timestamp <\/span><\/li><li><span style=\"color: #000000;\">Error and log data (stack traces, error messages) \u2013 Sentry <\/span><\/li><li><span style=\"color: #000000;\">Pseudonymous usage data (page views, clicks, behavior) \u2013 PostHog <\/span><\/li><li><span style=\"color: #000000;\">IP address (anonymized\/truncated) <\/span><\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><b>Legal basis: <\/b>Article 6(1)(f) of the GDPR (quality assurance and further development). <\/span><\/p><p><span style=\"color: #000000;\"><strong>Storage period:<\/strong> Sentry: no more than 90 days; PostHog: erasure\/anonymisation once the purpose has been achieved. <\/span><\/p><p><span style=\"color: #000000;\"><strong>Transfer to a third country:<\/strong> processing on EU servers; both providers are certified under the EU-US Data Privacy Framework. <\/span><\/p><p><span style=\"color: #000000;\"><strong>Further information:<\/strong> Following consent given via the consent banner, a technically non-essential cookie is set by PostHog (\u201cph_phc_[ID]\u201d). <\/span><\/p><h6 aria-level=\"3\">\u00a0<\/h6><h6 aria-level=\"3\"><span style=\"color: #000000;\"><b>4.6.2 Support<\/b> <\/span><\/h6><p><span style=\"color: #000000;\"><strong>Purpose<\/strong>:\u202fprovision of a live-chat and customer-support widget for communication with website visitors and users, including the management of support requests, onboarding communication and the analysis of user behaviour to improve support <\/span><\/p><p><span style=\"color: #000000;\"><b>Recipient:<\/b>Intercom R&amp;D Unlimited Company, 124 St. Stephen&#8217;s Green, Dublin 2, DC02 C628, Ireland <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">Contact and registration information (e.g., name, email address) <\/span><\/li><li><span style=\"color: #000000;\">Device data (e.g., operating system, browser type, IP address) <\/span><\/li><li><span style=\"color: #000000;\">Usage and session data (e.g., pages visited, session duration) <\/span><\/li><li><span style=\"color: #000000;\">Communication data (e.g., chat histories, support messages) <\/span><\/li><li><span style=\"color: #000000;\">Technical identifiers (e.g., cookie IDs, unique device IDs) <\/span><\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><strong>Legal basis:<\/strong> performance of the contract pursuant to Art. 6(1)(b) GDPR, in so far as the use of the support tool is necessary to provide the contractually agreed service; otherwise legitimate interest pursuant to Art. 6(1)(f) GDPR (optimisation of customer support and product quality); <b> <\/b>Cookies are set in accordance with Section 25(2)(2) of the TDDDG, as these cookies are technically necessary to provide the service you have expressly requested. <\/span><\/p><p><span style=\"color: #000000;\"><strong>Storage period:<\/strong>\u202fFor as long as the contract with Intercom exists; upon termination of the contract, active data are automatically erased after 180 days. On request, erasure takes place within 30 days <\/span><\/p><p><span style=\"color: #000000;\"><b>Additional information:<\/b> Intercom uses the following cookies: \u201cintercom-session-[app_id]\u201d; \u201cintercom-device-id-[app_id]\u201d; \u201cintercom-id-[app_id]\u201d <\/span><\/p><h6 aria-level=\"3\">\u00a0<\/h6><h6 aria-level=\"3\"><span style=\"color: #000000;\"><b>4.6.3 Transmission to service\/installation partners<\/b> <\/span><\/h6><p>Processing on behalf of the customer. <\/p><p><strong>Purpose<\/strong>: transmission of installation, maintenance and support information between reev and authorised installation\/service partners.<\/p><p><strong>Recipient(s):<\/strong> authorised installation and service partners of the customer<\/p><p><strong>Data processed:<\/strong><\/p><ul><li><span style=\"color: #000000;\">Technical Information on the Charging Infrastructure and Error Messages <\/span><\/li><li><span style=\"color: #000000;\">Contact information for the end customer\/installation site <\/span><\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><strong>Legal basis:<\/strong> Art. 6(1)(b) GDPR; Art. 6(1)(f) GDPR (efficient operation and support). <\/span><\/p><p><span style=\"color: #000000;\"><strong>Storage period:<\/strong> For the duration of the respective service operation.<\/span><\/p><h5>\u00a0<\/h5><h5><span style=\"color: #000000;\"><b>4.7 reev Companion Plus (partner portal for hardware manufacturers and full-service providers)<\/b> <\/span><\/h5><p><span style=\"color: #000000;\">Via reev Companion Plus (formerly Partner Portal), hardware manufacturers (charging-station OEMs) as well as full-service providers obtain read access to monitoring, analysis and support functions for the charging stations they manufacture and which are connected to reev. In this respect, reev is the respective customer&#8217;s processor; the partner acts on the basis of the data processing agreement between reev and the customer.<\/span><\/p><h6 aria-level=\"3\"><span style=\"color: #000000;\"><b>4.7.1 Monitoring and support of the charging stations<\/b> <\/span><\/h6><p>Processing on behalf of the customer (Art. 28 GDPR). <\/p><p><strong>Purpose<\/strong>: monitoring of operability, error analysis and maintenance of the charging stations manufactured by the partner<\/p><p><strong>Recipient(s):<\/strong> the respective hardware manufacturer \/ partner<\/p><p><strong>Data processed:<\/strong><\/p><ul><li><span style=\"color: #000000;\">Charging station, customer, and location data (customer name, location name, charging group name, technical configuration) <\/span><\/li><li><span style=\"color: #000000;\">Error messages, telemetry data from the charging station <\/span><\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><b>Legal basis: <\/b>Article 6(1)(f) of the GDPR (legitimate interest of reev and its customers in ensuring the proper functioning of the hardware) <\/span><\/p><p><span style=\"color: #000000;\"><strong>Storage period:<\/strong> For the duration of the contractual relationship between reev and the customer or for as long as required for support <\/span><\/p><h5 aria-level=\"2\">\u00a0<\/h5><h5 aria-level=\"2\"><span style=\"color: #000000;\"><b>4.8 reev Stromtarif (cooperation with Nomos GmbH)<\/b> <\/span><\/h5><p><span style=\"color: #000000;\">For the \u201creev Stromtarif\u201d feature, reev cooperates with Nomos GmbH (\u201cNomos\u201d). reev and Nomos are joint controllers within the meaning of Art. 26 GDPR. An agreement on joint controllership has been concluded. <\/span><\/p><p><span style=\"color: #000000;\">Allocation of tasks: <\/span><\/p><ul><li><span style=\"color: #000000;\">Nomos: conclusion and performance of the energy supply contract, change of supplier, billing within the supply relationship as well as associated legal obligations. <\/span><\/li><li><span style=\"color: #000000;\">reev: operation of the platform, setting up and management of the customer account (portal\/app), technical and specialist support, visualisation of consumption data. <\/span><\/li><\/ul><h6><span style=\"color: #000000;\"><b>4.8.1 Energy supply contract and consumption metering<\/b> <\/span><\/h6><p><span style=\"color: #000000;\">Joint controllership reev \/ Nomos (Art. 26 GDPR). <\/span><\/p><p><span style=\"color: #000000;\"><strong>Purpose:<\/strong> conclusion and performance of the energy supply contract, change of supplier, billing and visualisation of consumption data <\/span><\/p><p><span style=\"color: #000000;\"><strong>Recipient(s):<\/strong> Nomos GmbH; market partners involved in the energy supply (in particular grid and metering point operators); payment service providers and banks; IT\/hosting\/support\/cloud service providers (as processors); tax advisers\/auditors and authorities, where legally required <\/span><\/p><p><span style=\"color: #000000;\"><b>Data processed:<\/b> <\/span><\/p><ul><li><span style=\"color: #000000;\">First and last name, email address, shipping address <\/span><\/li><li><span style=\"color: #000000;\">Meter type and meter number, estimated annual consumption, reason for switching <\/span><\/li><li><span style=\"color: #000000;\">Bank account information (account holder, IBAN) <\/span><\/li><li><span style=\"color: #000000;\">Name of the previous utility provider, name of the grid\/metering point operator <\/span><\/li><li><span style=\"color: #000000;\">Market and metering location <\/span><\/li><li><span style=\"color: #000000;\">Electricity consumption data (for smart metering systems, up to quarter-hourly readings) <\/span><\/li><li><span style=\"color: #000000;\">For reev, additionally: contract status, start\/end of supply, monthly consumption figures <\/span><\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\"><strong>Legal basis:<\/strong> Art. 6(1)(b) GDPR (performance of the contract and pre-contractual measures); Art. 6(1)(c) GDPR (legal obligations, in particular commercial\/tax-law retention obligations, EnWG); Art. 6(1)(f) GDPR (IT and platform security, prevention of misuse and fraud) <\/span><\/p><p><span style=\"color: #000000;\"><strong>Storage period:<\/strong> For the duration of the contractual relationship as well as in accordance with statutory retention periods <\/span><\/p><p><span style=\"color: #000000;\"><strong>Transfer to a third country<\/strong>: processing in principle within the EU\/EEA; in the event of transfer to third countries, reev and\/or Nomos ensure that either an adequacy decision or appropriate safeguards pursuant to Art. 44 et seq. GDPR are in place <\/span><\/p><p><span style=\"color: #000000;\"><strong>For more information:<\/strong> Nomos Privacy Policy : <a href=\"https:\/\/www.nomos.energy\/privacy\">https:\/\/www.nomos.energy\/privacy <\/a> <\/span><\/p><p><span style=\"color: #000000;\">Data subjects may exercise their rights under the GDPR against either of the two controllers. We recommend contacting the respective primary point of contact \u2013 reev via privacy(at)reev.com or Nomos via the contact details set out in their data protection information. <\/span><\/p><h3 aria-level=\"1\">\u00a0<\/h3><h3 aria-level=\"1\"><span style=\"color: #000000;\"><b>5. Contacting us<\/b> <\/span><\/h3><p><span style=\"color: #000000;\">If you contact us by email or via other channels of communication, we process the personal data you provide (e.g. name, email address, content of the message) solely for the purpose of handling and responding to your enquiry. The legal basis is, as a rule, our legitimate interest in communicating with you (Art. 6(1)(f) GDPR) or \u2013 in so far as the enquiry serves the initiation or performance of a contract \u2013 Art. 6(1)(b) GDPR. Your data are stored only for as long as is necessary to handle your enquiry. No disclosure to third parties takes place unless we are legally obliged to do so or this is indispensable for handling your enquiry. <\/span><\/p><h3 aria-level=\"1\">\u00a0<\/h3><h3 aria-level=\"1\"><span style=\"color: #000000;\"><b>6. International data transfers<\/b> <\/span><\/h3><p><span style=\"color: #000000;\">We process your data in principle within the EU and the EEA. However, some service providers are located in so-called \u201cthird countries\u201d. The GDPR imposes high requirements in this respect. All recipients must meet these requirements. Before transferring data to a third-country service provider, we examine the level of data protection and select only providers with demonstrably adequate protection. Every processor \u2013 including those outside the EEA \u2013 has concluded a data processing agreement with us. Additional requirements apply to providers outside the EEA: pursuant to Art. 44 et seq. GDPR, data may be transferred if at least one of the following conditions is met: <\/span><\/p><ul><li><span style=\"color: #000000;\">The EU Commission has determined that there is an adequate level of data protection (e.g. the EU-US Data Privacy Framework). <\/span><\/li><li><span style=\"color: #000000;\">Standard contractual clauses have been agreed with the recipient. <\/span><\/li><li><span style=\"color: #000000;\">Other appropriate safeguards pursuant to Art. 46 GDPR. <\/span><\/li><li><span style=\"color: #000000;\">In exceptional cases, one of the derogations under Art. 49 GDPR applies.<\/span><\/li><\/ul><h3 aria-level=\"1\">\u00a0<\/h3><h3 aria-level=\"1\"><span style=\"color: #000000;\"><b>7. Recipients of data<\/b> <\/span><\/h3><p><span style=\"color: #000000;\">As a rule, a transfer of the personal data we collect takes place only where: <\/span><\/p><ul><li><span style=\"color: #000000;\">you have given your express consent pursuant to Art. 6(1)(a) GDPR, <\/span><\/li><li><span style=\"color: #000000;\">the disclosure is necessary pursuant to Art. 6(1)(f) GDPR to safeguard legitimate interests or for the establishment, exercise or defence of legal claims, and there is no reason to assume that your interests warranting protection override these, <\/span><\/li><li><span style=\"color: #000000;\">we are legally obliged to do so (Art. 6(1)(c) GDPR), or <\/span><\/li><li><span style=\"color: #000000;\">the disclosure is necessary for the performance of a contract or for the performance of pre-contractual measures (Art. 6(1)(b) GDPR). <\/span><\/li><\/ul><p>\u00a0<\/p><p><span style=\"color: #000000;\">Possible recipients are: <\/span><\/p><ul><li><span style=\"color: #000000;\">Processors: external service providers, e.g. in the area of technical infrastructure, maintenance, support, product and usage analysis or payment processing. These may use data exclusively in accordance with our instructions. <\/span><\/li><li><span style=\"color: #000000;\">Separate controllers: in particular payment service providers within the scope of their legal obligations (e.g. ELAVON, card-issuing banks, acquirers). <\/span><\/li><li><span style=\"color: #000000;\">Joint controllers: Nomos GmbH within the scope of the \u201creev Stromtarif\u201d feature. <\/span><\/li><li><span style=\"color: #000000;\">Public bodies: authorities and public offices (e.g. tax authorities, public prosecutors&#8217; offices, courts), in so far as we are legally obliged to do so or legitimate interests so require.<\/span><\/li><\/ul><h3 aria-level=\"1\">\u00a0<\/h3><h3 aria-level=\"1\"><span style=\"color: #000000;\"><b>8. Data security and protective measures<\/b> <\/span><\/h3><p><span style=\"color: #000000;\">We ensure that your personal data remain secure and confidential. To protect against manipulation, loss or misuse, we employ technical and organisational measures which are regularly reviewed and adapted to the state of the art. <\/span><\/p><p><span style=\"color: #000000;\">Please note that other persons or institutions on the internet may disregard data protection requirements. In particular, unencrypted data (e.g. emails) may be viewed by third parties. We have no influence over this. You should therefore protect your data against misuse by means of encryption or comparable measures. <\/span><\/p><h3 aria-level=\"1\">\u00a0<\/h3><h3 aria-level=\"1\"><span style=\"color: #000000;\"><b>9. Data storage<\/b> <\/span><\/h3><p><span style=\"color: #000000;\">Personal data are erased or blocked as soon as the purpose of storage ceases to apply. Storage may also take place where this is provided for by European or national legislation. Data are furthermore blocked or erased where a statutory retention period expires, unless they are still required for the performance of a contract. <\/span><\/p><h3 aria-level=\"1\">\u00a0<\/h3><h3 aria-level=\"1\"><span style=\"color: #000000;\"><b>10. Data subject rights<\/b> <\/span><\/h3><p><span style=\"color: #000000;\">In respect of your personal data, you have the following rights: <\/span><\/p><ul><li aria-setsize=\"-1\" data-leveltext=\"%1.\" data-font=\"Calibri,Times New Roman\" data-listid=\"26\" data-list-defn-props=\"{\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span style=\"color: #000000;\"><strong>Right of access (Art. 15 GDPR, Section 34 BDSG):<\/strong> You can request information as to whether and which personal data are processed by us, for what purpose, to which recipients or categories of recipients the data are transmitted and for how long the data are stored. <\/span><\/li><li aria-setsize=\"-1\" data-leveltext=\"%1.\" data-font=\"Calibri,Times New Roman\" data-listid=\"26\" data-list-defn-props=\"{\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span style=\"color: #000000;\"><strong>Right to rectification (Art. 16 GDPR):<\/strong> You can request the immediate rectification of inaccurate personal data or the completion of incomplete personal data. <\/span><\/li><li aria-setsize=\"-1\" data-leveltext=\"%1.\" data-font=\"Calibri,Times New Roman\" data-listid=\"26\" data-list-defn-props=\"{\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span style=\"color: #000000;\"><strong>Right to erasure (Art. 17 GDPR):<\/strong> You can request the erasure of your personal data, in particular where these are no longer necessary, where you withdraw your consent or where the data have been processed unlawfully. <\/span><\/li><li aria-setsize=\"-1\" data-leveltext=\"%1.\" data-font=\"Calibri,Times New Roman\" data-listid=\"26\" data-list-defn-props=\"{\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span style=\"color: #000000;\"><strong>Right to restriction of processing (Art. 18 GDPR):<\/strong> You can request the restriction of the processing of your data, e.g. where the accuracy of the data is contested. <\/span><\/li><li aria-setsize=\"-1\" data-leveltext=\"%1.\" data-font=\"Calibri,Times New Roman\" data-listid=\"26\" data-list-defn-props=\"{\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span style=\"color: #000000;\"><strong>Right to data portability (Art. 20 GDPR):<\/strong> You have the right to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine-readable format or \u2013 in so far as technically feasible \u2013 to request the transmission to another controller.<\/span><\/li><li aria-setsize=\"-1\" data-leveltext=\"%1.\" data-font=\"Calibri,Times New Roman\" data-listid=\"26\" data-list-defn-props=\"{\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span style=\"color: #000000;\"><strong>Right to withdraw consent (Art. 7(3) GDPR):<\/strong> You can withdraw consent given at any time with effect for the future. The lawfulness of the processing carried out up to the withdrawal remains unaffected. <\/span><\/li><li aria-setsize=\"-1\" data-leveltext=\"%1.\" data-font=\"Calibri,Times New Roman\" data-listid=\"26\" data-list-defn-props=\"{\" data-aria-posinset=\"1\" data-aria-level=\"1\"><strong>Right to object (Art. 21 GDPR):<\/strong> You can object at any time, on grounds relating to your particular situation, to the processing of your personal data, in particular in connection with direct marketing or related profiling.<\/li><li aria-setsize=\"-1\" data-leveltext=\"%1.\" data-font=\"Calibri,Times New Roman\" data-listid=\"26\" data-list-defn-props=\"{\" data-aria-posinset=\"1\" data-aria-level=\"1\"><strong>Right to lodge a complaint with a supervisory authority (Art. 77 GDPR):<\/strong> You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes data protection provisions.<\/li><\/ul><h3 aria-level=\"1\">\u00a0<\/h3><h3 aria-level=\"1\"><span style=\"color: #000000;\"><b>11. Change History<\/b> <\/span><\/h3><table data-tablestyle=\"MsoTableGrid\" data-tablelook=\"1184\" aria-rowcount=\"2\"><tbody><tr aria-rowindex=\"1\"><td data-celllook=\"0\"><p><span style=\"color: #000000;\"><b>Date<\/b> <\/span><\/p><\/td><td data-celllook=\"0\"><p><span style=\"color: #000000;\"><b>Version<\/b> <\/span><\/p><\/td><td data-celllook=\"0\"><p><span style=\"color: #000000;\"><b>Reason for Change<\/b> <\/span><\/p><\/td><\/tr><tr aria-rowindex=\"2\"><td data-celllook=\"0\"><p><span style=\"color: #000000;\">July 1, 2026 <\/span><\/p><\/td><td data-celllook=\"0\"><p><span style=\"color: #000000;\">1.0 <\/span><\/p><\/td><td data-celllook=\"0\"><p><span style=\"color: #000000;\">First consolidated version \u2013 replaces previous separate privacy policies <\/span><\/p><\/td><\/tr><\/tbody><\/table>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Home Privacy Policy &#8211; reev Products This Privacy Policy explains how personal data is processed in connection with the products and services of reev GmbH. reev processes only such data as is necessary to provide and secure the respective services, applying the principle of data minimisation. \u201cPersonal data\u201d means any information relating to an identified [&hellip;]<\/p>\n","protected":false},"author":14,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_seopress_titles_title":"Privacy Policy - reev Products","_seopress_titles_desc":"reev GmbH - Sandstra\u00dfe 3 - 80335 Munich We operate our websites in accordance with the principles set forth below: We are committed to complying with the statutory provisions on data protection and strive to consistently adhere to the principles of data avoidance and data minimization.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"both","_seopress_redirections_param":"","_seopress_redirections_type":301,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"footnotes":""},"class_list":["post-427943","page","type-page","status-publish","hentry"],"translations":{"de":"datenschutzerklarung-reev-produkte","en":"privacy-policy-reev-products","fr":"politique-de-confidentialite-produits-reev"},"_links":{"self":[{"href":"https:\/\/reev.com\/en\/wp-json\/wp\/v2\/pages\/427943","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/reev.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/reev.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/reev.com\/en\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/reev.com\/en\/wp-json\/wp\/v2\/comments?post=427943"}],"version-history":[{"count":10,"href":"https:\/\/reev.com\/en\/wp-json\/wp\/v2\/pages\/427943\/revisions"}],"predecessor-version":[{"id":428153,"href":"https:\/\/reev.com\/en\/wp-json\/wp\/v2\/pages\/427943\/revisions\/428153"}],"wp:attachment":[{"href":"https:\/\/reev.com\/en\/wp-json\/wp\/v2\/media?parent=427943"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}