Data Protection

Information on the handling of personal data

We are very pleased about your interest in our website – and thus in our company.

The protection of your privacy is important to us; we will only use your data for the purposes intended. Because it is important to us that you are always aware of how we collect, use, and potentially share your data with third parties, we provide you with comprehensive information below regarding the processing of your personal data collected by us or stored by us.

You can generally use our website without providing any data; if there are exceptions to this for selected services, we will explain these in the following sections. We will only process data without a legal basis without your informed consent. When processing personal data, we strictly adhere to the requirements of the EU General Data Protection Regulation (GDPR) and, where applicable, other data protection-related regulations.

Name and address of the controller

DirectCharge GmbH
Franklinstraße 14
10587 Berlin
Germany

Email: kontakt@directcharge.de

Rights of the data subject

Chapter III of the EU General Data Protection Regulation (GDPR) provides extensive rights for data subjects, which we explain to you below with regard to the processing of your personal data:

Right to information

This requirement particularly concerns information on the following details of data processing:

Purposes of processing

Categories of data

Recipients or categories of recipients, if applicable

If applicable, the planned storage period or the criteria for determining this period

Note on the respective right to rectification, erasure, restriction or objection

Existence of the right to lodge a complaint with a supervisory authority

If applicable, origin of the data (if not collected from you)

Where applicable, existence of automated decision-making, including profiling, including meaningful information about the logic involved, the scope and the expected effects

If applicable (planned) transfer to a third country or international organization

Right to rectification

We will correct any incorrect data immediately if you inform us accordingly.

Right to erasure

If processing is no longer necessary and one of the following conditions is met:

Loss of the processing purpose

Withdrawal of your consent and lack of any other legal basis for processing

Objection to processing without an important reason

Unlawful processing

Necessary to fulfill a legal obligation

Data collection was carried out in accordance with Art. 8 (1) GDPR

Right to restriction of processing

If one of the following conditions is met:

You dispute the accuracy of your data (restrictions may be imposed on our site for the duration of the review)

In the case of unlawful processing and if the data is not to be deleted, the deletion will be replaced by a restriction of processing

If the processing purposes no longer apply, but at the same time you need your data to assert, exercise or defend legal claims

After you have objected in accordance with Art. 21 (1) GDPR and for the duration of the review as to whether our legitimate reasons outweigh yours

Right to data portability

If it is technically possible and does not affect the rights and freedoms of other persons, we will – at your request – transmit your data to another recipient (controller).

Right to object

If we collect or have collected and process personal data from you (on the basis of Art. 6 Para. 1 e or f or Art. 9 Para. 2 a GDPR), you have the right to object to the data processing at any time (with effect for the future). In exceptional cases, the objection may be ineffective, e.g. if we can demonstrate compelling legitimate interests for the processing that outweigh your interests or if processing serves to assert, exercise or defend legal claims. If we process your personal data in order to conduct direct advertising, you have the right to object to this processing at any time. This also applies to profiling insofar as it is associated with such direct advertising. You also have the right to object to the processing of your data concerning you which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 Para. 1 GDPR, unless such processing is necessary to perform a task carried out in the public interest.

Automated decisions in individual cases, including profiling

If we collect, have collected, and process personal data from you, you have the right not to be subjected to a decision based solely on automated processing—including profiling—that produces legal effects concerning you or similarly significantly affects you. Exceptions to this requirement apply if the decision is necessary for entering into or fulfilling a contract between you and us, or if you have explicitly consented to the processing. In any case, we will take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, including at least the right to obtain human intervention on our part, to express your point of view, and to contest the decision.

Right to withdraw consent to data protection

You have the right to withdraw your consent to the processing of personal data at any time.

Right to lodge a complaint with a supervisory authority

A list of the supervisory authorities responsible in Germany can be found on the website of the Federal Commissioner for Data Protection or at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.

General information on data processing on the website

The following information applies to data processing on our website in general. Any exceptions or additions to this information will be described in detail in the respective sections.

Information on data security

We protect our website and other systems through technical and organizational measures against the loss, destruction, access, alteration, or distribution of your data by unauthorized persons. We have also implemented SSL encryption (SHA256) on our website to protect your data. Despite regular checks, however, complete protection against all threats is not possible.

Legal basis for processing

We process personal data in accordance with the GDPR, depending on the type and purpose of processing as follows:

Permission	GDPR requirement
Informed consent	Article 6 paragraph 1 a
Fulfillment of a contract	Article 6 paragraph 1 b
Implementation of pre-contractual measures	Article 6 paragraph 1 b
Fulfillment of legal obligations	Article 6 paragraph 1 c
Protection of vital interests	Article 6 paragraph 1 d
Safeguarding our legitimate interests	Article 6 paragraph 1 f

Our legitimate interest, as defined in Article 6 (1) (f) GDPR, is based on the performance of our business activities to maintain our operational capability and secure the employment of our employees.

General deadlines for data deletion

Once the storage purpose no longer applies, the retention periods are generally at least six or ten years. Data is generally deleted immediately in accordance with our deletion policy, unless there is a retention obligation, necessity for contractual fulfillment, or a legitimate interest that conflicts with this.

Deletion or blocking of personal data

We store your personal data only for the period necessary to fulfil the specified purpose. Once the purpose no longer applies and after any retention periods have expired, your data will be deleted immediately. If deletion is not possible, the data will be blocked instead.

Collection of general data and information

As soon as you visit our website, our web server collects some general data and technical information – as shown in the table below:

browser types and versions used	correct display of page content
operating system used, visitor origin (referrer, e.g. Google), subpages clicked	Optimization of our website content and our advertising
Date and time of access to the website as well as the visitor’s IP address and Internet service provider	Ensuring the continued functionality of our IT systems (for operating the website) and preventing misuse
other data and information for threat prevention in the event of attacks	Providing relevant information to law enforcement authorities in the event of a cyberattack

Obligation to provide personal data

Under certain circumstances (e.g., due to legal or contractual regulations), you are required to provide us with your personal data. Examples of such processing include the following:

Conclusion of a purchase contract (e.g. your address)	Fulfillment of the contractual obligation (e.g. delivery of the goods to your address)
In the employee context (e.g. transmission of data to the tax office)	Compliance with legal requirements (e.g. tax regulations)

Information about specific data processing on the website

Where applicable, deviating from or in addition to the general information above, you will find details below on the individual data processing on our website.

Borlabs

Purpose of processing	Saving users’ cookie settings, compliance with legal obligations
Legal basis (according to Art. 6 / 9 GDPR)	Fulfillment of legal obligations (Article 6 (1) (c))
Recipient (if passed on)	Borlabs; Operator: Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany
If applicable, intention to transfer to a third country or international organization (including information on the Commission’s adequacy decision or appropriate safeguards)	Data transfer to a third country does not take place and is not planned.
If known: Duration of data storage	See General deadlines for data deletion
Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity	no
Consequences of non-compliance (if the required data is not provided)	no
Existence of automated decision-making, if applicable	In this context, we do not use automated decision-making.
If applicable, origin of the data (if not collected directly from the data subject)	The data usually comes from the data subject, but can also come from third parties.
Where applicable, categories of personal data (if not collected directly from the data subject).	Opt-in and opt-out data, IP address, time and type of consent,
Change of purpose if necessary	no

Contact form

Purpose of processing	Processing and, if necessary, answering the request from the form sender
Legal basis (according to Art. 6 / 9 GDPR)	Protection of our legitimate interests (Art. 6 para. 1 f), Implementation of pre-contractual measures (Article 6 (1) (b))
Recipient (if passed on)	There will be no transfer to third parties and/or to a third country.
If applicable, intention to transfer to a third country or international organization (including information on the Commission’s adequacy decision or appropriate safeguards)	Data transfer to a third country does not take place and is not planned.
If known: Duration of data storage	See General deadlines for data deletion
Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity	There is no obligation.
Consequences of non-compliance (if the required data is not provided)	no
Existence of automated decision-making, if applicable	In this context, we do not use automated decision-making.
If applicable, origin of the data (if not collected directly from the data subject)	The data comes from the data subject himself.
Change of purpose if necessary	no