Draft – have it checked by a lawyer. This text is a template, not legal advice. All highlighted placeholders must be replaced with real details before publication. The German version is legally binding.
As of: [[PLATZHALTER: Datum]]. This policy describes what technically happens when you visit chargebreak.eu and use the ChargeBreak app.
1. Controller
[[PLATZHALTER: Name / company]], [[PLATZHALTER: Anschrift]]
Email: [[PLATZHALTER: E-Mail-Adresse]]
Data protection officer, if any: [[PLATZHALTER: Name und Kontakt]]
2. Summary
- We use no tracking or analytics tools and no cookies for advertising or reach measurement.
- Fonts are served from this server, not from Google or other third parties.
- The app stores intermediate results and settings only locally in your browser.
- For searches the app sends coordinates and search terms to this website’s server, which forwards them to open data services (section 6).
3. Hosting and server logs
The website is hosted by [[PLATZHALTER: Hosting-Anbieter]] (server location: [[PLATZHALTER: Land]]). When you visit, the web server processes technically necessary data and writes it to log files: IP address, date and time, requested URL (including query parameters), status code, amount of data transferred, referrer and browser identifier (user agent).
Because the app attaches its search requests as parameters to the interface (REST API) URL, coordinates can appear in the server logs. We do not evaluate these logs. Retention: [[PLATZHALTER: Speicherdauer der Logs laut Hoster]].
Legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). A data processing agreement exists with the host: [[PLATZHALTER: bestätigen]].
4. Location in the browser
If you choose “Use my location”, your browser asks whether to share your location. Only after you confirm in the browser dialog does the app read the coordinates. You can revoke permission at any time in your browser settings. Legal basis is your consent (Art. 6(1)(a) GDPR) given through the browser dialog.
The coordinates are not stored in a database or user account. They are sent to this website’s server for the search and passed on from there in rounded form (about 100 m or 10 m) to the data services. Server memory (cache) holds only the data services’ answers under a hash key, not linked to you. Alternatively you can type a place.
5. Local storage in the browser (localStorage)
The app caches data-service answers in your browser’s local storage (keys prefixed chargebreak:v1:) so repeated searches are faster and the services are spared. It also remembers, if you use it, your most recently chosen settings (radius, connector, break wishes). This data does not leave your browser and is not sent to us. You can delete it at any time via your browser settings. Legal basis: § 25(2) no. 2 TDDDG (technically necessary for the requested service) in conjunction with Art. 6(1)(f) GDPR.
6. Forwarding to data services (REST proxy)
The app talks only to this website’s server (interface at /wp-json/chargebreak/v1/). When needed, the server calls the following services – with our server’s IP address, not yours:
| Service | Purpose | Transmitted |
|---|---|---|
| Open Charge Map | Charge points | centre point (rounded coordinates), search radius; our API key |
| Overpass API (OpenStreetMap) | Charge points, places nearby | rounded coordinates, radius, categories |
| OSRM (routing.openstreetmap.de) | Walking routes | start and destination coordinates (rounded) |
| Nominatim (OpenStreetMap) | Place search | your search term, language; our server’s identifier (user agent with website address and contact email, as required by the usage policy) |
Your browser, IP address and user agent are not passed on to these services. Their operators process our server’s requests under their own privacy notices: [[PLATZHALTER: Betreiber und Datenschutzhinweise der Dienste prüfen und verlinken]]. Legal basis: Art. 6(1)(b) or (f) GDPR (providing the requested function).
To prevent abuse the server limits requests per visitor. A salted hash of your IP address (for IPv6 the /64 network) is briefly held in the cache; the IP address itself is not stored there.
7. Fonts
Barlow Condensed and Atkinson Hyperlegible are served locally from this server. No connection is made to Google Fonts or any other font service.
8. Cookies
Visitors who are not logged in receive no cookies from us. For logged-in persons (editors/administrators) WordPress sets technically necessary cookies, such as wordpress_logged_in_…, wordpress_sec_… and wp-settings-…, which serve login and session and expire on logout or after a short time. Legal basis: § 25(2) no. 2 TDDDG.
9. Contact by email
If you write to us we process your email address and message to answer it (Art. 6(1)(f) or (b) GDPR). We delete correspondence when it is no longer needed, at the latest after [[PLATZHALTER: Frist]]. There is no contact form.
10. User accounts and presets
Public visitors need no account. For logged-in persons the app can store presets in the user account. They can be exported and erased with WordPress’s privacy tools.
11. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You can withdraw consent at any time with effect for the future. You can lodge a complaint with a data protection supervisory authority; the competent one is: [[PLATZHALTER: Aufsichtsbehörde des Bundeslandes]].
12. Data security
The connection to the website is encrypted with TLS (https). The server strictly validates all inputs to the interface and forwards only to fixed, predefined services.
13. Changes
We adapt this policy when features or the legal situation change. The version published here applies.