Privacy Policy

The protection of your personal data (hereinafter referred to as "data") is a major and very important concern for us. In the following, we would therefore like to inform you in detail about which data is collected when you visit our website and the subpages and use our offers there and how this data is processed or used by us in the following. In addition, we would like to inform you about the rights to which you are entitled and the technical and organizational protective measures we have taken with regard to the processing of your data.

The controller within the meaning of Art. 4 (7) General Data Protection Regulation("GDPR") is IONITY GmbH, Moosacher Straße 84, 80809 Munich, see our legal notice.

You can contact our data protection officer as follows:

IONITY GmbH
Data Protection Officer
Moosacher Strasse 84
80809 Munich
Germany
datenschutz@ionity.eu

The scope and type of collection and use of your data differs depending on whether you visit our website only to retrieve information or whether you use offers on our website that require you to provide further data about yourself, for example when using our contact form:

3.1 Informational use

In principle, it is not necessary for you to provide personal data in order to use our website for information purposes only.

Rather, in this case we only collect and use the data that your Internet browser automatically transmits to us, such as:

• Date and time of access to one of our web pages
• Your browser type
• The browser settings
• The operating system used
• The amount of data transferred and the access status (file transferred, file not found etc.) and
• Your IP address

‍

We process this data during an informational visit exclusively in non-personalized form. This is done to enable you to use the web pages you have accessed and to check whether our web pages are displayed optimally for you.

In this context, your IP address is stored in the log for 60 days in order to enable conclusions to be drawn and security gaps to be closed in the event of security relevant incidents such as hacking attacks. After 60 days, your IP address is completely removed from the logs by a tool implemented by the web server operator ("Webalizer") and cannot be reconstructed.

Processing is carried out on the legal basis of Art. 6 para. 1 sentence 1 f) GDPR and in our interest in being able to display our website to you reliably and with as little disruption as possible.

3.2 Use of the contact forms

If you wish to contact us via the contact forms provided on our website, we collect the following data from you:

• The category of your request (e.g. "Press, media, general information","Jobs & internships", "Partnerships & cooperations", "Purchasing &suppliers", "Technology", "Network & locations", "Data protection" or"Other")
• Your name
• Your company (optional)
• Your e-mail address
• In the contact form for new locations, add your telephone number, your relationship to the location (optional), information about the location
• Your message to us

We use this data to answer your request by e-mail. In this context, we use the category of your request in order to be able to assign your request directly internally according to your request.

If your request relates to an existing contractual relationship or you are interested in concluding a contract, the data processing is carried out on the legal basis of Art. 6 para. 1 sentence 1 b) GDPR (contract initiation and execution). Otherwise, the data processing is carried out on the legal basis of Art. 6 para. 1 sentence 1 f)GDPR (balancing of interests) and in our interest to be able to answer your request with the information relevant to you.

The data collected via the contact forms and the communication to answer your request will not be stored on the web server.

We will delete the data that you send us via our contact forms once the respective purpose has been achieved.

3.3 Customer service

When you contact our customer support, we process personal data in order to be able to process your request.

If you contact us by telephone, we may ask you for general information about the charging conditions (e.g. the vehicle model, the RFID of your mobility serviceprovider). If you wish to receive feedback from us, we will process either your telephone number or your e-mail address in order to contact you.

To improve our customer service, we ask in advance whether we may record the call. If you agree to the recording, we will record the call and the personal data it contains.

If you contact us by e-mail, we process the following categories of data:

• Name
• E-mail address
• Your request
• Metadata: Date and time of your request, language.

3.4 Newsletter

You can subscribe to our newsletter on our website. In order to send you the newsletter, we process the following data:

• Your e-mail address
• Date and time of the newsletter subscription

3.5 Customer surveys

By participating in our survey, we collect your opinion about our services in order to improve them. It cannot be ruled out that it will be possible to trace you personally. Optionally, you can also provide your e-mail address so that we can contact you to improve our customer service in individual cases

Furthermore, technical data is collected by your browser. This is necessary for technical reasons in order to display the website, carry out the survey and ensure stability. For this purpose, we collect, for example, your IP address, time zone or data about your browser.

3.6 "WINGS" customer community

If you use the customer community purely for information purposes, the provisions in 3.1 apply. In this case, your IP address is stored in non-personalized form in server access log files.

Only registered users can participate in projects (such as surveys, discussions, etc.) in the customer community. As soon as you create an account and participate in the customer community, we process the following data:

• Data for registration (e.g. name, zip code, e-mail address)
• Verification of the minimum age of 18 years
• Profile data (e.g. address, age, profession, socio-demographic data)
• Content and results from projects (e.g. survey results)

4.1 Which cookies do we use?

We use cookie technology for our website. Cookies are small text files that are sent to your browser by our web server when you visit our website and are stored on your computer, tablet computer or smartphone for later retrieval.

We use the following cookies on our websites:

[_cookieconsent_status] Function: This cookie stores your acknowledgement of the notice on the use of cookies on this website. It contains the content "dismiss" if you have clicked on "Understood!" on our cookie notice. The cookie is stored for 12 months and is a so-called first-party cookie, i.e. a cookie that is controlled by our website.

Meta pixel: We use the "meta pixel" for analysis and marketing purposes on our website until consent is withdrawn or changed (see 4.3.). More on this below.

Google Maps: We use content from Google Maps on our website to display maps of the surrounding area with charging options until consent is withdrawn (see4.3.). Further information can be found below.

Charge Trip: We use cookies to display our route planner application until you withdraw your consent (see 4.3.).

For Google Analytics (see in detail below):

[_ga] Function: This cookie is part of Google Analytics (see below) and is used to identify a user. It contains a sequence of numbers and is stored for 24 months. The cookie is a so-called first-party cookie, which is controlled from our website.

[_gid] Function: This cookie is part of Google Analytics (see below) and is used to identify a user. It contains a sequence of numbers and is stored for 24 hours. The cookie is a so-called first-party cookie, which is controlled from our website

4.2 Deactivating cookies

You can determine yourself whether cookies can be set and retrieved using the settings in your browser. For example, you can completely deactivate the storage of cookies in your browser, restrict it to certain websites or configure your browser so that it automatically notifies you as soon as a cookie is to be set and asks you for feedback. You can block or delete individual cookies. For technical reasons, however, this may result in some functions of our website being impaired and no longer functioning fully.

4.3 Revoking or changing cookie consent in general

To change or remove your cookie consent settings for our website, please go to your web browser and remove the page permissions or page cookies from IONITY.eu. Depending on your browser, this setting can be found in the Cookie and site permissions, Security settings or Data protection/privacy menu.

When you visit our website again, you will be shown the cookie consent selection menu again, in which you can specify your desired settings.

It is important to us to design our website as optimally as possible and thus make it attractive for our visitors. To do this, we need to know which parts of it are well received by our visitors.

This website uses Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").Google Analytics uses cookies, which are text files placed on your device, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. IP anonymization has been activated on our website so that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us as the website operator with other services relating to website activity and internet usage.

Your usage behavior will only be recorded and transmitted to Google if you have previously consented to the data processing and use of cookies for the purposes of "Analytics cookies/google analytics". You can revoke your consent at any time and prevent data collection in Google Analytics for the future by clicking on "Customize consent" at the bottom of this page and deactivating the use of cookies for the purposes of "Analytics cookies/google analytics".

Alternatively, you can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link:

https://tools.google.com/dlpage/gaoptout?hl=de

Your data collected by Google Analytics will be deleted after 18 months.

This website uses Google Ads Conversion Tracking to measure the success of our advertising measures and to show you personalized advertising. In order to use this function, cookies are used to distinguish between website visitors. Further information on Google Ads Conversion Tracking can be found at the following link:

https://policies.google.com/technologies/ads

Your usage behavior will only be recorded and transmitted to Google if you have previously consented to the data processing and use of cookies for the purpose of "marketing". You can revoke your consent at any time and prevent data collection in Google Ads for the future by clicking on "Customize consent" at the bottom of this page and deactivating the use of cookies for "marketing" purposes.

Your data collected in the context of Google Ads will be used for 30 days.

In connection with the use of Google Analytics and Google Ads, we use the Google Tag Manager service on our website.

We use the Google Tag Manager service to manage so-called "tags" that we have integrated on our website. Tags are small code elements that can be used to measure traffic and visitor behaviour, measure the impact of online advertising and social channels, use remarketing and retargeting and targeting, and test and optimize websites. When tags are used, no data is stored on your end device.

We use these tags exclusively in the context of the tools mentioned above, i.e. to be able to analyze and optimize your use of our website even more precisely.

In addition, we use Google technologies that enable the measures described above to be carried out without the use of cookies. A checksum (hash) is generated by reading certain settings and properties of the end device used and the software with which a user accesses our website. This hash can be used to identify individual users or very limited user groups and thus implement the measures described above for Google Ads and Google Tag Manager without the use of cookies

You can find Google's privacy policy here:

https://www.google.com/policies/privacy/partners/?hl=de

In order to ensure an adequate level of data protection when transferring your data to a third country, we have agreed standard data protection clauses with Google LLC, which have been issued by the European Commission for this purpose. You can obtain a copy of this agreement from us on request. Please use the contact details above for this purpose.

Your data is processed on the legal basis of Art. 6 para. 1 lit. a GDPR in conjunction with your consent to the processing of your usage data for the purposes of "analytics cookies/google analytics" and "marketing".

We also use content from Google Maps on our website to display maps of the surrounding area with charging options.

Google Maps will only be displayed and data transmitted to Google if you have previously activated "external media/google maps" on our website and thus consented to the transmission of data to Google.

You can revoke your consent at any time and prevent further data transmission to Google in the future by clicking on "Customize consent" at the bottom of this page and deselecting "external media/google maps".

In accordance with the Google Terms of Use (as of March 31, 2020), the Google Maps service is provided to you by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) if you have your habitual residence in the European Economic Area or Switzerland. If you have your habitual residence in another country, the Google Maps service will instead be provided to you by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

When you access our website with "external media/google maps" activated, the Google company responsible for your location receives the information that you have accessed the corresponding page of our website.

In addition, the data mentioned under section 3 a) of this notice will be transmitted. This takes place regardless of whether you are logged into a Google user account or whether no user account exists. If you are logged into a Google account, this data is assigned directly to your account. If you do not want this association with your profile, you must first log out of your Google account.

When using Google Maps, your personal data may be transferred to Google companies in countries outside the European Economic Area where an adequate level of data protection is not guaranteed and your rights under European data protection law may not be enforceable. With your declaration on the use of Google Maps, you expressly consent to such data transfer.

Further information on the purpose and scope of data collection and processing by Google can be found in Google's privacy policy:

https://www.google.com/intl/de_de/policies/privacy

There you will also find further information on your rights in this regard and setting options to protect your privacy.

Your data is processed on the legal basis of Art. 6 (1) a) GDPR in conjunction with your consent to the use of the Google Maps service.

We use fonts and symbols from Google Fonts on our website to display content from Google Maps. The display of Google Maps and the associated Google Font sand data transmission to Google only take place if you have previously activated" external media/google maps" on our website and thus consented to the transmission of data to Google.

In accordance with the Google Terms of Use (as of January 22, 2019), the Google Fonts service is provided to you by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) if you have your habitual residence in the European Economic Area or Switzerland. If you have your habitual residence in another country, the Google Fonts service will instead be provided to you by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

When you access our website with "external media/google maps" activated, the Google company responsible for your location receives the information that you have accessed the corresponding page of our website.

In addition, the data mentioned under section 3 a) of this data protection notice will be transmitted. This takes place regardless of whether you are logged into a Google user account or whether no user account exists. If you are logged into a Google account, this data is assigned directly to your account. If you do not want this association with your profile, you must first log out of your Google account.

Further information on the purpose and scope of data collection and processing by Google can be found in Google's privacy policy:

https://www.google.com/intl/de_de/policies/privacy

There you will also find further information on your rights in this regard and setting options to protect your privacy

You can revoke your consent at any time and prevent further data transmission to Google in the future by clicking on "Customize consent" at the bottom of this page and deselecting "external media/google maps".

Your data is processed on the legal basis of Art. 6 (1) a) GDPR in conjunction with your consent to the use of the Google Maps service.

We use the "meta pixel" for analysis and marketing purposes on our website. The embedded pixel can be used to analyze and evaluate information such as the IP address with the behavior of website visitors.

This service is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When you access our website with the Meta pixel activated, the above-mentioned institution receives the information that you have accessed the corresponding page of our website. According to Meta (https://developers.facebook.com/docs/meta-pixel), the following data is collected when the meta pixel is used:

• Http headers - Anything generally contained in HTTP headers, a standard web protocol that is sent between every browser request and every server on the Internet. This information may include data such as IP addresses ,information about the web browser, the location of the page, the document, the referrer and the person using the website.
• Pixel-specific data - This includes the pixel ID and the Facebook cookie.
• Button click data - This includes all buttons clicked by website visitors, the labeling of these buttons and all pages visited as a result of the button clicks.
• Optional values - Developers and marketers can optionally send additional information about the visit through custom data events. Examples of custom data events include conversion value, page type and more.
• Form field names - Includes the names of website fields such as email, address, quantity, etc. when you purchase a product or service. We do not collect field values unless they are provided as part of advanced matching or as optional values.

Data processing can also take place regardless of whether you are logged into a Meta user account or whether no user account exists. If you are logged into a Meta account, this data is assigned directly to your account. If you do not want this association with your profile, you must first log out of your Meta account.

The pixel is only set and transmitted to Meta if you have given your prior consent. Your data is therefore processed on the legal basis of Art. 6 para. 1 a) GDPR.

You can revoke your consent at any time and prevent further data transmission to Meta for the future by clicking on "Customize consent" at the bottom of this page and deactivating the selection for the Meta pixel.

When using the Meta Pixel, your personal data may be transferred to Meta companies and other Meta services in countries outside the European Economic Area where an adequate level of data protection is not guaranteed and your rights under European data protection law may not be enforceable. With your declaration on the use of the Meta Pixel, you expressly consent to such data transfer.

Further information on the purpose and scope of data collection and its processing by Meta can be found in Facebook's privacy policy:

https://www.facebook.com/about/privacy

There you will also find further information on your rights in this regard and setting options to protect your privacy.

If you need help or have any other concerns about our charging stations, you can contact our customer service. We need your data in order to process your request and respond to you.

If you are an IONITY customer and need help with the charging process, we process your data in accordance with Art. 6 para. 1 b) GDPR (fulfillment of contract) and Art. 6 para. 1 f) GDPR (legitimate interest). We process other requests in accordance with Art. 6 para. 1 f) GDPR (legitimate interest). Our legitimate interests are to support our customers during the loading processes and to improve our company processes and quality.

All tickets will be deleted after the statutory retention periods have expired.

If you call our customer service, we will ask for your consent to record the call. If you consent to the recording, we will use the recording for training purposes for our customer support staff and to improve our customer service. The processing of your data is therefore based on Art. 6 para. 1 a) GDPR (consent).

The recording will be stored for 30 days. You have the right to withdraw your consent at any time with effect for the future and to have the recording deleted by sending an email to support@ionity.eu.

You have the option of subscribing to a newsletter on our website. Your data is collected and stored for the purpose of sending and delivering the newsletter. For this purpose, we collect your e-mail address to which we should send the newsletter, the date and time of registration for the newsletter.

Within the newsletters sent, click behavior is tracked using the CRM tool of Braze Inc. from the USA. Based on the click behaviour, i.e. information on which content of the e-mail was clicked on and when, it is evaluated which content will be sent to you in the future and at what times or days, so that we can optimize the effectiveness of our advertising measures.

The legal basis for the processing of your data for the newsletter dispatch and the evaluation using Braze is Art. 6 para. 1 lit. a GDPR (consent). You must therefore expressly consent to the sending of the newsletter before it is sent. The newsletter will only be sent after explicit confirmation (double opt-in).

Your data will be stored until you unsubscribe from the newsletter.

You have the right to revoke the consent you have given at any time for the future in order to unsubscribe from the newsletter. This can be done either by clicking on the unsubscribe link in a newsletter or by sending a message to marketing@ionity.eu.

Before each survey, we will always obtain your consent in accordance with Art. 6(1) (a) GDPR. You can withdraw your consent at any time by sending an email to datenschutz@IONITY.eu.

Furthermore, technical data is collected by your browser. This is necessary for technical reasons in order to display the website, carry out the survey and ensure stability. For this purpose, we collect, for example, your IP address, time zone or data about your browser. The legal basis is Art. 6 para. 1 lit. f GDPR. This personal data is required to carry out the survey. They are only used temporarily and are not the subject of the survey evaluation.

The "WINGS" customer community platform is used for dialog between you and us about the design of our products and services. Our new products and services are to be developed together with you and/or existing products and services are to be improved or optimized by us. To this end, we will publish certain topics within the scope of projects on the customer community platform. After registering once, you can take part in these projects during the period specified there and submit contributions such as ideas, suggestions, opinions, evaluations, comments, sketches, images, moving images and files.

For technical reasons, certain technical data such as the date and duration of the visit, details of the browser and operating system, etc. must be processed or technically necessary cookies set when visiting the platform. This serves to ensure that visitors and users are shown the content correctly and can use the platform without disruption. This is done in accordance with Art. 6 para. 1 lit. f GDPR or §25 TDDDG.

Prior registration is required to participate in the customer community. When registering, you consent to the processing of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. This consent extends to the registration and use of the community platform, as well as the invitation or participation in the projects in the community. The data entered in the profile will be reused for new project sand linked to new projects so that you do not have to enter the information again. Your profile will be visible to other community users, but your contact details will not be visible to other community users.

We only store your data for as long as it is required for the above-mentioned purposes. Your community account can be deleted at any time. Please send an email to wings@ionity.eu for this purpose. The statistical evaluations of anonymized data records remain stored. Posts that you have written before deletion remain without personal reference or reference to the user.

We operate online presences on various social media platforms (see list below).This allows us to communicate with users and represent our company.

We would like to point out that user profiles can be created in social media, e.g. to show you customized advertising. However, we have no influence on this data processing. When using such a platform, the data is collected and processed by the respective platform operator. This may also occur if you do not have a profile on a platform

Details on the data processing of the individual platforms, objection options and the assertion of your rights as a data subject can be found on the respective platform. We are represented on the following platforms:

• Meta: https://www.facebook.com/about/privacy
• LinkedIn: https://www.linkedin.com/legal/privacy-policy
• TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy
• YouTube: https://policies.google.com/privacy

‍

The aforementioned social media process your personal data outside the European Union. Further information on this can be found in the data protection information of the respective platform operator.

Your data will be processed on the basis of Art. 6 para. 1 lit. f GDPR as long as your legitimate interests do not prevail. Our legitimate interest lies in adapting our content to the site visitors and increasing the quality of our content as well as modern public relations work.

We use the Consent Management Platform of Usercentrics GmbH to manage your consents to third-party services and other optional processing of personal data. The service also supports us in our duty to inform the data subjects. The processing is carried out on the basis of Art. 6 para. 1 l. f GDPR.

We use integrated third-party services for our online offering, e.g. a route planner. If personal data is processed, this is done in accordance with Art. 6 para.1 lit. f GDPR. We have a legitimate interest in this data processing for the presentation of the online offer and a stable range of functions. If cookies are used, the explanations under point 4 apply.

In order to provide this website and for the aforementioned purposes, your data may be passed on to service providers who support us (e.g. website hosting and support, analysis of social media data by marketing agencies), which we have of course carefully selected and commissioned in writing.

These service providers are bound by our instructions and are regularly monitored by us.

Categories of recipients:

• Service provider for our customer service
• IT service provider
• Marketing service provider
• Advertising agency

‍

Otherwise, your data will only be passed on to other third parties if this is expressly stated in this data protection notice or if we are legally obliged to do so.

We may also use external service providers outside the European Union ("EU") or the European Economic Area ("EEA"). If we transfer personal data to a country outside the EU or EEA for which the EU Commission has not issued an adequacy decision, we use the EU standard data protection clauses to ensure an adequate level of data protection for third country transfers (Art. 46 para. 2 lit. c GDPR). You can obtain a copy of these standard data protection clauses on request at datenschutz@ionity.eu.

You have the right to request confirmation from us as to whether personal data concerning you is being processed; if this is the case, you have a right to information about this personal data and the information listed in detail in Art. 15GDPR.

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).

You have the right to demand that we delete personal data concerning you immediately if one of the reasons listed in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued (right to erasure).

You have the right to demand that we restrict processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have objected to processing, for the duration of our review.

You have the right to object at any time to the processing of personal data concerning you for direct marketing purposes. You also have the right to object, on grounds relating to your particular situation, at any time to processing which is based on Article 6(1)(e) or (f) GDPR (Article 21 GDPR). We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

You have the right to revoke any consent you have given us at any time with effect for the future (right of revocation).

You have the right to receive the data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You can also transmit this data to other bodies or have it transmitted by us (right to data portability, Art. 20 GDPR).

To exercise your rights, please contact:

support@ionity.eu

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR (Art. 77 GDPR).

The responsible supervisory authority in Bavaria is Bavarian State Office for Data Protection Supervision, P.O. Box 606, 91511 Ansbach, www.lda.bayern.de.

We also use technical and organizational security measures to protect personal data that is generated or collected, in particular against accidental or intentional manipulation, loss, destruction or attack by unauthorized persons. Our security measures are continuously improved in line with technological developments.

When using our website, your personal data is encrypted using SSL/TLS technology to prevent access by unauthorized third parties.

We update our data protection information at regular intervals, as our data processing is subject to change. You will always find the latest version of our data protection information at www.ionity.eu/policies.

You can also request the current version of the data protection information at the e-mail address datenschutz@ionity.eu.