This is a convenience translation. Only the German version is legally binding. Where the two differ, the German wording applies.
The controller for data processing on this website is:
Oliver Kloecker
Weggenhofstraße 36
47798 Krefeld
E-Mail: o.kloecker@outlook.de
Telefon: +49 176 24372102
Further details are in the legal notice.
The website chargemyride.live finds public charging stations for electric vehicles around a location given by the user. The data source is the public register of the Bundesnetzagentur (German Federal Network Agency; see section 9).
When the website is called up, the web server automatically stores technical access data in log files (including IP address, date and time, URL requested, volume of data transferred, browser type/user agent and, where applicable, referrer). This processing serves secure and stable operation and the prevention of abuse.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation). Server log files are kept only briefly and deleted regularly.
For the proximity search, geographic coordinates (latitude/longitude) are processed, either entered by you or – after your explicit permission in the browser – provided by your device. These coordinates are used to calculate distances. Your location is requested only if you actively permit it in the browser.
To analyse usage and monitor the system technically, we log search queries to our interface. We do not store a raw IP address. Instead, a pseudonymous identifier that changes daily is derived from the IP address and browser identification (a cryptographic hash with a secret value rotated each day). This identifier permits no inference about your IP address or your person; it merely allows requests within a single day to be told apart roughly.
Stored per request are: the pseudonymous daily identifier, the time, the search parameters requested (coordinates, radius, filters such as power/current type/charge points), the number of results, response time, HTTP status and the browser identification (user agent).
In addition we count which feature was used (e.g. "check a bill", "data export") – one counter per day, feature and pseudonymous daily identifier. This answers the question which parts of the service are needed and which are not. What you entered, searched for or uploaded is not stored – only that the feature was used. The same applies to a click on "I would want that": all that is stored is that someone wanted this offer. These counters are deleted after 400 days at the latest.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in designing the service to fit demand and in its security). Retention: monitoring data is deleted automatically after 90 days at the latest.
On the page Report a fault you can report a fault at a charging station. Filling in the form alone transmits nothing – the report text is assembled in your browser. Only when you explicitly click "Send report" are the details transmitted to us and stored.
Stored then are: the details of the charging station (operator, address, coordinates, charging station ID, EVSE ID, charge point), your details of the fault (category, description, time), the contact details you voluntarily provide (name and email address or telephone number), a case number and the pseudonymous daily identifier described in section 5. Name and contact details are optional; without them the report is anonymous. Since reports require signing in, we also store which account the report belongs to, so you can find it again under “My area”. The same applies to experience reports. This link is never shown publicly and is removed when the account is deleted.
Camera requests: If you have a request to secure camera footage sent to the operator through our server, we store it with the incident details, your voluntary contact details, the recipient address and your account for 180 days. During that time a verified account of that operator sees it in its operator area – the same details it received by mail. Operator answers to fault reports are stored as a history of the report and deleted with it.
Experience reports: with an account you can report whether charging worked at a station, tick properties (such as a barrier or a roof) and write a short note. Stored are the station, the result, the properties, the note (at most 300 characters), the time, your account and the pseudonymous daily identifier described in section 5 to limit the volume. Shown publicly are the result, the properties and the note – without a name and without the account. A later "worked" also ends the display of a fault reported earlier. You can edit and delete your reports under "My area"; after two years the note, account and identifier are deleted; charger, result, properties and date remain without any personal reference (for long-term statistics). The legal basis is Art. 6(1)(a) GDPR (consent by submitting).
Contributions from operators: We store statements, photo flags and correction notes from the operator area with the account they came from, so it stays traceable who spoke for the operator. Only the operator's name is shown publicly. If the account is deleted, the contribution remains without the link to the account. Visitor feedback that an operator comments on stays anonymous; the operator sees neither the account nor the identifier of the author.
Forwarding: only if you explicitly tick the corresponding box do we forward the report by email – to the reporting office of the charging point register of the Bundesnetzagentur (ladesaeulenregister@bnetza.de) and/or to the operator of the charging station, the latter only to a fault address we have verified. The authority receives the information above including your voluntary contact details, so that it can reply to you. The operator receives the details of the charging station and the fault and your name if you gave one, but not your email address or telephone number: it answers through a link, and we pass its answer on to you. Without a tick nothing is forwarded.
Legal basis: Art. 6(1)(a) GDPR (consent through sending the report and through ticking the forwarding box). You may withdraw your consent at any time with effect for the future; quote your case number when you do. Retention: after one year at the latest, description, name, contact details, identifier, account and reply history are deleted. Charger, type of fault and time remain without any personal reference – for long-term reliability statistics.
Short surveys and anonymous contributions to the statistics: After a one-click rating you can optionally say what bothered you while charging and where you mostly charge. In “My charging cards” you can tick a box to contribute a card name and its prices. Only these details, the date, where applicable the federal state of the rated charger and a pseudonymous daily identifier (see section 5) are stored; the identifier only prevents double counting on the same day. Your cards stay in your browser; without the tick nothing is sent. Results are only shown aggregated (charging cards from three contributions). Legal basis is your consent by voluntary submission (Art. 6(1)(a) GDPR).
With an account you can contribute a photo of your own for a charging station. This is voluntary; the site can be used in full without uploading anything. Uploaded pictures appear publicly in the photo gallery, on the station page and in the results list, with a small “chargemyride.live” watermark. Your self-chosen username appears below the picture, in the watermark and in the photographer ranking only if you switch this on (when uploading or in your account, changeable at any time). Your e-mail address is never shown. So that the watermark can be changed later, we also keep the re-encoded picture without it, not publicly.
What happens to the picture: on upload it is fully re-encoded on the server and scaled down to at most 1600 pixels on the longer edge. All EXIF data is dropped in the process – including any location and time of capture stored by the camera. What is stored is only the re-encoded image plus: the time of upload, the charging station it belongs to (ID, operator, address, coordinates, charge point and EVSE ID where applicable), image dimensions and file size, your voluntary note, your account ID and username, and the pseudonymous daily identifier described in section 5, used to limit the volume of uploads.
Please do not photograph people or vehicle number plates. The site says so before every upload. Should a person or a number plate be recognisable after all, we remove the picture immediately on notice – a short message to the address named in section 1 is enough.
Legal basis: Art. 6(1)(a) GDPR (consent through uploading). You can edit or delete your own pictures in the gallery yourself at any time; you change your username in your account, and it then changes below all your pictures. Retention: pictures remain until you delete them or delete your account – then they go with it.
Pictures from Wikimedia Commons: in addition, the site takes freely licensed photos of charging stations from Wikimedia Commons and shows them with the author, licence and a link to the source as given there, as the licence requires. They are fetched once by our server and stored here; viewing them makes no connection to Wikimedia. The site takes no other pictures from the web. If you are the author or are shown in such a picture and do not want it to appear here, a short message to the address named in section 1 is enough.
For ordinary use of the charging station search no analytics cookies are set and no third-party services are embedded. Only what is technically necessary is stored – and even that only if you do something that requires it:
cmr_lang): set when you change the language using the switch or open a link that specifies a language (?lang=en). The content is a single word ("de" or "en"); the cookie expires after one year. Without this cookie your browser's language setting decides.cmr_admin): set only if you sign in to an account or to the administration area. It ends when the browser is closed.In your browser's local storage (not in cookies, so never transmitted to the server):
cmr.merkliste): the charging stations you saved with "☆ Save", with operator, address, coordinates and time. It only comes into existence when you save something, and can be deleted completely under Shortlist.cmr.letzte-suchen): the last eight places with their radius, so you can repeat a search.cmr.letzte-treffer): the result of your last search, so the page does not have to reload when you go back.All three stay in this browser and can be deleted there at any time – through the shortlist itself or with your browser data.
Legal basis: § 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act). The provision covers any storage of information on your device, so cookies and local storage alike. All the entries above are strictly necessary to provide a service you have expressly requested – no consent is required for this, and there is therefore no cookie banner.
The charging station master data is retrieved through a public programming interface (services2.arcgis.com, operated by Esri, based on the charging station register of the Bundesnetzagentur). During a search, the coordinates and radius you requested are transmitted to this interface in order to find the matching charging stations. This may involve transmission to the provider's servers (possibly also outside the EU). No personal data beyond that is transmitted.
For the street view (panorama), the map display and route calculation in the detail map dialogue, the REST API of Mapy.com (Seznam.cz a.s., Prague, Czech Republic; api.mapy.com) is used – where enabled on the server. These calls run exclusively through our server: the browser requests the image or route from us at /mapy-*.php, and we fetch it from Mapy.com with our own key. Your IP address is not transmitted to Mapy.com; what is transmitted is only the coordinates of the chosen charging station and – if you calculate a route – your starting point (the position previously searched for, or the location you released via the browser). The legal basis is our legitimate interest in a vivid depiction of location and route (Art. 6(1)(f) GDPR); the browser location release happens at your explicit request (clicking "Route with Mapy"). Seznam privacy information: o.seznam.cz/ochrana-udaju.
If you upload a PDF bill on the bill check page, our server sends the file to the API of Anthropic (Anthropic PBC, San Francisco, USA; api.anthropic.com). The language model Claude reads the amount due, tariff, time-based items and the energy and date of each charging session from it; the result appears as a suggestion in the check form. This transmits all personal data printed on the bill, typically name, address and customer and contract number. Your IP address is not transmitted to Anthropic. We store neither the file nor the result; according to Anthropic, inputs and outputs are deleted within 30 days unless they are needed longer to enforce its usage policy. If you do not want that, paste the signed record by hand; that route is not transmitted to Anthropic. The legal basis is our legitimate interest in reading the uploaded bill completely, even where our own text analysis fails (Art. 6(1)(f) GDPR). A data processing agreement is in place with Anthropic; the transfer to the USA is based on the EU Standard Contractual Clauses. Anthropic privacy information: privacy.claude.com.
If you take out the API subscription, you are redirected to a Stripe page to pay (Stripe Payments Europe, Ltd., Dublin, Ireland; checkout.stripe.com). Stripe collects your name, email address, billing address and payment details there; card details never reach our server. We pass your email address, a customer ID and, hourly, the number of your API requests to Stripe for billing, and receive the status of the subscription and payments from Stripe. Stripe may also transfer data to the USA (Stripe, Inc.; certified under the EU-US Data Privacy Framework). The legal basis is performance of the contract (Art. 6(1)(b) GDPR); we keep invoice data for ten years due to legal obligations (Art. 6(1)(c) GDPR, § 147 AO). Stripe privacy notice: stripe.com/privacy.
Photos, reports, experience reports, contact hints, watches and the API subscription require an account. We store your email address, your password (only as a hash, not readable), whether you want your name shown on your contributions, the times of creation, confirmation and last sign-in, the user name if you choose one, plan and subscription status, and a counter per day and feature for the quotas. Confirmation and password links are valid for seven days and one hour respectively, and only once. To protect against password guessing we store failed sign-ins with the address and a one-way value of the IP address for one day. Contact hints (phone, e-mail, website of an operator) appear publicly on the charger page, with your username if you switched this on, otherwise with your account number (“Member #…”). Whoever confirms a hint is stored with their account. You can withdraw your own hints at any time; they are removed with the account.
Watches and keys: for a watch we store the area and the label you give it and send you emails about it. API keys are stored only as a hash; you see the plain key once when it is created.
Shortlist in your account: when you are signed in we store the charging stations on your shortlist (number, operator, address, coordinates, power, time) and which notifications you chose per station. Removing a station deletes it; deleting the account deletes the whole list.
Encrypted backup (vault): If you set it up, your bill archive and charging cards are backed up in your account. Encryption happens in your browser with a vault password we never receive (AES-GCM, key via PBKDF2). We store only the encrypted content, its time and size – we cannot read it. The backup can be reset at any time and is deleted with the account.
Forum: We store forum posts with account, display name, time and subject (charger, operator, statistics). Publicly shown are the display name and text, never the email address. You can edit your posts for 24 hours and delete them at any time; a placeholder remains so replies keep their context. If the account is deleted, the posts remain as part of the discussion without reference to the account ("deleted account"). We review reported posts and hide them if necessary.
Points: If you check an invoice or QR code while signed in, we store the account, charger, type of check, issues found (type only) and time for the points. We do not store the invoice or QR address for this. Others only see the number of pieces of evidence and accounts, never who provided them. The points ledger is deleted with the account.
Operator verification: whoever speaks for an operator enters a fault contact (email address, optionally a telephone number, hours, a form address, a note) and a name. We send a confirmation link to the contact address, check the entry automatically by its domain or by hand, and store your account and its address with it. Once approved, the contact appears publicly at the operator's charging stations – not your account address. If your account is deleted or blocked, the operator role ends and the link to the account is removed from the entry.
Legal basis: Art. 6(1)(b) GDPR (terms of use) for the account, Art. 6(1)(f) GDPR for protection against abuse. Retention: until you delete the account – possible at any time under "My area". Photos, watches, keys and quotas go with it; reports, experience reports and operator contributions remain without the link to the account and expire under their own periods.
If you subscribe to the monthly status report, you give us an e-mail address and optionally a district. We also store when you signed up and confirmed, the last month sent, and a shortened, non-reversible value derived from IP address and browser to slow down mass sign-ups. A subscription only becomes active after you click the link in the confirmation e-mail (double opt-in); unconfirmed sign-ups are deleted after 7 days. When you unsubscribe (link in every e-mail), we replace your address with a non-reversible hash – only the number of unsubscriptions remains. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. E-mails are sent from our own mail server; the address is not passed on to anyone.
Within the statutory framework you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and a right to object to processing based on Art. 6(1)(f) GDPR (Art. 21). Please address these to the controller named in section 1.
Note: because the monitoring data is stored pseudonymously and we cannot attribute it to any person, attribution to individual data subjects is as a rule not possible (Art. 11 GDPR).
You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.