Data Controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) is:
Hakan Gür
c/o COCENTER
Koppoldstr. 1
86551 Aichach
Germany
Email: g.uer@aol.com
The competent data protection supervisory authority is the Hessian Commissioner for Data Protection and Freedom of Information, P.O. Box 3163, 65021 Wiesbaden, Germany, datenschutz.hessen.de. Individuals with data protection concerns may contact this authority directly.
General
The operator itself does not process the values entered into the calculator; they remain exclusively in the user's browser. No registration or sign-in is required. When the website is loaded, however, technically necessary connection data is processed by the hosting provider (Vercel Inc.) — see the "Hosting" section below for details. The operator does not perform any personal evaluation of these connection data.
Local Data Storage
Values entered by the user — such as consumption, prices, and mileage — are stored exclusively in the browser's local storage. This data does not leave the device and is not transmitted to or processed by the operator at any time.
Service Worker / Offline Cache
This website uses a Service Worker — a standardised browser feature that caches HTML pages and static resources (CSS, JavaScript, fonts, images) in the user's browser. The sole purpose is faster revisits and offline availability of the app.
The Service-Worker cache holds only static assets (HTML, CSS, JavaScript, fonts, images) and does not store calculator inputs. Beyond the connection data already processed by the hosting provider when those assets are originally requested, the cache itself does not transmit anything; it lives in the user's browser and can be cleared at any time via the browser's site settings ("Clear browsing data" or similar) — the only effect is that the next visit no longer benefits from cached assets.
Hosting
This website is hosted by Vercel Inc. When the page is loaded, technically necessary connection data — in particular IP address, user agent, timestamp, requested resource (request URL) and referrer — are processed by the hosting provider to deliver the website, defend against attacks and ensure service stability. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website). Vercel acts as a processor within the meaning of Art. 28 GDPR; the Data Processing Agreement is part of Vercel's Terms.
Vercel retains these server logs for a maximum of 30 days in accordance with standard practice and deletes them automatically afterwards.
The operator does not directly link this connection data to identifiable individuals.
Technical and Organizational Measures
To protect data processed via this website, the following technical and organizational measures pursuant to Art. 32 GDPR are implemented:
- Encrypted transmission of all data between browser and server via HTTPS (TLS 1.3)
- Strict Content Security Policy (CSP) to prevent cross-site scripting and unauthorized third-party scripts
- No server-side processing of calculator inputs by the operator: all calculations occur exclusively in the user's browser
- No tracking, analytics, or advertising technologies
- No cookies (features such as market or history storage operate exclusively via the browser's LocalStorage without data transmission)
- Regular updates of libraries and frameworks in use
- Hosting with an ISO 27001 and SOC 2 Type II certified provider (Vercel Inc.)
Beyond the infrastructure security mentioned above, the operator's safeguards consist in avoiding any data collection that goes beyond what is technically necessary.
Third-Country Transfer (USA)
Because Vercel Inc. is based in the United States, personal data — in particular IP addresses from technical connection logs — may be transferred to a third country within the meaning of Articles 44 ff. GDPR.
Vercel Inc. is certified under the EU-U.S. Data Privacy Framework (DPF). The official directory entry is available at dataprivacyframework.gov.
In addition, Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR are used. The Data Processing Agreement is part of the Vercel Terms of Service.
Further information: Vercel Data Processing Agreement · Vercel Privacy Policy
Analytics and Tracking Services
Currently, no analytics, tracking, or advertising services are used on this website. No cookies are set for analytics or marketing purposes.
No Cookies
EVSpend does not set any cookies. Functional state — your selected market, theme, saved calculations and similar preferences — is held purely in your browser's localStorage. No identifier is transmitted to our servers and no value crosses an HTTP request.
On first visit, a server-side middleware may use the country header provided by Vercel (x-vercel-ip-country) to redirect to a matching language version: visitors from Türkiye to /tr/, visitors from most other countries to /en-eu/. Visitors from Germany, Austria, Switzerland and a few other countries stay on the default path. No cookies are set in this step, and no locally stored calculator inputs are read or processed on the server.
Market and language selection then happen in the browser — based on the page path, browser language and any locally stored choice from the in-app market selector. The selection is held only in localStorage.
You can clear localStorage at any time via your browser's site settings. Doing so only resets the app to its initial state; no additional data is transmitted to the servers.
Supervisory Authority
The competent supervisory authority for data protection matters is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden
Germany
Email: poststelle@datenschutz.hessen.de
Website: datenschutz.hessen.de
You may also contact the supervisory authority in your EU member state of residence.
Future Services
If analytics tools, advertising services, or external content are integrated in the future, this Privacy Policy will be updated accordingly and users will be informed.
Contact
For privacy-related questions, the operator can be contacted using the details listed in the Legal Notice.
Your Rights as a Data Subject
You have the following rights vis-à-vis the controller regarding the personal data concerning you:
- Right of access (Art. 15 GDPR): You may request information about whether and which personal data we process about you.
- Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate or completion of incomplete data.
- Right to erasure (Art. 17 GDPR): You may request the deletion of your personal data, provided the statutory conditions are met.
- Right to restriction of processing (Art. 18 GDPR): You may request restriction of the processing of your personal data.
- Right to data portability (Art. 20 GDPR): You may receive your personal data in a structured, commonly used and machine-readable format.
- Right to object (Art. 21 GDPR): You may object to the processing of your personal data on grounds relating to your particular situation.
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): You have the right to lodge a complaint with a data protection supervisory authority.
The competent authority in Hesse, Germany, is the Hessian Commissioner for Data Protection and Freedom of Information, P.O. Box 3163, 65021 Wiesbaden, datenschutz.hessen.de.
To exercise these rights, please contact the address provided in the Legal Notice. Since the operator does not itself process the calculator inputs (calculations are performed exclusively in your browser), an access request typically relates to the hosting provider's server logs (in particular IP address, user agent, timestamp and request URL), which are automatically deleted after a maximum of 30 days according to Vercel's standard practice.