Data Controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) is:
Hakan Guer
Wetzlarer Straße 2
35260 Stadtallendorf
Germany
Email: g.uer@aol.com
The competent data protection supervisory authority is the Hessian Commissioner for Data Protection and Freedom of Information, P.O. Box 3163, 65021 Wiesbaden, Germany, datenschutz.hessen.de. Individuals with data protection concerns may contact this authority directly.
General
This website does not actively process personal data. No registration or sign-in is required. Use is fully anonymous.
Local Data Storage
Values entered by the user — such as consumption, prices, and mileage — are stored exclusively in the browser's local storage. This data does not leave the device and is not transmitted to or processed by the operator at any time.
Hosting
This website is hosted by Vercel Inc. When the page is loaded, technically necessary data such as the IP address may be processed by the hosting provider. This processing is based on legitimate interests pursuant to Art. 6(1)(f) GDPR to ensure operation of the service.
Vercel stores access logs (including IP address, timestamp, and user agent) for a maximum of 30 days according to standard practice and automatically deletes them afterwards.
The operator does not directly link this data to identifiable individuals.
Technical and Organizational Measures
To protect data processed via this website, the following technical and organizational measures pursuant to Art. 32 GDPR are implemented:
- Encrypted transmission of all data between browser and server via HTTPS (TLS 1.3)
- Strict Content Security Policy (CSP) to prevent cross-site scripting and unauthorized third-party scripts
- No server-side processing of personal data by the operator: all calculations occur exclusively locally in the user's browser
- No tracking, analytics, or advertising technologies
- No cookies (features such as market or history storage operate exclusively via the browser's LocalStorage without data transmission)
- Regular updates of libraries and frameworks in use
- Hosting with an ISO 27001 and SOC 2 Type II certified provider (Vercel Inc.)
Since the operator does not actively process personal data, security measures are limited to the infrastructure security mentioned above and the avoidance of any data collection.
Third-Country Transfer (USA)
Because Vercel Inc. is based in the United States, personal data — in particular IP addresses from technical connection logs — may be transferred to a third country within the meaning of Articles 44 ff. GDPR.
Vercel Inc. is certified under the EU-U.S. Data Privacy Framework (DPF). The official directory entry is available at dataprivacyframework.gov.
In addition, Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR are used. The Data Processing Agreement is part of the Vercel Terms of Service.
Further information: Vercel Data Processing Agreement · Vercel Privacy Policy
Analytics and Tracking Services
Currently, no analytics, tracking, or advertising services are used on this website. No cookies are set for analytics or marketing purposes.
Cookie Notice
We use a single, strictly necessary cookie called evspend_locale to remember your language choice across sessions. This cookie:
- Purpose: Stores your selected language (de, en-eu, us, tr) for future visits
- Lifetime: 1 year
- Type: Strictly necessary (not subject to consent under Article 5(3) of the ePrivacy Directive 2002/58/EC)
- Tracking: None — no analytics, no third-party services, no data transmitted to external servers
You can delete this cookie at any time via your browser settings. Doing so will reset our language detection on your next visit.
Your Rights Under GDPR (EU 2016/679)
As a data subject in the European Union, you have the following rights regarding your personal data:
- Right of access (Art. 15): Request information about which of your personal data we process
- Right to rectification (Art. 16): Have inaccurate data corrected
- Right to erasure (Art. 17): "Right to be forgotten" — request deletion of your data
- Right to restriction (Art. 18): Limit how we process your data
- Right to data portability (Art. 20): Receive your data in machine-readable format
- Right to object (Art. 21): Object to processing based on legitimate interests
- Right to lodge a complaint: File a complaint with the supervisory authority
Note: As EVSpend processes no personal data on its servers (all calculations happen in your browser), most of these rights are not technically applicable. The only data we store is the evspend_locale cookie in your browser.
Supervisory Authority
The competent supervisory authority for data protection matters is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden
Germany
Email: poststelle@datenschutz.hessen.de
Website: datenschutz.hessen.de
You may also contact the supervisory authority in your EU member state of residence.
Future Services
If analytics tools, advertising services, or external content are integrated in the future, this Privacy Policy will be updated accordingly and users will be informed.
Contact
For privacy-related questions, the operator can be contacted using the details listed in the Legal Notice.
Your Rights as a Data Subject
You have the following rights vis-à-vis the controller regarding the personal data concerning you:
- Right of access (Art. 15 GDPR): You may request information about whether and which personal data we process about you.
- Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate or completion of incomplete data.
- Right to erasure (Art. 17 GDPR): You may request the deletion of your personal data, provided the statutory conditions are met.
- Right to restriction of processing (Art. 18 GDPR): You may request restriction of the processing of your personal data.
- Right to data portability (Art. 20 GDPR): You may receive your personal data in a structured, commonly used and machine-readable format.
- Right to object (Art. 21 GDPR): You may object to the processing of your personal data on grounds relating to your particular situation.
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): You have the right to lodge a complaint with a data protection supervisory authority.
The competent authority in Hesse, Germany, is the Hessian Commissioner for Data Protection and Freedom of Information, P.O. Box 3163, 65021 Wiesbaden, datenschutz.hessen.de.
To exercise these rights, please contact the address provided in the Legal Notice. Since we do not actively process personal data (calculations are performed exclusively locally in your browser), your access request typically relates to Vercel server logs (IP address, timestamp), which are automatically deleted after a maximum of 30 days according to Vercel's standard practice.