Privacy Policy – Greenbox Charge IO app
Controller: Greenbox Energy Solutions GmbH, Düsseldorfer Str. 75, Berlin, Germany, e-mail: contact@greenbox.global (October 2026)
1. Purpose. The Greenbox Charge IO app lets you find charging stations, start and stop charging sessions and pay for the
energy charged at stations operated on the Greenbox charging platform.
2. Data we process. Account data (name, e-mail, encrypted password, optionally mobile number and address). Charging
sessions (station, start, end, energy, price) — required for billing (Art. 6(1)(b) GDPR), retained for the statutory
10 years. Payment data: card details are collected and stored by Stripe Payments Europe Ltd. (Ireland), not by us; we
only receive a reference, the last four digits and the expiry date (https://stripe.com/privacy). The location is sent to our server only to sort charging stations by distance and is not stored there. Camera: with your
consent, only to read QR codes on charging stations; no images are stored. Push notifications: a device token is stored
via Firebase Cloud Messaging (Google Ireland Ltd.). Map: provided by Google Maps (Google Ireland Ltd.); your IP address
and the map area shown are transmitted to Google (https://policies.google.com/privacy). Technical logs (IP address,
time, app version) are kept for 30 days for security and troubleshooting (Art. 6(1)(f) GDPR).
3. Where. Our servers are in Germany (Hetzner Online GmbH); encrypted backups at Google Cloud (Europe region). Transfers
to third countries occur only through the services above under the EU standard contractual clauses.
4. Sharing. Session data is shared with the operator of the respective charging station as required for billing, and
with roaming partners when you charge at their stations. No sharing for advertising.
5. Your rights. Access, rectification, erasure, restriction, portability, objection (Art. 15–21 GDPR) and complaint to a
supervisory authority.
6. Deleting your account. In the app under Profile, or by e-mail to contact@greenbox.global. Billing records remain
blocked for the statutory retention period.