CUPRA Charging Privacy Policy
Last updated: August 2026
Thank you for using our charging services. This information applies to the following services and functions, provided they are available in a country, in a particular version of the app, and for the mobile device and vehicle model.
The following sections set out information concerning the data controllers and their respective scope of responsibility (Section A), the manner in which your data are collected, processed, and utilized in connection with the informational use of the App (Section B) as well as the provision of the charging service (Sections C – F), along with guidance regarding your statutory rights and primary points of contact (Sections H – K).
Please note that the CUPRA's Charging Service is used via the My CUPRA app (“app”), a mobile application made available to the customer by SEAT, S.A. (VAT ID A-28 049 161), Autovía A-2, Km. 585, Martorell, Barcelona (Spain), for free download via an app store of the respective operator. Please note that the app is provided by SEAT, S.A. under its own responsibility and that SEAT, S.A. is solely responsible for the processing of data in connection with the provision of the app. Information on data protection can be found in the app’s legal notice. For more information, please contact customercare@cupraofficial.com.
A. Controller, joint responsibility
If you use CUPRA Charging (“Charging Service”), your data will be processed by Elli Mobility GmbH, Karl-Liebknecht-Str. 32, 10178 Berlin, Germany, e-mail: info@elli.eco, entered in the Commercial Register of the District Court of Charlottenburg under HRB 274616 B ("Elli Mobility"), and Volkswagen Group Charging CZ s.r.o., Ve svahu 482/5, Podolí, 147 00 Praha 4, Czech Republic (which Volkswagen Group Charging GmbH has authorized to provide the Charging Service within the Czech Republic) (“Elli Czech Republic”), under joint responsibility ("joint controllership”).
Elli Mobility and Elli Czech Republic have entered into an agreement on the joint processing of your personal data pursuant to Art. 26(1) of the GDPR in order to define their respective responsibilities. This document provides you with key information contained in this agreement.
Under the agreement, Elli Mobility shall be responsible for the processing of personal data in connection with the provision of the Charging Service. Elli Czech Republic receives and processes your personal data only if you use the Charging Service within the Czech Republic for the purposes of settlement of accounts, invoicing, and payment settlement as described in Section C.
The agreement also stipulates that Elli Mobility shall safeguard the rights of customers and comply with the obligations to provide information pursuant to Articles 13 and 14 of the GDPR. Please see Sections J and K for more information on your rights and contact persons.
Elli Czech Republic and Elli Mobility, known as “Elli,” are hereinafter referred to as “Elli,” “we,” or “us.”
В. Processing of Your Data Upon Conclusion of the Agreement
I. CUPRA ID
To use our service via the app, you need a CUPRA ID user account provided by SEAT, S.A., Autovía A-2, Km. 585, Martorell (Barcelona, Spain), registered in the Commercial Register of Barcelona, Volume 23.662, Sheet 1, Page no. B-56.855 (“SEAT”). Please note the detailed privacy policy of CUPRA that is valid for the CUPRA ID. This can be viewed at https://seatid.vwgroup.io/data-privacy.
When you use our services, we process the information from your CUPRA ID user account (your personal contact and identification data, such as your name, mailing address, and e-mail address) for purposes of fulfilling the agreement (Art. 6(1)(b) GDPR).
We use Auth0 (Auth0, LLC, 10800 NE 8th Street, Suite 700, Bellevue, WA 98004, USA) to provide your account and login with your CUPRA ID, whereby your data is processed in the USA. "Use" includes the storage of personal contact and identification data, such as name, mailing address, and e-mail address.
To this end, we have concluded EU standard contractual clauses with the service provider, which act as a guarantee for this transfer of data. You can request information on the content of these standard contractual clauses at any time from the contacts listed in Section K.
II. Charging service (public charging)
a. Provision of a charging card and how to view it
You need an RFID charging card (“charging card”) to start and stop a charging session. This is made available to you by Identa Ausweissysteme GmbH, Steinkirchring 16, 78056 Villingen-Schwenningen, Germany, on our behalf. In order to send you the charging card, our processor Identa Ausweissysteme GmbH is sent your contact details (first/last name and address). We receive the RFID assigned to your order and the charging card number from Identa Ausweissysteme GmbH so that we can assign the charging card to your user profile. You have the option of adding an additional shipping address used in the delivery of the charging card, which we will also send to Identa Ausweissysteme GmbH. The processing of data required for this purpose is carried out within the scope of fulfilling the agreement (Art. 6(1)(b) GDPR).
An RFID is stored on the card, which is used to assign it to your user account. The charging card number is printed on the card. Furthermore, no personal data, in particular your name or address, is stored in digital form on the card.
You can view your charge card(s) in the app. In addition, you can also maintain and manage your charging card(s) in the app. We process your contract and charging card information for this purpose. The processing of data required for this purpose is carried out within the scope of fulfilling the contract (Art. 6(1)(b) GDPR).
b. Selecting a tariff, payment method
To use the Elli charging service, select a tariff (“charging tariff”) and your preferred payment method. For purposes of concluding the agreement, we process your first and last name, your postal/e-mail address, and, if you entered this information, your tax identification number. You can view and manage the tariff you selected in your user profile. You can also edit the payment method and billing address saved by you. Data is processed for the purpose of fulfilling the agreement (Art. 6(1)(b) GDPR).
c. Processing of your data for purposes of payment settlement
Personal data are processed to execute payments based on your selected payment method. In the case of online payment services such as PayPal, such processing encompasses personal data including your name, address, email address, and Payer ID. For credit card transactions, your credit card details (card number, CVC code, and expiration date) are collected in addition to your name, email address, and address.
We collect the payment data in order to transfer it to the payment services. In addition to this, we also transfer the postal and e-mail address you provided to us to the payment services. The processing of data required for this purpose is carried out within the scope of fulfilling the agreement (Art. 6(1)(b) GDPR).
Payment handling is conducted via J.P. Morgan Mobility Payments Solutions S.A., 161 Rue du Kiem L 8030 Strassen (hereinafter referred to as the "Payment Service Provider"). J.P. Morgan Mobility Payments Solutions S.A. processes your personal data strictly for specified purposes within the framework of the payment service and functions as an independent data controller. Consequently, by initiating transactions, you are subject to the data privacy policy of J.P. Morgan Mobility Payments Solutions S.A., which may be viewed at the following link: https://www.wallet.volkswagenpayments.com/documents/file_data_privacy_customer_de-de.pdf.
Additional payment services are provided through Adyen N.V., Simon Carmiggeltstraat 6-50, 1011 DJ Amsterdam, Netherlands, and PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg (collectively, the “Payment Service Providers”). Integration of these providers relies on data processors bound by corresponding data processing agreements. No data is processed outside the European Union in this context. The privacy notices for Ayden and PayPal are accessible via the following links: Adyen: https://www.adyen.com/de_DE/privacy-policy, und Paypal: [https://www.paypal.com/de/legalhub/paypal/privacy-full](https://www.paypal.com/de/legalhub/paypal/privacy-full).
Upon initial entry of your payment details during registration for the Charging Service, the Payment Service Provider checks their validity and authenticity. We receive the verification result as a success or error notification and display it to you in the app. Should additional identification be required on behalf of your credit card issuer or PayPal, this may involve a security code sent via SMS or email by your issuer or PayPal. Authentication is completed by entering this code either within the app or on a redirected page hosted by your payment provider.
In the event of payment default, Elli reserves the right to utilize a debt recovery provider on our behalf to manage the outstanding claim through a dunning process. This may require transferring further customer-related data to our service provider, atriga GmbH, as well as its international partners managing payment defaults outside Germany. The company atriga GmbH and its partners use your data strictly on a purpose-bound basis for the debt collection process and are independently responsible as controllers for this processing.
Your personal data will be handled by atriga GmbH and the partners thereof in accordance with the pertinent data protection legislation currently in force. For further information in this regard, please visit: https://www.atriga.com/datenschutz/
d. Managing your payment method
You can change the payment method you entered at registration later under “Payment method” in your user account. As part of this process, the same data that is transferred during registration is transmitted to our payment service provider (J.P. Morgan Mobility Payments Solutions S.A., 161 Rue du Kiem L 8030 Strassen, Luxembourg):
• First and last name
• Credit card details (credit card number, CVC code, and expiration date)
• Address
• Email address
The processing of data required for this purpose is carried out within the scope of fulfilling the agreement (Art. 6(1)(b) GDPR).
C. Processing of Your Data Within the Scope of Charging Sessions I. Use of the charge service
You use your charging card to start or stop charging sessions at the charging station or right in your app. To manage the charging session using your app, first select a charging station in the app. Your RFID, the charging card number, and the contract number are transmitted to the charging station for authentication purposes. The charging session begins once your user ID has been authenticated. To ensure the proper functioning and handling of the charging tariff and the relevant charging sessions, we process your personal data as well as technical data in connection with the electricity supply agreement of the relevant charging tariff (including charging statistics and information on the charging process (e.g., charging volume, duration and/or start and end of a charging session), your vehicle identification number (only the first eight digits) along with the location of the charging station used (address of the charge point (EVSE))). The processing of data required for this purpose is carried out within the scope of fulfilling the agreement (Art. 6(1)(b) GDPR). Depending on the charging station you use, we employ the services of IONITY GmbH, Moosacher Straße 84, 80809 Munich, Germany as the processor.
In order to offer you an end-to-end charging service, we also work with providers who perform data processing under their own responsibility. In such cases, we transmit your tariff ID which cannot be used to identify you as a person. For more information on data protection, refer to the relevant provider’s website. The following providers are part of our charging network:
• Hubject GmbH, EUREF-Campus 22, 10829 Berlin (www.hubject.com)
• GIREVE, 108-110 Avenue du Général Leclerc, 78220 Viroflay, France
(www.gireve.com)
• Stromnetz Hamburg GmbH, Bramfelder Chaussee 130, 22177 Hamburg
(www.eround.de)
• e-clearing.net GmbH, Krefelder Straße 195, 52070 Aachen (www.e-clearing.net)
II. Invoicing and settlement of accounts
Data is processed for purposes of settlement of accounts and invoicing by Elli Czech Republic if you use charging stations within the Czech Republic, or by Elli Mobility if you use charging stations outside the Czech Republic. On the basis of the charging plan and charging history data, we calculate the cost of the charging session using the charging plan you selected for purposes of settlement of accounts and invoicing. The relevant personal data processed for this purpose can be found in the corresponding passages in Section B.
III. Direct debits and chargebacks
Data is processed for purposes of direct debit transfers and chargebacks by Elli Czech Republic if you use charging stations within the Czech Republic, or by Elli Mobility if you use charging stations outside the Czech Republic.
We send the debit order along with the amount and a posting text that is to appear on your account statement to the relevant payment service. This text contains the accounting period and account number.
If your account cannot be debited, for example, due to insufficient funds on the payment method or because the payment method has expired and is no longer valid, we will be notified of this by the payment service provider. The reason for the error and your ID number generated by us will be transmitted to us. In the event of a chargeback that you did not personally initiate, e.g., if a direct debit was charged back due to insufficient funds, you authorize us once more to debit your account. In the event that you initiate a chargeback or we issue you a refund, the charges for the amount in question will be reversed by the payment service. For this purpose, we transmit the following data to the payment service:
• The amount
• The reason for the chargeback
• Your user ID
• The transaction ID generated by us and assigned to the charging session
The processing of data required for this purpose is carried out within the scope of fulfilling the agreement (Art. 6(1)(b) GDPR).
IV. Vouchers
If you received a voucher to sign up for a tariff with us, in addition to your account information and your tariff, we will also process information on the value of the voucher used by you to pay your monthly installments under the tariff as well as to pay for charging sessions. Depending on the voucher, you will receive a reduction (in %) in the installments under the tariff or in the payment of the outstanding amount owed. Please refer to the voucher information for precise details on your voucher.
If necessary, we will notify you by e-mail about the value remaining on the voucher on a monthly basis and about the remaining term on your voucher to give you an overview of how much longer the voucher can be used. To send the e-mail, we use the e-mail address entered in the app you use to log in and manage your account.
Processing is carried out on the basis of the contractual duties to inform (Art. 6(1)(b) GDPR).
D Contact, Customer Support, newsletter
I. Contact and Customer Support
You have the possibility to contact us and send us a request. In the event that you do so, we process the information and data you provide (including personal data) in a ticket in order to contact you and process your request (Art. 6(1)(b) GDPR).
We employ the services of processors in order to process your personal data, in particular with reference to customer inquiries and support and for our CRM system. We have concluded corresponding data processing agreements with our service providers. If your data is transferred to a third country, the transfer of said data is secured by means of suitable guarantees given by third countries, such as by way of an adequacy decision or standard contractual clauses adopted by the EU Commission. We would be happy to provide you with further information on this. To do so, use the contact options listed in Section J.
In addition, you have the opportunity to provide feedback on our processing of data by e-mail or phone when completing our inquiries. If you contact us in writing, you will find a link to our feedback form in your final e-mail; if you contact us by phone, you can leave your feedback directly at the end of the call.
The request to provide feedback is solicited on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in improving our customer service and on the basis of your consent, provided you follow the link to the feedback form.
We process your responses on the basis of your consent, which you give by providing feedback (Art. 6(1)(a) GDPR). We will pseudonymize and analyze your responses in order to be able to make changes to our customer service on the basis of your feedback. After this, your data will then be deleted.
We will delete your data as soon as we have responded to your request to your satisfaction, provided there are no other retention periods (e.g., retention periods under tax law) to the contrary.
II. Newsletter and customer mailings
You have the option of subscribing to our newsletter and mailings. For this purpose, your personal data will be processed on the basis of your consent (Art. 6 (1) (a) GDPR).
You also have the option of taking part in customer satisfaction surveys concerning our products by e-mail. You will receive mailings about our products in which you can leave your feedback. We process the feedback given there on the basis of your consent, which you give by providing the feedback (Art. 6(1)(a) GDPR). We will pseudonymize and analyze your responses in order to make changes to our customer service and products based on your feedback. Your data pertaining to the individual survey will then be deleted.
In addition, you can consent to the tracking of your usage behavior in the app and your interactions with our newsletters in order to receive special offers and information tailored to you. This enables us to provide you with personalized offers.
We process the e-mail address you entered in order to use your app account to send our newsletter and customer mailings and for tracking purposes. In addition, we store the time and date you gave consent for purposes of proof.
To track your usage behavior, we also collect information about your interactions with the app, which services you access in the app, and if you open our newsletter.
We employ the services of processors in order to process your personal data, in particular with reference to customer inquiries and support and for our CRM system. We have concluded corresponding data processing agreements with our service providers. If your data is transferred to a third country, the transfer of said data is secured by means of suitable guarantees given by third countries, such as by way of an adequacy decision or standard contractual clauses adopted by the EU Commission. To request additional information, use the contact options listed in Section K.
You can withdraw your consent at any time (newsletter, customer mailings, tracking). To do so, you can edit and manage your settings in the app yourself or use the contact options listed in Section K to contact us or get in touch with our Customer Support team. Withdrawal of consent is valid with effect for the future.
Provision of your data for the purposes stated above is voluntary. However, you can only receive the aforementioned information or give us feedback by subscribing to the mailings and newsletters.
E. Fraud prevention
We may use the data you provide when selecting a tariff to check whether an abnormal order has been placed (e.g., the simultaneous ordering of a large number of tariffs using different customer accounts with the same payment information). Validation of such abnormal orders is done based on our legitimate interest in preventing fraudulent activities.
To prevent fraud, we use the services of Risk.Ident GmbH, Am Sandtorkai 50, 20457 Hamburg, Germany, to operate our service in the app. On the one hand, Risk.Ident acts as our processor (Art. 28 GDPR) in the provision of our portal for the purpose of the evaluation and overview of risk assessments. In addition, we act in a joint responsibility with Risk.Ident in accordance with Art. 26 GDPR in relation to the Device.Ident technology, by means of which the information for risk identification is collected and assigned to an output. We are responsible for the integration of cookies and tracking technologies into our online services, whereas Risk.Ident is responsible for the collection and transfer of the following information to the systems operated by Risk.Ident.
Risk.Ident uses cookies and other tracking technologies to collect and process data in order to identify the end device used by the user as well as usage data from the end device (e.g., the operating system used, screen settings, system speed) and technical information (e.g., the IP address). This data is not attributed to a specific user. If IP addresses are collected by Risk.Ident, they are immediately encrypted.
The data is saved by Risk.Ident in a fraud prevention database. The database also stores data transmitted by us to Risk.Ident on end devices that have already been used for (attempted) acts of fraud. Here, too, it is not attributed to specific users.
In addition, information about your payment method (e.g., truncated credit card number) and information on your person (e.g., your e-mail address) is cross-checked and processed in pseudonymized form. After this data has been pseudonymized, it is no longer attributed to you as a person. The pseudonymized information is transmitted by us to Risk.Ident to establish a risk value.
As part of the process of placing an order in our app, we retrieve a risk assessment for the user's device from the Risk.Ident database. This risk assessment regarding the probability of an attempted act of fraud takes into account, among other things, whether the end device has connected via different service providers, whether the end device's geo-reference changes frequently, how many transactions have been made via the end device, and whether a proxy connection is used. In addition, information on how often your payment method is used is taken into account and assigned to the risk value. The risk values are reviewed by us.
In addition to the rights set forth in Section J, you also have the right not to be subject exclusively to an automated decision, to request a review by a human, to express your point of view, and to contest the decision. Use the contact options stated in Section K to assert your rights.
F. Data Processing for Purposes of Analysis
We use cloud service providers as our processors for the following processing operations. We have concluded corresponding data processing agreements. If your personal data is transferred to a third country, the transfer of said data is secured by means of suitable guarantees given by third countries, such as by way of an adequacy decision or standard contractual clauses adopted by the EU Commission. We would be happy to provide you with further information on this. To request further information, use the contact options listed in Section K.
I. Product development and business planning
Purpose of processing:
• To guarantee and improve product quality, research and development regarding new products and services
• To identify and solve, among other things, technical issues in the service (bugs)
• For business planning, process mining, internal reporting, and forecasting
Categories of personal data for this purpose:
• User and usage data (e.g., name, contact information, country, use of the app)
• Logs on the use of the charge points showing the customer’s individual charging sessions
• All data collected during the charging session
• Purchase, shipping, and payment information
• Customer Support processes
• Data on the use of apps and online stores
• Vehicle identification number (VIN), truncated to remove the final six digits (vehicle model ID)
• Subscription and tariff information
• Invoices
The data is processed under joint responsibility in cooperation with Volkswagen Group Charging GmbH, Karl-Liebknecht-Str. 32, 10178 Berlin, Germany, for the purposes of joint, cross-company product development and cross-company business planning as set out above. Elli Mobility and Volkswagen Group Charging GmbH have concluded an agreement on joint responsibility in accordance with Art. 26 GDPR.
The data is processed exclusively pseudonymously for this purpose. Pseudonymization involves the removal of all direct personal identifiers (e.g., name, e-mail address, telephone number). Indirectly traceable identifiers (pseudonyms) are retained. Data is not analyzed in the analytics systems of Elli until it has been pseudonymized. At no time is a direct reference to a specific person re-established. The results of the analysis (in particular, metrics and KPIs) are fully anonymous. The processing of pseudonymous data is necessary because there are interactions between the user account and the relevant services. In such cases, the use of the pseudonym is absolutely necessary in order to link the data from the user account and the linked services on which the analysis is based. The data processed for purposes of analysis will be deleted after thirty-six (36) months (three (3) years). This processing serves the legitimate interest of Elli to meet high customer demands in terms of the existing products and services and to be able to fulfill future requirements of our customers by means of new products and services that have yet to be developed (Art. 6(1)(f) GDPR).
II. Processing of your data for purposes of fraud prevention
Beyond fraud prevention during plan selection, personal data are analyzed to detect fraudulent activity and misuse of our service offering. The personal data processed for this purpose include:
• Salutation
• First name
• Last name
• Street address
• Postal code
• Location
• Country
• Language
• Email address, payment method (no payment information such as credit card number, etc.)
• Date of registration
• Start date of subscription
• Customer number
• Subscription number
• RFID card number
This processing is based on our legitimate interest in fraud prevention [Art. 6(1)(f) GDPR] and serves to detect fraudulent activity, abuse, and related patterns. Under no circumstances is this data used for profiling.
G. Data Processing by Service Providers
In addition to the processors and service providers described separately in the processing operations, we also use other could service providers to deliver our services. The cloud service providers we employ are:
• Google Cloud Platform for the provision of our cloud services, a service of Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland. Google Cloud EMEA Limited employs the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google LLC"), as a sub-processor. This means that data may be transferred to the USA. For information on this, please read Google's privacy policy: https://cloud.google.com/terms/cloud-privacy-notice?hl=de. The EU standard contractual clauses used by Google can be viewed at: https://cloud.google.com/terms/eu-model-contract-clause
• Oracle Corporation UK Limited, Oracle Parkway, Thames Valley Park, Reading, Berkshire, RG6 1RA, UK, for the provision of our ERP system. The transfer of data to the United Kingdom is protected under an EU adequacy decision.
In particular, your information from your user profile concerning your charging contracts and sessions, invoices, charger information, and billing transactions is stored in the cloud services.
In addition, we use Volkswagen Group Charging GmbH, Karl-Liebknecht-Strasse 32, 10178 Berlin, Germany, as our processor to provide the processing services specified in this privacy policy.
You can request further information at any time using the contact details found in Section K.
H. Information on the EU Data Act
The Data Act (Regulation (EU) 2023/2854) is an EU-wide regulation that defines new rules governing access to and the use of data generated by connected products (e.g. ,chargers, vehicles) and associated services (e.g., apps). The aim of the regulation is to create a fair, transparent, and pro-innovation legal framework for the use of both personal and non-personal data within the European Union. Click the following link to learn more about the Data Act: [https://eur-lex.europa.eu/eli/reg/2023/2854/oj]
Please note that use of products of Elli Mobilty may give rise to rights to access data under the Data Act. Volkswagen Group Info Services AG ("VW GIS AG") operates a central customer portal ("EU Data Act Portal") in order for us to fulfill the requirements of the Data Act. You can use this portal to view and retrieve your data and learn about your rights in connection with the Data Act. You can access the Data Act Portal and find further information on our Data Act landing page which you can view by clicking the following link: [https://www.elli.eco/en/eudataact]
Please note that the provision and processing of data under the Data Act may also involve personal data. In such cases, processing is carried out in accordance with the provisions of the General Data Protection Regulation (GDPR).
Elli Mobility is responsible for the processing of personal data in connection with the products and services concerned (Art. 4(7) GDPR). VW GIS AG serves as our processor in this context (Art. 4(8) GDPR).
We have concluded a data processing agreement with VW GIS AG in accordance with Art. 28 GDPR to ensure compliance with data protection requirements in the context of our partnership with VW GIS AG.
You can find our privacy policy concerning the Data Act by clicking the following link:
[https://eu-data-act.drivesomethinggreater.com/ie/en/service/brands-privacy-notice.html]
I. Retention Obligations
We process your personal data for as long as is necessary for the aforementioned purposes. This is required for invoicing and settlement of accounts up to three (3) months after the agreement ends. In the event that you object to processing based on our legitimate interests, we will erase your personal data unless further processing is permitted under the relevant statutory provisions. We also delete personal data if we are obliged to do so for other legal reasons. Applying these general principles, we delete personal data immediately after the legal basis ceases to apply if it is no longer required for the stated purposes or the stated purposes cease to apply and provided that no other legal basis exists (e.g., retention periods under commercial and tax law); otherwise, the data will be deleted after the other legal basis ceases to apply.
J. Your rights
You can exercise the following rights vis-à-vis Volkswagen Group Charging GmbH at any time at no charge.
Right to information: You have the right to receive information from us (Art. 15 of the GDPR) regarding the processing of your personal data.
Right to rectification: You have the right to obtain from us the rectification (Art. 16 of the GDPR) of inaccurate or incomplete personal data concerning you.
Right to erasure: You have the right to obtain the erasure of your data if the conditions set out in Art. 17 of the GDPR are satisfied. You can then, for example, obtain the deletion of your data if it is no longer necessary in relation to the purposes for which it was collected. You can also obtain erasure if we process your data on the basis of your consent and you withdraw this consent.
Right to restriction of processing: You have the right to obtain the restriction of the processing of your data if the requirements of Art. 18 of the GDPR are satisfied. This would be the case, for example, if you were to contest the accuracy of your data. You can then obtain the restriction of processing for a period enabling the controller to verify the accuracy of the data.
Right to object: If processing is done based on an overriding interest, you have the right to object to the processing of your data. You also have the right to object if the processing is either in the public interest or on the basis of a legitimate interest of Elli Mobility GmbH or a third party. In the event that you object to data processing, we ask that you inform us of the reasons for your objection. You also have the right to object to data processing for direct marketing purposes. This also applies to profiling to the extent that it is related to such direct marketing.
Right to data portability: If the processing of data is based on consent or on a contract and is also carried out by automated means, you have the right to receive your data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
Right to withdraw consent: If the processing of data is based on consent, you have the right to withdraw your consent at any time at no charge with future effect.
Right to lodge a complaint: You also have the right to lodge a complaint with respect to our processing of your data with a supervisory authority (for example, the Commissioner for Data Protection and Freedom of Information of the State of Berlin).
K. Your contact persons
Who to contact to exercise your rights
If you have any questions regarding the processing of your personal data or wish to exercise your rights under data protection law, you can contact our data protection team:
You can reach our data protection officer at:
PROLIANCE GmbH
Leopoldstr. 21
80802 München
datenschutzbeauftragter@datenschutzexperte.de
When contacting the data protection officer, please specify Elli Mobility GmbH as the company to which your request refers. Please refrain from including sensitive information such as a copy of your ID with your request.