Privacy Policy
This Privacy Policy explains how Flowyy GmbH ("Flowyy", "we", "us") collects, uses and protects your personal data when you use our website, mobile app and powerbank-sharing stations, in accordance with the EU General Data Protection Regulation (GDPR) and applicable national law.
1. Controller
The controller responsible for your personal data is:
Flowyy GmbH
[Street address, postal code, city, country]
Email: support@flowyy.co
[Phone number]
Data Protection Officer (if appointed): [DPO name & contact, or "not required under Art. 37 GDPR"]
2. What data we collect
- Account & contact data — name, email, phone number (if you create an account or contact us).
- Rental & payment data — rental start/end, station, duration, amounts, deposit status. Card details are processed by our payment providers; we do not store full card numbers.
- Location data — approximate or precise location, only with your permission, to show nearby stations in the app.
- Technical data — IP address, device type, browser, app version, and similar log data.
- Usage data — pages visited, features used, collected via cookies/analytics only with your consent.
3. Purposes & legal bases (Art. 6 GDPR)
| Purpose | Legal basis |
|---|---|
| Providing the rental service, processing payments & deposits | Art. 6(1)(b) — performance of a contract |
| Customer support and communication | Art. 6(1)(b) / Art. 6(1)(f) |
| Showing nearby stations via location | Art. 6(1)(a) — consent |
| Analytics & product improvement | Art. 6(1)(a) — consent |
| Fraud prevention, security & legal obligations | Art. 6(1)(c) / Art. 6(1)(f) |
4. Recipients & processors
We share data only as needed with service providers acting as processors under Art. 28 GDPR, including payment providers (e.g. Visa, Mastercard, Apple Pay, Google Pay, Alipay, WeChat Pay networks and our payment processor [name]), hosting, analytics and support tools. We do not sell your personal data.
5. International transfers
Where data is transferred outside the EU/EEA (e.g. to non-EU payment networks), we rely on adequacy decisions or EU Standard Contractual Clauses to ensure an equivalent level of protection.
6. Retention
We keep personal data only as long as necessary for the purposes above or as required by law (e.g. tax and accounting records, typically [7/10] years). Account data is deleted on request or after prolonged inactivity.
7. Your rights
Under the GDPR you have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and to object (Art. 21). Where processing is based on consent, you may withdraw it at any time without affecting prior processing. To exercise any right, contact support@flowyy.co.
You also have the right to lodge a complaint with a supervisory authority, e.g. [your national Data Protection Authority — for Austria: Österreichische Datenschutzbehörde, dsb.gv.at].
8. Cookies
We use essential cookies and, with your consent, analytics cookies. See our Cookie Policy for details and how to change your choices.
9. Changes
We may update this policy. The "last updated" date above reflects the latest version.
10. Imprint (Impressum)
Information pursuant to § 5 ECG, § 14 UGB, § 25 MedienG (Austria) / § 5 TMG (Germany):
Flowyy GmbH
[Registered address]
Managing Director: [Geschäftsführer name]
Commercial register: [Firmenbuch/Handelsregister number & court]
VAT ID: [ATU/DE VAT number]
Email: support@flowyy.co