Privacy Policy
This Privacy Policy explains how Flowyy GmbH ("Flowyy", "we", "us") collects, uses and protects your personal data when you use our website, mobile app and powerbank-sharing stations, in accordance with the EU General Data Protection Regulation (GDPR) and applicable national law.
1. Controller
The controller responsible for your personal data is:
Flowyy GmbH
Stephansplatz 8/20, 1010 Wien, Austria
Email: support@flowyy.co
Data Protection Officer: not required under Art. 37 GDPR (no large-scale monitoring or processing of special categories of data). Data protection enquiries: support@flowyy.co.
2. What data we collect
- Account & contact data — name, email, phone number (if you create an account or contact us).
- Rental & payment data — rental start/end, station, duration, amounts, deposit status. Card details are processed by our payment providers; we do not store full card numbers.
- Location data — approximate or precise location, only with your permission, to show nearby stations in the app.
- Technical data — IP address, device type, browser, app version, and similar log data.
- Usage data — pages visited, features used, collected via cookies/analytics only with your consent.
3. Purposes & legal bases (Art. 6 GDPR)
| Purpose | Legal basis |
|---|---|
| Providing the rental service, processing payments & deposits | Art. 6(1)(b) — performance of a contract |
| Customer support and communication | Art. 6(1)(b) / Art. 6(1)(f) |
| Showing nearby stations via location | Art. 6(1)(a) — consent |
| Analytics & product improvement | Art. 6(1)(a) — consent |
| Fraud prevention, security & legal obligations | Art. 6(1)(c) / Art. 6(1)(f) |
4. Recipients & processors
We share data only as needed with service providers acting as processors under Art. 28 GDPR, including payment providers (e.g. Visa, Mastercard, Apple Pay, Google Pay, Alipay, WeChat Pay networks and our payment processor), hosting (Cloudflare Pages), web form delivery (Web3Forms, which forwards contact and venue enquiries to our support inbox), analytics and support tools. We do not sell your personal data.
5. International transfers
Where data is transferred outside the EU/EEA (e.g. to non-EU payment networks), we rely on adequacy decisions or EU Standard Contractual Clauses to ensure an equivalent level of protection.
6. Retention
We keep personal data only as long as necessary for the purposes above or as required by law (e.g. tax and accounting records, 7 years under § 132 BAO). Account data is deleted on request or after prolonged inactivity.
7. Your rights
Under the GDPR you have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and to object (Art. 21). Where processing is based on consent, you may withdraw it at any time without affecting prior processing. To exercise any right, contact support@flowyy.co.
You also have the right to lodge a complaint with a supervisory authority, namely the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Wien, dsb.gv.at).
8. Cookies
We use essential cookies and, with your consent, analytics cookies. See our Cookie Policy for details and how to change your choices.
9. Changes
We may update this policy. The "last updated" date above reflects the latest version.
10. Imprint (Impressum)
Information pursuant to § 5 ECG, § 14 UGB and § 25 MedienG (Austria):
Flowyy GmbH
Stephansplatz 8/20, 1010 Wien, Austria
Managing Director (Geschäftsführer): Lars Herold
Commercial register: FN 661760b, Handelsgericht Wien
VAT ID (UID): ATU82521709
Company seat: Vienna, Austria
Chamber membership: Wirtschaftskammer Wien (WKO); trade regulations: Gewerbeordnung (ris.bka.gv.at)
Email: support@flowyy.co