1. Who we are

Voltarc Industries GmbH ("Voltarc", "we", "us") is the data controller for personal information collected through voltarc.com, our mobile applications and our connected charging hardware. Our headquarters are at Königstrasse 12, 70173 Stuttgart, Germany.

You can contact our Data Protection Officer at privacy@voltarc.com or by writing to the postal address above marked for the attention of the DPO.

2. What we collect

Account data: name, email, postal address, phone number, vehicle make and model, and password (stored as a salted hash).

Order and billing data: items purchased, transaction amount, billing address, the last four digits of the payment instrument and the issuing country. Full card numbers are processed by our PCI-DSS Level 1 payment provider and never reach our servers.

Charging telemetry: when a Voltarc wallbox is paired with your account we receive session timestamps, energy delivered in kWh, peak power, and any fault codes. Telemetry is never sold.

Technical data: IP address, browser, device identifiers, and pages viewed, collected via first-party cookies and server logs.

3. Why we process it

To fulfil your order and provide warranty service (Art. 6(1)(b) GDPR — performance of contract).

To meet tax, customs and product-safety obligations (Art. 6(1)(c) — legal obligation).

To improve our products and prevent fraud (Art. 6(1)(f) — legitimate interests, balanced against your rights).

To send marketing emails, only where you have opted in (Art. 6(1)(a) — consent). You may withdraw consent at any time using the unsubscribe link in any message.

4. How long we keep it

Order records are retained for ten years to comply with German commercial and tax law. Marketing preferences are kept until you opt out. Charging telemetry is anonymised after 24 months. Browsing analytics are deleted after 14 months.

5. Your rights

You have the right to access, rectify, erase, restrict or port your personal data, and to object to processing based on our legitimate interests. To exercise any of these rights, email privacy@voltarc.com. We respond within 30 days. You may also lodge a complaint with the Baden-Württemberg State Commissioner for Data Protection.

6. International transfers

Where we transfer data outside the EEA — for example to our customer-support platform in the United States — we rely on the European Commission's Standard Contractual Clauses (2021/914) and supplementary technical measures including end-to-end encryption.