Privacy Policy

Privacy Policy according to Art. 13, 14 GDPR

Status: 22.07.2025

Charj Hub GmbH (hereinafter "we" or "Charj Hub") takes the protection of your personal data very seriously.
This privacy policy informs you about the nature, extent, and purpose of the processing of personal data when using our website, mobile applications, the power bank rental system, and in the context of our lead generation for B2B purposes.

1. Responsible Party

Charj Hub GmbH
Rudolfplatz 3
50674 Cologne
Germany
Email: contact@charjhub.com
Phone: +447344 146437

2. Data Protection Officer

Email: contact@charjhub.com

3. Scope of this Privacy Policy

This privacy policy covers:

  • the processing of personal data of end customers when using our power bank machines and the mobile app,
  • the processing of personal data of interested parties ("leads") from our B2B franchise and partner program, which are generated through online campaigns and further processed via an internal CRM (Pipedrive).

4. Data Processing When Used by End Customers (App and Machines)

a) Types of Data Processed:

  • Email address or phone number (upon voluntary registration)
  • Location data (for station search, only with consent)
  • Payment data (via Stripe/PayPal)
  • IP address, device information, usage statistics

b) Purpose of Processing:

  • Provision of the power bank rental function\
  • Billing and payment processing
  • Location-based services
  • System analysis, error management, security purposes

c) Legal Bases:

  • Art. 6 para. 1 lit. b GDPR (contract fulfillment)
  • Art. 6 para. 1 lit. a GDPR (consent, e.g., for location data)
  • Art. 6 para. 1 lit. f GDPR (legitimate interest in security and functionality optimization)

d) Storage and Deletion:

  • Usage and payment data: 12 months
  • Contract data: according to § 257 HGB and § 147 AO (6 or 10 years)

5. Data Processing in the Context of Lead Generation for Franchise and Location Partners (B2B)

a) Types of Data Processed:

  • Name, email address, phone number
  • Company name, location data
  • Other voluntary information in the form

b) Source of Data:

  • Online contact forms (e.g., on landing pages)
  • Digital marketing campaigns (Meta Ads, Google Ads, TikTok Ads)

c) Further Processing:

  • Storage in the CRM system Pipedrive
  • Contact by Charj Hub employees

d) Purpose of Processing:

  • Processing of inquiries from interested parties
  • Conducting B2B communication
  • Contract initiation within our franchise program

e) Legal Basis:

  • Art. 6 para. 1 lit. b GDPR (pre-contractual measures)
  • Art. 6 para. 1 lit. f GDPR (legitimate interest in corporate development)

f) Retention Period:

  • Until the final rejection or completion of a contractual relationship plus statutory retention obligations

6. Hosting and Technical Infrastructure

Our systems operate exclusively on servers of Amazon Web Services (AWS) in Germany.
The data security meets the state of the art according to Art. 32 GDPR.

7. External Recipients & Processors

We use the following third-party providers:

  • Stripe & PayPal (payment processing)
  • Amazon AWS (hosting)
  • Google Analytics & Firebase (analysis, app performance)
  • Pipedrive (CRM for B2B contacts)
  • Google Workspace (email communication)
  • Meta Ads, Google Ads, TikTok Ads (lead generation)

We have contracts for processing with all service providers in accordance with Art. 28 GDPR.
Data transfers to third countries take place on the basis of EU standard contractual clauses.

8. Your Rights as Data Subject

You have the right to:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Deletion (Art. 17 GDPR)
  • Restriction (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR)
  • Complaint to a supervisory authority (Art. 77 GDPR)

Your inquiries should be directed to: privacy@charjhub.com

9. Currency and Changes to this Privacy Policy

We reserve the right to change this privacy policy at any time while considering applicable data protection regulations.
The version published on our website is valid.

10. Newsletter and Push Notifications (future use)

If you actively sign up for our newsletter or push notifications, we store your consent and process your data solely for this purpose.
Unsubscribing is possible at any time via the app or an unsubscribe link.

11. Data Processing on Meta Platforms (Instagram & Facebook)

For our online presences and advertising measures, we use services of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland, on Instagram and Facebook.

When visiting our social media pages, Meta collects personal data (IP address, device info, interactions, etc.). This applies even if you don’t have a Meta account.

We have access to aggregated "page insights" from Meta without personal reference.

Legal bases:

  • Art. 6 para. 1 lit. a GDPR (consent)
  • Art. 6 para. 1 lit. f GDPR (legitimate interest in communication & marketing)

Data processing takes place under joint responsibility (Art. 26 GDPR). Agreement: Meta Controller Addendum.

More info: Meta Privacy Policy

12. TikTok

We use TikTok Ads & TikTok Business Services, operated by TikTok Technology Limited, Dublin, Ireland.

TikTok collects data such as IP address, device information, interaction behavior, and location data. Data may be transferred to third countries (e.g., USA).

Processing is based on consent (Art. 6 para. 1 lit. a GDPR).
More info: TikTok Privacy Policy

13. Google Ads / YouTube Ads

We use advertising services from Google Ireland Ltd., Dublin, Ireland, to place ads on Google and YouTube and measure campaigns.

Google collects data (IP address, device ID, usage, ad interactions, etc.) which may be used for personalized ads.

Processing is based on consent (Art. 6 para. 1 lit. a GDPR).
More info: Google Privacy & Ads Policy

14. Google Analytics

We use Google Analytics for website/app analysis. Provider: Google Ireland Ltd., Dublin, Ireland.

Collected: shortened IPs, device info, session duration, page views.
We use IP anonymization in the EU.

Processing only with consent (Art. 6 para. 1 lit. a GDPR).
Retention: up to 14 months.

More info: Google Analytics Help

15. Pipedrive (CRM System)

For managing franchise leads and B2B contacts, we use Pipedrive OÜ, Mustamäe tee 3a, 10615 Tallinn, Estonia.

Stored: contact details, communication histories, internal notes.
Legal bases: Art. 6 para. 1 lit. b GDPR (pre-contractual measures), Art. 6 para. 1 lit. f GDPR (legitimate interest).

Data is processed on EU servers.
More info: Pipedrive Privacy Policy