Information Obligation under Article 3(2) EU Data Act

MOON POWER GmbH's wallboxes and charging stations are considered "connected products" within the meaning of the Data Act because they are capable of collecting or generating data about their use or environment and are designed to be transmitted via electronic communications services. These devices are developed across multiple hardware and software platforms and are capable of collecting or generating a wide range of data depending on the model, configuration, and usage.

General note: Due to the wide variety of models, configurations and regional adaptations of our wallboxes and charging stations, it is not possible to provide product-specific information in this document. Instead, we provide a general overview that applies to the majority of our product portfolio. For model-specific details, please refer to the product's technical documentation or contact our support team.

The pre-contractual information pursuant to Art. 3 para. 2 Data Act for networked products sold by MOON POWER GmbH exclusively without additional services can be accessed via the following manufacturers' websites:

Pre-contractual information according to Art. 3 (2) EU Data Act for connected products

a) Type, format, and estimated amount of product data

Our products are equipped with various sensors, ECUs and communication modules that allow them to generate and transmit data during operation. The type and amount of data generated may vary depending on the model, configuration, and user settings.

The commonly generated data types include:

• Operating status data: e.g. plug-in status, charging start and stop, smart charging activation, fault conditions.
• Usage data: e.g. energy supplied (kWh), charging time, frequency and time of use, user interaction logs.
• Diagnostic and performance data: e.g. firmware version, system health, error logs, voltage and current levels.
• Environmental data (if applicable): e.g. ambient temperature, grid conditions.

The data formats are machine-readable and can include the following formats:

• JSON, XML, CSV, and other structured formats depending on the backend system and integration layer.

The estimated scope depends on several factors:

• The specific product model and hardware platform.
• Usage interval
• The number of features and services enabled.
• The backend communication interval and data compression settings.

b) Continuous data generation in real time

Most of MOON GmbH's products are capable of generating data continuously and in real time. These include:

• Live monitoring of charging and energy flow.
• Real-time updates on device status and system diagnostics.
• Immediate transmission of error messages or system alarms.

Real-time capability may depend on the configuration of the device and the availability of a stable network connection.

c) Data storage: on-device and remote

Data generated by our products may be stored in one or more of the following ways:

• On-device storage: The data is temporarily stored in the internal memory of the products.
• Remote storage (back-end systems): Data transfer is carried out to secure back-end systems, which may include cloud servers or third-party platforms used by or on behalf of MOON GmbH.

The choice of storage method depends on the hardware and software configuration of the product.

Retention periods vary depending on the type of data and the purpose for which it is collected. Generally:

• Operational and usage data will be retained for as long as necessary to provide the contracted service.
• As soon as the data is no longer needed and there is no legal or contractual retention obligation, it will be deleted in accordance with data protection regulations.

For more information, see Privacy Policy MOON POWER GmbH

d) Access, retrieval and deletion of data

Users have the right to access, retrieve and, if necessary, delete the data generated by their Connected Product in accordance with the provisions of the Data Act.

The data can be accessed and retrieved via a request to the e-mail address  [email protected]. This contact address serves as a single point of contact for data requests under the Data Act.

The deletion of the data is supported as far as this is technically feasible and legally permissible. The user can request the deletion of locally and remotely stored data via the e-mail address [email protected].

Pre-contractual information pursuant to Art. 3 para. 3 EU Data Act for connected services

MOON POWER GmbH offers a range of connected services that complement the functionality of our connected products. These services include, but are not limited to:

• Electric vehicle (EV) drivers can charge at public charging stations.
• Assisting charging station operators (CPOs) in managing charging infrastructure at their sites.
• To make it easier for fleet operators to manage charging at public, private and corporate locations.
• Providing charging solutions for private customers at home.

a) Type, estimated volume, and frequency of product data collection

The connected services, such as mobile applications, backend platforms, and digital consoles, collect different types of data depending on the use case, the infrastructure used, the configuration of the product, the country of use, and the user's individual settings.

The types of data collected may include:

• Details of the charging process (e.g. energy supplied, duration, location).
• Device status and diagnostics (e.g., error codes, firmware version).
• Infrastructure performance metrics (e.g., availability, usage patterns).

The scope and frequency of data collection depends on the specific service, product configuration, and user settings. Since these factors are very different, it is not possible to give a firm estimate.

Data storage includes both storage on the device (e.g. inside the charging station) and remote storage on back-end systems.

Retention periods vary depending on the data type and use case. The data will only be kept for as long as it is necessary to fulfil its purpose and deleted as soon as there is no legal or contractual obligation to retain it.

The data can be accessed and retrieved via a request to the e-mail address [email protected]. This contact address serves as a single point of contact for data requests under the Data Act.

b) Type and estimated scope of connected service data

In addition to product data, connected services generate their own data, which can include:

• User interaction data (e.g., app usage, preferences).
• Fleet and billing data (e.g., user IDs, cost breakdowns).
• Service configuration and performance data.

As with product data, the scope and type of associated service data will vary depending on the service used and its functions.

Data storage includes both storage on the device (e.g. inside the charging station) and remote storage on back-end systems.

Retention periods vary depending on the data type and use case. The data will only be kept for as long as it is necessary to fulfil its purpose and deleted as soon as there is no legal or contractual obligation to retain it.

Data from connected services can be accessed and retrieved by sending a request to the e-mail address [email protected]. This contact address serves as a single point of contact for data requests under the Data Act.

c) Use of readily available data and access by third parties

Data processing is only carried out on a legal basis in accordance with Article 6 of the EU General Data Protection Regulation (GDPR) and/or applicable data protection laws. The use of non-personal data is based solely on the contractual agreement with the user in accordance with Article 4(13) and Article 4(14) of the Data Act.

MOON POWER GmbH may use the data collected through affiliated services for its own legitimate purposes. These purposes include, but are not limited to:

• Provision and maintenance of connected services.
• Carrying out diagnostics, updates and product analyses.
• Research and development to improve wallboxes, charging infrastructure and digital services.
• Developing and offering future services and features.

In addition, MOON POWER GmbH may pass on data to third parties for purposes that are either contractually agreed with the user or are based on legitimate interests of MOON POWER GmbH. These purposes may include:

• Collaboration with technology partners to integrate advanced functionalities.
• Partnerships with academic or research institutions to support innovation and scientific progress.
• Collaboration with service providers to ensure a seamless, secure, and efficient user experience.

d) Data Transfer and Termination Requests

The user can request the transfer of data to third parties by sending an application to the e-mail address [email protected]. This contact address serves as a central point of contact for data requests within the framework of the Data Act. The user can also terminate the transfer of data to third parties by sending a request to the e-mail address [email protected].

e) Right to lodge a complaint

Users have the right to lodge a complaint under Article 37 of the Data Act with the competent authority designated by their national government.

f) Trade secrets

If data that can be accessed through connected products, or that is generated during the provision of connected services, contains trade secrets, this is clearly indicated to users so that users can identify and understand which data points are subject to additional protection.

g) Term and termination of the contract

The Connected Services Agreement shall remain in effect until i) the Connected Product is destroyed or rendered inoperable, or ii) the User is no longer the owner or authorized user of the Product or Service.

Specific terms regarding duration and termination are regulated in the respective service contracts. For more information, please refer to the applicable terms and conditions.

CONTACT DETAILS & DATA HOLDERS

Data Holder

MOON POWER GmbH Sterneckstraße 28-30, A-5020 Salzburg Legal form: Limited liability company Registered office: Salzburg FN 562507 t / Salzburg Regional Court UID-NR.: ATU77273479) E-Mail: [email protected]