The protection of your privacy when using our website www.moon-power.com is particularly important to us. Therefore, we provide you with detailed information about the processing of personal data below. MOON POWER GmbH is responsible for the data protection of this website. MOON POWER GmbH strictly adheres to the applicable data protection regulations in the use and processing of personal data. Subject to the rights of data subjects described below, MOON POWER GmbH has the right to use personal and anonymous data to the extent permitted by law. This privacy policy applies only to www.moon-power.com and related subpages, but not to websites controlled and operated by third parties. Please check the privacy statements of websites controlled and operated by third parties, as these websites are beyond our control and MOON POWER GmbH is not responsible for their content and data protection measures.

I. Data Security

MOON POWER GmbH has taken appropriate technical and organizational measures to protect your data, which protect your data against loss, manipulation or unauthorized access, among other things. The measures taken are subject to regular review and are continuously adapted to the state of the art.

Please note that you are responsible for the secure safekeeping and confidentiality of any user data or passwords that have been given or communicated to you.

II. Use by minors

It is specified that all processing of personal data may only be used by persons who have reached the age of 14. The use of systems and tools and the resulting processing of the data of users under this age limit is prohibited without the consent of the parents/guardians. Should such data processing nevertheless occur, we will stop processing this data as soon as we become aware of it.

III. Collection and processing of personal data

[1] Data provided by you

Personal data will only be processed by us in accordance with the applicable data protection regulations. If you correspond with us or fill in a form on our website with data, you acknowledge that the data you provide in the respective form will be processed for the purposes described below (see point V).

[2] Information We Collect

When you visit our website, personal data is collected automatically by cookies. For more information about cookies used on our website, please see point VI and our Cookie Policy.

IV. Partners

MOON POWER GmbH does not carry out all the processing of personal data itself, but has the support of professional partners who act on behalf of MOON POWER GmbH. A categorization of our service providers/recipients of the data can be found under the respective data processing. Group companies of the Porsche Holding Group, as well as private dealers, can also act as partners.

The partners have been carefully selected and ensure that the processing of your data is carried out in accordance with the data protection regulations and that your rights are safeguarded by means of suitable technical and organisational measures. The partners are not permitted to use the personal data provided for their own or advertising purposes or to pass it on to third parties.

In addition, MOON POWER GmbH does not pass on any data to third parties – such as address publishers and direct advertising companies.

V. Data processing

Answering general inquiries

When you send your request, your personal data will be processed.

• Data categories: all personal data that you provide to us in the context of the request (contact and identification data)
• Purpose: Responding to your request
• Justification: legitimate interest in accordance with Article 6 (1) (F) GDPR to be able to process your request carefully and completely
• Storage period: 12 months
• Data recipients: IT service providers

Service Requests

When you send your request, your personal data will be processed.

• Data categories: all personal data that you provide to us in the context of the enquiry (contact and identification data, device information, fault description)
• Purpose: To respond to your enquiry, to provide services
• Justification: Performance of a contract or implementation of pre-contractual measures at your request, legitimate interest in accordance with Article 6 (1) (F) GDPR to be able to process your request carefully and completely
• Storage period: 3 years
• Data recipients: IT service providers

Subscribe to the newsletter

The data provided during the respective registration will only be used to send the newsletter. To send the newsletter, we use the e-mail address you have provided and then require your confirmation that you, as the owner of the e-mail address, agree to receive it (so-called double opt-in).

• Data Categories: Contact and Identification Data
• Purpose: To send you information about products, services and events
• Justification: Consent
• You can cancel your subscription at any time via the unsubscribe option provided in the newsletter or under [email protected].
• Storage period: As long as the newsletter is sent and no revocation takes place
• Data recipients: IT service providers, marketing agencies

Marketing

MOON POWER processes personal data for direct marketing purposes in order to be able to offer targeted offers about products, services and events that are of interest to the respective customer. In addition, potential customers can also be contacted by post to be informed about interesting offers about products, services and events.

• Data Categories: Contact and Identification Data
• Purpose: To send you information about products, services and events
• Justification: consent; legitimate interest in accordance with Article 6 (1) (F) GDPR to acquire new customers
• You can withdraw your consent at any time by sending an e-mail to [email protected].
• Storage period: As long as no revocation is made
• Data recipients: IT service providers, marketing agencies

Participation in prize competitions

MOON POWER GmbH often organises prize competitions via its various channels (social media channels, company website, competition cards) in which interested parties can participate. If you win a competition, your personal data will be processed electronically for the purpose of processing the assumption of the prize.

• Data Categories: Contact and Identification Data
• Purpose: Processing and implementation of the competition
• Justification: Performance of a contract or to take pre-contractual measures at your request
• Storage period: The personal data of the participants will be deleted after a winner has been drawn. The personal data of the winner will be processed until processing including handover and will then be deleted.
• Data recipients: IT service providers, marketing agencies

Consulting services for electrical infrastructure

For the advice and sale of wallboxes, photovoltaic and storage systems as well as other products and services related to electromobility, your contact and identification data will be processed by us or transmitted to our partners for the construction of the electrical infrastructure. In this context, your data will also be transmitted to the responsible authorities, network operators, energy suppliers and/or funding agencies, if necessary, for various official channels, permit requests and funding submissions.

• Data Categories: Contact and Identification Data
• Purpose: Advice and sale of wallboxes, photovoltaic and storage systems as well as other products and services related to electromobility
• Justification: Contract, or pre-contractual relationship at the request of the customer or legitimate interest
• Storage period: 7 years; if your request does not lead to the conclusion of a purchase contract, your data will be deleted after 2 months at the latest.

Charging processes at MOON POWER charging stations

If you carry out charging processes at one of the MOON POWER charging stations operated by us or our charging station partners ("Operator"), personal data will be processed. As part of the charging process, we process the personal data that is necessary for the processing and billing of the charging processes, for the improvement and assurance of functionality and support and for anonymous evaluation. As part of the provision of charging stations, we make use of selected IT service providers.

If you are an employee of the Operator, the Operator may also process personal data. For more information, please contact the operator directly.

If you start the charging process with a third-party charging card, any data necessary for processing will be transmitted to or processed by your charging card operator. For further information, please contact the charging card operator directly.

• Data categories: contact and identification data; Information about the charging process (date, loading quantity, charging card provider)
• Recipients: IT service providers; where applicable, charging location partners ("operators"); charging card operators, if applicable; Tax authorities
• Purpose: Processing and billing of charging processes; Support; Anonymous evaluations
• Justification: performance of the contract; legitimate interest to carry out anonymous evaluations for the purposes of support or to improve and ensure functionality; Legal obligation (proof of transactions to the tax authorities)
• Storage period: Your data will be stored for 7 years due to legal necessity for the purpose of providing evidence to the tax authorities.

Personalized customer care through profiling

The following Porsche Holding Group companies process your customer data - if you have consented to it in carlog - as joint controllers in a central office for personalized customer service:

• Porsche Konstruktionen GmbH & Co KG (Louise-Piëch-Straße 2, 5020 Salzburg)
• Porsche Austria GmbH & Co OG (Louise-Piëch-Straße 2, 5020 Salzburg)
• Allmobil GmbH (Louise-Piëch-Straße 2, 5020 Salzburg)
• Porsche Bank AG (Vogelweiderstrasse 75, 5020 Salzburg)
• Porsche Versicherungs AG (Vogelweiderstrasse 75, 5020 Salzburg)
• Volkswagen Versicherungsdienst GmbH (Trattnerhof 1, 1010 Vienna)
• ARAC GmbH (Louise-Piëch-Straße 2, 5020 Salzburg)
• MOON POWER GmbH (Louise-Piëch-Straße 2, 5020 Salzburg)

In this central office for customer service, your customer data (listed below) is collected, combined and used to create individual customer profiles and customer segments (e.g. based on predefined milieus). Subsequently, the prepared customer profiles will be made available again to the respective Porsche Holding Group companies and can be used to create personalised offers and send information.

• Data categories: Contact details and other data you provide, including academic titles; Contract data including cash purchase, financing and insurance, preferred dealer; vehicle-specific data such as VIN, model, brand, fuel type, hp/KW, date of first registration, mileage, tread depth; service-specific data and service history; Sales history; as well as past and future interactions with the products and services of the Porsche Holding Group companies, including your behaviour on the websites, online platforms and applications of the Porsche Holding Group companies (such as carlog, Sharetoo car sharing, Smart Driver App).
• Purpose: Personalized customer experience through profiling
• Justification: Consent

You can withdraw your consent at any time directly in carlog or at [email protected].

• Storage period: until consent is withdrawn
• Recipient categories: IT service providers (Porsche Informatik GmbH)

Information according to Art. 26 General Data Protection Regulation:

The aforementioned Porsche Holding Group companies have concluded a joint controller agreement in accordance with Article 26 of the General Data Protection Regulation ("Joint Controllers Agreement"). Essentially, Porsche Konstruktionen GmbH & Co KG acts as the primary responsible party and primary point of contact for those affected. The rights of data subjects, information and notification obligations are fulfilled independently by the respective controller, depending on the case of application.

Sending direct marketing and vouchers

MOON POWER GmbH uses your customer data - if you agree to it in carlog - to send you information about products, services and vouchers. If you have agreed separately, the mailing will be personalized on the basis of the individual customer profile described under the item "Personalized customer service through profiling".

• Data categories:  contact details and other data provided by me, including academic titles; Contract data including cash purchase, financing and insurance, preferred dealer; vehicle-specific data such as VIN, model, brand, fuel type, hp/KW, date of first registration, mileage, tread depth; service-specific data and service history; Sales history; as well as past and future interactions with the products and services of the Porsche Holding Group companies, including my behaviour on websites, online platforms and applications of the Porsche Holding Group companies (such as carlog, Sharetoo Carsharing, Smart Driver App).
• Purpose: To send (personalised) information on products and services as well as vouchers
• Justification: Consent
• You can withdraw your consent at any time directly in carlog or at [email protected].
• Storage period: until consent is withdrawn
• Recipient categories: IT service providers (Porsche Informatik GmbH)

Processing of data subject requests

For the processing of the rights of data subjects in accordance with the General Data Protection Regulation and the storage and documentation of data subject requests, data transmitted by us will be processed in order to maintain a register of processed data subject requests.

• Data categories: contact and identification data, contract data, vehicle data
• Purpose: Processing of data subject requests, documentation
• Justification: Legitimate interest in being able to demonstrate measures taken in relation to requests by data subjects in the event of an inspection by the Data Protection Authority
• Storage period: 3 years

Fleet customers with 20 or more vehicles:

As a fleet customer, your data will be collected via the contact form and transmitted to Porsche Bank AG for comparison. This comparison is used to check whether there are more than 20 vehicles in your inventory. No further data processing or transmission will take place.

After completing this check, you will be contacted by MOON POWER to provide further information about your vehicles and payment details.

• Data categories: contact and identification data, contract data, vehicle data
• Purpose: Examination of eligibility for participation in the GHG quota transfer
• Justification: Contract or pre-contractual relationship to participate in the GHG quota transfer
• Storage period: Your request will be deleted as soon as the eligibility to participate in the GHG quota transfer has been confirmed.

VI. Reference to tools used in the context of the public charging station search function:

As part of this data processing, Google Maps is used in combination with Google address validation and Google Fonts. There is a valid adequacy decision of the Commission for data transfers to the USA. Since it may involve data processing in third countries, it is therefore informed in particular about the following tools within the meaning of Articles 12 and 13 (1) (f) GDPR:

Google Maps:

The Google Maps map service is used via an API to select the charging station or plan the route. When using the feature, your IP address will be transmitted to Google Ireland (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. It cannot be ruled out that Google Ireland will process further data as part of the process, establish a personal reference and send it to Google LLC (location: USA). Further information on Google Maps and Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/.

Google Address Validation:

Google Address Validation is used to validate your entered address. For this data processing, data is sent to Google Ireland (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). It cannot be ruled out that Google Ireland will process further data as part of the process, establish a personal reference and send it to Google LLC (location: USA). When using Google Address Validation, your IP address and the address suggested by Google Address Validation when selecting a customer will be processed. The customer selection is queried immediately and the selection process itself may also be transmitted to Google.

Further information on Google address validation and Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/

Google Fonts:

This site uses Google Fonts for the uniform display of fonts. Google Fonts (formerly Google Web Fonts) is an interactive collection of over 1300 fonts, which is made available by Google for free use by companies. When you call up a page, your browser loads the required fonts into your browser cache in order to display texts and fonts correctly. We do not process any personal data within the framework of Google Fonts. It cannot be ruled out that Google Ireland will process further data as part of the process, establish a personal reference and send it to Google LLC (location: USA).

For more information about Google Web Fonts, see https://developers.google.com/fonts/faq and Google's privacy policy: https://www.google.com/policies/privacy/

VII. Cookies and social plug-ins

We collect data automatically through the use of cookies. A cookie is a small text file that stores internet settings. Almost every website uses this technology. It is downloaded from your internet browser the first time you visit a website. The next time you visit this website on the same device, the cookie and the information stored in it are either sent back to the website that created it (first party cookie) or sent to another website to which it belongs (third party cookie). This allows the website to recognize that it has been visited with this browser before, and in some cases varies the content displayed.

For more information about the cookies used on our website, please see our Cookie Policy.

[1] Meta Pixel

A Meta Pixel is used on this setie. Meta Pixel is an analytics tool that measures the effectiveness of FAcebook advertising on our website. User behavior on our website or online commerce is tracked and linked to user data on Meta. Meta Pixel is integrated into websites outside the platform using JavaScript code. Tracking on our website takes place with the help of cookies.

• Data Categories: Marketing and Data Quality Improvement
• Purpose: Analysis of user behaviour on our website
• Justification: Consent
• Storage period: Until consent is withdrawn

VIII. Rights of data subjects

You have the statutory right to information as well as to correction, deletion, restriction of processing, a right to object to processing and, if provided for by law, a right to data portability. MOON POWER GmbH will also notify you immediately in the event of a personal data breach, provided that the breaches are likely to result in a high risk to your rights and freedoms. There is a right to lodge a complaint with the Austrian Data Protection Authority.

These rights can be asserted directly with MOON POWER GmbH by sending a message to the e-mail address [email protected].

IX. Contact details

Responsible:

MOON POWER GmbH Louise-Piëch-Straße 2 Location: Sterneckstraße 28-30 5020 Salzburg [email protected]

Data security engineer: Louise-Piëch-Straße 2 5020 Salzburg [email protected]

As of: April 2025