Privacy Policy

1. Controller

Aeon GbR, managing partners Sophia Schmieder and Kapish Bhardwaj, Brünnleinsweg 126, 90768 Fürth, Germany. Contact: info@aeongbr.de.

2. Data we process

Depending on use, we may process: (a) technical server/access data when you visit the site (e.g. IP address, date/time, URL, referrer, user-agent, status code) for delivery, security and troubleshooting; (b) optional analytics data via Google Analytics 4 only after cookie-banner consent; (c) if you sign in with a magic link: email address, session/auth cookie and timestamps; (d) favourite stations and optional price alerts you configure (target price, fuel type, station); (e) local preferences such as selected city in cookies/localStorage; (f) the content of support emails you send us. We do not collect payment data on this website and currently do not run a public newsletter signup.

3. Purposes and legal bases

Site operation, security and abuse prevention: Art. 6(1)(f) GDPR. Account, favourites and price alerts: Art. 6(1)(b) GDPR and/or (f) for technical operation. Optional analytics (GA4): Art. 6(1)(a) GDPR and Section 25(1) TDDDG — only after active consent; before consent, analytics_storage defaults to denied (Google Consent Mode v2). Support communication: Art. 6(1)(b) or (f) GDPR.

You can browse without an account. Favourites sync and price alerts require email sign-in. Without consent we do not use analytics cookies for measurement.

4. Cookies and similar technologies

Necessary cookies/storage: e.g. authentication cookie, consent preference, and technical preferences (e.g. city selection) — Art. 6(1)(b)/(f) GDPR, Section 25(2) TDDDG. Optional Google Analytics 4 cookies (_ga, _ga_*) only after opt-in. You can change or withdraw your choice anytime via cookie settings.

5. Web analytics (Google Analytics 4)

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent Google LLC, USA. After consent, GA4 measures page views and coarse device/usage data. IP anonymization is enabled. Transfers to the USA may occur; Google relies on SCCs and/or the EU-US Data Privacy Framework where applicable. Details: https://policies.google.com/privacy

6. Recipients and services

The website is hosted on our VPS. Account/favourites/alerts are stored in PostgreSQL on that system. Fuel price data comes from Tankerkönig/MTS-K (https://creativecommons.tankerkoenig.de). Magic-link and alert emails are sent via our configured mail transport. The iOS app is distributed by Apple; any App Store purchases are handled by Apple as an independent provider.

7. International transfers

If you consent to Google Analytics, and when using Apple App Store services, processing outside the EEA (especially the USA) may occur. Where required, we rely on GDPR Chapter V safeguards (adequacy/DPF and/or standard contractual clauses of the respective providers).

8. Retention

Server logs: only as long as needed for security and operations. Account, favourites and alerts: until you delete the account/data, plus any statutory retention. Auth sessions: until logout/token expiry. Analytics data at Google: per Google settings/your consent. Email correspondence: as long as needed to handle the request and related obligations.

9. Your rights

Under the GDPR, where conditions are met, you have in particular:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)
• Complaint with a supervisory authority; in Bavaria typically BayLDA, https://www.lda.bayern.de

To exercise your rights, email info@aeongbr.de.

We do not make solely automated decisions under Art. 22 GDPR that produce legal effects concerning you.

10. iOS app

The mobile app may use device features (e.g. location, if you allow it) to show nearby stations. Location is used to display results and is not sold to ad networks. You control permissions in iOS Settings. If the app uses the same account/alert features, the account and email sections apply accordingly.

11. External links

We may link to third-party sites (e.g. Apple App Store, authorities, Tankerkönig). Their operators are responsible for their own content and privacy practices.

12. Security

We apply appropriate technical and organisational measures (including TLS, access control, data minimisation). Absolute security of internet transmission cannot be guaranteed.

13. Legal disclosure

We may disclose personal data where required by law or necessary to establish, exercise or defend legal claims.

14. Contact

Privacy requests: info@aeongbr.de — Aeon GbR, Brünnleinsweg 126, 90768 Fürth, Germany.

15. Changes

If our processing changes, we will update this Privacy Policy and the date above.