Privacy Policy

The German version of this Privacy Policy is the authoritative and legally binding text. This English version is provided for convenience only.

This Privacy Policy explains which personal data we process on this website, for what purpose, on what legal basis and for how long, and what rights you have.

This Privacy Policy applies to the website dkvinstantfuel.com (the „Website"). The separate dashboard/app at dashboard.dkvinstantfuel.com is subject to its own privacy notice.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

PACE Mobility GmbH
Haid-und-Neu-Strasse 18
76131 Karlsruhe, Germany

Phone: +49 721 276 664-0
Fax: +49 721 276 664-99
Email: mail@pace.car

Managing Directors: Julius Parrisius, Mike Kasperlik
Commercial register: HRB 722293, Mannheim Local Court
VAT ID: DE300495190

„DKV InstantFuel" is a product marketed together with DKV Mobility, which acts as a brand in this respect. The controller for data processing on this Website is exclusively PACE Mobility GmbH.

2. Data Protection Officer

You can reach our Data Protection Officer at:
Email: dsb@meindatenschutzpartner.de

By post, you can reach our Data Protection Officer at the controller's address marked „– Data Protection Officer –".

3. General Information on Data Processing

3.1 Scope

As a matter of principle, we only process our users' personal data to the extent necessary to provide a functional website and our content and services. Processing generally takes place only with your consent or where another of the legal grounds set out below applies.

3.2 Legal bases

• Art. 6(1)(a) GDPR where we obtain your consent for processing.
• Art. 6(1)(b) GDPR for processing necessary to perform a contract or to take pre-contractual steps (e.g. handling your enquiry).
• Art. 6(1)(c) GDPR where processing is necessary to comply with a legal obligation (e.g. commercial and tax retention duties).
• Art. 6(1)(f) GDPR where processing is necessary for the purposes of our legitimate interests or those of a third party, provided your interests, fundamental rights and freedoms do not override them.

Where storing information on, or accessing information already stored in, your device (e.g. cookies, local storage) requires consent, Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act) is the additional legal basis. Strictly necessary storage is based on Section 25(2) no. 2 TDDDG.

3.3 Recipients and processors

To operate the Website, we use carefully selected service providers that process personal data on our behalf and under our instructions (data processing under Art. 28 GDPR). The specific services are set out in the sections below. We disclose data to other third parties only where there is a legal basis to do so.

3.4 Erasure and storage period

We erase or block personal data as soon as the purpose of storage ceases to apply. Storage beyond this occurs only where legally required. Where we process data based on your consent, processing ends upon your withdrawal unless another legal ground applies. Where we process data based on legitimate interests, we store it until the legitimate interest ceases or you effectively object. Statutory retention obligations (commercial, tax and accounting law — generally six to ten years) remain unaffected.

3.5 Transfers to third countries

Some of the services we use also process data outside the EU/EEA, in particular in the USA. Such transfers take place only where an adequacy decision of the EU Commission exists (for the USA, the EU-US Data Privacy Framework, where the relevant provider is certified) or where appropriate safeguards under Art. 46 GDPR are in place (in particular EU Standard Contractual Clauses). See the consolidated overview in Section 10.

4. Provision of the Website and Server Log Files

When you access the Website, our hosting provider automatically processes information transmitted by your browser, in particular:

• IP address,
• date and time of access,
• requested URL/file,
• amount of data transferred and status message,
• browser type and operating system (user agent),
• the previously visited page (referrer), if transmitted.

This data is technically necessary to deliver the Website, ensure its stability and security, and prevent misuse.

Hosting (Cloudflare): The Website is provided via Cloudflare Pages by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA; EU representative: Cloudflare Germany GmbH, Munich) and delivered through Cloudflare's global content delivery and security network. Cloudflare processes the above connection data as our processor. A client-side function of the Website (e.g. the contact-form endpoint) is provided via a Cloudflare function („Worker").

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient operation of the Website). Cloudflare privacy notice: cloudflare.com/privacypolicy.

5. Cookies and Local Storage Technologies

We use cookies and related technologies on the Website (in particular your browser's local storage / session storage), which store or read information on your device.

Strictly necessary storage (no consent required):

• dkvif_consent (localStorage) – stores your cookie/consent decision; retention: until withdrawal or deletion.
• dkvif_preconfig (localStorage) – remembers your input in the price calculator (number of drivers) for pre-fill; retention: until deletion.
• dkvif_utm (sessionStorage) – attributes visits to an advertising/campaign source; retention: for the duration of the browser session.

Consent-based storage is only set after you have agreed via our consent banner (see Section 6). This includes in particular the cookies and storage of the analytics, marketing and map services described in Sections 8 and 9 (e.g. _ga/_ga_* from Google Analytics, _clck/_clsk from Microsoft Clarity, _gcl_* from Google Ads).

Legal basis: for necessary storage, Section 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR; for all others, your consent under Section 25(1) TDDDG and Art. 6(1)(a) GDPR. You can delete cookies or restrict their use at any time in your browser settings.

6. Consent Management (Cookie Banner)

On your first visit, a banner lets you consent to, reject, or individually select non-essential data processing. You can choose between the following categories:

• Essential (always active): technically necessary functions, security, and storage of your consent decision.
• Map: loading the interactive station map and the services required for it (see Section 9).
• Analytics: reach measurement and usage analysis (see Section 8).
• Marketing: conversion measurement and advertising delivery (see Section 8).

No consent-based services are activated before you make a decision; technically we use Google Consent Mode v2 for this (default: all non-essential functions disabled). Your decision is stored locally in your browser (dkvif_consent).

Withdrawal: You can change or withdraw your consent at any time with effect for the future via the „Cookie settings" link in the footer. Legal basis: Art. 6(1)(a) GDPR, Section 25(1) TDDDG.

7. Contacting Us

7.1 Contact form

You can contact us via a form on our contact page. Mandatory fields are first name, last name, company, email address, subject and message; optional fields are salutation, fleet size and phone number. We use this data solely to handle your enquiry and any follow-up questions.

Sending is technically handled by our processor Twilio Inc. („SendGrid") (101 Spear Street, San Francisco, CA, USA). Via SendGrid we send your enquiry to our team and an automatic acknowledgement to the email address you provided.

Optional marketing consent: If you tick the relevant checkbox, we may also contact you with information about our products. This consent is voluntary and can be withdrawn at any time with effect for the future.

Legal basis: Art. 6(1)(b) GDPR (handling your enquiry / pre-contractual steps), additionally Art. 6(1)(f) GDPR; for the marketing consent, Art. 6(1)(a) GDPR. Retention: until your enquiry has been conclusively handled; statutory retention obligations remain unaffected.

7.2 Spam/abuse protection (Cloudflare Turnstile)

To protect the contact form against automated submissions (bots/spam), we use Cloudflare Turnstile. Technical characteristics of your device and browser, as well as your IP address, are transmitted to and analysed by Cloudflare, Inc. to assess whether the input originates from a human. Turnstile works without traditional captcha puzzles. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in preventing misuse and in the functioning of the form).

7.3 Contact by email or phone

If you contact us by email or phone, we process your details to handle your request. Legal basis: Art. 6(1)(b) or (f) GDPR. To limit abusive repeated submissions, your IP address may be stored briefly (max. approx. 10 minutes) (Art. 6(1)(f) GDPR).

8. Web Analytics, Reach Measurement and Marketing

The services described in this section are activated only after your consent via the consent banner („Analytics" or „Marketing" categories). The legal basis in each case is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You can withdraw consent at any time with effect for the future (Section 6).

8.1 Google Analytics 4

We use Google Analytics 4, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; „Google"). Google Analytics uses cookies and similar technologies to evaluate use of the Website (e.g. pages viewed, scroll depth, button clicks, use of calculators, contact-form submissions). The IP address is truncated. Data may be transferred to Google LLC in the USA. Privacy notice: policies.google.com/privacy.

8.2 Microsoft Clarity

We use Microsoft Clarity, a service of Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). Clarity enables analysis of user behaviour through „session recordings" and „heatmaps" (e.g. mouse/scroll movements, clicks, page interactions). Input into form fields is masked. Data may be transferred to Microsoft Corporation in the USA. Privacy notice: privacy.microsoft.com/privacystatement.

8.3 Google Tag Manager

To manage analytics and marketing tags, we use Google Tag Manager (Google Ireland Limited). The Tag Manager itself does not collect personal data for analytics purposes but serves to deliver and control the services integrated through it, which likewise become active only after your consent.

8.4 Google Ads (conversion measurement and remarketing)

We use Google Ads to measure the success of our online advertising (conversion tracking) and, where applicable, for remarketing. Cookies (e.g. _gcl_*) may be set and click identifiers processed, e.g. to recognise whether a user performs a certain action after clicking an ad. Data may be transferred to Google LLC in the USA. Privacy notice: policies.google.com/privacy.

9. Interactive Station Map

On the „Map" page you can view the DKV InstantFuel acceptance network on an interactive map. The map and its associated services are loaded only after your consent („Map" category). When the map content loads, your IP address is transmitted to the respective providers.

• Map material (CARTO): The map image („tiles") is loaded from CARTO (CARTO Technologies, Inc.). Privacy notice: carto.com/privacy.
• Address search/geocoding (OpenStreetMap/Nominatim): For the search function and address lookup we use the Nominatim service of the OpenStreetMap Foundation (St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom). Your search input or the selected coordinates, together with your IP address, are transmitted to the OpenStreetMap Foundation. Privacy notice: wiki.osmfoundation.org.
• Station data (PACE CDN): Station location data is loaded via the content delivery network cdn.pace.cloud (PACE infrastructure, EU).

Location detection („stations near me"): If you actively use the location feature, your browser asks for your permission and transmits your precise location to the map in order to display nearby stations. The location data is used solely locally in your browser for display and is not stored by us on the server side. You can revoke location sharing in your browser at any time.

Legal basis: Art. 6(1)(a) GDPR, Section 25(1) TDDDG; for location detection additionally your active use and browser permission.

10. Transfers to Third Countries (Overview)

The following providers may process data outside the EU/EEA:

• Cloudflare, Inc. (hosting, Turnstile) – USA – EU-US Data Privacy Framework and/or Standard Contractual Clauses.
• Twilio Inc. / SendGrid (email delivery) – USA – EU-US Data Privacy Framework and/or Standard Contractual Clauses.
• Google (Analytics, Tag Manager, Ads) – USA – EU-US Data Privacy Framework.
• Microsoft (Clarity) – USA – EU-US Data Privacy Framework.
• CARTO (map material) – USA/EU – Standard Contractual Clauses.
• OpenStreetMap Foundation (geocoding) – United Kingdom – EU Commission adequacy decision.

From an EU-law perspective, the USA does not generally offer a level of data protection comparable to the EU; in particular, government authorities may obtain access to data under certain conditions. Where a transfer takes place, we base it on the safeguards listed above.

11. Your Rights as a Data Subject

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR),
• Right to rectification (Art. 16 GDPR),
• Right to erasure (Art. 17 GDPR),
• Right to restriction of processing (Art. 18 GDPR),
• Right to data portability (Art. 20 GDPR),
• Right to withdraw a consent given, with effect for the future (Art. 7(3) GDPR).

Right to object (Art. 21 GDPR): You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(f) GDPR. Where data is processed for direct marketing, you have the right to object at any time to processing for that purpose.

To exercise your rights, an informal message to the contact details under sections 1 or 2 is sufficient.

Right to lodge a complaint with a supervisory authority: Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW), Lautenschlagerstrasse 20, 70173 Stuttgart, Germany.

12. Data Security / Encryption

For security reasons, this Website uses TLS encryption (recognisable by „https://" and the padlock symbol in your browser bar). This means data you transmit to us cannot easily be read by third parties.

13. Obligation to Provide Data; Automated Decision-Making

Providing personal data is neither legally nor contractually required. However, to use the contact form, the fields marked as mandatory are required so we can handle your enquiry. We do not use solely automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

14. Currency and Changes to this Privacy Policy

We update this Privacy Policy whenever changes to our data processing make it necessary. The current version published on this Website applies.

Last updated: 31 May 2026