Skip to content

Privacy Policy

The German version of this Privacy Policy is the authoritative and legally binding text. This English version is provided for convenience only.

This Privacy Policy explains which personal data we process on this website, for what purpose, on what legal basis and for how long, and what rights you have.

This Privacy Policy applies to the website dkvinstantfuel.com (the „Website"). The separate dashboard/app at dashboard.dkvinstantfuel.com is subject to its own privacy notice.

A. Contact Details and General Information on Data Processing

A.1 Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

PACE Mobility GmbH
Haid-und-Neu-Strasse 18
76131 Karlsruhe, Germany

Phone: +49 721 276 664-0
Fax: +49 721 276 664-99
Email: mail@pace.car

Managing Director: Julius Parrisius
Commercial register: HRB 722293, Mannheim Local Court
VAT ID: DE300495190

„DKV InstantFuel" is a product marketed together with DKV Mobility, which acts as a brand in this respect. The controller for data processing on this Website is exclusively PACE Mobility GmbH.

A.2 Data Protection Officer

You can reach our Data Protection Officer at:
Email: dsb@meindatenschutzpartner.de

By post, you can reach our Data Protection Officer at the controller's address marked „– Data Protection Officer –".

A.3 Scope

As a matter of principle, we only process our users' personal data to the extent necessary to provide a functional website and our content and services. Processing generally takes place only with your consent or where another of the legal grounds set out below applies.

Where storing information on, or accessing information already stored in, your device (e.g. cookies, local storage) requires consent, Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act) is the additional legal basis. Strictly necessary storage is based on Section 25(2) no. 2 TDDDG.

A.5 Recipients and processors

To operate the Website, we use carefully selected service providers that process personal data on our behalf and under our instructions (data processing under Art. 28 GDPR). The specific services are set out in the sections below. We disclose data to other third parties only where there is a legal basis to do so.

A.6 Erasure and storage period

We erase or block personal data as soon as the purpose of storage ceases to apply. Storage beyond this occurs only where legally required. Where we process data based on your consent, processing ends upon your withdrawal unless another legal ground applies. Where we process data based on legitimate interests, we store it until the legitimate interest ceases or you effectively object. Statutory retention obligations (commercial, tax and accounting law — generally six to ten years) remain unaffected.

A.7 Transfers to third countries

Some of the services we use also process data outside the EU/EEA, in particular in the USA. Such transfers take place only where an adequacy decision of the EU Commission exists (for the USA, the EU-US Data Privacy Framework, where the relevant provider is certified) or where appropriate safeguards under Art. 46 GDPR are in place (in particular EU Standard Contractual Clauses). See the consolidated overview in Section B.8.

B. Data Processing via the Website

B.1 Provision of the Website and Server Log Files

When you access the Website, our hosting provider automatically processes information transmitted by your browser, in particular:

This data is technically necessary to deliver the Website, ensure its stability and security, and prevent misuse.

Hosting (Cloudflare): The Website is provided via Cloudflare Pages by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA; EU representative: Cloudflare Germany GmbH, Munich) and delivered through Cloudflare's global content delivery and security network. Cloudflare processes the above connection data as our processor. A client-side function of the Website (e.g. the contact-form endpoint) is provided via a Cloudflare function („Worker").

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient operation of the Website). Cloudflare privacy notice: cloudflare.com/privacypolicy.

B.2 Cookies and Local Storage Technologies

We use cookies and related technologies on the Website (in particular your browser's local storage / session storage), which store or read information on your device.

Strictly necessary storage (no consent required):

Consent-based storage is only set after you have agreed via our consent banner (see Section B.3). This covers the cookies and storage of the analytics, marketing and map services described in Sections B.5 and B.6. The main ones:

This list covers the main storage operations. You can view an up-to-date overview of all cookies set at any time in your browser's developer tools.

Legal basis: for necessary storage, Section 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR; for all others, your consent under Section 25(1) TDDDG and Art. 6(1)(a) GDPR. You can delete cookies or restrict their use at any time in your browser settings.

On your first visit, a banner lets you consent to, reject, or individually select non-essential data processing. You can choose between the following categories:

No consent-based services are activated before you make a decision; technically we use Google Consent Mode v2 for this (default: all non-essential functions disabled). Your decision is stored locally in your browser (dkvif_consent).

Withdrawal: You can change or withdraw your consent at any time with effect for the future via the „Cookie settings" link in the footer. Legal basis: Art. 6(1)(a) GDPR, Section 25(1) TDDDG.

B.4 Contacting Us

B.4.1 Contact form

You can contact us via a form on our contact page. Mandatory fields are first name, last name, company, email address, subject and message; optional fields are salutation, fleet size and phone number. We use this data solely to handle your enquiry and any follow-up questions.

Sending is technically handled by our processor Twilio Inc. („SendGrid") (101 Spear Street, San Francisco, CA, USA). Via SendGrid we send your enquiry to our team and an automatic acknowledgement to the email address you provided.

Optional marketing consent: If you tick the relevant checkbox, we may also contact you with information about our products. This consent is voluntary and can be withdrawn at any time with effect for the future.

Legal basis: Art. 6(1)(b) GDPR (handling your enquiry / pre-contractual steps), additionally Art. 6(1)(f) GDPR; for the marketing consent, Art. 6(1)(a) GDPR. Retention: until your enquiry has been conclusively handled; statutory retention obligations remain unaffected.

B.4.2 Spam/abuse protection (Cloudflare Turnstile)

To protect the contact form against automated submissions (bots/spam), we use Cloudflare Turnstile. Technical characteristics of your device and browser, as well as your IP address, are transmitted to and analysed by Cloudflare, Inc. to assess whether the input originates from a human. Turnstile works without traditional captcha puzzles. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in preventing misuse and in the functioning of the form).

B.4.3 Contact by email or phone

If you contact us by email or phone, we process your details to handle your request. Legal basis: Art. 6(1)(b) or (f) GDPR. To limit abusive repeated submissions, your IP address may be stored briefly (max. approx. 10 minutes) (Art. 6(1)(f) GDPR).

B.5 Web Analytics, Reach Measurement and Marketing

The services described in this section are activated only after your consent via the consent banner („Analytics" or „Marketing" categories). The legal basis in each case is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You can withdraw consent at any time with effect for the future (Section B.3).

B.5.1 Google Analytics 4

We use Google Analytics 4, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; „Google"). Google Analytics uses cookies and similar technologies to evaluate use of the Website (e.g. pages viewed, scroll depth, button clicks, use of calculators, contact-form submissions). The IP address is truncated. Data may be transferred to Google LLC in the USA. Privacy notice: policies.google.com/privacy.

B.5.2 Microsoft Clarity

We use Microsoft Clarity, a service of Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). Clarity enables analysis of user behaviour through „session recordings" and „heatmaps" (e.g. mouse/scroll movements, clicks, page interactions). Input into form fields is masked. Data may be transferred to Microsoft Corporation in the USA. Privacy notice: privacy.microsoft.com/privacystatement.

B.5.3 Google Tag Manager

To manage analytics and marketing tags, we use Google Tag Manager (Google Ireland Limited). The Tag Manager itself does not collect personal data for analytics purposes but serves to deliver and control the services integrated through it, which likewise become active only after your consent.

B.5.4 Google Ads (conversion measurement and remarketing)

We use Google Ads to measure the success of our online advertising (conversion tracking) and, where applicable, for remarketing. Cookies (e.g. _gcl_*) may be set and click identifiers processed, e.g. to recognise whether a user performs a certain action after clicking an ad. Data may be transferred to Google LLC in the USA. Privacy notice: policies.google.com/privacy.

B.5.5 Reddit Pixel

Provider: Reddit Ireland Limited, Dublin, Ireland (for users in the EEA).

Purpose and processing: The Reddit Pixel measures the success of our ads on Reddit and allows pseudonymous audiences to be built for further advertising. It records whether certain actions are performed on our website after an ad click, specifically the page view ("Page Visit") and the click on the activation button ("Lead"). It processes a pseudonymous identifier in the _rdt_uuid cookie, your IP address, device and browser data, and the address visited. We receive aggregated reports from Reddit only and cannot identify individuals from them.

Retention: The _rdt_uuid cookie is deleted after 3 months. For retention at Reddit itself, please refer to the provider's privacy notice.

Third-country transfer: Data may be transferred to Reddit, Inc. in the USA (see Section B.8).

Withdrawal and objection: You can withdraw your consent at any time via the "Cookie settings" link in the footer. Independently of this, you can object to personalised advertising in your Reddit account settings. Privacy notice: reddit.com/policies/privacy-policy.

B.5.6 LinkedIn Insight Tag

Provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Purpose and processing: The Insight Tag measures the success of our ads on LinkedIn and allows audiences to be built for further advertising (retargeting). It processes cookies from the linkedin.com domain, your IP address (truncated according to LinkedIn), device and browser data, the address visited and the timestamp. If you click a LinkedIn ad, the destination address contains the click identifier li_fat_id; we additionally store it in our own first-party cookie (dkvif_li_fat_id) so that a later sign-up can be attributed to the original ad. We receive aggregated reports only.

Retention: Our dkvif_li_fat_id cookie is deleted after 90 days. LinkedIn's own cookies have a lifetime of between one day and twelve months depending on the cookie.

Third-country transfer: Data may be transferred to LinkedIn Corporation in the USA (see Section B.8).

Withdrawal and objection: You can withdraw your consent at any time via the "Cookie settings" link in the footer. LinkedIn members can additionally object in their LinkedIn advertising settings. Privacy notice: linkedin.com/legal/privacy-policy.

B.5.7 Meta Pixel (Facebook and Instagram)

Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland ("Meta").

Purpose and processing: The Meta Pixel measures the success of our ads on Facebook and Instagram and allows pseudonymous audiences to be built for further advertising (custom audiences, retargeting). It records whether certain actions are performed on our website after an ad click, specifically the page view ("PageView") and the click on the activation button ("Lead"). It processes a pseudonymous browser identifier in the _fbp cookie, after an ad click also the click identifier in the _fbc cookie, as well as your IP address, device and browser data and the address visited. We have disabled automatic advanced matching, which would let the pixel read entries from form fields such as email address or phone number and transmit them to Meta in hashed form. The automatic addition of further events by Meta is disabled as well. We currently do not use the Conversions API, so no events are sent to Meta from our servers. We receive aggregated reports only.

Joint controllership: For the collection of data on this website and its transfer to Meta, we and Meta are joint controllers within the meaning of Art. 26 GDPR. The allocation of obligations is governed by the agreement at facebook.com/legal/controller_addendum: under it, Meta is responsible in particular for handling data subject rights, and you may address such requests either to us or directly to Meta. Any further processing of the data by Meta is carried out under Meta's sole responsibility.

Retention: The _fbp and _fbc cookies are deleted after 3 months. For retention at Meta itself, please refer to the provider's privacy notice.

Third-country transfer: Data may be transferred to Meta Platforms, Inc. in the USA (see Section B.8).

Withdrawal and objection: You can withdraw your consent at any time via the "Cookie settings" link in the footer. Independently of this, you can object to the use of your data for personalised advertising in Meta's ad preferences. Privacy notice: facebook.com/privacy/policy.

B.6 Interactive Station Map

On the „Map" page you can view the DKV InstantFuel acceptance network on an interactive map. The map and its associated services are loaded only after your consent („Map" category). When the map content loads, your IP address is transmitted to the respective providers.

Location detection („stations near me"): If you actively use the location feature, your browser asks for your permission and transmits your precise location to the map in order to display nearby stations. The location data is used solely locally in your browser for display and is not stored by us on the server side. You can revoke location sharing in your browser at any time.

Legal basis: Art. 6(1)(a) GDPR, Section 25(1) TDDDG; for location detection additionally your active use and browser permission.

B.7 Data Security / Encryption

For security reasons, this Website uses TLS encryption (recognisable by „https://" and the padlock symbol in your browser bar). This means data you transmit to us cannot easily be read by third parties.

B.8 Transfers to Third Countries (Overview)

The following providers may process data outside the EU/EEA:

From an EU-law perspective, the USA does not generally offer a level of data protection comparable to the EU; in particular, government authorities may obtain access to data under certain conditions. Where a transfer takes place, we base it on the safeguards listed above.

C. Your Rights as a Data Subject

You have the following rights regarding your personal data:

C.1 Right of access

You have the right to obtain confirmation, free of charge, as to whether we process personal data concerning you, and to access that data (Art. 15 GDPR).

C.2 Right to rectification

You have the right to rectification of inaccurate personal data (Art. 16 GDPR).

C.3 Right to erasure

You have the right to erasure of your personal data subject to the conditions of Art. 17 GDPR.

C.4 Right to restriction of processing

You have the right to restriction of processing under certain conditions (Art. 18 GDPR).

C.5 Right to notification

You have the right to be notified regarding rectification, erasure or restriction (Art. 19 GDPR).

C.6 Right to data portability

You have the right to receive your personal data in a structured, commonly used and machine-readable format (Art. 20 GDPR).

C.7 Right to object

Right to object (Art. 21 GDPR): You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(f) GDPR. Where data is processed for direct marketing, you have the right to object at any time to processing for that purpose.

C.8 Right to withdraw consent

You have the right to withdraw a consent given, with effect for the future (Art. 7(3) GDPR). The lawfulness of processing carried out beforehand remains unaffected.

C.9 Automated decision-making

We do not use solely automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

C.10 Voluntary provision of data

Providing personal data is neither legally nor contractually required. However, to use the contact form, the fields marked as mandatory are required so we can handle your enquiry.

C.11 Right to lodge a complaint

Right to lodge a complaint with a supervisory authority: Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW), Lautenschlagerstrasse 20, 70173 Stuttgart, Germany.

To exercise your rights, an informal message to the contact details under sections A.1 or A.2 is sufficient.

Currency and Changes to this Privacy Policy

We update this Privacy Policy whenever changes to our data processing make it necessary. The current version published on this Website applies.

Last updated: July 1, 2026