EU Data Act Transparency Statement: Data protection information in accordance with Articles 13, 14 and 21 of the General Data Protection Regulation

Within the meaning of applicable data protection law, go-e GmbH is the controller responsible for the processing of your personal data. Pursuant to the General Data Protection Regulation (GDPR), you, as a data subject, have certain rights under Articles 12 et seq. GDPR, which we, as a company, are obliged to uphold. Which items of data are processed, and how they are used, depend on the specific relationship we have with you. Further information on the purposes of data processing can be found in the contractual documents, forms, and other information provided to you. This data protection information is updated on a regular basis.

go-e GmbH
Satellitenstraße 1
9560 Feldkirchen in Carinthia
Austria

Represented by Managing Director Erik Yesayan
T: +43 4276 62400
E: office@go-e.com

During the setup and use of go-e Chargers, the following personal data is processed via the device system (UCA – Universal Core Architecture) and via the OCPP and MQTT communication protocols:

• WLAN network identifier (SSID): Stored on the device so that the charger can connect to the configured home network.

• WLAN network scan results: Read out by the go-e app and displayed to the user for selection of available networks.

• Log files: Technical log data used by technical support and development in the event of an error to diagnose and resolve issues.

• RFID chip information: Enables authentication of charging sessions via RFID card or chip.

• OCPP configuration data: Connection parameters for communication with a charging management system via the Open Charge Point Protocol, where such a connection has been set up.

• MQTT configuration data: Connection parameters for device communication via the MQTT protocol, where used.

• User-defined device name: A designation assigned by the user for the individual identification of the wallbox in the app.

• Email address: Processed for account registration and management within the go-e app as well as for communication with the user.

The legal bases for the processing are Art. 6 (1)(b) and (f) GDPR.

Your data is not disclosed to third parties beyond what is described above. Where third parties act as processors, they are subject to the same data protection and security standards as apply within our company.

We store your personal data for the duration of the entire business relationship. Beyond that, we are bound by statutory retention and documentation obligations, which provide for retention periods of up to ten years following the end of the business or contractual relationship.

In individual cases, longer retention may also be required — for example, to preserve evidence within the scope of statutory limitation periods.

As soon as your data is no longer required for the purposes stated, it is deleted on a regular basis — unless continued processing for a limited period of time is necessary to safeguard our overriding legitimate interests. Such a legitimate interest may exist, for example, where immediate deletion is not technically possible or would only be possible with disproportionate effort, and where, at the same time, suitable technical and organizational measures ensure that the data is not processed for other purposes.

As a data subject, you have the following rights under the General Data Protection Regulation (GDPR), which you may assert against us at any time:

Right of access (Art. 15 GDPR)

You have the right to find out whether we process personal data concerning you. If this is the case, you are entitled to information about the data concerned, the purposes of processing, its origin, recipients, and the intended retention period.

Right to rectification (Art. 16 GDPR)

You may request the prompt rectification of inaccurate or incomplete personal data.

Right to erasure (Art. 17 GDPR)

You have the right to request the erasure of your personal data if, for example, the data is no longer necessary for the original purposes or you have withdrawn your consent and no other legal basis for processing exists.

Right to restriction of processing (Art. 18 GDPR)

You may request that the processing of your data be restricted if certain conditions apply — for example, if you contest the accuracy of the data or you have objected to its processing.

Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data you have provided us with in a structured, commonly used, and machine-readable format. Upon request, this data may also — where technically feasible — be transmitted directly to another controller.

Right to object (Art. 21 GDPR)

You may object at any time, on grounds relating to your particular situation, to the processing of your personal data. Your data will then no longer be processed unless compelling legitimate grounds exist or the processing serves to assert, exercise, or defend legal claims.

Right not to be subject to automated decision-making (Art. 22 GDPR)

You have the right not to be subject to a decision based solely on automated processing — including profiling — which produces legal effects concerning you or similarly significantly affects you. This does not apply where such a decision is necessary for entering into or performing a contract, is permitted by law, or is based on your explicit consent. In such cases, we take appropriate measures to safeguard your rights and freedoms.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

If you believe that the processing of your personal data violates applicable data protection law, you may lodge a complaint with a data protection supervisory authority. You may do so with the supervisory authority of your place of residence, place of work, or the place of the alleged infringement.

Last updated: June 2026