Privacy Policy

Last updated: 2026-05-25

The purpose of this Privacy Policy is to inform you about the processing of your personal data that we collect when you use the NOEM app. Our data protection practices comply with the statutory provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The following Privacy Policy serves to fulfill the information obligations arising from the GDPR. These can be found, for example, in Art. 13 and Art. 14 et seq. GDPR.

Controller

The controller within the meaning of Art. 4 No. 7 GDPR is the person who, alone or jointly with others, determines the purposes and means of the processing of personal data. With regard to our website, the controller is: H2 MOBILITY Deutschland GmbH & Co. KG EUREF-Campus 10-11 10829 Berlin Email: contact@noem.live Tel.: +49 30 51 30 33 32 0

Contact details of the Data Protection Officer

We have appointed a Data Protection Officer pursuant to Art. 37 GDPR. You can reach our Data Protection Officer using the following contact details: MKM Datenschutz GmbH Äußere Sulzbacher Str. 118 90491 Nuremberg Email: datenschutz@h2-mobility.de Website: http://www.mkm-partner.de/

Provision of the NOEM App and creation of log files

Login area / registration

Scope of the processing of personal data and personal data collected The registration and login data that you enter with us or that have been communicated to you. Legal basis for the processing of personal data Art. 6(1)(b) GDPR (performance of pre-contractual or contractual measures) Purpose of data processing In the NOEM App, you have the option of using a separate login area. In order for us to verify your authorization to use the protected area or the protected documents, you must enter your login data (email address or username and password) in the corresponding form. If required, we can send you your login data or the option to reset your password by email upon request. Duration of storage The data collected will be stored for as long as you maintain a user account with us. Right to object and option to delete You may object to the processing at any time pursuant to Art. 21 GDPR and request the deletion of data pursuant to Art. 17 GDPR. The rights available to you and how you can exercise them are set out in the lower section of this Privacy Policy. Necessity of providing personal data Use of the login area is contractually required in order to use the protected area. The content protected by the login area cannot be used without entering the personal data. If you wish to use our login area, you must complete the fields marked as mandatory (username and password). Entering the data requires the existence of a user account. Login is not possible if the data you enter is incorrect. If the data you provide is incorrect or is not entered, the protected area cannot be used. The rest of the site can, however, still be used without logging in.

Route planner function

The route planner function enables trips with battery-electric or hydrogen-powered vehicles to be planned, taking into account the existing charging and refueling station infrastructure. The starting point and destination of a route as well as intermediate stops are used for this purpose. Which personal data is collected and to what extent is it processed? The route planner function itself does not process any personal data. You have the option of sending feedback on the route planner to H2MOBILITY. In doing so, your email address, the starting point and destination of the route, and any intermediate stops are transmitted. Legal basis for the processing of personal data Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest consists in ensuring achievement of the purpose described below. Purpose of data processing Improving the calculation of a route from the starting point to the destination, taking into account the vehicle's fuel or charge level and the existing charging and refueling station infrastructure. By submitting feedback on route planning, you help us improve the service. Duration of storage The data collected will be stored for as long as you maintain a user account with us. Option to withdraw and delete Upon your request, your feedback will be deleted without undue delay. Please contact us for this purpose at contact@noem.live. The options for withdrawal and deletion are governed by the general provisions on the data protection right of withdrawal and right to deletion described below in this Privacy Policy. Necessity of providing personal data Use of the comment function is neither contractually nor legally required and is also not necessary for the conclusion of a contract. Use of the feedback function is voluntary. You are not obliged to write feedback on our site. If you wish to leave feedback, you must complete the fields marked as necessary. If you do not provide the necessary information, your feedback cannot be published.

Integration of external web services and processing of data outside the EU

On our website, we use active content from external providers, known as web services. When you access our website, these external providers may receive personal information about your visit to our website. In this context, data may be processed outside the EU. You can prevent this by installing a corresponding browser plug-in or by disabling the execution of scripts in your browser. This may result in functional restrictions on websites that you visit. We use the following external web services:

Google Maps

Which personal data is collected and to what extent is it processed? In our app, we use the map service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google Maps). Google Maps is integrated via the Google API in order to visualize location information and display it in the form of a map. Processing of the IP address by Google Maps is technically necessary in order to display the map. With regard to the other web services integrated by means of Google APIs, the provisions in the respective section of this Privacy Policy relating to Google APIs apply. Legal basis for the processing of personal data Art. 6(f) GDPR (legitimate interest). Our legitimate interest lies in being able to present location information to you visually in the manner customary on the internet. Purpose of data processing On our behalf, Google will use the information obtained by means of Google Maps to display the map to you. With Google Maps, you can find us more quickly and more accurately than with a merely non-interactive route sketch. Duration of storage Google will store the data relevant to the functioning of Google Maps for as long as necessary to provide the booked web service. Data collection and storage are carried out in anonymized form. If a personal reference should nevertheless exist, the data will be deleted without undue delay, unless it is subject to statutory retention obligations. In any case, deletion will take place after expiry of the retention obligation. Joint processing We have entered into an agreement with Google regarding joint processing in relation to Google Maps. The content can be found at https://privacy.google.com/intl/de/businesses/mapscontrollerterms/.

Data security and data protection, communication by email

Your personal data is protected during collection, storage and processing by technical and organizational measures in such a way that it is not accessible to third parties. In the case of unencrypted communication by email, we cannot guarantee complete data security during transmission to our IT systems, and we therefore recommend encrypted communication or postal mail for information requiring a high level of confidentiality.

Right of access and requests for rectification - deletion & restriction of data - withdrawal of consent - right to object

Right of access

You have the right to request confirmation as to whether we process personal data concerning you. If this is the case, you have a right of access to the information specified in Art. 15(1) GDPR, unless the rights and freedoms of other persons are adversely affected (see Art. 15(4) GDPR). We will also be pleased to provide you with a copy of the data.

Right to rectification

Pursuant to Art. 16 GDPR, you have the right to have any incorrectly stored personal data held by us (such as email address, name, etc.) corrected at any time. You may also request completion of the data stored by us at any time. The corresponding adjustment will be made without undue delay.

Right to deletion

Pursuant to Art. 17(1) GDPR, you have the right to have us delete the personal data collected about you if • the data is no longer needed; • the legal basis for the processing has ceased to apply without replacement due to the withdrawal of your consent; • you have objected to the processing and there are no legitimate grounds for the processing; • your data is being processed unlawfully; • a legal obligation requires this, or the data was collected pursuant to Art. 8(1) GDPR. The right does not exist pursuant to Art. 17(3) GDPR if • the processing is necessary for exercising the right of freedom of expression and information; • your data was collected on the basis of a legal obligation; • the processing is necessary for reasons of public interest; • the data is required for the establishment, exercise or defense of legal claims.

Right to restriction of processing

Pursuant to Art. 18(1) GDPR, in individual cases you have the right to request restriction of the processing of your personal data. This is the case if • you contest the accuracy of the personal data; • the processing is unlawful and you do not consent to deletion; • the data is no longer needed for the purpose of processing, but the collected data serves the establishment, exercise or defense of legal claims; • an objection to the processing has been lodged pursuant to Art. 21(1) GDPR and it is not yet clear which interests prevail.

Right to withdraw consent

If you have given us express consent to process your personal data (Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR), you may withdraw this consent at any time. Please note that this does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

Right to object

Pursuant to Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you that has been collected on the basis of Art. 6(1)(f) (within the scope of a legitimate interest). You have this right only if special circumstances argue against storage and processing.

How do I exercise my rights?

You may exercise your rights at any time by contacting us using the contact details below: H2 MOBILITY Deutschland GmbH & Co. KG EUREF-Campus 10-11 10829 Berlin Email: contact@noem.live Tel.: +49 30 51 30 33 32 0

Right to data portability

Pursuant to Art. 20 GDPR, you have the right to receive the personal data concerning you. We will provide the data in a structured, commonly used and machine-readable format. The data may be transmitted either to you personally or to a controller designated by you. Upon request, we will provide you with the following data pursuant to Art. 20(1) GDPR: • Data collected on the basis of express consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR; • Data that we have received from you pursuant to Art. 6(1)(b) GDPR in the context of existing contracts; • Data that has been processed as part of an automated procedure. We will transfer the personal data directly to a controller requested by you, insofar as this is technically feasible. Please note that, pursuant to Art. 20(4) GDPR, we may not transfer data that infringes the freedoms and rights of other persons.

Right to lodge a complaint with the supervisory authority pursuant to Art. 77(1) GDPR

If you suspect that your data is being processed unlawfully on our site, you may of course seek judicial clarification of the matter at any time. In addition, all other legal options remain available to you. Independently of this, pursuant to Art. 77(1) GDPR, you have the option of contacting a supervisory authority. The right to lodge a complaint pursuant to Art. 77 GDPR is available to you in the EU Member State of your place of residence, your place of work and/or the place of the alleged infringement, meaning that you may choose the supervisory authority you contact from among the above-mentioned locations. The supervisory authority with which the complaint has been lodged will then inform you of the status and outcome of your submission, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.