Privacy policy

General information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified.

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the operator's contact details in the legal notice (Impressum) and under point 3.

How do we collect your data?

On the one hand, you provide us with data, for example when you send us an email or report an incorrect price. Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of the page view).

What do we use your data for?

The data is collected to ensure that the website is provided without errors. We do not use tracking, advertising or analytics services.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent, you can withdraw it at any time with effect for the future.

Hosting

This website is delivered via the Cloudflare network. The provider is:

Cloudflare, Inc.
101 Townsend St
San Francisco, CA 94107
USA

When this website is accessed, the provider automatically processes information that your browser transmits, in so-called server log files. These are:

• IP address of the requesting computer
• date and time of access
• name and URL of the file accessed
• website from which the access is made (referrer URL)
• browser used and, where applicable, the operating system of your computer

The legal basis is Art. 6(1)(f) of the General Data Protection Regulation (GDPR); our legitimate interest lies in the technical provision, security and optimisation of the website. Cloudflare is based in the USA; the transfer there takes place on the basis of the EU-US Data Privacy Framework or the EU standard contractual clauses (Arts. 45, 46 GDPR). Further information: Cloudflare's privacy policy.

Fonts

The fonts used on this website (Inter and Space Grotesk) are stored on our own server and loaded from there. No connection to Google Fonts or other font providers is established.

Map

The price maps show map tiles from OpenFreeMap (data © OpenStreetMap contributors). Your browser loads them exclusively from our server, which retrieves them from OpenFreeMap and caches them; your browser does not establish a connection to OpenFreeMap or OpenStreetMap, and OpenFreeMap receives no data about you. The requested map sections reveal which area you are looking at; like any page request, they are processed only in the hosting provider's server log files (see above). In the nearby search, your browser draws your location onto the map itself. The map only loads once you scroll to it. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in a clear presentation of the petrol stations.

Retrieval of fuel prices

We retrieve the prices and station data via our own server from the fuel price interface of Tankerkönig (Tankerkönig UG (haftungsbeschränkt), Niederhöfen 5, 87484 Nesselwang), which provides the data of the Market Transparency Unit for Fuels. Only the centre point and radius of a retrieval area or the identifiers of saved stations are transmitted in the process – Tankerkönig does not receive your IP address or any other data about you. We cache the retrieved price data for up to 15 minutes, in the working memory of our server and in Cloudflare's cache; no personal data is contained in it.

Price history

We calculate the price history once a day from Tankerkönig's historical data and store average, lowest and highest values per city and per station from it in a database of Supabase (Lovable Cloud); after each price retrieval, average, lowest and highest values per city are added for 48 hours. When a city page is opened, our server queries these values there; your browser does not connect to Supabase in the process, and no data about you is transmitted or stored.

Reporting incorrect information

If you report incorrect information about a station via “Report an error”, we transmit the station's identifier, the type of error and the correction you entered via Tankerkönig to the Market Transparency Unit for Fuels at the Federal Cartel Office (Bundeskartellamt), which passes it on to the station operator. We do not transmit any data about you – such as your IP address – in the process. To protect against automated and mass reports, we store for up to 24 hours a salted hash value of your IP address that changes daily, together with the identifier of the reported station and the time, in the working memory of our server and in Cloudflare's cache; we do not store your IP address itself or the content of the report. Please do not enter any personal information in the correction field. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in correct price information and in protecting the reporting interface from abuse.

Links to Google Maps

Next to each station there is a “Directions” link to Google Maps. Only when you click it does Google Maps open, and Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) receives your IP address as well as the name and address of the station as a search term. Google's privacy policy applies.

Location query (optional)

The website queries your location only if you open the “Nearby” radius search or click “Use my location” and allow this in your browser. Your coordinates do not leave your device: your browser uses them only to determine a grid cell of about 10 × 10 km and sends only its identifier to our server in order to load the petrol stations in that area. Your browser calculates the distances to the stations. None of this is stored. The legal basis is your consent via your browser's dialogue box (Art. 6(1)(a) GDPR); you can withdraw it at any time in your browser settings.

Search by postcode

When you enter a postcode, your browser loads the list of German postcodes with their locality centre points from our server once (source: GeoNames, CC BY 4.0) and searches it itself. The postcode you enter is not transmitted to our server; as with the location query, only the identifier of the grid cell of about 10 × 10 km is sent to the server.

Installation as an app

You can add Spritfuchs24.de to your home screen via your browser. For this, the site registers a service worker, which stores only immutable program files (scripts, styles, fonts, icons) in your browser's storage so that the site starts faster. It does not store pages or prices; without an internet connection it shows only a notice. No data is transmitted to us or to third parties, and no notifications are sent.

Light and dark mode according to the position of the sun

Whether the site appears light or dark is calculated by your browser from the time and time zone of your device. No data is transmitted for this.

Storage in your browser

We do not use cookies. In your browser's storage (local storage) we store only what you trigger yourself: whether you have chosen light or dark mode manually (for 12 hours at most) and the stations on your saved list “My stations” (identifier, name, brand and address, until you remove them) together with the prices from your last visit to the list (14 days at most, for the display “since your visit”). This information does not leave your device – for the prices of the saved list, your browser sends only the identifiers of the stations to our server. You can delete everything at any time in your browser settings. The storage is permitted under § 25 (2) No. 2 TDDDG (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, the German Telecommunications and Digital Services Data Protection Act) because it is strictly necessary for the functions you have requested.

Your browser also remembers the language you choose with the language switcher (local storage, key “sf-lang”). This entry is set only when you change the language yourself, remains exclusively on your device and is never transmitted to our server. It serves only to show you the language version you want when you first open the site in a session; a session marker (session storage, key “sf-lang-checked”) merely records that this has already happened in the current session and disappears when you close the tab. The same legal basis applies here (§ 25 (2) No. 2 TDDDG).

Storage period

Unless a more specific storage period has been stated in this privacy policy, your personal data remains with us until the purpose for the data processing no longer applies. If you assert a legitimate request for deletion or withdraw consent, your data will be deleted, unless we have other legally permissible grounds for storing it.

Withdrawal of your consent

You can withdraw consent you have already given at any time. The lawfulness of the data processing carried out up to the withdrawal remains unaffected by the withdrawal.

Right to object

Where we process data on the basis of Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a commonly used, machine-readable format.

Access, correction and deletion

Within the framework of the applicable statutory provisions, you have the right at any time to receive information free of charge about your stored personal data, its origin and recipients and the purpose of the data processing and, where applicable, a right to correction or deletion of this data.