Privacy Policy
As of: 26 May 2026 (Version 003)
1. Controller
K2 Mobility GmbH
Heinrich-Mann-Allee 3b
14473 Potsdam
Deutschland
E-mail: info@k2mobility.com
Managing Directors: Dr. Ulrich Kalex and Markus Kröger
2. Scope
This Privacy Policy applies to the processing of personal data of:
- users of the PANION app (drivers),
- users of the PANION dashboard (organizational administrators),
- visitors to this website.
It does not apply to data collected by your employer in connection with driving activities.
3. Purposes of Data Processing
3.1 App Users
Data processed: app version, operating system version, IP address, login timestamps, GPS and location data, as well as further telematics data when connected to a vehicle.
Purpose: troubleshooting, performance analysis, analysis of driving patterns, and assessment of energy consumption.
Legal basis: legitimate interest (Art. 6 (1) (f) DSGVO / GDPR). Retention period: 1 year.
3.2 Dashboard Users
Data processed: authentication data, login information, and usage logs.
Purpose: managing access to the PANION dashboard.
Legal basis: legitimate interest (Art. 6 (1) (f) DSGVO / GDPR). Retention period: 2 years.
3.3 Website Visitors and B2B Inquiries
Data processed: contact details, information relating to the inquiry, and an optional consent to marketing communications.
Purpose: responding to inquiries and B2B communication.
Legal basis: legitimate interest (Art. 6 (1) (f) DSGVO / GDPR). Retention period: 3 years for inquiries, 1 week for B2B campaigns.
4. Hosting and Delivery of the Website
Content Delivery Network (bunny.net)
For the fast and secure delivery of static content (images, fonts, CSS, and JavaScript files) we use the content delivery network of bunny.net, operated by BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia.
When you access the website, your IP address is transmitted to bunny.net so that the requested content can be delivered to your browser. The legal basis is our legitimate interest in the secure, resilient, and high-performance provision of our services (Art. 6 (1) (f) DSGVO / GDPR).
The servers of bunny.net are located within the European Union; no transfer to a third country takes place for this purpose. Further information can be found in the privacy policy of bunny.net at https://bunny.net/privacy/.
5. Third-Party Providers and International Data Transfers
We disclose data to service providers only insofar as this is necessary and legally permissible:
- App monitoring: service providers within the EU support us in monitoring app stability and fixing errors.
- Cloud hosting: our cloud services are operated within the EU.
- E-mail services: providers within the EU ensure secure communication.
6. Data Security
K2 Mobility employs a range of security measures, including:
- access controls: restricted access to premises and data based on user roles,
- encryption: SSL/HTTPS for data transmission as well as disk encryption for employee devices,
- multi-factor authentication (MFA) for all sensitive applications,
- regular security audits and ongoing updating of security measures.
7. Your Rights
Under the DSGVO (GDPR), you have the right to:
- access to the data stored about you,
- rectification of inaccurate or incomplete data,
- erasure, provided the data is no longer required,
- restriction of processing in certain cases,
- data portability in a machine-readable format,
- objection to processing based on legitimate interest.
To exercise your rights, contact us by e-mail at info@k2mobility.com or by post at the address stated in section 1. In addition, you have the right to lodge a complaint with a supervisory authority.
For the operation of this website, K2 Mobility GmbH processes personal data only to the extent technically necessary.