Information pursuant to Section 5 of the Austrian E-Commerce Act (ECG) and Section 25 of the Austrian Media Act.
Lukas Adelbrecht
Mitterlingweg 3
9520 Sattendorf
Austria
Email: info@tanktrend.eu
VAT ID: ATU74375605
Business activity: IT services
Legal form: sole proprietorship, not entered in the Austrian commercial register (Firmenbuch)
Trade licence: services in automatic data processing and information technology (“Dienstleistungen in der automatischen Datenverarbeitung und Informationstechnik”, unregulated trade), trade licence granted in Austria
GISA number: 40018928
Trade authority: Bezirkshauptmannschaft Villach-Land (district authority of Villach-Land)
Chamber: member of the Carinthian Economic Chamber (Wirtschaftskammer Kärnten), professional group for management consultancy, accounting and information technology (UBIT)
Applicable law: Austrian Trade Regulation Act (Gewerbeordnung, GewO), available at www.ris.bka.gv.at
Media owner: Lukas Adelbrecht
Place of residence: Sattendorf, Austria
Purpose: Operation of an online service providing information about fuel prices, driving routes and estimated fuelling costs.
Editorial policy: Neutral and transparent information about publicly available fuel prices and non-binding price and cost comparisons.
Lukas Adelbrecht, Mitterlingweg 3, 9520 Sattendorf, Austria
TankTrend displays fuel prices supplied by the following organisations. Attribution and licence notices are provided as required by the respective licences.
Germany — Tankerkönig
Austria — E-Control
Maps, geocoding & market data
The seven-day forecast is an automated estimate based on Brent crude-oil movements, public news and known tax dates. It is not a guarantee of future prices. Geopolitical events cannot be predicted. For Germany, the forecast is currently experimental, may be unavailable at times and has not yet been evaluated for accuracy.
Price and forecast data come from the sources named above or are estimates; we do not guarantee that they are accurate. Statutory warranty and liability claims remain unaffected.
Contracting party: Lukas Adelbrecht, Mitterlingweg 3, 9520 Sattendorf, Austria.
System requirements: use in a browser (current versions of Chrome, Edge, Firefox and Safari) or as an installed web app; an internet connection is required; push notifications depend on the browser and operating system.
Warranty and updates: Statutory warranty rights apply (for consumers in Austria under the Austrian Consumer Warranty Act, Verbrauchergewährleistungsgesetz). During the term, we provide the updates needed to keep Premium in conformity with the contract.
Prices: €0.99 per month or €5.99 per year. Prices are total prices including VAT. TankTrend charges no additional payment fee.
The subscription starts after successful payment and automatically renews for another month or year until cancelled. The profile shows the plan, status, and next renewal or end date. The contract is concluded when payment is confirmed in Stripe Checkout; an electronic confirmation follows.
Stripe processes payments. TankTrend does not store full card or bank details.
Cancellation: Cancel at any time in the TankTrend profile or Stripe Customer Portal. Cancellation takes effect at the end of the paid billing period and Premium remains active until then. This cancellation at the end of the term does not result in a partial refund. Statutory refund and withdrawal rights remain unaffected.
Yearly plan: Before each renewal of the yearly plan, you receive a reminder by email at least 14 days in advance stating the date and amount of the renewal. After the first year, you may also cancel the yearly plan at any time with one month's notice by email to info@tanktrend.eu; we refund any amount paid in excess pro rata.
Deleting the TankTrend account immediately terminates its connected Stripe subscription and Premium access. We refund the unused period of a paid subscription pro rata. TankTrend displays this notice before account deletion.
Uninterrupted availability cannot be guaranteed.
Price changes never apply to periods already paid for. If we want to change the price for future renewals, we will inform you by email at least 30 days in advance. The subscription renews at the new price only if you agree; otherwise it ends at the end of the paid period.
Austrian law applies. However, as a consumer you keep the protection of the mandatory consumer protection rules of the country in which you have your habitual residence. Statutory jurisdiction at a consumer's residence remains unaffected. TankTrend does not voluntarily participate in an out-of-court consumer dispute-resolution procedure.
Consumers may withdraw from the Premium contract within 14 days after its conclusion without giving a reason. A clear statement by email to info@tanktrend.eu or by post to Lukas Adelbrecht, Mitterlingweg 3, 9520 Sattendorf, Austria is sufficient.
Following a valid withdrawal, all subscription payments received will be refunded through the original payment method no later than 14 days after receipt of the withdrawal. Premium access ends with the reversal.
To meet the withdrawal deadline, it is sufficient for you to send your communication concerning the exercise of the right of withdrawal before the withdrawal period has expired.
Model withdrawal form: “To Lukas Adelbrecht, Mitterlingweg 3, 9520 Sattendorf, Austria, email: info@tanktrend.eu. I hereby withdraw from my contract for the provision of the following service: TankTrend Premium. Ordered on: ____. Name: ____. Address: ____. TankTrend account email: ____. Date: ____. Signature (only for a paper notice): ____.”
Location data
If you allow browser location access or enter a postcode/place, coordinates are sent to the TankTrend server to find nearby stations. Searches do not create a movement profile, and search locations are not stored as search history. Search parameters, including coordinates, are not written to the access log. So that the same area is not queried at the price providers repeatedly, the server keeps, for a live query, only a grid cell rounded to about one kilometre and the query time, for one day at most; open query jobs contain the same grid cell. Processing is necessary to provide the requested nearby search and securely operate the service under Article 6(1)(f) GDPR.
So that individual connections cannot block the shared live price updates, a live lookup derives a shortened pseudonymous identifier from the IP address using a secret key. It is stored only with the open lookup job and deleted when the job completes, at the latest after 15 minutes (Article 6(1)(f) GDPR, legitimate interest in a fair distribution of lookups).
For a live search, only the TankTrend server sends the coordinates and selected fuel to Tankerkönig or E-Control. Those providers receive the TankTrend server's IP address, not the user's IP address or identity. Where TankTrend uses Tankerkönig's commercial access, the TankTrend server also sends station identifiers (station IDs) and the coordinates of fixed query points to Tankerkönig for the regular retrieval of a fixed selection of stations; these queries have no link to users either.
Server logs
Website and API requests briefly log technically necessary data: IP address, time, HTTP method, requested path without query parameters, response status, transferred byte count and user agent. Coordinates, activation tokens and password-reset tokens are not logged. Logs are used only for technical operation and abuse prevention under Article 6(1)(f) GDPR.
If forwarding a request to the application server fails technically, the error log may additionally contain the full request address including query parameters (such as the coordinates of a nearby search) and the referring page. These entries are used only for troubleshooting and are likewise deleted after 30 days at the latest.
Retention: The logs of all services are kept in the server's system journal and deleted automatically 30 days after they were written at the latest. Logs are not analysed for marketing or profiling.
Backups
Local compressed database backups are created daily and automatically deleted after 15 days at the latest. Full-server Proxmox backups, which include the database, the logs and these local backups, run Monday, Wednesday and Friday; the latest three successful backups are retained. Deleted account and log data may therefore remain in backups for up to about three weeks until they are routinely replaced. Backups are used solely for recovery from technical failure, data loss or security incidents (Article 6(1)(f) GDPR).
User accounts and synchronised vehicles
Legal basis: The data described in this section – account, two-factor authentication, vehicles, preferred address, favourites and alerts, push notifications, commute, wait decisions, refuels, receipt recognition and the loyalty programme – is processed to perform the user agreement (Article 6(1)(b) GDPR). Safeguards such as password hashing, session and two-factor checks and limits on sign-in attempts are additionally based on our legitimate interest in a secure service (Article 6(1)(f) GDPR).
An account is optional. TankTrend stores a random internal identifier, email address, non-reversible password hash, account and Premium status, preferred language, tutorial completion status, and creation/change timestamps. Passwords are never stored in plain text. Sessions use random tokens stored server-side only as hashes and expire after no more than 30 days.
Your account remains stored until you delete it; we currently do not delete inactive accounts automatically. You can delete it yourself at any time under Security.
Optional two-factor authentication can be enabled with an authenticator app. Its TOTP secret is stored encrypted. Recovery codes are stored only as cryptographic hashes and can each be used once. Short-lived login challenges expire after five minutes; five failed attempts require a fresh sign-in. To slow down guessing of passwords and security codes, we count failed attempts per entered email address (stored only as a hash) and per account; after several failures, further attempts are blocked for up to 15 minutes. The counters are deleted after a successful sign-in, otherwise about one day after the last failure at the latest. If wrong security codes pile up, the account holder receives a notice email; the same applies after a password change or reset, after two-factor authentication is turned on or off, after recovery codes are renewed or used, and after the account is deleted. So that nobody can be flooded with account emails through TankTrend, we note the recipient (only as a hash), the kind of email and the time for each registration, confirmation or recovery email sent; these entries are deleted after two days. Two-factor data is erased when the feature is disabled or the account is deleted.
When an administrator grants or withdraws gifted Premium or administrator rights, the time, the acting administrator, the action and the affected account are logged so that changes to rights remain traceable (legitimate interest, Art. 6(1)(f) GDPR). The entries are deleted after one year.
Password recovery uses a random single-use token stored only as a hash. It expires after one hour and is deleted after use or expiry. The email address is sent only to the configured mail server to deliver the requested recovery link.
Premium users may optionally confirm a refuelling receipt using the camera or an image. The image is encrypted in transit to TankTrend's own servers, processed there or on a further computer that the operator also runs in their own local network, and discarded immediately afterwards; it is neither stored permanently nor sent to an external image-recognition service. Only the recognised details confirmed by the user (station and address, date and time, litres, unit price and total), the confirmation status and a non-reversible fingerprint used to detect duplicate receipts are retained. They are deleted with the refuelling entry; a confirmation not attached to a refuelling expires after 30 minutes and is deleted by the next nightly clean-up, at the latest after about 24 hours.
Where email confirmation is enabled, registration creates a random activation token stored only as a hash. It expires after 24 hours and becomes invalid after confirmation. The email address is sent only to deliver the activation link. Unconfirmed accounts are automatically deleted seven days after registration, right after a deletion confirmation email. If that email temporarily cannot be delivered, it is retried on up to three further days and the account is then deleted without it.
Accounts may synchronise one vehicle profile; Premium users may synchronise up to five. Stored data includes vehicle name, fuel, tank size, consumption, current fuel level and, where selected, a vehicle-catalogue reference. It is used only for cross-device access and cost calculations. Account deletion removes sessions, permissions, synchronised vehicles and all other account-linked data.
Users may save one preferred address including display name, country, coordinates and enabled status. If automatic search is enabled, it becomes the first search when TankTrend opens. It can be disabled or deleted in the profile. Other searches are not stored as account search history. To look it up, your browser sends the address you enter directly to Nominatim, as with every place and address search (see “Integrated third-party services”).
Premium users may save up to 25 favourite stations. Station ID, country, display name, address and coordinates are linked to the account. No search history is stored. Favourites can be removed at any time and are deleted with the account. An optional target price and fuel may be stored for a price alert and checked against the latest available station price.
For optional push notifications, the browser-issued push endpoint and public encryption keys are linked to the account. Area alerts additionally store a label, centre point, country, radius, fuel and target price; up to five may be created. Alert types can be disabled in the profile. Encrypted messages are sent to the browser or operating system push service, which processes the endpoint and technical connection data; notification text may contain station name and current price. The browser determines which push service is used, for example Google (Chrome, Android), Apple (Safari, iOS), Mozilla (Firefox) or Microsoft (Edge). These providers may process data outside the EEA, in particular in the USA, using the applicable legal transfer mechanisms (Articles 44 et seq. GDPR). Invalid endpoints and all settings are deleted no later than account deletion.
Notifications are only sent while Premium is active. When Premium ends, favourites, alerts, the commute, push devices and vehicles beyond the first initially remain stored so they are still available if Premium is renewed. They can be reviewed in the profile without Premium and deleted individually or all at once. Without renewed Premium they are deleted automatically six months after Premium ended, and in any case on account deletion.
Premium users may optionally save a commute. Stored data includes start and destination address with coordinates (typically home and workplace), the selected vehicle, weekdays, outbound and return times, the accepted detour and whether commute notices are wanted; they stay off until you turn them on. Routes and detours are calculated only on TankTrend's own routing server; the coordinates are not sent to third parties for this. To look up the start and destination, your browser sends the addresses you enter, typically home and workplace, directly to Nominatim, as with every place and address search (see “Integrated third-party services”); Nominatim also receives your IP address. The route preview map loads map tiles of that area from OpenStreetMap. Every requested recommendation – in the app and, where notices are enabled, shortly before the outbound and return trip on each selected weekday – is stored with the recommended station, the comparison station, prices and distances so it can be opened from a notification and recorded as a refuel. The route line itself is not stored. Stored recommendations are valid for twelve hours and deleted seven days after they expire. The commute remains stored until it is deleted in the profile or the account is deleted; its stored recommendations are deleted with it.
If a Premium user selects “I'll wait” after a falling-price forecast, the decision is stored with vehicle, station ID and name, country, fuel, starting price and distance, distance source, forecast price and target date. It remains active for 72 hours. If the selected station's price measurably falls, one push notification may be sent where enabled. If a refuelling is later confirmed, the decision may be linked to calculate forecast-related savings. Decision data is deleted after no more than 90 days, when the related vehicle is deleted, or when the account is deleted.
Premium users may voluntarily confirm refuelling to calculate estimated savings. Stored data includes time, vehicle and station labels, litres, paid price, reference station and price, distances, calculated travel costs and calculation version. This is an estimate compared with the nearest suitable station at search time, not proof of actual savings. Every entry can be viewed and deleted individually in the profile. Under Security you can download your account's data as a JSON file. Raw data is deleted after 24 months; only a monthly total and transaction count then remain. Account deletion also removes these totals.
If the forecast expects rising prices when a refuel is confirmed, TankTrend automatically stores country, fuel, the average market price at refuelling time, the forecast price and a target date no more than three days later. On the target date, the then observed market price is added to calculate the “price rise avoided” saving. This data is deleted with the refuel.
Loyalty programme: confirming at least twelve qualifying refuels in at least six different calendar weeks within a calendar year (no more than one per day) automatically earns one month of Premium once per year. For this, TankTrend stores whether each refuel qualifies and the year of any reward earned with the related entitlement.
Visitor statistics, cookies and browser storage, no advertising
Payments and subscriptions through Stripe
Provider and roles: The payment service provider is Stripe Payments Europe Ltd., based in Ireland. Stripe is an independent controller for payment processing itself, fraud prevention and its own legal obligations such as anti-money-laundering checks. For managing subscriptions, invoices and the customer portal, Stripe processes the data on our behalf as a processor (Article 28 GDPR).
When purchasing or managing Premium, the browser is redirected directly to Stripe. Stripe processes data including name, email address, billing address, payment details, amount, tax information, IP address, device information and fraud-prevention data. TankTrend does not receive full card or bank details. It receives data including Stripe customer and subscription IDs, billing interval, payment and subscription status, and renewal, end and cancellation dates.
Processing is necessary to perform the contract under Article 6(1)(b) GDPR, comply with tax and accounting duties under Article 6(1)(c), and, where necessary, prevent fraud on the basis of legitimate interests under Article 6(1)(f). Stripe group companies and their payment and infrastructure partners may process data outside the EEA, in particular at Stripe, Inc. in the USA. The basis is the European Commission's adequacy decision on the EU-US Data Privacy Framework where the recipient is certified under it, otherwise the European Commission's standard contractual clauses (Article 46(2)(c) GDPR). See the Stripe Privacy Center.
We keep invoices and payment records for seven years from the end of the calendar year concerned (Section 132 of the Austrian Federal Fiscal Code, BAO); Stripe keeps transaction data under its own legal obligations. Operational account-linked subscription data is erased or anonymised when no longer required; records that must legally be retained remain unaffected. When an account is deleted, all of its running subscriptions are ended at Stripe; only the Stripe customer IDs are then kept for 400 days, without any link to the deleted account, so that a late subscription event ends the subscription instead of letting it continue.
After an account is deleted, we delete the customer record at Stripe (including name, email and billing address) by hand once any pro-rata refund is complete, and no later than one month after the account deletion. Invoices and payment records are not affected.
Contacting us by email
When you write to info@tanktrend.eu, we process your email address, your name if given, the subject, content and attachments of your message and the date and technical headers of the email in order to answer your request. The legal basis is Article 6(1)(b) GDPR where your request concerns your account, Premium or a contract with us; Article 6(1)(c) in conjunction with Articles 12 to 22 GDPR for requests about your data protection rights; otherwise Article 6(1)(f) GDPR (legitimate interest in answering requests). The mailbox is hosted by our email provider, currently canet.at (Austria), which operates it on our behalf.
Draft replies with AI support: We may prepare replies to new emails sent to info@tanktrend.eu with AI support. A program on a computer that the operator runs themselves fetches the emails and sends the sender's name and address, date, subject, text and the names of attachments, and for follow-up questions earlier messages of the same conversation, to the AI model Claude by Anthropic. Claude categorises the email and writes a draft reply; attachments themselves are not sent. We review every draft and send it ourselves: nothing is sent automatically, and there is no automated decision-making within the meaning of Article 22 GDPR. Anthropic processes the data as our processor (Article 28 GDPR) only to create the draft and does not use it to train its AI models. The legal basis is our legitimate interest in handling requests quickly and carefully (Article 6(1)(f) GDPR); you may object to this under Article 21 GDPR (see below).
Provider and transfer to the USA: Our contractual partner and processor is Anthropic Ireland, Limited, based in Ireland. It uses Anthropic PBC in the USA as a sub-processor, so the data is also processed in the USA. This transfer is based on the European Commission's standard contractual clauses (Modules 2 and 3, Article 46(2)(c) GDPR), which are part of our data processing addendum with Anthropic. According to Anthropic, the data sent and the responses generated are generally deleted within 30 days; they are kept longer only in the event of a violation of Anthropic's usage policies or where the law requires it.
Retention: We keep emails and our replies in the mailbox for as long as needed to handle your request and any follow-up questions, and delete them no later than three years after the request was closed. Emails about invoices or contracts are kept for as long as tax record-keeping rules require (seven years, Section 132 BAO). The working copies for AI-supported handling on our own computer are deleted automatically after 30 days.
Automatic emails from TankTrend come from noreply@tanktrend.eu. Nobody reads replies to this address; its inbox is deleted completely and automatically every Sunday. Please write to info@tanktrend.eu instead.
Integrated third-party services
The following external services are contacted directly by the browser when the page loads or the map and search are used. They receive in particular the IP address, time and technical browser information. Unless stated otherwise, the legal basis is Article 6(1)(f) GDPR (legitimate interest in the map, place search and selecting the right market):
Recipients and transfers to third countries at a glance
Right to object under Article 21 GDPR
Where processing is based on Article 6(1)(f) GDPR – for example server and error logs, abuse prevention, visitor statistics, country detection, backups or draft replies with AI support – you may object to it at any time on grounds relating to your particular situation. TankTrend will then no longer process the data concerned unless there are compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. An informal message to the contact address above is sufficient.
Your rights
The service provider named above is the controller under the GDPR. Subject to statutory requirements, you have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection (Article 21, see above).
Where processing is based on your consent, you may withdraw it at any time with effect for the future; this does not affect the lawfulness of processing before the withdrawal (Article 7(3) GDPR). You can turn off location access and push notifications at any time in your browser settings or in the profile.
You can do much of this directly in TankTrend: under Security you download your account's data as a JSON file and delete your account; vehicles, preferred address, favourites, alerts, commute and refuels can be changed or deleted in the profile. For everything else, an informal message to info@tanktrend.eu or a letter to the address above is sufficient. So that we do not disclose data to anyone unauthorised, we may ask you to confirm your identity, for example with an email from your account's address.
We answer your request without undue delay and at the latest within one month of receipt. If it is particularly complex or we receive many requests, this period may be extended by two further months; we will tell you so within the first month (Article 12(3) GDPR).
You are not obliged to provide us with data; neither the law nor a contract requires it. An account requires an email address and a password, and taking out Premium additionally requires the payment details at Stripe; without them we cannot create an account or conclude a subscription. Without a location or search place, TankTrend cannot show stations near you.
You also have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR), in particular in the Member State of your habitual residence or place of work. The authority responsible for us is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, Austria, email: dsb@dsb.gv.at.
Automated recommendations
TankTrend calculates non-binding station and price recommendations using price, distance and optional vehicle data stored in the browser. These calculations do not constitute automated decision-making with legal or similarly significant effects under Article 22 GDPR.
Content is prepared with care. Price and forecast data come from the sources named above or are estimates; we do not guarantee their accuracy, completeness or timeliness. Statutory warranty and liability claims remain unaffected. Operators of linked external sites are responsible for their content.