Privacy policy

1. Controller and contact

The controller for this processing is Beam to Car, Hesse, Germany.

Privacy requests: beam@beamtocar.com

2. Purposes and legal bases

We process data to provide the link transfer you start between your phone and Tesla, keep the service secure, limit abuse, and measure the use of public landing pages in aggregate.

The legal bases are Article 6(1)(b) GDPR to provide the requested service and Article 6(1)(f) GDPR for operation, security, abuse prevention, and privacy-conscious audience measurement. Our legitimate interest is the secure, reliable, and appropriate operation of Beam to Car.

3. Data we process

When you use the service, we process a random session token, timestamps, connection status, and the web or meeting links you send. Links can contain personal information, so only send links that you intend to transfer to the Tesla session connected to the QR code.

To limit abuse, we process the IP address in a time-limited counter. Technical hosting logs may also contain an IP address, time, requested URL, and browser data.

4. Retention

Session data and sent links are deleted 15 minutes after the last activity. IP-based abuse-prevention counters expire after one hour. The language preference is stored locally in the browser and in a cookie named nlang for up to one year. Hosting-log retention follows the hosting provider's retention periods.

5. Recipients and hosting

Beam to Car is hosted by Vercel. We use managed Redis storage for time-limited sessions. These providers process data as processors where required for hosting, delivery, and security.

Depending on the processing location, a transfer to a third country may take place. Where this happens, appropriate safeguards, including Standard Contractual Clauses, are used.

6. Cookies, local storage, and audience measurement

We use technically functional storage for your language preference (nlang and linkbeam.locale). Vercel Web Analytics measures only public language landing pages in aggregate. It does not use cookies; private tokenized session and Tesla paths, API paths, and legal pages are excluded from measurement.

We do not use marketing, profiling, or advertising cookies.

Tesla Referral and Buy Me a Coffee links open external websites only after you click them. Those websites apply their own privacy notices.

7. Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction, portability, and objection to processing based on Article 6(1)(f) GDPR. To exercise them, contact beam@beamtocar.com.

You also have the right to lodge a complaint with a data protection authority. The authority responsible at Beam to Car's location is the Hessian Commissioner for Data Protection and Freedom of Information.

8. Changes

We update this policy when service features, data processing, or legal requirements change.