Privacy Policy

The data controller responsible for processing data is:

Priza24 SH.P.K.
Rr. Marie Shllaku
60000 Gjilan, Republic of Kosovo
Represented by: Përparim Kastrati (Managing Director)
Email: contact@priza24.com

a) Server Log Files

When you visit our website, our hosting provider automatically collects and stores technical information in so-called server log files. This includes your browser type, operating system, the website that referred you (referrer URL), the amount of data transferred, and the exact time of access. This data is processed solely to ensure the stable and secure operation of the website. It is not merged with other personal data sources. IP addresses are not permanently stored.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the stability and security of the website).

b) Strictly Necessary Cookies

We use one strictly necessary cookie called priza24_lang. This cookie stores your language preference (sq, de, or en) to ensure a consistent experience during your next visits. It does not track your browsing behavior.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing a user-friendly, consistent language presentation).

c) Newsletter Subscription

If you sign up for our newsletter to receive updates on our project progress and the launch of our high-power charging hubs, we process the following data:

• Your email address
• The selected language (sq, de, or en)
• The exact timestamp of your subscription and confirmation

Purpose: To keep you informed about the Priza24 charging network and notify you when we go live.
Legal basis: Your explicit consent under Art. 6(1)(a) GDPR.
Retention period: We store your email address until you unsubscribe, and at most up to 12 months after our first charging hub is fully operational. You can withdraw your consent at any time (e.g. by sending a brief email to contact@priza24.com) without affecting the lawfulness of processing before the withdrawal.

When you charge your electric vehicle at a Priza24 ultra-rapid charging station, we process technical and transactional data to facilitate the charging session, process payments, and ensure technical operations.

a) Charging via Roaming & RFID Cards (eMSPs)

If you initiate a charging session using a charging card, RFID key, or app provided by a third-party e-Mobility Service Provider (eMSP such as Shell Recharge, Plugsurfing, ChargePoint, etc.), we collect transactional data. This includes:

• Charging Session ID and Connector ID
• Start and end timestamps of the charging process
• Delivered energy in kilowatt-hours (kWh)
• Technical parameters (e.g. charging curves, vehicle charging power)
• Your card's token ID (RFID Token / EVCOID)

We transmit these transaction records to your eMSP to enable billing. We do not receive or process your name, address, or other personal contact details from the eMSP.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

b) Direct Payment at the Charging Terminal (Kempower AFIR-Terminal / Monta)

If you pay directly at our charging station using a Visa or Mastercard (credit/debit card) or mobile payment services (e.g. Apple Pay, Google Pay) without prior registration, your payment data is directly processed via the integrated, encrypted payment terminal by Kempower and the billing platform Monta. Priza24 never stores your full credit/debit card numbers or security codes (CVC). We only capture the payment amount, transaction status, timestamp, and an anonymized charging session reference ID.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

To guarantee the physical safety of our customers, prevent vandalism and theft of the high-power charging infrastructure, and investigate potential fraud, our charging hubs are equipped with 24/7 video surveillance (CCTV). The cameras are focused on the charging bays, dispensers, and entry/exit routes.

CCTV recordings are automatically overwritten after **72 hours**. Longer storage occurs only if a specific incident (e.g. property damage, theft, or criminal acts) requires evidence preservation or legal prosecution.

Legal basis: Art. 6(1)(f) GDPR and Article 7 of Kosovo Law No. 06/L-082 (legitimate interest in protecting property, preventing crime, and ensuring customer safety).

Our website is hosted by Hostinger International Ltd. on secure servers within the European Union.

Since Priza24 SH.P.K. is established in the Republic of Kosovo, some administrative processing of transaction data may take place at our head office. The Republic of Kosovo has enacted a comprehensive Law on Personal Data Protection (Law No. 06/L-082), which is closely modeled on the EU GDPR, ensuring a comparably high and compliant standard of personal data protection.

As a data subject, you have comprehensive rights regarding your personal data processed by us:

• Right of Access (Art. 15 GDPR): You can request information about whether and which of your personal data we process.
• Right to Rectification (Art. 16 GDPR): You can request the correction of inaccurate or incomplete personal data.
• Right to Erasure (Art. 17 GDPR): You can request the deletion of your data (e.g. when you unsubscribe from the newsletter).
• Right to Restriction (Art. 18 GDPR): You can request the blocking of further processing of your data under specific conditions.
• Right to Data Portability (Art. 20 GDPR): You have the right to receive the data you provided in a structured, machine-readable format.
• Right to Object (Art. 21 GDPR): You can object to data processing based on our legitimate interests.
• Right to Lodge a Complaint (Art. 77 GDPR): You have the right to file a complaint with a data protection authority. In Kosovo, this is the Information and Privacy Agency (AIP: aip.rks-gov.net). In the EU, you can contact your local national supervisory authority.

To exercise these rights, or if you have any questions, you can contact us at any time by sending an email to contact@priza24.com.

We employ modern technical and organizational security measures to protect your data against manipulation, loss, destruction, or unauthorized third-party access. All transmissions through our website are secured via encrypted HTTPS (TLS standard). Our newsletter subscriber database is held in a protected, non-public directory on our hosting server.

We reserve the right to modify this privacy policy as legal requirements or our operational features (such as new payment methods or charging tariffs) evolve. The current version posted on our website at the time of your visit or charging session always applies.