Privacy

This page describes the data processing of the public V2G PKI Pilot sandbox. Controller is SEVENSTAX GmbH — full contact details are in the Imprint; for privacy matters write to info@sevenstax.de.

Cookies

The sandbox sets two first-party cookies, both strictly necessary (Art. 5(3) ePrivacy Directive, § 25 (2) TDDDG), which is why no consent banner is shown — there is nothing here that would require consent:

• a session cookie, created only when you first create or change a PKI; it is what keeps the PKIs you create visible to your browser session and to nobody else;
• a CSRF cookie, a security token that protects your session against cross-site request forgery.

Data you enter

PKIs and certificates you create — including the private keys the tool generates for them — are stored on the server so you can keep working with them, and are deleted after 24 hours of inactivity. A PKI holds at most 50 certificates. The sandbox is for test data only: do not enter personal data or productive key material.

Browser storage

Your view preference (diagram or tree) is kept in your browser's localStorage. It is written only when you switch the view yourself, is never sent to the server, and stays until you clear your browser data.

Server logs

Like any web server, the sandbox logs access data — IP address, time of access, requested URL, and browser identification — to operate the service and to detect abuse (Art. 6(1)(f) GDPR). Log files are kept only as long as these purposes require and are not merged with any other data.

No tracking

The sandbox embeds no analytics, no tracking, and no third-party content of any kind; nothing you do here is shared with anyone.

It does keep anonymous totals: how many PKIs were created, exported and imported, how many browser sessions were started, and how often the SEVENSTAX links were clicked. These are plain counters — they hold no information about who did what and cannot be traced back to you.

Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and objection (Art. 15–21 GDPR), and the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). Note that the sandbox links nothing it stores to your person beyond the anonymous browser session described above.