Privacy Notice
Version 1 · Data controller: Hedron Limited, Cyprus
Who is responsible
Hedron Limited (Cyprus) is the data controller for the personal data processed by MB Mileage. Mercedes-Benz is the source of the vehicle data: it is transmitted to us under the EU Data Act only after you grant consent with your Mercedes me account.
What we collect
- Vehicle telemetry for your connected vehicle(s): odometer, ignition, speed, GPS position, battery/charging state, range and — depending on the packages you select — maintenance, climate, body and infotainment signals.
- Phone GPS, only while you actively record a drive with the web page or the MB Tracker app on your own phone.
- Account data: your email, display name, your Mercedes identity reference (a technical subject ID — never your Mercedes password), sign-in timestamps, and your acceptance of the Terms.
Why we process it
- To provide the service you asked for: trip segmentation, mileage records, route maps and the live vehicle dashboard (contract performance).
- To operate and secure the platform: authentication, abuse prevention, diagnostics (legitimate interest).
We do not share your data with third parties, do not sell it, and do not use it for advertising or profiling. Data is used exclusively for the service described above, as the EU Data Act requires.
Where it lives and how long
Data is stored in the EU on Microsoft Azure, encrypted at rest and in transit. Mercedes consent tokens are additionally encrypted at the application level. We keep your data for as long as your account is active; when your account is deleted, your vehicles' data collection is deactivated at Mercedes-Benz and your data is erased.
Your rights
Under the GDPR you can ask for access, rectification, erasure, restriction, portability, and you can object to processing. In the app you can export your data and delete your account (including all telemetry for your vehicles); you can withdraw your Mercedes consent at any time from the account menu. You may also complain to the Cyprus Commissioner for Personal Data Protection.
To exercise any right, contact Hedron Limited, Cyprus. See also the Terms of Service.