Privacy statement

Thank you for visiting our website and for your interest. Protecting your personal data is a priority for us. We conduct our activities in compliance with applicable laws regarding data protection and data security. Below, we would like to inform you about what data is collected during your visit and how it is used.

Data Controller under the GDPR

The controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in European Union member states, and other provisions related to data protection is:

evenito AG
Hafnerstrasse 24
8005 Zurich
https://evenito.com/
info@evenito.com
+41445202401

Data Protection Officer

Nils Möllers
Keyed GmbH
Siemensstraße 12
48341 Altenberge
info@keyed.de
+49 2505-6397-97
https://keyed.de/

What is personal data?

The term "personal data" is defined in the Federal Data Protection Act and the EU GDPR. It refers to any information relating to an identified or identifiable natural person. This includes, for example, your legal name, address, telephone number, or date of birth. Learn more about what data protection entails here.

Scope of anonymous data collection and processing

Unless otherwise stated in the following sections, no personal data is collected, processed, or used when you visit our websites. However, through the use of analysis and tracking tools, we do receive certain technical information based on data transmitted by your browser (e.g., browser type/version, operating system used, pages visited on our site including duration of stay, and the previously visited website). We analyze this information solely for statistical purposes.

Legal basis for the processing of personal data

1. Where we obtain consent for processing operations of personal data, Consent obtained from the data subject, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
2. Where processing of personal data is necessary for the performance of a contract to which the data subject is party, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual measures.
3. Where processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) of the GDPR serves as the legal basis.
4. Where processing of personal data is necessary to protect the vital interests of the data subject or another natural person, Article 6(1)(d) of the GDPR serves as the legal basis.
5. If processing is necessary for the purposes of the legitimate interests pursued by our company or a third party, and such interests are not overridden by the interests, fundamental rights, and freedoms of the data subject, Article 6(1)(f) of the GDPR serves as the legal basis for processing.

Use of cookies

The evenito AG website uses cookies. Cookies are data files stored by the internet browser on the user's computer system. Cookies can be transmitted to a site when it is accessed, allowing the user to be identified. Cookies help simplify the use of websites for users.

You can object to the use of cookies at any time by changing your internet browser settings. Cookies that have already been set can be deleted. Please note that if you disable cookies, you may not be able to use all the features of our website to their full extent. Data collected from users in this way is pseudonymized using technical measures. As a result, it is no longer possible to associate the data with the individual user. This data is not stored together with other personal user data. When you visit our website, an information banner notifies you about the use of cookies for analytical purposes and refers you to this privacy policy. This banner also provides information on how to prevent cookies from being stored in your browser settings. The legal basis for processing personal data using technically necessary cookies is Art. 6(1)(f) GDPR. The legal basis for processing personal data using cookies for analytical purposes, provided the user has given their consent, is Art. 6(1)(a) GDPR. Please refer to our cookie banner and the information in this privacy policy for details on whether and to what extent cookies are used on our website.

Cookiebot

Description and purpose

We use the consent management platform Cookiebot, provided by Usercentrics A/S, to manage and document consent for the use of cookies and similar technologies.

Cookiebot enables the collection, management, and storage of website visitor consent, as well as the documentation of selected cookie settings. Specifically, this involves processing the consent decision, the IP address (in truncated form), information about the device used, browser data, and timestamps of the consent. This processing is carried out for the purpose of obtaining, managing, and verifying consent in a legally compliant manner in accordance with data protection requirements.

Legal basis

The legal basis for processing your personal data is Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring our website is designed in compliance with data protection regulations.

Recipients

The recipient of your personal data is Usercentrics A/S, Havnegade, 1058, Copenhagen, Denmark.

Transfers to third countries

As a general rule, personal data is processed within the European Union or the European Economic Area. In the event that personal data is transferred, the provider ensures the level of protection required by the GDPR by complying with Art. 44 et seq. GDPR. If there is no adequacy decision for the third country where the data importer is based, the transfer is subject to appropriate safeguards. If you have any questions, please feel free to contact our data protection officer.

Data retention period

Data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Furthermore, data will be deleted if you exercise your right to erasure under Art. 17(1) GDPR.

Right to object

In cases where data is processed based on Art. 6(1)(f) GDPR, you have the right under Art. 21(1) GDPR to object to the processing of your personal data at any time. If you exercise this right, we will no longer process your data for this purpose. Further information on this can be found above in our privacy policy under "Rights of the data subject."

Contractual and legal obligations

There is no contractual or legal obligation to provide this data.

Further data protection information

Further information on the processing of your personal data can be found here: https://www.cookiebot.com/de/privacy-policy/?campaign_id=678797541&adset_id=1163285266775464&ad_id=&matchtype=e

Creation of log files

Every time you access our website, evenito AG uses an automated system to collect data and information. This information is stored in the server's log files. The data is also stored in our system's log files. This data is not stored together with other personal data of the user.
The following data may be collected:

(1) Information about the browser type and version used
(2) The user's operating system
(3) The user's internet service provider
(4) The user's IP address
(5) Date and time of access
(6) Websites from which the user's system reached our website (referrer)
(7) Websites accessed by the user's system via our website

Duration of personal data storage

Personal data is stored for the duration of the respective statutory retention period. Once this period expires, the data is routinely deleted, provided it is no longer required for contract initiation or fulfillment.

How to contact us

The evenito AG website features a contact form that can be used for electronic communication. Alternatively, you can contact us via the provided email address. If you contact the controller via one of these channels, the personal data you transmit is automatically saved. This data is stored solely for the purpose of processing your inquiry or contacting you. Your data will not be shared with third parties. The legal basis for processing this data, provided you have given your consent, is Art. 6(1)(a) GDPR. The legal basis for processing data transmitted via email is Art. 6(1)(f) GDPR. If the email contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6(1)(b) GDPR. The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For personal data from the contact form's input mask and data sent by email, this is the case when the respective conversation with the user has ended. A conversation is considered ended when it is clear from the circumstances that the matter in question has been conclusively resolved.

Newsletter

If you subscribe to our company newsletter, the data entered in the respective input mask will be transmitted to the controller. We use a double opt-in process for newsletter subscriptions. This means that after signing up, you will receive an email asking you to confirm your registration. This confirmation is necessary to ensure that no one can sign up using someone else's email address. When you sign up for the newsletter, we store your IP address as well as the date and time of registration. This is done to prevent misuse of our services or your email address. Your data will not be shared with unauthorized third parties. However, necessary data may be transmitted to relevant service providers for the purpose of sending the newsletter. An exception applies if there is a legal obligation to disclose the data. The data is used exclusively for sending the newsletter. You can cancel your newsletter subscription at any time. You may also revoke your consent to the storage of your personal data at any time. A link for this purpose is included in every newsletter. The legal basis for processing data after you have subscribed to the newsletter, provided you have given your consent, is Art. 6(1)(a) GDPR. The legal basis for sending the newsletter following the sale of goods or services is Section 7(3) of the German Act Against Unfair Competition (UWG).

Brevo

Description and purpose

We use the newsletter service provided by Brevo (Brevo GmbH, Köpenicker Str. 126, 10179 Berlin) to send our newsletters. Brevo is used to organize and analyze the distribution of newsletters, among other things. When you sign up for our newsletter, we process your personal data, including your IP address, email address, date and time, action type, metadata, and object and profile references. We process this data, including any changes to your consent, for the purpose of managing your newsletter subscription. For verification purposes regarding your consent or withdrawal, we process your IP address, online identifiers, and the date and time. We use Brevo to measure the success and reach of our newsletter campaigns. In this context, we analyze, for example, whether you open a newsletter or how you interact with it. To this end, Brevo sets and stores cookies and web beacons to enable statistical analysis and create interest profiles. This allows us to learn whether and how you interact with our newsletters.

Legal basis

The legal basis for processing your personal data is Art. 6(1)(a) and Art. 6(1)(f) GDPR. Our overriding legitimate interest arises from direct marketing for the purpose of acquiring new customers. 

Recipients

The recipient of your personal data is Brevo GmbH, Köpenicker Str. 126, 10179 Berlin.

Transmission to third countries

Personal data is not transmitted to third countries. 

Duration of data storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. Furthermore, the data will be deleted if you exercise your right to erasure under Art. 17(1) GDPR.

Revocation and objection

You have the right to withdraw your consent at any time, in accordance with Art. 7 (3) GDPR. This can be done informally and without providing reasons, and will take effect for the future. Withdrawing your consent does not affect the lawfulness of any processing carried out prior to the withdrawal. Further information on this can be found above in our privacy policy under “Rights of the data subject”.

In the case of data processing based on the legal basis of Art. 6 (1) (f) GDPR, you have the right under Art. 21 (1) GDPR to object to the processing of your personal data at any time. If you exercise this right, we will no longer process your data for this purpose. Further information on this can be found above in our privacy policy under “Rights of the data subject”.

Contractual and legal obligations

There is no contractual or legal obligation to provide the data.

Further privacy information

Further information on the processing of your personal data can be found here: https://www.brevo.com/de/legal/privacypolicy/ 

Registration on our website

If a data subject uses the option to register on the controller's website by providing personal data, the data entered in the respective input mask is transmitted to the controller. The data is stored exclusively for internal use by the controller. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. During registration, the user's IP address as well as the date and time of registration are stored. This serves to prevent misuse of our services. The data will not be passed on to third parties, unless there is a legal obligation to do so. Registration is required for the provision of content or services. Registered persons have the option to have their stored data deleted or modified at any time. The data subject can obtain information about their stored personal data at any time.

Routine deletion and blocking of personal data

The controller processes and stores the data subject's personal data only for as long as is necessary to achieve the purpose of storage. Storage may also take place if provided for by European or national legislators in EU regulations, laws, or other provisions to which the controller is subject. As soon as the purpose of storage no longer applies or a storage period prescribed by the aforementioned regulations expires, the personal data will be routinely blocked or deleted.

Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights against the controller:

Right of access pursuant to Art. 15 GDPR

You can request confirmation from the controller as to whether we are processing personal data concerning you. If such processing is taking place, you can request information from the controller regarding the following:

1. the purposes for which the personal data are processed;
2. the categories of personal data being processed;
3. the recipients or categories of recipients to whom your personal data has been or will be disclosed;
4. the planned duration for which your personal data will be stored or, if specific information is not possible, the criteria for determining the storage period;
5. the existence of a right to rectification or erasure of your personal data, a right to restriction of processing by the controller, or a right to object to such processing;
6. the existence of a right to lodge a complaint with a supervisory authority;
7. all available information on the source of the data, if the personal data is not collected from the data subject;
8. the existence of automated decision-making, including profiling, in accordance with Art. 22 (1) and (4) GDPR and—at least in these cases—meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to request information as to whether your personal data is being transferred to a third country or an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR regarding the transfer.

Right to rectification pursuant to Art. 16 GDPR

You have the right to obtain from the controller the rectification and/or completion of your personal data if the processed personal data concerning you is inaccurate or incomplete. The controller must carry out the rectification without undue delay.

Right to erasure pursuant to Art. 17 GDPR

(1) You may request that the controller erase your personal data without undue delay, and the controller is obliged to erase this data without undue delay if one of the following grounds applies:

1. The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
2. You withdraw your consent on which the processing is based according to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal ground for the processing.
3. You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR.
4. The personal data concerning you have been processed unlawfully.
5. The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
6. The personal data concerning you were collected in relation to the offer of information society services referred to in Art. 8(1) GDPR.

(2) Where the controller has made the personal data concerning you public and is obliged pursuant to Art. 17(1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

(3) The right to erasure does not apply to the extent that processing is necessary

1. for exercising the right of freedom of expression and information;
2. for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
3. for reasons of public interest in the area of public health in accordance with Art. 9(2)(h) and (i) as well as Art. 9(3) GDPR;
4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89(1) GDPR, in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
5. for the establishment, exercise or defense of legal claims.

Right to restriction of processing pursuant to Art. 18 GDPR

You may request the restriction of the processing of your personal data under the following conditions:

1. if you contest the accuracy of your personal data for a period enabling the controller to verify the accuracy of the personal data;
2. the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
3. the controller no longer needs the personal data for the purposes of processing, but you require them for the establishment, exercise, or defense of legal claims, or
4. if you have objected to the processing pursuant to Art. 21(1) GDPR and it has not yet been determined whether the legitimate grounds of the controller override your own.

Where the processing of your personal data has been restricted, such data shall – with the exception of storage – only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If the restriction of processing has been restricted in accordance with the aforementioned conditions, you will be informed by the controller before the restriction is lifted.

Right to notification pursuant to Art. 19 GDPR

If you have asserted the right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to communicate any such rectification or erasure of data or restriction of processing to each recipient to whom the personal data concerning you have been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients by the controller.

Right to data portability pursuant to Art. 20 GDPR

You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used, and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, provided that

1. the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR and
2. the processing is carried out by automated means. In exercising this right, you also have the right to have the personal data transmitted directly from one controller to another, where technically feasible. The rights and freedoms of others must not be adversely affected by this. The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right to object pursuant to Art. 21 GDPR

You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data which is based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions. The controller will no longer process your personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims. Where your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

Right to withdraw consent under data protection law pursuant to Art. 7(3) GDPR

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing—including profiling—which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

1. is necessary for entering into or performing a contract between you and the controller,
2. is permitted by Union or Member State law to which the controller is subject and these laws contain appropriate measures to safeguard your rights, freedoms, and legitimate interests, or
3. is based on your explicit consent.

However, these decisions may not be based on special categories of personal data referred to in Art. 9(1) GDPR, unless Art. 9(2)(a) or (g) applies and suitable measures to safeguard your rights, freedoms, and legitimate interests have been taken.

In the cases referred to in (a) and (c), the controller shall implement suitable measures to safeguard your rights, freedoms, and legitimate interests, which include at least the right to obtain human intervention on the part of the controller, to express your point of view, and to contest the decision.

Integration of third-party services and content

Description and purpose

This website may incorporate third-party content, such as videos, fonts, or graphics from other websites. This always requires that the providers of this content (hereinafter referred to as "third-party providers") perceive the user's IP address. Without the IP address, they would be unable to send the content to the respective user's browser. The IP address is therefore necessary for the display of this content. We strive to use only content whose providers use the IP address solely for the delivery of the content. However, we have no control over whether third-party providers store the IP address, for example, for statistical purposes. To the extent that we are aware of this, we inform our users accordingly. We use these integrations to provide and improve our online services.

Legal basis

The legal basis for the integration of third-party services and content is Art. 6(1)(f) GDPR. Our overriding legitimate interest lies in our intention to present our online presence appropriately and to provide user-friendly and economically efficient services. For further information, please refer to the respective privacy policies of the providers.

Contractual or legal obligation to provide personal data

The provision of personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are also not obliged to provide the personal data. However, failure to provide it may result in you being unable to use this function, or unable to use it to its full extent.

Data transfer to third countries

The controller may transfer personal data to a third country. In principle, the controller can ensure an adequate level of protection for processing through various appropriate safeguards. It is possible to transfer data on the basis of an adequacy decision, binding corporate rules, approved codes of conduct, standard data protection clauses, or an approved certification mechanism in accordance with Art. 46(2)(a)–(f) GDPR.

If the controller carries out a transfer to a third country based on Art. 49(1)(a) GDPR, you will be informed here about the potential risks of a data transfer to a third country.

There is a risk that the third country receiving your personal data may not provide a level of protection equivalent to that of the European Union. This may be the case, for example, if the EU Commission has not issued an adequacy decision for the respective third country or if certain agreements between the European Union and the respective third country are declared invalid. Specifically, in some third countries, there are risks regarding the effective protection of fundamental EU rights due to the use of surveillance laws (e.g., the USA). In such a case, it is the responsibility of the controller and the recipient to assess whether the rights of the data subjects in the third country enjoy a level of protection equivalent to that in the Union and can be effectively enforced.

The General Data Protection Regulation is intended to ensure that the level of protection for natural persons guaranteed throughout the Union is not undermined when personal data is transferred from the Union to controllers, processors, or other recipients in third countries or to international organizations, even when personal data is further transferred from a third country or an international organization to controllers or processors in the same or another third country or to the same or another international organization.

Additional website functions

Google Analytics 4

Description and purpose

This website uses the "Google Analytics 4" service, provided by Google LLC, to analyze how users interact with the site. The service uses "cookies"—text files stored on your device. First-party cookies are used for this purpose. With a first-party cookie, a user can only be recognized by the site that originated the cookie, not across multiple domains. The information collected by these cookies is generally transmitted to and stored on a Google server in the USA. Where applicable, Google Analytics on this website is used with the "gat._anonymizeIp();" code to ensure anonymized collection of IP addresses (so-called IP masking). Please also note the following information regarding the use of Google Analytics: User IP addresses are truncated within the member states of the EU and the European Economic Area. This truncation removes the personal reference of your IP address. For EU citizens, the IP address is also only used to derive location data and is then deleted. You also have the option to enable or disable the collection of detailed location and device data for individual regions (tracking settings). Furthermore, Google Signals can be deactivated to prevent association with a Google account, and personalized ads can be disabled. Under the data processing agreement that the website operators have concluded with Google LLC, Google uses the collected information to evaluate website usage and activity and to provide services related to internet usage.

Legal basis

The legal basis for the processing of your personal data is Art. 6(1)(a) GDPR.

Recipient

The recipient of your personal data is Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

Transfer to third countries

Personal data is transferred to the United States. This transfer is subject to appropriate safeguards in accordance with Art. 46 GDPR. We have concluded standard contractual clauses with the data importer for this purpose. Furthermore, we are aware of our responsibility and, where necessary, take additional measures to protect the rights and freedoms of natural persons and ensure the protection of personal data.

Data retention period

Data is deleted as soon as it is no longer required for the purpose for which it was collected. Furthermore, data will be deleted if you exercise your right to erasure under Art. 17(1) GDPR. The maximum retention period is 14 months.

Withdrawal

You have the right to withdraw your consent at any time, pursuant to Art. 7(3) sentence 1 GDPR. This can be done informally and without providing reasons, and it takes effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Further information on this can be found above in our privacy policy under "Rights of the data subject."

Contractual and legal obligation

There is no contractual or legal obligation to provide the data.

Further privacy information

Further information on the processing of your personal data can be found here: https://support.google.com/analytics/answer/6004245?hl=en https://policies.google.com/privacy?hl=en.

Google Ads and Conversion Tracking

Description and purpose

To draw attention to our current projects, developments, planned activities, and services, we run Google Ads and use Google Conversion Tracking as part of this. Google Ads is a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). These ads are displayed following search queries on websites within the Google advertising network. We have the ability to combine our ads with specific search terms. In addition, we use AdWords remarketing lists for search ads. This allows us to tailor search ad campaigns for users who have previously visited our website. Through these services, we can combine our ads with specific search terms or show ads to previous visitors, for example, advertising services they viewed on our website. Analyzing online user behavior is necessary for interest-based offers. Google uses cookies to perform this analysis. When a user clicks on an ad or visits our website, Google places a cookie on the user's computer. This information is used to target the visitor during a later search query. Further information on the cookie technology used can also be found in Google's notes on website statistics and in their privacy policy. With the help of this technology, Google and we, as the client, receive information that a user has clicked on an ad and was redirected to our websites to contact us via the contact form. Similarly, Google and we, as the client, receive information via Google forwarding numbers that a user has clicked on one of our phone numbers on the internet and contacted us by phone. The information obtained is used exclusively for statistical analysis for ad optimization. We do not receive any information that would allow us to personally identify visitors. The statistics provided to us by Google include the total number of users who clicked on one of our ads and, if applicable, whether they were redirected to a page on our website equipped with a conversion tag. Based on these statistics, we can track which search terms led to clicks on our ads most frequently and which ads lead to contact via the contact form or by phone. Regarding telephone contact by interested parties or customers, the statistics provided by Google include the start time, end time, status (missed or received), duration (seconds), the caller's area code, call costs, and call type.

Legal basis

The legal basis for the processing of your personal data is your consent in accordance with Art. 6(1)(a) GDPR.

Recipient

The recipient of your personal data is Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The data controller responsible for processing your information depends on your place of habitual residence, unless otherwise stated in the privacy policy of a specific service:

• Google Ireland Limited for users of Google services who have their habitual residence in the European Economic Area or Switzerland.
• Google LLC for users of Google services who have their habitual residence in the United Kingdom.

Transfer to third countries

Personal data is transferred to the USA (server location). This transfer is subject to appropriate safeguards in accordance with Art. 46 GDPR. To this end, we have concluded standard contractual clauses with the data importer pursuant to Art. 46(2)(c) GDPR. Furthermore, we are aware of our responsibilities and, where necessary, take additional measures to protect the rights and freedoms of individuals and ensure the protection of personal data.

Data retention period

Data will be deleted as soon as it is no longer required for the purpose for which it was collected. In addition, data will be deleted if you exercise your right to erasure under Art. 17(1) GDPR.

Withdrawal of consent

You have the right to withdraw your consent at any time, as per Art. 7(3) GDPR. This can be done informally and without providing a reason, and it will take effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Further information on this can be found above in our privacy policy under "Rights of the data subject."

Contractual and legal obligation

There is no contractual or legal obligation to provide this data.

Further privacy information

Further information on the processing of your personal data can be found here: www.google.com/policies/privacy/

Google Tag Manager

Description and purpose

We use Google Tag Manager (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) on our website. Google Tag Manager allows us to manage website tags via an interface; it is a cookie-free domain that does not collect personal information, though it may trigger other tags that do collect data. Google pseudonymizes the data, and the IP address transmitted by your browser as part of Google Analytics is not merged with other data held by Google.

Legal basis

The legal basis for the processing of your personal data is Art. 6(1)(a) GDPR.

Recipient

The recipient of your personal data is Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

Transfer to third countries

Personal data is transferred to the United States. This transfer is subject to appropriate safeguards in accordance with Art. 46 GDPR. Where necessary, we have entered into appropriate safeguards as defined in Art. 46(2) GDPR with the data importer. Furthermore, we are aware of our responsibilities and, where necessary, take additional measures to protect the rights and freedoms of natural persons and ensure the protection of personal data.

Duration of data storage

Data will be deleted as soon as it is no longer required for the purpose for which it was collected. In addition, data will be deleted if you exercise your right to erasure under Art. 17(1) GDPR.

Withdrawal of consent

You have the right to withdraw your consent at any time, as per Art. 7(3) sentence 1 GDPR. This can be done informally and without providing a reason, and it will take effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Further information on this can be found above in our privacy policy under "Rights of the data subject."

Contractual and legal obligation

There is no contractual or legal obligation to provide this data.

Further privacy information

Further information on the processing of your personal data can be found here:

https://policies.google.com/privacy?hl=en&gl=us

Google Maps

Description and purpose

This website uses the Google Maps API from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to visually display geographical information. When using Google Maps, Google also collects, processes, and uses data regarding the use of Maps features by website visitors.

Legal basis

The legal basis for the processing of your personal data is Art. 6(1)(a) GDPR.

Recipient

The recipient of your personal data is Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

Transfers to third countries

Personal data is transferred to the United States. This transfer is subject to appropriate safeguards in accordance with Art. 46 GDPR. Where necessary, we have entered into appropriate safeguards as defined in Art. 46(2) GDPR with the data importer. Furthermore, we are aware of our responsibility and, where necessary, take additional measures to protect the rights and freedoms of natural persons to ensure the protection of personal data.

Duration of data storage

Data will be deleted as soon as it is no longer required for the purpose for which it was collected. In addition, data will be deleted if you exercise your right to erasure under Art. 17(1) GDPR.

Withdrawal of consent

You have the right to withdraw your consent at any time, pursuant to Art. 7(3) sentence 1 GDPR. This can be done informally and without providing reasons, and will take effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Further information on this can be found above in our privacy policy under "Rights of the data subject".

Contractual or legal obligation

There is no contractual or legal obligation to provide the data.

Further privacy information

Further information on the processing of your personal data can be found here:

https://policies.google.com/privacy?hl=en&gl=us

LinkedIn Features & Analytics

Description and purpose

Our website uses features from the LinkedIn network, including LinkedIn Analytics. Every time you access one of our pages that contains LinkedIn features, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited our website with your IP address. If you click the LinkedIn "Recommend" button while logged into your LinkedIn account, LinkedIn can associate your visit to our website with your user account. Please note that as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by LinkedIn. LinkedIn Analytics uses "cookies" that are stored on your computer to enable an analysis of your use of the website. LinkedIn uses this information to evaluate your use of the website, to compile reports on website activity for website operators, and to provide other services related to website and internet usage.

Legal basis

The legal basis for the processing of your personal data is Art. 6(1)(a) GDPR.

Recipient

The recipient of your personal data is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

Transfers to third countries

Personal data is transferred to the United States. This transfer is subject to appropriate safeguards in accordance with Art. 46 GDPR. Where necessary, we have entered into appropriate safeguards as defined in Art. 46(2) GDPR with the data importer. Furthermore, we are aware of our responsibility and, where necessary, take additional measures to protect the rights and freedoms of natural persons to ensure the protection of personal data.

Data retention period

Data will be deleted as soon as it is no longer required for the purpose for which it was collected. Furthermore, data will be deleted if you exercise your right to erasure pursuant to Art. 17 (1) GDPR.

Withdrawal of consent

You have the right to withdraw your consent at any time, cf. Art. 7 (3) sentence 1 GDPR. This can be done informally and without providing reasons, and it will take effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Further information on this can be found above in our privacy policy under "Rights of the data subject".

Contractual and legal obligation

There is no contractual or legal obligation to provide the data.

Further privacy information

Further information on the processing of your personal data can be found here:

https://www.linkedin.com/legal/privacy-policy

Vimeo

Description and purpose

We use providers such as Vimeo to embed videos. Vimeo is operated by Vimeo LLC, headquartered at 555 West 18th Street, New York, New York 10011. We use Vimeo plugins on some of our web pages. When you visit pages on our website that feature such a plugin—for example, our media library or e-learning section—a connection to the Vimeo servers is established, and the plugin is displayed. This informs the Vimeo server which of our web pages you have visited. If you are logged in as a Vimeo member, Vimeo associates this information with your personal user account. When using the plugin, e.g., by clicking the start button of a video, this information is also associated with your user account. You can prevent this association by logging out of your Vimeo user account and deleting the corresponding Vimeo cookies before using our website.

Legal basis

The legal basis for the processing of your personal data is Art. 6 (1) (a) GDPR.

Recipients

The recipient of your personal data is Vimeo LLC, headquartered at 555 West 18th Street, New York, New York 10011.

Transfers to third countries

Personal data is transferred to the United States. The transfer is subject to appropriate safeguards in accordance with Art. 46 GDPR. To this end, the provider has concluded standard data protection clauses with the data importer in accordance with Art. 46 (2) (c) GDPR. Furthermore, we are aware of our responsibility and, where necessary, take additional measures to protect the rights and freedoms of natural persons and ensure the protection of personal data.

Data retention period

Data will be deleted as soon as it is no longer required for the purpose for which it was collected. Furthermore, data will be deleted if you exercise your right to erasure pursuant to Art. 17 (1) GDPR.

Withdrawal

You have the right to withdraw your consent at any time, pursuant to Art. 7 (3) sentence 1 GDPR. This can be done informally and without providing reasons, and will take effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Further information on this can be found above in our privacy policy under "Rights of the data subject."

Contractual and legal obligation

There is no contractual or legal obligation to provide the data.

Further privacy information

Further information on the processing of your personal data can be found here:

https://vimeo.com/privacy

Hubspot

Description and purpose

We use HubSpot (HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland) for our online marketing activities. This is an integrated software solution that covers various aspects of our online marketing, including:

Email marketing (newsletters and automated mailings, e.g., for providing downloads), social media publishing & reporting, reporting (e.g., traffic sources, access, etc.), contact management (e.g., user segmentation & CRM), landing pages, and contact forms.

Our registration service allows visitors to our website to learn more about our company, download content, and provide their contact information and other demographic details. This information, as well as the content of our website, is stored on servers of our software partner, HubSpot. We may use this information to contact visitors to our website and to determine which of our company's services are of interest to them. All information we collect is subject to this privacy policy. We use all collected information exclusively to optimize our marketing efforts.

Legal basis

The legal basis for the processing of your personal data is Art. 6 (1) (a) (consent for live chat, newsletters, and other performance measurements) and (f) GDPR. Our legitimate interest in using this service is the optimization of our customer service and the management of our contact data.

Recipients

The recipient of your personal data is HubSpot (2nd Floor 30 North Wall Quay, Dublin 1, Ireland).

Transfers to third countries

It cannot currently be ruled out that personal data may be transferred to the United States of America. Since July 10, 2023, there has been an adequacy decision for the USA (EU-US Data Privacy Framework). The parent company, HubSpot Inc., holds a corresponding certification under the EU-US Data Privacy Framework, which is why an adequacy decision exists for third-country transfers to HubSpot Inc. in the USA.

Duration of data storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. Furthermore, the data will be deleted if you exercise your right to erasure pursuant to Art. 17 (1) GDPR.

Withdrawal and Objection

In cases where processing is based on Art. 6(1)(a) GDPR, you have the right to withdraw your consent at any time, pursuant to Art. 7(3) sentence 1 GDPR. This can be done informally and without providing a reason, and it takes effect for the future. Withdrawing your consent does not affect the lawfulness of any processing carried out before the withdrawal. Further information on this can be found above in our Privacy Policy under "Rights of the Data Subject."

In cases where processing is based on Art. 6(1)(f) GDPR, you have the right under Art. 21(1) GDPR to object to the processing of your personal data at any time. If you exercise this right, we will no longer process your data for this purpose. Further information on this can be found above in our Privacy Policy under "Rights of the Data Subject."

Contractual and Statutory Obligation

There is no contractual or statutory obligation to provide the data.

Further Privacy Information

Further information regarding the processing of your personal data can be found here: https://legal.hubspot.com/privacy-policy

Microsoft Ads

Description and Purpose

On our website, we use technologies from Microsoft Ads (bingads.microsoft.com), which are provided and operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"). If you reached our website via a Microsoft Bing ad, Microsoft will place a cookie on your device. This allows Microsoft Bing and the website operator to recognize that someone has clicked on an ad, was redirected to our website, and reached a predetermined target page (conversion page). We only receive the total number of users who clicked on a Bing ad and were then redirected to the conversion page. Microsoft collects, processes, and uses information via the cookie to create usage profiles using pseudonyms (Microsoft Conversion Tracking). These usage profiles are used to analyze visitor behavior and to display advertisements. No personal information regarding the identity of the user is processed.

Legal Basis

The legal basis for the processing of your personal data is Art. 6(1)(a) GDPR.

Recipients

The recipient of your personal data is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"), where the data is transferred and stored.

Transfer to Third Countries

Personal data is transferred to the United States. This transfer is subject to appropriate safeguards in accordance with Art. 46 GDPR. Where necessary, we have entered into appropriate safeguards as defined in Art. 46(2) GDPR with the data importer. Furthermore, we are aware of our responsibility and, where necessary, take additional measures to protect the rights and freedoms of natural persons to ensure the protection of personal data.

Duration of Data Storage

Data will be deleted as soon as it is no longer required for the purpose for which it was collected. Furthermore, data will be deleted if you exercise your right to erasure under Art. 17(1) GDPR.

Withdrawal

You have the right to withdraw your consent at any time, pursuant to Art. 7(3) sentence 1 GDPR. This can be done informally and without providing a reason, and it takes effect for the future. Withdrawing your consent does not affect the lawfulness of any processing carried out before the withdrawal. Further information on this can be found above in our Privacy Policy under "Rights of the Data Subject."

Contractual and legal obligation

There is no contractual or legal obligation to provide the data.

Further privacy information

Further information on the processing of your personal data can be found here:

https://privacy.microsoft.com/en-US/privacystatement

Microsoft Clarity

Description and purpose

We use the Microsoft Clarity service from Microsoft Corporation on our website. Microsoft Clarity is used to provide us with better insights into how our website is used, helping us to further improve user-friendliness. The service allows for the creation of heatmaps and overviews of cursor and scrolling movements, and processes data such as access times and IP addresses.

Legal basis

The legal basis for the processing of your personal data is Art. 6(1)(a) GDPR.

Recipient

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Transfer to third countries

Personal data is transferred to the United States. This transfer is subject to appropriate safeguards in accordance with Art. 46 GDPR. To this end, we have concluded government-approved contractual clauses with the data importer, such as the Standard Contractual Clauses approved by the European Commission, in accordance with Art. 46(2)(c) GDPR. Furthermore, we are aware of our responsibilities and, where necessary, take additional measures to protect the rights and freedoms of natural persons, ensuring the protection of personal data.

Duration of data storage

Data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Furthermore, data will be deleted if you exercise your right to erasure under Art. 17(1) GDPR.

Withdrawal

You have the right to withdraw your consent at any time, cf. Art. 7(3) sentence 1 GDPR. This can be done informally and without providing reasons, and will take effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Further information on this can be found in our privacy policy under “Rights of the data subject”.

Contractual and legal obligation

There is no contractual or legal obligation to provide the data.

Additional privacy information

Further information on data protection at Microsoft can be found here: https://privacy.microsoft.com/en-us/privacystatement

Navattic

Description and purpose

We use the service Navattic Inc. to provide interactive product demonstrations and to analyze how these demos are used.. Navattic enables the creation, delivery, and evaluation of interactive software demonstrations on websites, landing pages, and within sales and marketing processes.

When using this service, information regarding your interaction with the provided demos may be processed. This includes, for example, pages and sections visited, click paths, time spent, devices used, browser information, IP address, and other technical usage data. This processing is carried out for the purpose of presenting our products and services, measuring the success of marketing activities, and optimizing the user experience.

Legal basis

The legal basis for the processing of your personal data is Art. 6(1)(f) GDPR. 

Where consent is required for tracking or analysis, processing is based on Art. 6(1)(a) GDPR.

Recipients

The recipient of your personal data is Navattic Inc., 2261 Market Street, San Francisco, CA 94114, USA.

Transfer to third countries

Personal data is transferred to the United States. This transfer is subject to appropriate safeguards in accordance with Art. 46 GDPR. To this end, we have entered into government-approved contractual clauses, such as the Standard Contractual Clauses approved by the European Commission, with the data importer in accordance with Art. 46(2)(c) GDPR. Furthermore, we are aware of our responsibilities and, where necessary, take additional measures to protect the rights and freedoms of individuals and ensure the protection of personal data.

Data retention period

Data will be deleted as soon as it is no longer required for the purpose for which it was collected. Furthermore, data will be deleted if you exercise your right to erasure under Art. 17(1) GDPR.

Withdrawal and objection

In cases where processing is based on Art. 6(1)(a) GDPR, you have the right to withdraw your consent at any time, pursuant to Art. 7(3) GDPR. This can be done informally and without providing a reason, and it will take effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Further information on this can be found above in our privacy policy under "Rights of the data subject."

In cases where processing is based on Art. 6(1)(f) GDPR, you have the right under Art. 21(1) GDPR to object to the processing of your personal data at any time. If you exercise this right, we will no longer process your data for this purpose. Further information on this can be found above in our privacy policy under "Rights of the data subject."

Contractual and legal obligation

There is no contractual or legal obligation to provide this data.

Additional privacy information

You can find further information on data protection here:

https://www.navattic.com/legal/privacy

‍

G2 Digital Markets (G2DM)

Description and purpose

We use G2 Digital Markets (G2DM) from G2.com, Inc. to analyze marketing and sales activities and to assess the interest of potential customers in our products and services.

When using this service, information regarding interactions with our marketing content, website visits, product interests, and other usage data may be processed and transmitted to G2DM. This processing is carried out primarily for buyer intent measurement, campaign evaluation, measuring the success of marketing initiatives, and optimizing our sales and marketing activities.

Legal basis

The legal basis for the processing of your personal data is Art. 6(1)(f) GDPR. 

Where consent is required, processing is based on Art. 6(1)(a) GDPR.

Recipients

The recipient of your personal data is G2.com, Inc., 100 South Wacker Drive, Suite 600, Chicago, IL 60606, USA.

Transfers to third countries

Personal data is transferred to the United States. This transfer is subject to appropriate safeguards in accordance with Art. 46 GDPR. To this end, we have concluded government-approved contractual clauses, such as the Standard Contractual Clauses approved by the European Commission, with the data importer in accordance with Art. 46(2)(c) GDPR. Furthermore, we are aware of our responsibilities and, where necessary, take additional measures to protect the rights and freedoms of individuals and ensure the security of their personal data.

Data retention period

Data will be deleted as soon as it is no longer required for the purpose for which it was collected. In addition, data will be deleted if you exercise your right to erasure under Art. 17(1) GDPR.

Objection and withdrawal

In cases where processing is based on Art. 6(1)(a) GDPR, you have the right to withdraw your consent at any time, as per Art. 7(3) GDPR. This can be done informally, without providing a reason, and will take effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Further information on this can be found above in our privacy policy under “Rights of the data subject.”

In cases where processing is based on Art. 6(1)(f) GDPR, you have the right under Art. 21(1) GDPR to object to the processing of your personal data at any time. If you exercise this right, we will no longer process your data for this purpose. Further information on this can be found above in our privacy policy under “Rights of the data subject.”

Contractual and legal obligation

There is no contractual or legal obligation to provide the data.

Further privacy information

Further information on data protection can be found here: https://legal.g2.com/privacy-policy

Leadfeeder

Description and purpose

To analyze the use of our website and identify corporate visitors, we use the Leadfeeder service provided by Dealfront Group GmbH. Leadfeeder is a B2B website tracking solution that analyzes website visits and matches IP addresses with publicly available company databases to identify visiting companies.

In this process, technical usage data—specifically IP addresses, page views, duration of visits, referrer information, and other details regarding your visit to our website—is processed. This processing is carried out for the purposes of B2B lead generation, identifying potential business clients, sales support, and analyzing and optimizing our marketing and sales activities.

Leadfeeder matches the IP addresses collected during your visit to our website with company databases to draw conclusions about the visiting company. As a rule, individual visitors are not identified. The information obtained is used to identify potential business clients (B2B leads), provide sales support, and assess interest in our products and services.

Legal basis

The legal basis for the processing of your personal data is Art. 6(1)(f) GDPR. 

Insofar as consent is required for tracking or storing information on end devices, processing is carried out on the basis of Art. 6(1)(a) GDPR.

Recipients

The recipient of your personal data is Dealfront Group GmbH, Durlacher Allee 73, 76131 Karlsruhe, Germany.

Transfer to third countries

Personal data is generally processed within the European Union or the European Economic Area. In the event of a transfer of personal data, the provider ensures the level of protection required by the GDPR by complying with Art. 44 et seq. GDPR. If there is no adequacy decision for the third country where the data importer is based, the transfer is subject to appropriate safeguards. If you have any questions, please feel free to contact our Data Protection Officer.

Duration of data storage

Data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Furthermore, data is deleted if you exercise your right to erasure in accordance with Art. 17(1) GDPR.

Objection and withdrawal

In cases where processing is based on Art. 6(1)(a) GDPR, you have the right to withdraw your consent at any time, cf. Art. 7(3) sentence 1 GDPR. This can be done informally and without providing reasons, and it takes effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Further information on this can be found above in our privacy policy under "Rights of the data subject."

Where processing is based on Art. 6(1)(f) GDPR, you have the right under Art. 21(1) GDPR to object to the processing of your personal data at any time. If you exercise this right, we will no longer process your data for these purposes. Further information on this can be found above in our privacy policy under "Rights of the data subject."

Contractual and legal obligations

There is no contractual or legal obligation to provide the data.

Further privacy information

Further information on data protection can be found here:

https://www.leadfeeder.com/de/privacy/privacy-notice/

Applications (Apprenticeships & Job Openings)

By submitting your application to us, you consent to the processing of your data for the purposes of the application process in accordance with the nature and scope set out in this privacy policy. The legal basis for processing applicant data is Art. 88 GDPR, Section 26 of the German Federal Data Protection Act (BDSG-new), and Art. 9(2)(b) GDPR. If special categories of personal data within the meaning of Art. 9(1) GDPR are provided voluntarily during the application process, they are also processed in accordance with Art. 9(2)(b) GDPR (e.g., health data such as severe disability status or ethnic origin). If special categories of personal data within the meaning of Art. 9(1) GDPR are requested from applicants during the application process, they are also processed in accordance with Art. 9(2)(a) GDPR (e.g., health data, if required for the exercise of the profession). Where available, applicants may submit their applications to us using an online form on our website. Data is transmitted to us using state-of-the-art encryption. Applicants may also submit their applications via email. Please note, however, that emails are generally not encrypted and applicants are responsible for ensuring encryption themselves. We cannot accept responsibility for the transmission of the application between the sender and receipt on our server and therefore recommend using an online form or postal mail. Instead of using the online form or email, applicants always have the option of sending us their application by post. In the event of a successful application, the data provided by applicants may be further processed by us for the purposes of the employment relationship. Otherwise, if an application for a job opening is unsuccessful, the applicant's data will be deleted. Applicant data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time. Deletion takes place after a period of six months so that we can answer any follow-up questions regarding the application and fulfill our obligations under the General Equal Treatment Act. Invoices for any travel expense reimbursements are archived in accordance with tax law requirements.

Data recipients

To the extent permitted or required by law, or where you have provided consent, we share your personal data with other recipients who provide services for us. We limit the disclosure of your personal data to what is necessary. In some cases, our service providers receive your personal data as processors and are strictly bound by our instructions when handling your personal data (data processing agreement pursuant to Art. 28 GDPR). In other cases, the recipients act independently with the data we transmit to them. The following categories of service providers/recipients may receive your data:

• Providers of email marketing via newsletter
• Hosting service providers for the operation of our servers
• Service providers in the field of recruitment to assist with applicant selection
• Service providers for development work, including programming, development, maintenance, and support of software applications
• Postal service providers
• External legal counsel
• Marketing agencies/website maintenance
• Other IT service providers (e.g., system administrators)
• Other services and tools

The service providers we engage must meet strict confidentiality requirements. They only receive the access to your data necessary to perform their assigned tasks.

In the event of a suspected criminal offense, data may be disclosed to law enforcement authorities.

Security

We have implemented extensive technical and operational safeguards to protect your data against accidental or intentional manipulation, loss, destruction, or unauthorized access. Our security procedures are regularly reviewed and updated in line with technological advancements. Furthermore, we ensure continuous data protection through ongoing auditing and optimization of our data protection framework.

Conclusion

evenito AG reserves all rights to make changes and updates to this privacy policy. This privacy policy was generated by the data protection management system as part of hellotrust, a brand of Keyed GmbH.

‍