Privacy policy

01 — Controller

Who is responsible for processing

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Phone

+49 7841 673 99 – 0

Email

info@evival.net

02 — Website visits and hosting

Technical provision of the website

When you visit this website, your browser sends technically necessary information to our web server. This may include your IP address, access date and time, file or page requested, volume of data transferred, referrer URL, browser type and operating system. This data may be processed in server log files.

Processing is necessary to deliver the website, ensure its stability and security, and detect attacks or abusive access. The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the secure and uninterrupted operation of our website.

Hosting and IT providers may act as processors for technical operations. Logs are deleted or anonymised when no longer needed for these purposes, unless legal obligations or security reasons require longer retention.

Transport encryption

The website uses an encrypted HTTPS connection to protect transmitted content from interception by third parties.

03 — Contact

When you contact us

Contact form

Some pages let you contact us through a form. We process the details you enter: name, email address, company where applicable, subject and message. Required fields are identifiable.

To prevent automated or abusive enquiries, the IP address is processed in hashed form for technical rate limiting. Entries stop counting towards the limit after 15 minutes. No external CAPTCHA service is used.

We process form data to answer your enquiry and follow-up questions. For enquiries concerning a contract or pre-contractual steps, the basis is Article 6(1)(b) GDPR; otherwise, Article 6(1)(f) GDPR. Our legitimate interest is the proper handling of business enquiries.

Email and phone

If you contact us by email or phone, we also process your contact details and enquiry content for handling and communication on the legal bases stated above.

We delete enquiry data once handling is complete, unless statutory retention duties, contractual requirements or legitimate interests, such as documenting a business relationship or defending claims, require otherwise.

04 — Cookies and external services

Data-minimising implementation

Under the current technical setup, a cookie consent banner is therefore unnecessary. If services requiring consent are added later, this policy and, where required, consent management will be updated before use.

External links

Our website links to third-party sites, such as project partners, Google Maps as a simple link or other services. You leave our site only when following a link. The respective provider is responsible for subsequent processing. A simple link transfers no data to the linked service when our page loads.

05 — Recipients and transfers

Who may receive data

Within our company, only those who need personal data for the relevant purposes have access. Carefully selected hosting, IT and communications providers may also process data on our behalf. Disclosure to others occurs only where legally permitted or required, or with your consent.

The website functions described here do not currently deliberately transfer personal data outside the European Union or European Economic Area.

06 — Your rights

Your data protection rights

Subject to the statutory conditions, you have in particular the following rights:

• Access to your processed personal data (Article 15 GDPR)
• Rectification of inaccurate or completion of incomplete data (Article 16 GDPR)
• Erasure of personal data (Article 17 GDPR)
• Restriction of processing (Article 18 GDPR)
• Data portability (Article 20 GDPR)
• Objection to processing based on Article 6(1)(e) or (f) GDPR (Article 21 GDPR)
• Withdrawal of consent with future effect (Article 7(3) GDPR)

To exercise your rights, simply send a message to info@evival.net. You also have the right to complain to a data protection authority, particularly in the Member State of your habitual residence, workplace or the alleged infringement.

Our competent authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg. Information and contact details are available at baden-wuerttemberg.datenschutz.de ↗.

No automated decision-making

This website does not involve automated decision-making, including profiling, within the meaning of Article 22 GDPR.

07 — Updates

Changes to this policy

We update this policy when the website, services or legal requirements change. The version published on this page applies.