Data policy
This English version is provided for convenience. In case of any discrepancy, the German version shall prevail.
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Evolvet GmbH represented by its Managing Director Georgios Pavlakoudis Worringer Str. 20 50668 Köln, Germany
Phone: +49 221 292037-80 Email: kollektiv@evolvet.de
We have not appointed a data protection officer, as the legal requirements for doing so are not met. If you have any questions about data protection, please contact us directly using the details above.
2. Overview
We process personal data only to the extent necessary to operate this website, handle your enquiries and manage our business relationships. Personal data means any information relating to an identified or identifiable person.
| Processing | Purpose | Legal basis |
|---|---|---|
| Server log files | Secure and stable operation of the website | Art. 6(1)(f) GDPR |
| Web analytics with Umami | Statistical analysis of website usage, without cookies | Art. 6(1)(f) GDPR |
| Callback form, email, phone | Handling your enquiry | Art. 6(1)(b) and (f) GDPR |
| Customer and contract data | Performance of contracts | Art. 6(1)(b) and (c) GDPR |
| Postal advertising | Presenting our services | Art. 6(1)(f) GDPR |
Details, in particular on retention periods, are set out in the following sections. We do not sell data or pass it on to third parties for advertising purposes.
3. Hosting and server log files
We operate this website ourselves on a dedicated server rented from IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS provides the server infrastructure. We have concluded a data processing agreement with IONOS pursuant to Art. 28 GDPR.
When you access the website, our web server automatically processes the following data transmitted by your browser:
- IP address of the requesting device
- date and time of access
- requested page or file and HTTP status code
- amount of data transferred
- referrer URL (the previously visited page)
- browser type and version, and operating system
This processing is necessary to deliver the website, to ensure its stability and security, and to defend against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and error-free operation of the website. This data is not combined with other data sources.
Log files are deleted automatically after one week. Longer retention only occurs if individual entries are needed to investigate a specific security incident, and only until that investigation is complete.
4. Encryption, cookies and external services
SSL/TLS encryption. This website uses TLS encryption. You can recognise an encrypted connection by “https://” in the address bar and the padlock icon in your browser. Data you transmit to us cannot be read by third parties.
No cookies. We do not set any cookies on this website and do not store any information on your device that is not strictly necessary to provide the website (Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG). A cookie banner is therefore not required.
No external services. All content, fonts and scripts are delivered from our own servers. No third-party content is loaded, such as maps, videos, fonts or social media plugins.
5. Web analytics with Umami
We use the open-source software Umami to analyse website usage statistically. We host Umami ourselves at analytics.evolvet.cloud on our own server in Germany. No data is transmitted to the developer of Umami or to any other third party.
Umami does not use cookies and does not store any information on your device. The following data is collected:
- pages visited and referrer URL
- browser, operating system, device type and screen resolution
- language setting
- country and, where applicable, region, derived from the IP address
- click and scroll positions on individual pages, which we evaluate in aggregated form as heatmaps
Your IP address is not stored. To group repeated page views within one visit, Umami creates a hash value from the IP address, browser identifier and a regularly changing random value. This makes it impossible to identify you or to recognise you over longer periods of time. We only see aggregated statistics.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in understanding how our website is used and improving our offering. As no information on your device is accessed, consent under Section 25 TDDDG is not required.
Statistical data is deleted after 14 months; heatmap data is deleted after six months.
You can object to this data collection at any time (see Section 10), for example by email to kollektiv@evolvet.de. Common tracking or script blockers in your browser will also prevent data collection.
6. Callback form and contact
Callback form. If you request a callback via our form, we process your name and phone number. Without this information we cannot call you back.
Email and phone. If you contact us by email or phone, we process your contact details and the content of your enquiry.
We use this data solely to handle your enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the conclusion of a contract or an existing contractual relationship, and otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in responding to enquiries addressed to us.
The data is processed on our own systems and deleted once your enquiry has been fully handled and no further questions are expected. If an engagement results, Section 7 applies. Statutory retention obligations remain unaffected.
7. Customer and contract data
In connection with quotes and engagements, we process the data required for this purpose, in particular names, job titles, contact details, company addresses, contract and invoice data, and project communication. The legal basis is Art. 6(1)(b) GDPR (performance of a contract and pre-contractual measures) and, for statutory obligations, Art. 6(1)(c) GDPR.
We only transfer this data to third parties where necessary to perform the contract, for example to the bank handling payment, or where we are legally obliged to do so, for example to tax advisors and tax authorities.
After the business relationship ends, we delete the data unless statutory retention obligations apply. We retain commercial and tax records for up to ten years in accordance with Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO).
8. Postal advertising
Purpose and legal basis. We process the name, job title and company address of contact persons at companies and organisations in order to present our automation and AI services to them by post. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in acquiring new customers (Recital 47 GDPR).
Source of the data (Art. 14 GDPR). Where we have not collected the data from you directly, it comes from publicly accessible sources, in particular the legal notices (Impressum) of company websites, business directories and the commercial register.
Retention period. We delete the data if you object, or at the latest 12 months after our last contact if no contact has been established. After an objection, we store your name and address only in a suppression list to ensure you receive no further advertising from us.
Objection. You may object to the use of your data for advertising purposes at any time without giving reasons, informally by email to kollektiv@evolvet.de or by post to the address above.
9. Recipients, third countries and automated decisions
Recipients. Apart from us, the only recipients of personal data are IONOS SE as infrastructure provider (data processor) and, in individual cases, the parties named in Section 7.
No transfers to third countries. We do not transfer any personal data to countries outside the European Union or the European Economic Area.
No automated decision-making. We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
10. Your rights
You have the following rights regarding your personal data:
- right of access (Art. 15 GDPR)
- right to rectification (Art. 16 GDPR)
- right to erasure (Art. 17 GDPR)
- right to restriction of processing (Art. 18 GDPR)
- right to data portability (Art. 20 GDPR)
- right to withdraw consent with effect for the future (Art. 7(3) GDPR)
To exercise your rights, an informal message to kollektiv@evolvet.de is sufficient.
RIGHT TO OBJECT UNDER ART. 21 GDPR
Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.
Where we process your data for direct marketing, you may object at any time without giving reasons. Your data will then no longer be used for this purpose.
Right to lodge a complaint. You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestr. 2-4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.
11. Advertising emails and updates
Objection to advertising emails. We hereby object to the use of the contact details published in our legal notice for sending unsolicited advertising and information material. We expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.
Updates. We update this privacy policy when our data processing or the legal situation changes. The version published on this website applies.
Last updated: October 2026