Note: This is a courtesy English translation provided for convenience. The original German version (available here) is the legally binding version; in the event of any discrepancy, the German version prevails.

Privacy Policy

Last updated: October 2026

1. Controller

EvoNTech GmbH
Hubertusstraße 55
82131 Gauting, Germany
Represented by its Managing Director Klaus Schwebel
Phone: +49 89 9789 3370
Email: office@evontech.de

We have not appointed a data protection officer, as the legal requirements for doing so (Art. 37 GDPR, Section 38 BDSG) are not met. For any data protection questions, please contact us using the details above.

2. Overview

This privacy policy explains which personal data we process when you visit this website and use our services (contact, Quick Check, appointment booking), for what purposes and on what legal basis. Personal data is any information that can identify you personally.

This website uses no analytics or marketing tools (e.g. no Google Analytics, no advertising or tracking pixels). Fonts and code libraries are served from our own server. Third-party content (Spotify podcast) is only loaded after you explicitly click on it.

3. Hosting and server log files

Hosting

This website is hosted by:

GoDaddy.com, LLC
2155 E GoDaddy Way
Tempe, Arizona 85284, USA

When you access the website, the host processes the technically necessary data on our behalf. We have concluded a data processing agreement with the provider (Art. 28 GDPR). As the provider is based in the USA, a transfer of personal data to the USA cannot be ruled out. GoDaddy is certified under the EU-US Data Privacy Framework (DPF); transfers are based on the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR) and, additionally, on the EU Standard Contractual Clauses. More information: GoDaddy privacy policy.

The legal basis is our legitimate interest in providing the website securely, reliably and efficiently (Art. 6(1)(f) GDPR).

Server log files

Each time the website is accessed, the following data transmitted by your browser is automatically recorded in server log files:

IP address
date and time of the request
page or file accessed
referrer URL (previously visited page)
browser type and version, operating system

This data is not combined with other data sources. It is processed to deliver the website, ensure system security and analyse errors. The legal basis is Art. 6(1)(f) GDPR. Log files are deleted after 30 days at the latest unless they are needed to investigate a specific security incident.

SSL/TLS encryption

For security reasons, this site uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" and the padlock symbol in your browser's address bar.

4. Cookies and access to your device

This website does not set any cookies itself and does not access information on your device beyond what is strictly necessary for its operation (Section 25(2) TDDDG). A cookie banner is therefore not required.

Only if you actively load the Spotify podcast (see section 8) may Spotify use cookies or similar technologies. This happens solely on the basis of the consent you give by clicking (Section 25(1) TDDDG, Art. 6(1)(a) GDPR).

5. Contacting us

Contact form

Our contact form does not transmit your data to a server. When you submit it, your email program opens with a pre-filled message to office@evontech.de, which you send yourself. No form data is stored on the website.

Enquiries by email or phone

If you contact us by email (including via the contact form) or by phone, we process your details (e.g. name, email address, phone number, request) to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures, and otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

Your data is deleted once your enquiry has been fully dealt with, unless statutory retention obligations apply (in particular commercial and tax retention periods of up to 10 years for business correspondence).

6. Quick Check (online maturity assessment)

The Quick Check lets you assess your company's maturity and receive an individual evaluation as a PDF. The Quick Check is currently available in German only.

Data processed

name and email address (mandatory), phone number (optional)
company details: position, company size, industry, countries of operation
your answers to the Quick Check questions and optional free-text entries (challenges, goals, framework conditions)
the resulting evaluation (PDF)

Purpose and legal basis

We process this data solely to create your evaluation, send it to you by email and answer any questions about it. The legal basis is Art. 6(1)(b) GDPR (provision of the service you requested) and the consent you give via checkbox before submitting (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future, e.g. by email to office@evontech.de.

Your data is not used for advertising purposes (e.g. newsletters).

Technical implementation and recipients

The evaluation is generated in your browser. After submission, your details and the PDF evaluation are sent to a Google Apps Script, logged in a Google spreadsheet, the PDF is stored in Google Drive and a notification is sent to office@evontech.de. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We have concluded a data processing agreement with Google. A transfer to the USA cannot be ruled out; Google LLC is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). More information: Google privacy policy.

Retention

We delete your Quick Check data no later than 24 months after your participation unless it leads to an engagement, or earlier if you withdraw your consent or request deletion. Statutory retention obligations remain unaffected.

7. Appointment booking via Calendly

To arrange initial consultations, we link to the booking service Calendly. Calendly is not embedded in our website; data is only transmitted when you click the link and open the Calendly page. The provider is Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA.

When you book an appointment, the data you enter (e.g. name, email address, preferred time, notes) is processed to plan, conduct and follow up on the appointment. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in straightforward scheduling). We have concluded a data processing agreement with Calendly. Calendly is certified under the EU-US Data Privacy Framework (Art. 45 GDPR); the EU Standard Contractual Clauses apply additionally. More information: Calendly privacy policy.

Appointment data is deleted once it is no longer required for its purpose and no statutory retention obligations apply.

8. Podcast (Spotify)

On our "Team" page we offer our podcast. The Spotify player is not loaded automatically. A connection to Spotify's servers is only established when you click "Load podcast". In that case, your IP address, browser information and the page visited in particular are transmitted to Spotify, and Spotify may use cookies or similar technologies. Alternatively, you can open the podcast directly on Spotify via a simple link.

The provider is Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden. The legal basis is the consent you give by clicking (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Consent applies only to the current page view; on your next visit the player will again only load after a click. Transfers to third countries by Spotify cannot be ruled out. More information: Spotify privacy policy.

9. Links to social networks

Our website links to our company profile on LinkedIn. This is a simple link, not a plugin: no data is transmitted to LinkedIn when you visit our website. Only when you click the link do LinkedIn's privacy provisions apply (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland).

10. Fonts and code libraries

The fonts used on this website (Manrope, Inter, Fraunces, DM Sans, Playfair Display) and the code library used for PDF generation in the Quick Check (jsPDF) are stored locally on our server. No connection to servers of Google or other third parties is established when you visit the website.

11. Audio and video conferencing (Microsoft Teams)

For online meetings with prospects and clients we use Microsoft Teams. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. The data required for participation is processed (e.g. name, email address, video and audio data, chat messages, IP address, device and connection data, and metadata such as start, end and participants). The legal basis is Art. 6(1)(b) GDPR where the meeting serves to initiate or perform a contract, and otherwise Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with Microsoft. A transfer to the USA cannot be ruled out; Microsoft is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). Meetings are only recorded after prior notice and with the consent of all participants. More information: Microsoft privacy statement.

12. Job applications

If you apply to us (e.g. by email), we process your details and documents to conduct the application process. The legal basis is Art. 6(1)(b) GDPR (initiation of an employment relationship) and, where you have given consent, Art. 6(1)(a) GDPR. Your data is only accessible to the people involved in the application process.

If no employment relationship results, we delete your documents no later than 6 months after the process has ended. Retention during this period serves to defend against possible claims, in particular under the German General Equal Treatment Act (Art. 6(1)(f) GDPR). Longer storage only takes place with your consent.

13. Your rights

You have the following rights regarding your personal data:

right of access (Art. 15 GDPR)
right to rectification (Art. 16 GDPR)
right to erasure (Art. 17 GDPR)
right to restriction of processing (Art. 18 GDPR)
right to data portability (Art. 20 GDPR)
right to withdraw consent with effect for the future (Art. 7(3) GDPR)

To exercise your rights, simply send an informal message to office@evontech.de.

Right to object (Art. 21 GDPR)

Where we process your data on the basis of Art. 6(1)(f) GDPR (legitimate interest), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where your data is processed for direct marketing purposes, you have the right to object to this processing at any time.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Germany
www.lda.bayern.de

14. Obligation to provide data and automated decision-making

You are not legally or contractually obliged to provide your data. Without your name and email address, however, we cannot send you a Quick Check evaluation or answer enquiries. No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place; the Quick Check evaluation is a purely arithmetical classification of your own answers with no legal effect on you.

15. Changes to this privacy policy

We update this privacy policy when the website, our services or the legal situation change. The version published here applies.

Contact

Questions about data protection at EvoNTech? Write to us at office@evontech.de.