Privacy Policy
Introduction and Controller
This Privacy Policy explains in detail how datazeit GmbH (hereinafter "eyva", "we", or "us") processes your personal data when you use our website eyva.ai. We are committed to complying with the General Data Protection Regulation (GDPR) and the relevant national data protection laws, and we take the protection of your data very seriously.
The controller within the meaning of the GDPR is datazeit GmbH, Lindenstraße 32, 50674 Cologne, Germany. If you have any questions or concerns regarding data protection, please contact us at hello@eyva.ai.
Scope and Effective Date
This policy applies to all personal data we collect and process in connection with the operation of the website eyva.ai. We reserve the right to update this policy and will notify you of any changes here.
Definitions
Personal data (PII) means any information relating to an identified or identifiable natural person. A person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, an online identifier, or one or more factors specific to that person.
Collection of Personal Data
Voluntary Information Provided via Forms
We collect personal data when you voluntarily provide it – for example through contact or demo request forms. The following information may be collected:
- Name and professional position.
- Contact information, in particular email address.
- Any other information you share with us during our communication (e.g. your enquiry, the company you work for).
Providing this information is voluntary. You can generally browse our website anonymously and inform yourself without disclosing any personal data.
Automatically Collected Data
When you visit our website, we process technical data that is required to display the site correctly and to protect it from misuse:
- Browser and operating system information (e.g. browser type and version, operating system of your device),
- IP address, date, and time of access,
- Other technical metadata (e.g. screen resolution, language settings) used to optimise our service.
This information is used for security, troubleshooting, and improving the user experience.
Use of Cookies and Similar Technologies
Our website uses cookies, pixels, and comparable technologies to provide its core functionality, analyse user behaviour, and support our marketing activities. A cookie is a small text file that is stored on your device when you visit a website and contains information about your visit.
We distinguish between the following cookie categories:
- Essential cookies: required for the website to provide basic functionality, such as navigation and remembering your privacy preferences.
- Functional cookies: improve performance and enable additional features (e.g. search functions, embedded videos).
- Analytics cookies: collect information about how visitors use the website so that we can improve its design and content. These are only set with your explicit consent.
- Advertising cookies: enable us to display ads tailored to your interests.
When you first visit our website, a cookie banner appears that lets you consent to or reject the use of non-essential cookies. You can change your cookie settings at any time via your browser settings or delete existing cookies. Please note that blocking certain cookies may limit the functionality of our website.
Third-Party Cookies
We integrate services from external providers that may set cookies on our behalf. These providers include in particular:
- Framer B.V.: hosting platform for our website.
- Google Analytics: collection and analysis of usage statistics.
- LinkedIn Insight Tag: tracking pixel for measuring campaigns.
- HubSpot: tracking pixel on the website as well as CRM and email communication with prospects (e.g. after demo requests).
These third parties may process data on their own responsibility and under their own privacy policies. We have entered into data processing agreements with our processors to ensure that your data is only processed for the agreed purposes and in line with the GDPR.
Web Hosting and Technical Service Providers
Our website is hosted by Framer B.V., Singel 542, 1017 AZ Amsterdam, The Netherlands. When the website is loaded, technical data such as log files (including the IP address) are generated and are required for stable and secure delivery. The legal basis for this processing is Art. 6(1)(f) GDPR (legitimate interest) and, where your consent is required, Art. 6(1)(a) GDPR in conjunction with § 25 TTDSG.
Purposes of Data Processing
We process your personal data for the following purposes:
- Responding to enquiries and communication: when you contact us, we use your information to address your request and, if necessary, follow up with you.
- Pre-contractual and contractual matters: if you request quotes or use our services, the processing serves the preparation and performance of the contract.
- Internal administration: this includes maintaining prospect and customer lists as well as internal statistics and analyses to improve our products and services.
- Marketing and promotion: we send you information about our products and services if you have given your consent. You can object to this use at any time.
- Security and abuse prevention: technical data is processed to detect and defend against attacks and to ensure the security of our IT systems.
Legal Bases for Processing
Depending on the purpose of processing, we rely on different legal
bases:
- Art. 6(1)(a) GDPR (consent): for marketing activities, newsletter delivery, and non-essential cookies.
- Art. 6(1)(b) GDPR (performance of a contract): when we need your data to take pre-contractual steps or to fulfil a contract.
- Art. 6(1)(c) GDPR (legal obligation): where legal obligations apply (e.g. tax retention requirements).
- Art. 6(1)(f) GDPR (legitimate interest): to improve our website, ensure its security, and run analyses. Our legitimate interest is always carefully weighed against your rights.
Disclosure of Data
We do not disclose your personal data to external third parties unless this is required for the performance of a contract, to fulfil a legal obligation, or based on your consent. Within eyva, data is only shared with employees who need it to carry out their work. We do not sell your data.
Storage Period and Deletion
We only store your personal data for as long as is required for the purposes set out in this Privacy Policy or as required by statutory retention obligations. Data of prospects is stored for the duration of the business relationship or until you object. Once the purposes cease to apply or the statutory retention periods expire, we delete or anonymise your data.
Rights of Data Subjects
As a data subject, you have extensive rights under the GDPR:
- Right of access: you can request information about whether and which personal data we process about you.
- Right to rectification: you can have inaccurate or incomplete data corrected.
- Right to erasure: under certain conditions you can request the deletion of your data (Art. 17 GDPR).
- Right to restriction of processing: you can have the processing of your data restricted under certain circumstances.
- Right to object: you have the right to object to the processing of your data on grounds relating to your particular situation.
- Right to data portability: you have the right to receive the data you provided in a structured, commonly used format.
- Right to lodge a complaint: you can lodge a complaint with a competent data protection supervisory authority if you believe we process your data unlawfully.
- Right to withdraw consent: you can withdraw any consent you have given at any time with effect for the future.
To exercise these rights, you can contact us in writing or by email. We will review and respond to your request in accordance with applicable law.
Right to Refuse and Withdraw
You are not obliged to provide personal data. However, if you choose not to provide certain data, we may not be able to offer you all features or services. You may object to the use of your data for marketing purposes at any time and unsubscribe from our newsletter.
Authenticity and Responsibility for the Data
You are responsible for the accuracy and currency of the data you provide. We accept no liability for the authenticity of the information transmitted to us.
Security
We use appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, or alteration. These include access controls, encryption, and regular security reviews. We are committed to processing your personal data fairly and lawfully and only storing it for as long as necessary.
Changes to this Privacy Policy
We may occasionally adjust this Privacy Policy to reflect changes in the legal framework or new functionality on our website. The current version is always available at eyva.ai. Please review the applicable version on each visit.
Contact for Data Protection Enquiries
If you have any questions or concerns regarding the processing of your personal data or wish to exercise any of your rights, please contact us at:
datazeit GmbH
Lindenstraße 32
50674 Cologne
Germany
Email: hello@eyva.ai
We take the protection of your data seriously and will handle your request in accordance with applicable law.