Privacy Policy | Everphone

Introduction

This privacy policy provides you with an overview of how your personal data is processed by Everphone GmbH (hereinafter "Everphone") and the purposes for which this is done. We inform you about the legal framework and the rights to which you are entitled.

The party responsible for this website is

Everphone GmbH
Zimmerstraße 79-80
10117 Berlin
Germany

Phone: +49 30 516958275
Email: info@everphone.de
Website: www.everphone.com/en

Responsible for monitoring and ensuring compliance with data protection is our Data Protection Officer:

Dr. Sebastian Kraska, email@iitr.de

Below, we have compiled the most important information on typical data processing activities, separated by categories of data subjects.

1. Website Visitors

1.1 Automatically Collected Data (Server Log Files)

To operate our website and provide our services, we process automatically collected information in so-called server log files, which your browser automatically transmits to us:

IP address of your device (in anonymised form)
Device data, i.e. operating system, browser type and browser version
The so-called referrer URL, i.e. the address you visited immediately before
Amount of data transferred
Notification of successful retrieval (HTTP response code)
Websites accessed by the user's system via our website
The user's internet service provider
The host name of the accessing device
Time and date of the server request

This data is processed during an informational visit in order to enable you to access the web pages you have requested and to ensure the security and stability of our website. This is done to enable you to use the web pages you have accessed and to monitor whether our websites are displayed optimally for you.

1.2 Purposes of Data Processing

The purpose of data processing is to operate our website and ensure its permanent availability, functionality and security.

1.3 Legal Basis of Data Processing

The legal basis for this data processing is Art. 6(1)(f) GDPR, based on our legitimate interest in the appropriate optimisation of our website.

1.4 Retention Periods

Your data will be stored until the contractual and/or statutory retention periods have been fulfilled.

2. Use of Analytics Tools

2.1 Data Processing by Google Analytics

Based on your consent, Everphone uses functions of the web analytics service Google Analytics by Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.

Google Analytics also uses so-called "cookies". These are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of the website is usually transmitted to and stored on a Google server in the USA.

By using Google's IP anonymisation on the website, your IP address is truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.

On behalf of the website operator, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website and internet usage to the website operator. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies by adjusting your browser software accordingly; however, please note that in this case you may not be able to use all the functions of the website to their full extent. You can also prevent the collection of data generated by the cookie relating to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en

We use Google Analytics to analyse and regularly improve the use of our website. We use the statistics obtained to optimise our offering and make it more interesting for you as a user.

2.2 Legal Basis

The legal basis for data processing is Art. 6(1)(a) GDPR.

2.3 Retention Periods

This user-related data is automatically deleted after 14 months.

2.4 Data Processing by Contentsquare

Based on your consent, Everphone uses the web analytics service Contentsquare provided by Contentsquare SAS, France.

Contentsquare records how you use our website: mouse movements, clicks, scrolling and page views, together with technical details about your device and browser. From this data, Contentsquare produces session recordings and so-called heatmaps on our behalf. Contentsquare uses cookies for this purpose.

We use Contentsquare to understand where our website is hard to follow, and to improve it accordingly. We evaluate the recordings to improve the website; we do not use them to identify or assess individual people.

Contentsquare is not loaded without your consent. You can withdraw your consent at any time via our cookie settings. Further information on data processing by Contentsquare is available at https://contentsquare.com/privacy-center/website-privacy-policy/

2.5 Legal Basis

The legal basis for data processing is Art. 6(1)(a) GDPR.

2.6 Retention Periods

This data is automatically deleted once the retention period configured in our Contentsquare account expires.

3. Cookies

We use cookies and other similar technologies to operate our website. When you visit our website for the first time, we will ask your permission to store certain non-essential cookies and other similar technologies on your device. It is entirely up to you whether you agree or not (although some aspects of the website may not work as well if you do not), and you can change your mind at any time.

3.1 Purpose of Data Processing

The purpose of data processing with regard to necessary cookies is to provide Everphone's services.

3.2 Legal Basis

The legal basis for the processing of personal data with regard to necessary cookies is our legitimate interest pursuant to Art. 6(1)(f) GDPR.

3.3 Categories of Recipients

Your data is shared with external service providers or other contractors, including for data processing and hosting. Furthermore, data may be shared with other external parties insofar as the data subject has given their consent or a transfer is permissible on the basis of overriding interests.

3.4 Retention Periods

Your data will be stored until the contractual and/or statutory retention periods have been fulfilled.

4. Enquiries via the Contact Form on the Website

4.1 Type of Data

If you wish to contact us via our contact form on our website, we require your salutation, first and last name, an email address, your organisation, the subject, and optionally a telephone number.

4.2 Purpose of Data Processing

The purpose of data processing is to respond to your enquiry or to establish contact.

4.3 Legal Basis

The legal basis for data processing is our legitimate interest in processing your enquiry pursuant to Art. 6(1)(f) GDPR and Art. 6(1)(b) GDPR, the fulfilment of pre-contractual measures.

4.4 Categories of Recipients

4.5 Retention Periods

Your data will be stored until the contractual and/or statutory retention periods have been fulfilled.

5. Newsletter Registration

5.1 Type of Data

If you wish to subscribe to newsletters, we require your first and last name and an email address.

5.2 Purpose of Data Processing

The purpose of data processing is to send the newsletter.

5.3 Legal Basis

By activating the confirmation link (opt-in), you give us your consent for the use of your personal data in accordance with Art. 6(1)(a) GDPR (consent of the data subject to the processing).

5.4 Categories of Recipients

5.5 Retention Periods

You can unsubscribe from the newsletter at any time via the link provided in the newsletter. After unsubscribing, your personal data will be deleted immediately, unless you have expressly consented to further use of your data or we have reserved the right to use your data beyond this, which is permitted by law.

6. Downloading Whitepapers

6.1 Type of Data

If you wish to download whitepapers, we require your first and last name, telephone number, your organisation and an email address.

6.2 Purpose of Data Processing

The purpose of data processing is to send the requested whitepaper and to establish contact.

6.3 Legal Basis

By activating the confirmation link (opt-in), you give us your consent for the use of your personal data in accordance with Art. 6(1)(a) GDPR (consent of the data subject to the processing).

6.4 Categories of Recipients

6.5 Retention Periods

Your data will be stored until the contractual and/or statutory retention periods have been fulfilled.

7. Job Applicants

7.1 Type of Data

If you apply with us, we require your name, contact details and your application documents.

7.2 Purpose of Data Processing

The purpose of data processing is the selection of applicants for an employment relationship.

7.3 Legal Basis

The legal basis is Art. 6(1)(b) GDPR (contract fulfilment and implementation of pre-contractual measures) and Art. 6(1)(a) GDPR (consent of the data subject).

7.4 Categories of Recipients

7.5 Retention Periods

In the event of non-employment, data will be deleted six months after the end of the application process. If employment follows, the retention period is governed by the statutory retention regulations for employees.

8. Trustpilot

We use the review service of Trustpilot A/S, Pilestræde 58, 5th floor, 1112 Copenhagen K, Denmark ("Trustpilot").

If you have purchased a service from us, we may subsequently send you an invitation to review our service via Trustpilot. For this purpose, we transmit the data required to send the review invitation to Trustpilot. This includes in particular your name, your email address and a reference number, for example an order or transaction number.

Trustpilot processes this data on our behalf in order to send the review invitation and to be able to attribute the review to a genuine experience with our company. The basis for this is a data processing agreement pursuant to Art. 28 GDPR.

The processing is based on our legitimate interest in obtaining customer reviews and in improving and presenting the quality of our services pursuant to Art. 6(1)(1)(f) GDPR. The review request is sent by email subject to the requirements of Section 7(3) of the German Act against Unfair Competition (UWG).

You may object to the use of your email address for review requests at any time, without incurring any costs other than the transmission costs according to the basic rates. A corresponding notice and an option to object are included in every review request.

If you submit a review on Trustpilot, your personal data is further processed on the Trustpilot platform in accordance with Trustpilot's privacy policy.

Further information on the processing of personal data by Trustpilot can be found in Trustpilot's privacy policy.

9. Transfer of Personal Data to Third Countries

As a general rule, your personal data is processed in Germany and other European countries. If your personal data is exceptionally processed in countries outside the European Union or the European Economic Area (so-called third countries), this only takes place insofar as specific safeguards ensure an adequate level of data protection. Typically, we take the following protective measures:

EU Commission adequacy decisions: Recipients in Andorra, Argentina, Canada, Faroe Islands, Guernsey, Israel, Isle of Man, Japan, Jersey, New Zealand, Switzerland, Uruguay, UK
Standard contractual clauses: Other recipients
Derogations under Art. 49 GDPR: Other recipients

Further information on third-country transfers or copies of these measures can be obtained from the contact addresses listed above.

10. Transfer of Personal Data within the Corporate Group

We are part of the Everphone group and work collaboratively with other group companies. Personal data is only transferred to other group companies if there is a legal basis for doing so and this is necessary for one of the purposes listed above. The Everphone group has concluded a group-wide agreement on the handling of personal data.

11. Data Subject Rights

For questions about your rights and further enquiries regarding personal data in relation to Everphone as the data controller responsible for the operation of the website, you can contact us at any time by email at dataprivacy@everphone.de. For enquiries concerning your data as an employee, please contact your employer as the data controller.

11.1 Right of Withdrawal

You have the right to withdraw your consent at any time without giving reasons, with effect for the future.

11.2 Right of Access

You have the right at any time to obtain information about your stored personal data, its origin and recipients, and the purpose of data processing.

11.3 Right to Rectification

You have the right at any time to have your stored data corrected.

11.4 Right to Erasure / Blocking

You have the right at any time to have your stored data deleted or blocked from further processing, where we are obligated to retain your data due to statutory retention obligations (e.g. invoices).

11.5 Right to Restriction of Processing

You have the right to restrict data processing:

if you dispute the accuracy of your data and cannot correct it yourself;
if the processing is unlawful but you do not wish to have the data deleted;
if we as the controller no longer need your data, but you need it for the assertion, exercise or defence of legal claims; or
if you have objected to the processing and it has not yet been determined whether our legitimate grounds override your grounds for the objection.

11.6 Right to Object to Processing

If you have given consent for the processing of your data, you may revoke it at any time. Such revocation affects the permissibility of the processing of your personal data after you have communicated it to us.

11.7 Right to Data Portability

If you so wish, we will provide you with your data that you have personally made available to us in a structured, commonly used and machine-readable format and/or transmit it to another controller, insofar as this is technically feasible.

11.8 Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint at any time with the supervisory authority responsible for us for data protection.