Privacy Policy

1. Controller

everycore (a business designation of the sole proprietor Sergej Deschin), Dülkenstraße 9, 51143 Köln, Germany. Email: hey@everycore.net. Phone: +49 176 83347000.

2. Hosting

This website is operated on the platform of Lovable (Lovable Labs Incorporated, USA); this includes the hosting of the website as well as the database and server functions used. The provider processes connection and usage data exclusively on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. Insofar as personal data is transferred to the USA in this context, this is done on the basis of the European Commission's Standard Contractual Clauses (Art. 46 (2)(c) GDPR).

3. Server logs

When you access this site, the hosting provider automatically collects standard access data (IP address in shortened form where possible, date and time, requested URL, user agent, referrer). This data is processed on the basis of Art. 6 (1)(f) GDPR (legitimate interest in operating and securing the site) and is deleted or anonymised after no more than 30 days.

4. Contact form

When you use the contact form, we process the data you provide (name, email address, optionally company, message) as well as the time of submission in order to respond to your inquiry. The legal basis is Art. 6 (1)(b) GDPR (pre-contractual measures) or Art. 6 (1)(f) GDPR (legitimate interest in responding to inquiries). Providing your name, email address and message is required in order to process your inquiry; without this information we cannot respond to it.

Transmission takes place via a server-side function of our application platform (see section 2). The inquiries are then stored in a Google Sheets spreadsheet that we use to track inquiries. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. A data processing agreement (Cloud Data Processing Addendum) is in place. Using the “data regions” feature, the data is stored at rest in data centres in Germany. Insofar as, in exceptional cases, data is transferred to Google LLC in the USA as part of support or operational processes, this is done on the basis of the Standard Contractual Clauses (Art. 46 (2)(c) GDPR) as well as Google LLC's certification under the EU-US Data Privacy Framework.

Data is retained for up to 6 months and then deleted, unless a longer retention is required by law or by an ongoing business relationship.

5. Cookies and tracking

This website does not set marketing or profiling cookies and does not embed third-party advertising pixels. A local storage entry may be used to remember your language preference. This storage is strictly necessary to provide the service you expressly requested and therefore does not require consent pursuant to Section 25 (2) no. 2 TDDDG.

6. Reach measurement

The platform on which this website is operated (see section 2) compiles aggregated access statistics for us, including the number of visits, page views and bounce rate. The evaluation is carried out on our behalf on the basis of Art. 6 (1)(f) GDPR (legitimate interest in measuring reach and improving our offering). No cookies are set for analytics purposes and no cross-device user profiles are created.

In addition, we use Umami — self-hosted on our own server (analytics.everyco.re, data centre in Germany). No cookies are set and no data is transferred to third parties; cross-device recognition does not take place. Only anonymised metrics are recorded (page viewed, referrer, approximate location at country level, browser and device type); IP addresses are not stored. The legal basis is our legitimate interest in privacy-friendly reach measurement (Art. 6 (1)(f) GDPR).

7. Recipients

Personal data is only passed on to processors acting on our documented instructions. These are: Lovable Labs Incorporated (hosting, application platform and access statistics) and Google Ireland Limited (Google Sheets for managing contact inquiries). Beyond this, data is only disclosed where legally required.

8. Your rights

You have the right to access, rectify, erase, restrict processing of, and port your personal data, and to object to processing (Art. 15–21 GDPR). You can withdraw consent at any time with effect for the future. You may lodge a complaint with a supervisory authority — for us this is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestr. 2–4, 40213 Düsseldorf, https://www.ldi.nrw.de.

9. Contact for data protection

For any data protection request please contact hey@everycore.net.

10. Automated decision-making

Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.