EverBits — Company, Team, Impressum & Privacy Policy

GDPR · Data Protection

Privacy

We are very delighted that you have shown interest in our enterprise. Data protection is of a particularly high priority for the management of the EverBits GmbH. The use of the Internet pages of the EverBits GmbH is possible without any indication of personal data; however, if a data subject wants to use special enterprise services via our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no statutory basis for such processing, we generally obtain consent from the data subject.

The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to the EverBits GmbH. By means of this data protection declaration, our enterprise would like to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed, by means of this data protection declaration, of the rights to which they are entitled.

As the controller, the EverBits GmbH has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, Internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed. For this reason, every data subject is free to transfer personal data to us via alternative means, e.g. by telephone.

1. Terms used in this policy

We use the terms defined in Article 4 GDPR. The ones that matter for this policy are:

Personal data — any information relating to an identified or identifiable person. Someone is identifiable if they can be singled out, directly or indirectly, for example by a name, an identification number, location data or an online identifier such as an IP address.
Data subject — the person whose personal data is processed. On this website, that is normally you.
Processing — anything done with personal data: collecting, storing, using, disclosing, restricting or erasing it, whether automated or not.
Controller — whoever decides why and how personal data is processed. For this website, that is EverBits GmbH.
Processor — a company that processes personal data on the controller's behalf and on its instructions, such as a hosting provider.
Consent — a freely given, specific, informed and unambiguous indication that you agree to a particular processing, given by a statement or a clear affirmative action.

Further terms — including profiling, pseudonymisation, recipient and third party — are defined in Article 4 GDPR.

2. Who is responsible

The controller for the processing described here is:

EverBits GmbH
Frühlingstr. 25, 85737 Ismaning, Germany
Email: support@everbits.com
Website: www.everbits.com

If you have any question about how we handle your data, or if you want to exercise one of the rights described in section 8, simply write to support@everbits.com. You will reach a person, not a ticket queue.

3. Cookies, local storage and consent management

Cookies are small text files stored on your device by your Internet browser. Local storage is a comparable browser mechanism in which a website can save small amounts of data on your device.

This website sets no cookies for analytics or advertising purposes unless you have actively consented. When you first open one of our pages, a consent banner appears. Until you choose, no advertising or measurement service is loaded and no corresponding cookie is written. Declining leaves the website fully usable — no function of this site depends on your consent.

To remember your decision, we store a single entry named eb-consent-v1 in the local storage of your browser. It contains only your choice ("granted" or "denied") and the date on which it was made. It contains no identifier, is not transmitted to us or to any third party, and expires after twelve months, after which you are asked again. The legal basis for storing this entry is our legitimate interest in documenting and honoring your decision, Art. 6(1) lit. f GDPR, and § 25(2) no. 2 TDDDG, since it is strictly necessary to provide the service you expressly requested.

We implement Google Consent Mode v2. Before any consent is given, the categories ad_storage, ad_user_data, ad_personalization and analytics_storage are set to "denied" by default, and the Google tag itself is not loaded at all. It is loaded only after you press "Accept".

You can withdraw your consent at any time, with effect for the future, by clicking "Cookie settings" in the footer of any page of this website and then selecting "Decline". Withdrawal is as simple as granting consent. You may additionally prevent or delete cookies at any time through the settings of your Internet browser. The lawfulness of processing carried out before the withdrawal remains unaffected.

4. Data collected automatically when you visit

Like every web server, ours records certain technical information each time a page is requested. This happens automatically and does not depend on any action by you:

the browser type and version used;
the operating system of the accessing device;
the website from which you reached us (the referrer);
which of our pages were opened;
the date and time of access;
the IP address of the accessing device;
the Internet service provider of the accessing device;
comparable technical data that may be needed if our systems are attacked.

We do not use this data to draw conclusions about you as a person. We need it to deliver our pages correctly, to keep the site and its underlying technology stable and secure, and — in the event of a cyber-attack — to provide law enforcement with the information needed for prosecution. Where we evaluate this data statistically, we do so in anonymized form. Server log data is stored separately from any personal data you provide yourself.

This website is hosted by IONOS SE (1&1), Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS processes the data described in this section on our behalf as a processor under Art. 28 GDPR, on the basis of a data processing agreement, and stores it on servers located in Germany. Its data protection information is available at https://www.ionos.de/terms-gtc/datenschutzerklaerung/.

The legal basis is our legitimate interest in the secure and reliable operation of this website, Art. 6(1) lit. f GDPR. Log files are deleted automatically once they are no longer needed for these purposes.

5. Requesting a trial license or other services

Some of our services — for example a trial license for EverCheck or EverTest — require you to provide a few details. Which details these are is shown by the relevant form or stated in our reply to you.

We use this data solely to provide the service you asked for and for our own internal purposes. We may pass it to a processor acting on our instructions where this is necessary to deliver the service. When you submit such a request, we also store the IP address, the date and the time. This protects us against misuse of our services and allows an incident to be investigated if one occurs. We do not pass this data to third parties unless we are legally obliged to, or unless it serves the prosecution of a criminal offence.

The legal basis is the performance of a contract or of pre-contractual measures at your request, Art. 6(1) lit. b GDPR, and our legitimate interest in preventing misuse, Art. 6(1) lit. f GDPR. You can ask us at any time what data we hold about you, and ask us to correct or erase it, provided no statutory retention obligation applies.

6. Contacting us

Our website gives you several ways to reach us, including our email address. If you contact us by email, the personal data you send is stored automatically so that we can deal with your enquiry. We do not pass this data to third parties.

The legal basis is Art. 6(1) lit. b GDPR where your enquiry relates to a contract or to steps taken before entering into one, and otherwise our legitimate interest in answering enquiries addressed to us, Art. 6(1) lit. f GDPR.

7. How long we keep your data

We store personal data only for as long as we need it for the purpose it was collected for, or for as long as a statutory retention period requires. Under German commercial and tax law, such periods are typically six or ten years for business correspondence and accounting records.

Once the purpose no longer applies or the retention period expires, the data is blocked or erased as a matter of routine, in accordance with the law.

8. Your rights

The GDPR gives you the following rights over your personal data. To exercise any of them, write to support@everbits.com — no particular form is required, and it costs you nothing.

Confirmation and access (Art. 15). You can ask us whether we process personal data about you and, if we do, receive a copy of it together with information about the purposes, the categories of data, the recipients, the storage period, the source of the data where we did not collect it from you, the existence of automated decision-making, and any transfer to a third country and the safeguards applied to it.
Rectification (Art. 16). You can ask us to correct inaccurate data about you without undue delay, and to complete data that is incomplete.
Erasure (Art. 17). You can ask us to erase your data where, for example, it is no longer needed for its original purpose, you withdraw the consent it was based on and there is no other legal ground, you object and no overriding grounds remain, the data was processed unlawfully, or erasure is required by law. Where we have made data public and are obliged to erase it, we will take reasonable steps to inform other controllers processing it. We will act on a justified request promptly.
Restriction (Art. 18). You can ask us to restrict processing while we verify the accuracy of contested data, instead of erasure where processing was unlawful but you want the data kept, where we no longer need the data but you do for a legal claim, or while we assess an objection you have raised.
Data portability (Art. 20). Where processing is based on your consent or on a contract and is carried out by automated means, you can receive the data you provided in a structured, commonly used, machine-readable format, and have it transmitted to another controller where this is technically feasible and does not adversely affect the rights of others.
Objection (Art. 21). Where we process your data on the basis of legitimate interests, you can object at any time on grounds relating to your particular situation. We will then stop unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims. If we ever process your data for direct marketing, you can object at any time and we will stop immediately, with no justification needed. You may also exercise this right by automated means using technical specifications.
Withdrawal of consent (Art. 7(3)). Where processing is based on your consent, you can withdraw it at any time with effect for the future. For cookies and measurement, use "Cookie settings" in the footer of any page. Withdrawal does not affect the lawfulness of processing carried out beforehand.
Automated decision-making (Art. 22). You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or similarly significantly affects you — unless it is necessary for a contract, authorised by law, or based on your explicit consent. We do not make such decisions (see section 18).
Complaint to a supervisory authority (Art. 77). You can lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence or workplace, or where you believe an infringement occurred. The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27, 91522 Ansbach, Germany
www.lda.bayern.de

9. Job applications

If you apply to us, we collect and process the personal data in your application for the purpose of the application procedure. This may be done electronically — for example where you send your documents by email.

If we enter into an employment contract with you, we store the data you submitted for the purpose of managing the employment relationship, in accordance with statutory requirements. If we do not, your application documents are erased automatically two months after we notify you of our decision, unless we have a legitimate interest in keeping them longer — for instance to meet the burden of proof under the General Equal Treatment Act (AGG).

10. Google Ads conversion tracking

On this website the controller uses Google Ads, an Internet advertising service which allows us to place ads in Google search results and in the Google advertising network. In this context we use conversion tracking in order to measure whether a visit that originated from one of our ads led to an action such as downloading a trial version.

The operating company is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may transfer personal data to Google LLC in the United States of America. Google LLC is certified under the EU-U.S. Data Privacy Framework; transfers are additionally safeguarded by the standard contractual clauses of the European Commission. Despite these safeguards, we point out that a transfer to a third country cannot be ruled out and that authorities there may under certain circumstances access such data.

The Google tag is loaded only if you have given your consent via our consent banner. If you consent, Google sets a conversion cookie on your device. This cookie is not used to identify you personally. It expires after 90 days at the latest. Data processed in this context may include your IP address, the pages of our website you visit, and the date and time of access. Neither we nor other Google advertisers receive information from Google that would allow us to identify you personally.

The legal basis for this processing is your consent pursuant to Art. 6(1) lit. a GDPR and § 25(1) TDDDG. You may withdraw your consent at any time with effect for the future via "Cookie settings" in the footer of this website. You may also object to interest-based advertising by Google at https://adssettings.google.com. Further information and the applicable data protection provisions of Google are available at https://policies.google.com/privacy.

11. YouTube video previews and videos

On pages containing video tutorials we display preview images (thumbnails) which are retrieved from the servers of YouTube. The operating company is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; the parent company is Google LLC, United States of America.

When such a preview image is loaded, your IP address and information about your browser are transmitted to YouTube. This occurs as soon as the relevant part of the page is displayed and is technically necessary in order to show the preview. No YouTube cookie is set at this point and no video is played.

A video is only ever loaded and played after you actively click on it. Only then is a connection to YouTube established, in the extended data protection mode (youtube-nocookie.com), and only then may YouTube store information on your device. If you are logged in to YouTube at that moment, YouTube can assign the retrieval to your user account; you can prevent this by logging out of YouTube before visiting our website.

The legal basis for the transmission of preview images is our legitimate interest, Art. 6(1) lit. f GDPR, in presenting our training content in a comprehensible form; for the playing of a video it is your consent through your deliberate click, Art. 6(1) lit. a GDPR. The data protection provisions of YouTube are available at https://policies.google.com/privacy.

12. Vimeo video chapters

On some of our training pages, longer course chapters are hosted on Vimeo. The operating company is Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, New York 10001, United States of America.

When such a page is opened, we retrieve the cover image and title of the relevant chapter from the public Vimeo interface (oEmbed). In doing so, your IP address is transmitted to Vimeo. The video itself is loaded only after you actively click on the chapter; only then may Vimeo store information on your device.

The legal basis is our legitimate interest, Art. 6(1) lit. f GDPR, in presenting the course chapters, and, for the playing of a video, your consent through your deliberate click, Art. 6(1) lit. a GDPR. As Vimeo is based in the United States, a transfer to a third country takes place; it is safeguarded by the standard contractual clauses of the European Commission. The data protection provisions of Vimeo are available at https://vimeo.com/privacy.

13. Web fonts and external links

The fonts used on this website are stored on our own server and are delivered from it. No connection to Google Fonts or to any other external font provider is established, and no data is transmitted to such a provider when you visit our website.

Our pages contain simple hyperlinks to our profiles on LinkedIn and YouTube. These are ordinary links, not plug-ins: no data is transmitted to those providers unless you click on the link and thereby deliberately leave our website. The data protection provisions of the respective provider then apply.

14. Legal bases for our processing

Every processing operation described in this policy rests on one of the following legal bases in Art. 6(1) GDPR:

Consent, lit. a — where you have actively agreed to a specific purpose, such as Google Ads conversion tracking. You can withdraw consent at any time.
Contract or pre-contractual steps, lit. b — where processing is needed to deliver a service you asked for, such as issuing a trial license, or to answer an enquiry about our products.
Legal obligation, lit. c — where the law requires the processing, for example to meet tax and commercial retention obligations.
Vital interests, lit. d — in rare emergencies where processing is necessary to protect someone's life or health.
Legitimate interests, lit. f — where processing serves our legitimate interests and your rights and freedoms do not override them, such as operating this website securely.

15. Our legitimate interests

Where we rely on Art. 6(1) lit. f GDPR, our legitimate interests are the secure and reliable operation of this website, the protection of our systems against misuse and attack, the presentation of our products and training material in a comprehensible form, and the conduct of our business in the interest of our employees and shareholders.

16. How long personal data is stored

The criterion for the storage period is the relevant statutory retention period. Once it expires, the data is deleted as a matter of routine, provided it is no longer needed to perform or enter into a contract. Specific periods for individual processing operations are given in the sections above.

17. Whether you have to provide personal data

Providing personal data is sometimes required by law — tax rules, for example — and sometimes follows from a contract, such as the details we need about a contractual partner. To conclude a contract with us, you will normally have to provide certain data, which we then process. If you do not provide it, the contract cannot be concluded.

Before providing personal data, you are welcome to contact us. We will tell you whether the data is required by law or by contract or is necessary to conclude the contract, whether you are obliged to provide it, and what the consequences would be if you did not.

18. No automated decision-making

We do not use automated decision-making or profiling.

Version of this privacy policy: August 2026. We review this policy whenever we change the services used on this website.

Company, Team & Legal— Everything on the Record

Company

Team

Impressum

Privacy

Company, Team & Legal
— Everything on the Record