Legal
Privacy Policy
1. Controller
2. Overview of Data Processing
This website processes personal data only to the extent necessary for the operation of the website and the provision of our services. Processing takes place only on the basis of the GDPR.
No cookies requiring consent are set. No advertising tracking takes place.
3. Hosting (Vercel)
This website is hosted by Vercel Inc., 440 N Baxter Street, Los Angeles, CA 90012, USA. When you access the website, server log data is automatically collected:
- IP address
- Date and time of the request
- Browser type and version
- Requested URL
Processing is based on Art. 6(1)(f) GDPR (legitimate interest in the technical operation of the website). Log data is automatically deleted by Vercel after 30 days.
Data transfer to the USA is based on the EU-US Data Privacy Framework. Vercel privacy policy: vercel.com/legal/privacy-policy
4. Web Analytics (Vercel Analytics & Speed Insights)
We use Vercel Analytics and Vercel Speed Insights to analyse website usage and performance. These services collect anonymised, aggregated data. No cookies are set and no individual user profiles are created.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in website optimisation).
5. Fonts (Google Fonts)
This website uses fonts from Google (Google Fonts). The fonts are downloaded during the build process via Next.js and served from our own server. No direct connection to Google servers is made when visiting the website.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in consistent website presentation).
6. Contact Form
When you use the contact form, we process the details you enter: name, email address, your message and, optionally, company, topic, company size, monthly volume and information about your current solution. We also store the time of the enquiry and which page of our website you opened the form from.
Your enquiry is passed to us by automation software (n8n) that we operate ourselves on a server of Hostinger International Ltd. in Frankfurt am Main, Germany. From there it is delivered as an email to our mailbox at Google Workspace (Google Ireland Limited). We notify ourselves internally of new enquiries via Telegram; this notification contains no details that identify you, only the topic and the page you came from.
To handle your enquiry, we also record it in our workspace at Notion (Notion Labs, Inc., USA). An AI assistant prepares our reply: it evaluates your enquiry, researches publicly available information about your company and suggests a draft reply. For this, the content of your enquiry is transmitted via the OpenRouter service (OpenRouter, Inc., USA) to providers of AI models; we only allow providers that do not retain the data after processing. No automated decision is made: a person reviews and sends every reply.
If no collaboration results, we delete your enquiry no later than six months after the last contact.
To protect against automated spam, the form checks a field that is invisible to people and how long the form took to fill in. No further data is stored for this.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in communication, a prompt and well-founded reply, and abuse prevention).
7. Your Rights
Under the GDPR, you have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
To exercise your rights, please contact: info@jevolution.de
8. Retention Period
Personal data is stored only for as long as necessary for the respective processing purposes or as required by statutory retention obligations. Contact enquiries are deleted after processing is complete and any warranty periods have expired, unless statutory retention obligations apply.
9. Data Transfer to Third Countries
Some of the service providers we use are based in the USA or belong to companies based in the USA (Vercel, Google, Notion, OpenRouter and the AI model providers connected via OpenRouter). Any transfer of data to the USA is carried out on the basis of the EU-US Data Privacy Framework or Standard Contractual Clauses (Art. 46(2)(c) GDPR).
10. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority. The competent supervisory authority for Bavaria is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
Version: October 2026