Privacy Policy

1. Controller

The controller for the processing of personal data on this website pursuant to Art. 4 (7) GDPR is:

EVER Health GmbH
Goethestrasse 5
35633 Lahnau
Germany

Email: support@everhealth.ai

2. Data protection officer

If you have questions about data protection or wish to exercise your rights, you can contact our data protection officer:

RPA Datenschutz + Compliance GmbH
represented by its managing directors Ilja Borchers and Henning Koch
Hauser Gasse 19b
35578 Wetzlar
Germany

Phone: +49 (0)6441 / 67100-0
Email: info@rpa-datenschutz.de

3. Scope

This privacy policy applies to the website precision.everhealth.ai, including all subpages. A separate privacy policy applies to the main website everhealth.ai.

4. Data collected

We process the following categories of personal data:

• Master data: name, email address, postal address, when you voluntarily provide them in the newsletter, booklet download or checkout.
• Content data: form inputs and order information.
• Usage data: pages visited, time on site, click paths.
• Communication data: IP address, browser type, operating system, referrer.
• Order data: order scope, payment processing data via our payment service provider.

5. Purposes of processing

• Providing this website and its features.
• Processing orders via the integrated shop.
• Sending the newsletter and providing the free booklet following your consent.
• Analysing usage to improve the website.
• Fulfilling legal obligations, such as tax and commercial retention periods.

6. Legal bases

Processing is based on one of the following legal bases depending on the processing context:

• Art. 6(1)(a) GDPR (consent), in particular for newsletter, booklet download and statistics cookies.
• Art. 6(1)(b) GDPR (performance of a contract), in particular for orders.
• Art. 6(1)(c) GDPR (legal obligation), in particular for tax retention.
• Art. 6(1)(f) GDPR (legitimate interests), in particular for the secure provision of the website.

7. Cookies

This website uses cookies and comparable technologies such as localStorage. Cookies are divided into three categories:

• Necessary cookies, which are required for the website to function. These are set without your consent, based on Art. 6(1)(f) GDPR.
• Statistics cookies, which help us analyse how the website is used. These are only set with your consent.
• Marketing cookies, used for personalised content and advertising. These are only set with your consent.

You can adjust or withdraw your consent at any time via the footer link "Cookie Settings".

8. Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics 4 uses cookies that enable statistical analysis of how this website is used. The information generated is generally transferred to and stored on a Google server. With IP anonymisation enabled, which is the default in Google Analytics 4, your IP address is shortened before transmission. Transfer to third countries, including the USA, may occur. Acceptance of Google's data processing terms pursuant to Art. 28 GDPR is in preparation.

Retention period for data collected by Google Analytics: 14 months.

Use occurs exclusively following your explicit consent via the cookie banner (Art. 6(1)(a) GDPR). You can withdraw consent at any time by opening "Cookie Settings" in the footer and deactivating the "Statistics" category.

Further information on data protection at Google is available at policies.google.com/privacy.

9. Meta pixel

We use the Meta pixel provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The pixel is only loaded and activated once you have consented to the marketing category. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR.

This transmits your IP address, information about your browser and device, and the pages you visit to Meta. We use the pixel to measure the effectiveness of our advertising and to build advertising audiences.

Meta also processes data in the USA, based on the European Commission's standard contractual clauses and Meta's certification under the EU-US Data Privacy Framework.

You can withdraw your consent at any time via the "Cookie settings" link in the footer. For more information see Meta's privacy policy.

10. Shopify

For orders we use the Shopify platform, operated by Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

When you place an order, the data required for processing the contract is transmitted to and processed by Shopify. A data processing agreement pursuant to Art. 28 GDPR with Shopify is in preparation. The legal basis is Art. 6(1)(b) GDPR.

Data transfer to the USA and other third countries may occur. Shopify uses EU standard contractual clauses.

11. HubSpot

For newsletter delivery and provision of the free booklet we use HubSpot, operated by HubSpot Ireland Limited, 1 Sir John Rogerson's Quay, Dublin 2, Ireland.

When you sign up for the newsletter or request the booklet, the data you provide (email address and, where applicable, name) is transmitted to and stored by HubSpot. A data processing agreement pursuant to Art. 28 GDPR with HubSpot is in preparation. The legal basis is Art. 6(1)(a) GDPR.

You can unsubscribe from the newsletter at any time, for example via the unsubscribe link in each email.

12. Contact form

When you submit the contact form, the data you enter, namely your name, email address, phone number if provided, and your message, is transmitted to HubSpot (HubSpot Ireland Limited, 1 Sir John Rogerson's Quay, Dublin 2, Ireland) and stored there in the provider's EU data region as a support case, so that we can handle your enquiry and follow its history. These details are not used for advertising purposes, and submitting the form does not sign you up for the newsletter. We delete the case once your enquiry has been dealt with conclusively and no statutory retention periods stand in the way.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to entering into or performing a contract, otherwise Art. 6 (1) (f) GDPR based on our legitimate interest in responding to enquiries.

13. Hosting with Vercel

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel processes technically necessary data such as your IP address and browser information. A data processing agreement pursuant to Art. 28 GDPR with Vercel is in preparation. Vercel uses EU standard contractual clauses for data transfers to the USA.

The legal basis is Art. 6(1)(f) GDPR (legitimate interests in a secure and high-performance website).

14. Retention periods

We store personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations. Specifically:

• Order data: 10 years (commercial and tax law)
• Newsletter consents: until withdrawal
• Cookie consent data: 12 months from the time of consent
• Statistics data in Google Analytics: 14 months

15. Your rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR)

To exercise any of these rights, contact us at support@everhealth.ai.

16. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority competent for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
(The Hessian Commissioner for Data Protection and Freedom of Information)
Postfach 3163
65021 Wiesbaden, Germany

17. Changes to this policy

We update this privacy policy when processing activities or legal requirements change. The current version is always available on this page with the date shown above.

18. Contact

For questions about data protection, please write to us at support@everhealth.ai.