Skip to content
Discuss your project

Privacy policy

Last updated: August 2026

Controller under data protection law

esveo GmbH
Wilsdruffer Str. 5
01067 Dresden, Germany
Email: datenschutz@esveo.com

Managing directors: Robert Kramer, Andreas Roth, Philipp Junghanns

You can find further information about our company, details of its authorised representatives and additional ways to contact us in our imprint.

General information on data processing

We generally process your personal data only to the extent necessary to provide a functioning website and our content and services. Your personal data is normally processed only to the extent required and within the framework of the applicable legal provisions.

Your rights as a data subject

Right of access

You have the right to obtain confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right of access to that personal data.

Right to rectification

You have the right to obtain from us the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of processing, you have the right to have incomplete personal data completed, including by providing a supplementary statement.

Right to erasure (right to be forgotten)

You have the right to obtain from us the erasure of personal data concerning you without undue delay, and we are obliged to erase personal data without undue delay where one of the grounds set out in Article 17(1) GDPR applies and processing is not necessary for any of the purposes set out in Article 17(3) GDPR.

Right to restriction of processing

You have the right to obtain restriction of processing from the controller where one of the conditions set out in Article 18(1)(a) to (d) GDPR applies.

Right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to transmit that data to another controller without hindrance from us, provided this is technically feasible and the conditions set out in Article 20(1) GDPR are met.

Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you based on Article 6(1)(e) or (f) GDPR. This also applies to profiling based on those provisions.

You can exercise your right to object free of charge.

Right to withdraw consent

Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority responsible for us is:

Sächsische Datenschutz- und Transparenzbeauftragte
Maternistraße 17
01067 Dresden

Which of your data do we process, for what purposes and on what legal basis?

We process various types of data that you provide to us in connection with your visit to our website. The individual processing activities are described below.

Provision of the website, log files and hosting

Scope of processing

This website is hosted by Cloudflare. Whenever you access our website, the hosting provider’s system records data about the request. This includes the user’s IP address, the date and time of access, the volume of data received and sent, the browser, the operating system and the response indicating whether the request was successful.

The data is stored in the system’s log files. This data is not stored together with other personal data relating to the user.

Service provider

Cloudflare, Inc.
101 Townsend Street
San Francisco, CA 94107, USA

We have a data processing agreement with Cloudflare pursuant to Article 28 GDPR. Where data is transferred to the USA, the transfer is based on Cloudflare’s certification under the EU-US Data Privacy Framework and on the European Commission’s Standard Contractual Clauses.

Further information is available in Cloudflare’s privacy policy.

Legal basis for data processing

The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable provision of the website.

Purpose of data processing

The temporary storage of your IP address by the system is necessary to deliver the website to your computer. Your IP address must therefore remain stored for the duration of the session.

Log file information is collected for security reasons, for example to investigate misuse or fraud. It also helps ensure that the website functions properly. We additionally use the data to optimise the website and to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context.

Storage period

The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. Where data is collected to provide the website, this occurs when the respective session ends.

Collection and processing of data submitted through contact forms and other channels

This website allows you to contact esveo GmbH using the contact form, by telephone, by email or through social media channels. Personal data is collected, stored and processed to the extent necessary, for example to respond to enquiries.

This data includes:

  • The data subject’s first and last name
  • The data subject’s company
  • Contact details such as an email address or telephone number
  • Content data, for example entries in online forms

Purpose of collection: Contact enquiries, communication, establishing business relationships, fulfilling contractual obligations and services, or customer service.

Data is collected on the following legal bases:

  • Consent (Article 6(1), first sentence, point (a) GDPR), where you provide it in the contact form
  • Performance of a contract and pre-contractual enquiries (Article 6(1), first sentence, point (b) GDPR)
  • Legitimate interests (Article 6(1), first sentence, point (f) GDPR)
  • Legal obligation (Article 6(1), first sentence, point (c) GDPR)

Sending messages through Microsoft 365

Messages from the contact form are sent through Microsoft 365 from our own business account and processed there in the same way as our other business email. You also receive an acknowledgement at the email address you provide. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft acts as our processor pursuant to Article 28 GDPR.

Evidence of consent and protection against misuse

When you submit the contact form, we store the time of the enquiry, your IP address and the wording and version of the consent statement shown to you. This information serves as evidence of your consent (Article 7(1) GDPR) and protects the form against automated misuse. The legal basis is our legitimate interest under Article 6(1)(f) GDPR.

Storage period

We delete the information from your enquiry once the enquiry has been resolved, provided no statutory retention obligations prevent this. Evidence of consent is retained for as long as it is required for evidentiary purposes.

Statistics with Fathom Analytics

Scope and purpose of processing

We use Fathom Analytics for anonymous usage statistics to optimise the website. Fathom operates without cookies and does not create profiles across visitors. It records the page accessed, the source of the request, the browser and device type, and technical characteristics in an abbreviated form that cannot be traced back to individual people. Individual visitors are not identified, and the data is not analysed for advertising purposes.

Legal basis

The legal basis is our legitimate interest in an anonymous statistical analysis of the use of our website (Article 6(1)(f) GDPR). As Fathom does not set cookies or store or read information on your device, consent under Section 25 TDDDG is not required.

Service provider

Conva Ventures Inc.
26 Bastion Square, Third Floor Burnes House
Victoria, British Columbia, V8W 1H9, Canada

We have a data processing agreement with Fathom pursuant to Article 28 GDPR. A European Commission adequacy decision applies to Canada. The Standard Contractual Clauses in Fathom’s data processing agreement also apply.

Further information is available in Fathom’s privacy policy.

Cookies and embedded services

The public part of this website does not set cookies. The cookieless service Fathom Analytics is the only service used to measure website usage (see the section “Statistics with Fathom Analytics”). Fonts and all other content are loaded from our own servers. Third-party content, such as videos or maps, is not embedded. There is no access to information on your device that would require consent under Section 25 TDDDG.