Evitrus Legal

Appearance

Privacy policy ​

This notice describes how personal data is processed on the public Evitrus website evitrus.io, including the marketing pages and this legal site. It fulfils the information duties in Arts. 13 and 14 GDPR.

The product application (app.evitrus.io / the managed SaaS) is described separately in the DPA outline and subprocessors list. That processing is not a substitute for a signed DPA.

Last updated: 2026-08-16.

1. Controller ​

The controller responsible for data processing on this website is:

Christian Beneke
Beneke Consulting
George-Stephenson-Str. 8
10557 Berlin, Germany
Email: legal@beneke-consulting.com

See also Company information and the Impressum.

2. Hosting ​

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in Germany. Hetzner processes, on our behalf, the data generated when you visit the website (see Section 3). The basis for this is our legitimate interest in the secure and efficient provision of our online offering (Art. 6 (1) (f) GDPR). A data processing agreement (Art. 28 GDPR) is in place with the provider.

3. Server log files ​

When you access this website, the hosting provider automatically collects and stores information in so-called server log files, which your browser transmits to us. These are:

  • anonymised / shortened IP address,
  • date and time of the request,
  • the page / file requested,
  • browser type and version,
  • operating system used,
  • referrer URL.

This processing serves to ensure trouble-free operation and the security of the website. The legal basis is Art. 6 (1) (f) GDPR. The data is deleted after a short period unless it is required to investigate a specific security incident.

4. No cookies, no tracking ​

This website uses no cookies and employs no analytics, tracking or advertising services. No user profiles are created. For this reason, no consent under § 25 TDDDG is required, and no cookie banner is displayed.

The legal documents site may store a theme preference (light/dark) in your browser's localStorage. That stays on your device and is not sent to us.

5. Fonts and third-party resources ​

Marketing pages on evitrus.io load web fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Your browser then transmits your IP address and usual request metadata to Google. Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the provider; Google may process data in the United States. The purpose is consistent typography. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a readable, branded site). Google's privacy notice: policies.google.com/privacy.

This legal site and the technical docs site (docs.evitrus.io) serve system fonts only. They do not load Google Fonts or other third-party CDNs.

The marketing pages otherwise serve stylesheets and graphics from our own server.

6. Closed beta sign-up form ​

If you request access to our closed beta via the sign-up form on this website, we process the data you provide: company, your name, your email address and, optionally, your message describing your intended use. This data is stored in our own database on our own infrastructure — no third-party form or marketing service is involved. We use it solely to evaluate and respond to your beta request and to contact you about the beta programme. The legal basis is Art. 6 (1) (b) GDPR (steps taken at your request prior to entering into a contract) and our legitimate interest in responding to enquiries (Art. 6 (1) (f) GDPR). To reduce spam, the form includes a hidden field; we do not otherwise profile submissions. The data is deleted once it is no longer required and no statutory retention obligations apply.

7. Contacting us ​

If you contact us by email (e.g. at legal@beneke-consulting.com), we process the data you provide (email address, name, content of the message) in order to handle your request. The legal basis is Art. 6 (1) (b) GDPR (for pre-contractual or contractual requests) or Art. 6 (1) (f) GDPR (for other requests). The data is deleted once it is no longer required for the purpose and no statutory retention obligations apply.

8. Evitrus product (SaaS) ​

If you use the Evitrus application, Beneke Consulting processes account data as controller (login, organisation membership, support) and Evidence Events as processor for the customer organisation. Details:

9. SSL/TLS encryption ​

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in your browser's address bar.

10. Your rights ​

Under the GDPR, you have the following rights:

  • right of access to the data processed (Art. 15 GDPR),
  • right to rectification of inaccurate data (Art. 16 GDPR),
  • right to erasure (Art. 17 GDPR),
  • right to restriction of processing (Art. 18 GDPR),
  • right to data portability (Art. 20 GDPR),
  • right to object to processing (Art. 21 GDPR).

To exercise your rights, an informal message to legal@beneke-consulting.com is sufficient.

11. Right to lodge a complaint with a supervisory authority ​

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.

12. Changes to this privacy policy ​

We update this privacy policy as soon as changes to the website or the legal situation make it necessary. The version published on this page applies in each case.

Public legal and trust documents for Evitrus.

Operated by Beneke Consulting, Berlin.