Privacy policy

1. Controller

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Evangelos Binos
Hintergasse 23
65239 Hochheim am Main
Germany
Email: info@evbinos.com

No data protection officer has been appointed. REQUIRES CONFIGURATION / REVIEW: Check whether an appointment obligation exists (Art. 37 GDPR, § 38 BDSG).

2. Overview

This website is primarily a presentation site and does not itself operate user accounts. Some pages — currently the EVBINOS Wishes product page — include a request form that opens your own email app with a prepared message; see “Contact and email communication” and “EVBINOS Wishes” below. Personal data arises mainly when the page is technically requested (server log files), when you contact us on your own initiative, when you use the assistant and — only with your consent — through audience measurement. There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR. The EVBINOS Showroom application (showroom.evbinos.com), which this website presents and links to, does operate user accounts; its processing is described in “EVBINOS Showroom” below.

Fonts are bundled locally when the website is built. No connection to third-party font servers is made when a page is loaded.

3. Hosting and server log files

When the website is requested, the server processes technically necessary data: IP address, date and time of the request, requested URL, amount of data transferred, HTTP status code, browser and operating-system information (user agent) and, where applicable, the referrer URL. This serves delivery of the website, stability and security (defence against attacks).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and functional operation).

Hosting provider: REQUIRES CONFIGURATION / REVIEW: enter provider, location and data processing agreement. Retention of log files: REQUIRES CONFIGURATION / REVIEW: enter retention period according to the hosting configuration.

4. Contact and email communication

You can contact us by email, telephone or messenger services (WhatsApp, Viber). We process the data you provide (e.g. name, contact details, content of the message) to answer your enquiry. The EVBINOS Wishes product page also includes demo-request and quote-request forms; these do not send anything by themselves — they open your own email app with the message already written, and you decide whether to send it (see “EVBINOS Wishes” below).

Legal basis: Art. 6(1)(b) GDPR where the enquiry relates to a contract or pre-contractual measures, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).

If you use a messenger link you leave this website; the respective provider is responsible for the processing there. Email provider for info@evbinos.com: Namecheap, Inc. (Private Email). REQUIRES CONFIGURATION / REVIEW: document the website’s contact form and the AI-Ready check, which send your entries and the check report by email through this provider, and confirm the data processing agreement with Namecheap. Retention: we delete enquiries once they are dealt with and no statutory retention obligations apply. REQUIRES CONFIGURATION / REVIEW: define concrete periods.

5. Assistant on the website (AI / chat interaction)

The assistant is currently a rule-based guide. It is not an AI model and is not connected to a backend. Your inputs are evaluated in your browser only; they are not transmitted to us or to third parties and are not stored on a server.

So that the conversation survives a language switch, it is held only in the memory of the open page — no cookies, local storage or session storage are used. It is gone when you reload the page, close the tab or use “Start over”. Legal basis: Art. 6(1)(f) GDPR (function expressly requested by you).

Should an AI service or server be connected in future, this policy will be updated beforehand and — where required — your consent obtained. Please do not enter sensitive data in the assistant.

6. Cookies and local storage

This website currently sets no cookies without your consent. It uses the following entries in your browser’s storage:

Legal basis for necessary storage: § 25(2) no. 2 TDDDG. For analytics technologies: § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.

The EVBINOS Showroom application uses its own strictly necessary sign-in cookie; see “EVBINOS Showroom”.

7. Consent management

Where analytics is set up, we ask for your consent by way of a notice. You can choose “Accept all”, “Necessary only” or open the settings. Both decisions are equally easy to reach. Without consent, no analytics service is loaded.

Your choice is stored locally in your browser. Through “Cookie settings” in the footer of every page you can review, change or withdraw it at any time.

8. Google Analytics

Status: Google Analytics is currently not active on this website. The technical preparation exists; the service is loaded only once a measurement ID has been configured and you have consented. REQUIRES CONFIGURATION / REVIEW: review and complete this section before activation.

After your consent we use Google Analytics 4 of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics sets identifiers (cookies) and processes usage data (e.g. pages viewed, time on page, device and browser data, approximate location) for audience measurement. We enable IP anonymisation and do not use Google signals or advertising features.

Legal basis: your consent, § 25(1) TDDDG and Art. 6(1)(a) GDPR. You can withdraw at any time with effect for the future via “Cookie settings”. Retention at Google: REQUIRES CONFIGURATION / REVIEW: enter the retention period configured in the Google Analytics property.

9. Legal bases at a glance

• Art. 6(1)(a) GDPR — consent (analytics)
• Art. 6(1)(b) GDPR — contract and pre-contractual measures (enquiries about our services; use of EVBINOS Showroom)
• Art. 6(1)(c) GDPR — legal obligations (e.g. retention of invoicing records)
• Art. 6(1)(f) GDPR — legitimate interests (operation, security, answering enquiries)
• § 25(1) TDDDG — consent to access to terminal equipment; § 25(2) no. 2 TDDDG — strictly necessary storage

10. Retention and deletion

We store personal data only as long as necessary for the respective purpose or as statutory retention obligations require (e.g. commercial and tax-law periods). Afterwards the data is deleted or anonymised.

REQUIRES CONFIGURATION / REVIEW: define concrete periods per data category (server log files, email correspondence, invoicing records, analytics data).

11. Recipients and processors

Recipients may be: the hosting provider, the email provider (Namecheap Private Email) and — only with consent — Google; for EVBINOS Showroom additionally LiveKit (video and audio in meetings) and Stripe (billing when upgrading to a paid plan). We keep a current list under Subprocessors. Where required, a contract under Art. 28 GDPR is in place with processors. REQUIRES CONFIGURATION / REVIEW: confirm that all contracts have been concluded.

12. Transfers to third countries

A transfer to countries outside the EU/EEA may take place for Google Analytics (only with consent), possibly for hosting, and for EVBINOS Showroom for LiveKit (LiveKit, Inc. is a US company) and Stripe. It is based on an adequacy decision or appropriate safeguards (e.g. standard contractual clauses). REQUIRES CONFIGURATION / REVIEW: verify and enter the transfer mechanism actually relied on for each provider.

13. Your rights

Under the GDPR you have the following rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). To exercise them, a message to info@evbinos.com is sufficient.

14. Withdrawal of consent

You can withdraw a given consent at any time with effect for the future — via “Cookie settings” in the footer or by email. The lawfulness of processing carried out until the withdrawal remains unaffected (Art. 7(3) GDPR).

15. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority for us is presumably: The Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Wiesbaden (datenschutz.hessen.de). REQUIRES CONFIGURATION / REVIEW: verify the competent authority and its address.

16. Security

The website is delivered over an encrypted connection (HTTPS). We take appropriate technical and organisational measures to protect data against loss, misuse and unauthorised access, and review them regularly.

17. EVBINOS Wishes

This website also presents EVBINOS Wishes, a separate product reachable from here. What happens on this marketing page is covered above: the demo-request and quote-request forms open your own email app and send nothing by themselves (see “Contact and email communication”); the assistant shown on the Wishes page works exactly as described in “Assistant on the website” — evaluated in your browser only, nothing sent to us; the product screenshots shown are demo data, not real customer data.

Using the EVBINOS Wishes application itself — creating an account, subscriptions and billing, connecting a Google account to import contacts, importing contacts from an iPhone/vCard export or an Excel/CSV file (including the temporary preview shown before an import is saved), the Android Companion app, and sending SMS through your own Android phone and SIM — takes place within the application, not on this website.

REQUIRES CONFIGURATION / REVIEW: REQUIRES LEGAL REVIEW: this policy does not yet document the EVBINOS Wishes application's own data processing — account data, subscription/billing data and Stripe as payment processor, the Google OAuth scope requested for contact import and how long that access and the imported data are kept, how vCard/Excel/CSV import previews are stored and for how long, the Android Companion app and the device data it needs, and the retention periods and processors (Stripe, SMS delivery, and any others) for the application. Either publish a dedicated privacy policy for the application and link it here, or extend this section with that detail — do not treat Wishes account use as covered by this policy until one of those is done.

18. EVBINOS Showroom

EVBINOS Showroom is a separate application at showroom.evbinos.com: a digital sales office with built-in video, which anyone can try in a Free Trial. EVBINOS is the controller for the data of account holders (sellers and their organisations) and for operating the service. Where an organisation uses Showroom to meet its own customers (guests) and uploads its own content, EVBINOS processes that data on the organisation’s behalf under a data processing agreement (DPA (AVV)); the organisation is the controller for it. REQUIRES CONFIGURATION / REVIEW: legal review of this controller / processor split.

Account and Free Trial

First and last name, company/organisation name, work email address, password (stored only as an Argon2id hash, never in plain text), interface language, browser time zone and — if you choose one — country. A new account stays inactive until the email address is confirmed. Legal basis: Art. 6(1)(b) GDPR.

Email confirmation and password reset

We send a one-time link to confirm the email address (currently valid for 48 hours) and, on request, a one-time link to reset the password (currently valid for 60 minutes). Only a cryptographic hash of each link is stored, and each link works once. After a password reset, all active sessions of the account are ended. Requests are rate-limited, and sign-ups with known disposable email domains are refused to prevent abuse. Legal basis: Art. 6(1)(b) and (f) GDPR.

Organisation, team and plan

Organisation details (name, country, time zone, language, contact email, optional website and phone), team members and invitations (email address, role), plan and subscription status, and the Free Trial status (start and end date, meeting minutes used against the 120-minute allowance).

Usage accounting

To apply plan limits and the Free Trial, we record when a meeting actually starts and ends and when participants join and leave a live meeting, including the duration. Time in the waiting room before a meeting starts and the Sample Showroom are not counted.

Meetings and guests

Meeting data entered by the seller (title, schedule, language and, optionally, the guest’s name, company and email address). Guests join through a personal meeting link in their browser without an account and enter a display name. We store the display name, admission and join/leave times, chat messages sent in the meeting and the interest signals a guest chooses to send (e.g. “I’m interested”, requesting an offer). Meeting links can expire or be revoked.

Video and audio (LiveKit)

Live video, audio and screen sharing run through LiveKit Cloud (LiveKit, Inc.). Camera and microphone are only used after the browser has asked for permission. The streams are transmitted in real time and are not recorded — Showroom has no recording function. LiveKit processes connection data (e.g. IP address) and participant identifiers and reports join/leave events to us, which we use for the usage accounting.

Uploaded content and offers

Files an organisation uploads (PDFs, images) and the offers it creates (titles, descriptions, prices, terms) are stored so they can be presented in meetings. Files and offers can be archived by the organisation; a meeting keeps a snapshot of the content it was held with.

Sales Room after the meeting

If the organisation enables it, guests can reopen the meeting’s Sales Room through the same link after the meeting and view the materials marked as available, until access expires (an end date set for the meeting and limited by the plan; in the Free Trial at most 7 days).

Billing (Stripe)

When an organisation upgrades to a paid plan, checkout and the billing portal are provided by Stripe. Payment details are entered directly at Stripe and are not stored by EVBINOS; we store the Stripe customer and subscription references, the plan and the subscription status. Legal basis: Art. 6(1)(b) GDPR; retention of invoicing records under Art. 6(1)(c) GDPR.

Transactional emails

Confirmation, password-reset and account emails are sent from info@evbinos.com through our email provider Namecheap Private Email.

Cookies and browser storage

The application sets one strictly necessary cookie, showroom_session (HttpOnly, sent only over HTTPS, valid for up to 7 days or until you log out), to keep you signed in; a token protecting against cross-site requests is held only in the page’s memory. The chosen interface language is stored in localStorage (showroom.locale). The application uses no analytics or advertising cookies. Legal basis: § 25(2) no. 2 TDDDG.

Operational logs and security

For operation and security the server processes technical request data (IP address, time, requested address, user agent) in server logs. Rate limits against abuse are kept in memory only, with IP addresses and email addresses hashed. Legal basis: Art. 6(1)(f) GDPR.

No AI processing

Showroom does not use AI to analyse meetings, content or guests and makes no automated decisions within the meaning of Art. 22 GDPR.

REQUIRES CONFIGURATION / REVIEW: REQUIRES LEGAL REVIEW: retention periods for accounts, meetings, chat messages, participant and usage records, uploaded files and archived content after a contract or a Free Trial ends (the application keeps this data while the account exists and has no automatic deletion yet — deletion currently happens on request); retention of server logs; the controller / processor split and the DPA for guest data; LiveKit region and transfer mechanism; Stripe contracting entity and transfer mechanism; data processing agreement with Namecheap.

19. Changes to this policy

We update this policy when the website, the services used or the legal situation change. The version published here applies.