evosystems ◆ MarkX™
Legal

Privacy Policy

This English version is provided for your convenience only. The German version of this privacy policy (Datenschutzerklärung) is the legally binding one.

1. Controller

evosystems GmbH
Straßburger Weg 3, 77975 Ringsheim, Germany
Email: markx@evosystems.ai

2. General information

This website uses no cookies, no analytics or tracking services, and embeds no content from third-party servers (no external fonts, no external scripts). Personal data is processed only to the extent necessary to operate the website and respond to your enquiries.

3. Hosting and server log files

This website is hosted on Microsoft Azure (the "Azure Static Web Apps" service). The provider is Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. When you access the website, Microsoft automatically processes information in what are known as server log files, which your browser transmits: IP address, date and time of the request, file requested, referrer URL, browser used and operating system. Pages are delivered via Microsoft's global content delivery network; processing may therefore also take place outside the European Union. Microsoft is certified under the EU-US Data Privacy Framework, and EU Standard Contractual Clauses apply in addition. Processing is based on Art. 6 (1)(f) GDPR (legitimate interest in providing the website in a technically error-free and secure manner). A data processing agreement pursuant to Art. 28 GDPR is in place with Microsoft (Microsoft Products and Services Data Protection Addendum).

4. Contacting us and booking an appointment

You can reach us on this website in two ways: via the contact form or via the appointment booking feature, both on the contact page. In either case, we process the information you provide solely to handle your enquiry or to carry out the booked appointment. The legal basis is Art. 6 (1)(b) GDPR, insofar as your enquiry relates to the initiation or performance of a contract, and otherwise Art. 6 (1)(f) GDPR (legitimate interest in responding to enquiries).

Contact form. Via the contact form, we process the information you enter (name, company if applicable, email address, message content). The information is transmitted in encrypted form to a server function in a Microsoft data centre in the EU (West Europe region) and delivered from there via Azure Communication Services (data held in Europe, no click or open tracking) as an email to our Microsoft 365 mailbox; it is not stored on the web server. A hidden form field is used solely to detect automated spam submissions (a so-called honeypot) and remains empty when the form is used by you; it is not evaluated or stored.

Appointment booking. If you book an appointment via the website, we process your name, email address, and voluntary information such as company, phone number and topic, in order to schedule the appointment, send you the invitation and notify ourselves of the booking. The appointment is stored exclusively in our Outlook calendar on Microsoft 365 and set up as a Microsoft Teams meeting; the invitation containing the Teams link is sent by Microsoft 365. We additionally receive a notification with your details, likewise delivered via Azure Communication Services to our Microsoft 365 mailbox. If you join the meeting, Microsoft processes the connection data required for this and, if you enable them, audio and video. You may cancel the appointment at any time via the link in the invitation; it will then be removed from our calendar.

Storage, deletion and providers involved. The same technical infrastructure applies to both channels as for hosting the website (Section 3): the server functions run in the same Microsoft data centre in the EU, and the same data processing agreements with Microsoft apply. No further provider is involved in either channel. Your data will be deleted as soon as it is no longer required for processing and no statutory retention obligations apply – generally after the communication has concluded for enquiries, and after the appointment has taken place or been cancelled for bookings.

5. Chat assistant evoBot

This website offers the chat assistant evoBot, which answers questions about the content of this website. Your question is transmitted together with the previous messages of the conversation to a server function in a Microsoft data centre in the EU, where a language model (Azure OpenAI Service, EU data zone) answers it. The same data processing agreement with Microsoft applies as for hosting (section 3). The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in providing quick information about our offering).

Conversation logs. When a conversation ends – when you close the chat, leave the page, or after two minutes without input – we send the conversation to our Microsoft 365 mailbox by email. We read it to improve the assistant and our content and to follow up on recognisable enquiries. What is transmitted is the conversation, the page you were on, the language and a random session identifier – no IP address and no identifier that would make you recognisable across sessions. Email addresses and phone numbers are redacted automatically before sending. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in improving our offering). You may object under Art. 21 GDPR; in that case please do not use the chat and contact us via the contact form instead. We delete the logs no later than twelve months after receipt.

As knowledge, the language model receives only a text index of this website. Microsoft screens inputs automatically for abuse and stores them for up to 30 days for that purpose; for services deployed in the European Economic Area, both the storage and any review by Microsoft staff take place there as well. Please do not enter confidential or special categories of personal data in the chat; for personal matters please use the contact form or the appointment booking.

Storage in the browser. The conversation is kept in your browser’s session storage for the duration of the browser session so that it persists when you switch pages. The same storage also records whether the greeting has already been shown and whether you have hidden evoBot. This information is deleted when you close the browser window. This storage is strictly necessary for the function you use (Section 25 (2) No. 2 TDDDG). You can delete the conversation at any time via “New conversation” in the chat or via your browser settings.

6. Your rights

You have the following rights with respect to your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg.

7. TLS encryption

For security reasons, this site uses TLS encryption (recognisable by "https://" and the padlock symbol in your browser's address bar). This ensures that data you transmit to us cannot be read by third parties.

Last updated: September 2026