Legal
Website privacy policy
Last updated: October 2026
1Data controller
The controller for the data processing on this website within the meaning of the GDPR is:
If you have questions about data protection or wish to exercise your rights, you can contact our data protection officer:
represented by its managing directors Ilja Borchers and Henning Koch
Hauser Gasse 19b
35578 Wetzlar
Germany
Tel.: +49 (0)6441 / 67100-0
Email: info@rpa-datenschutz.de
2Categories of data processed
We process the following categories of personal data:
- Master data (e.g. name, email address)
- Contact data (e.g. address, telephone number)
- Content data (e.g. text entered in contact forms)
- Usage data (e.g. pages visited, times of access)
- Meta and communication data (e.g. IP address, device information)
3Purposes of processing
The data is processed for the following purposes:
- Providing the website
- Handling contact enquiries
- Sending newsletters (with consent)
- Web analytics and audience measurement
- Security measures
- Marketing purposes
4Legal bases for processing
The processing of your personal data is based on the following legal grounds:
- Art. 6 (1) (a) GDPR (consent)
- Art. 6 (1) (b) GDPR (performance of a contract)
- Art. 6 (1) (c) GDPR (legal obligation)
- Art. 6 (1) (f) GDPR (legitimate interests)
5Use of cookies
We use cookies and similar technologies to analyse how the website is used and to improve usability. Non-essential cookies are only set after you have given your consent. Until then, analytics and marketing services remain disabled. Your consent is managed by our own solution, without involving an external consent service; your choice is stored locally in your browser and applies for twelve months. You can withdraw or adjust your consent at any time via the “Cookie settings” link in the footer.
6Web tracking and analytics tools
a) Google Analytics
Our website uses Google Analytics (Google Ireland Limited). Google uses cookies that make it possible to analyse how the website is used. The information generated may be transferred to servers in the USA. A data processing agreement is in place with Google. Use is based on your consent (Art. 6 (1) (a) GDPR).
b) Facebook pixel
We use the Facebook pixel (Meta Platforms Ireland Limited) to analyse and optimise our Facebook advertising. This allows us to measure how effective our ads are. Processing is based on your consent (Art. 6 (1) (a) GDPR).
c) Google Ads conversion tracking
We use Google Ads (Google Ireland Limited) to measure which of our ads lead to a
registration. If you reach our website via an ad, Google stores a click identifier in the
cookie _gcl_aw with a lifetime of 90 days. This tells us how many
registrations each ad produced, but not which individual registered. The information
generated may be transferred to servers in the USA. Use is based on your consent (Art. 6
(1) (a) GDPR). Without consent, no cookie is set.
7Contact form and newsletter
If you send us enquiries via the contact form or subscribe to our newsletter, the details you provide are stored for the purpose of handling your enquiry or sending the newsletter. The legal basis is your consent (Art. 6 (1) (a) GDPR).
a) Contact form
If you write to us via the contact form, your name, your email address and the content of your message are transmitted to HubSpot (HubSpot Ireland Limited, Dublin) and stored there in the provider's EU data region as a support case, so that we can handle your enquiry and follow its history. These details are not used for advertising purposes, and sending the form does not sign you up for the newsletter. We delete the case once your enquiry has been dealt with conclusively and no statutory retention periods stand in the way.
b) Newsletter and booklet
To send the newsletter and provide the booklet we use HubSpot (HubSpot Ireland Limited, Dublin). Your email address is processed in the provider's EU data region. Sign-up uses a double opt-in procedure: the subscription only takes effect once you confirm the link in our email. The time and wording of your consent are stored as a record (Art. 7 (1) GDPR). You can unsubscribe at any time via the link in every email.
c) Onboarding form
The Precision onboarding pages embed a form provided by Tally BV (Sint-Pietersnieuwstraat 11, 9000 Ghent, Belgium). The form loads when the page is opened; in doing so the provider may process your IP address and set its own cookies, even if you enter nothing. Details entered there are processed by Tally and made available to us. The legal basis is your consent (Art. 6 (1) (a) GDPR).
d) Linked services
We link to Zoom for registering for online events and to Calendly for booking calls. Neither is embedded in our pages. Only when you follow such a link do you leave our website, and the privacy policy of the respective provider then applies.
8Hosting with Vercel
This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. In doing so, Vercel processes technically necessary data such as your IP address and browser information. A data processing agreement pursuant to Art. 28 GDPR is in place with Vercel. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and efficient operation of the website). Data may be transferred to the USA and other third countries; Vercel uses EU standard contractual clauses.
References to hosting in Germany elsewhere on our site relate to the EVER platform and the EVER app, not to this website.
9Retention periods
We retain personal data only for as long as is necessary for the respective processing purposes or as required by statutory retention obligations.
10Practitioner directory (entries from public sources)
Our practitioner directory also lists practices and practitioners who have not yet registered with EVER themselves. We create these entries from publicly accessible sources such as the practice website, search engines and business directories.
We process professional contact details only: practice name, name, specialty, address, website, and telephone number and email address where these are published. We do not process health data or other private data.
The purpose of the processing is to operate a public directory in which clients can find suitable practices. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in offering a directory of professional practice data that is as complete as possible and already publicly available.
Before publication we inform the practice concerned about the entry by email. The practice can claim the entry, have it corrected or have it removed.
We store the data for as long as the entry is listed in the directory. If a practice objects to publication, we remove the entry immediately. To prevent it from being added again, we then store only the practice's domain or email address on a block list.
Data subjects have the right of access, rectification, erasure and restriction of processing, and the right to lodge a complaint with a data protection supervisory authority.
Right to object: You can object to the publication of your entry at any time. An email to support@everhealth.ai is sufficient. We will then remove the entry immediately.
11Your rights
You have the following rights at any time:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to object (Art. 21 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to withdraw consent (Art. 7 (3) GDPR)
To exercise these rights, or for any question about data protection, please write to support@everhealth.ai.
12Changes to this privacy policy
This privacy policy is currently valid (last updated: October 2026). It may be updated in response to technical developments or changes in the law.