Privacy policy · essential business excellence

1. Controller

essential business excellence GmbH, represented by the managing directors Lars Gentara and Claudia Schaumburg, Burscheider Str. 299, 51381 Leverkusen, Germany, phone +49 (0) 176 24 25 27 89, email info@essential.gmbh.

2. Hosting and server log files

This website is delivered as a static website through Cloudflare Pages (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, represented in the EU by Cloudflare Germany GmbH). When you open the pages, Cloudflare processes technical data such as IP address, time, requested page and browser identification, to deliver the pages and to protect them against attacks. The legal basis is Art. 6 (1) (f) GDPR. Cloudflare is certified under the EU-US Data Privacy Framework. More information: https://www.cloudflare.com/privacypolicy/.

3. No cookies, no analytics

This website does not use cookies for analytics or marketing and does not use tracking services. Technically necessary storage in your browser only happens when you start the chat with EVA (consent and session) or log in to the client area (login cookie from Cloudflare Access).

4. EVA, the digital assistant

When you start the chat with EVA, your input is sent to a service operated by us, where an AI language model processes it to generate an answer. Chat histories are not stored permanently. Please do not enter confidential or special categories of personal data. To protect against automated abuse, Cloudflare Turnstile checks technical characteristics of your browser before the first chat, without setting advertising cookies. To limit usage, your IP address is stored in pseudonymised form (hash value) for a maximum of 24 hours. The legal basis is your consent according to Art. 6 (1) (a) GDPR, which you give before the chat starts.

If you switch on the voice output, the answer text is sent to ElevenLabs (ElevenLabs Inc., USA) to convert it into speech. Voice output is off by default.

If a video call with EVA is offered and you start it, sound and speech from your microphone are transmitted to LemonSlice (Lemon Slice Inc., USA) and Daily (Daily.co, USA) to generate the answers and the video. The video call only starts after your click and ends automatically after a few minutes.

If you leave your contact details in the chat, we send them to ourselves by email to process your request. The legal basis is Art. 6 (1) (b) GDPR.

5. Client area

The client area is protected by Cloudflare Access. To log in you enter your email address and receive a one-time code. Cloudflare processes your email address and sets a technically necessary login cookie. The legal basis is Art. 6 (1) (b) GDPR.

6. Appointment booking

We use Microsoft Bookings (Microsoft Ireland Operations Ltd.) for appointments. When you book an appointment, Microsoft processes the data you enter. More information: https://privacy.microsoft.com/en-us/privacystatement.

7. Contact by email

When you contact us by email, we process your data to handle the request (Art. 6 (1) (b) GDPR).

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw consent at any time. You have the right to lodge a complaint with a data protection supervisory authority.

9. Version

This privacy policy is dated September 2026.