Privacy Policy

We manage our website according to the principles set out below. We undertake to comply with the statutory provisions on data protection and endeavour to always take into account the principles of data avoidance and data minimisation.

This privacy policy applies to the website at nevito.de. The application at app.nevito.de is a separate service with its own privacy policy, linked there.

1. Name and address of the controller

Controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states of the European Union as well as other data protection regulations is:

RG Ventures GmbH
Managing Director: Ralf Gehrer
Fliederstraße 32
73066 Uhingen
Amtsgericht Ulm, HRB 741919

Email: info@nevito.de
Website: https://nevito.de/
Imprint: /en/imprint/

Your point of contact for data protection matters is the management; you can reach us at the email address above.

2. Explanation of terms

We have designed our privacy policy according to the principles of clarity and transparency. However, if there are any ambiguities regarding the use of various terms, the relevant definitions can be found in Art. 4 GDPR.

3. Legal basis for the processing of personal data

a) Processing of personal data under the GDPR

We process your personal data, such as your name, your email address or your IP address, only if there is a legal basis for doing so. Under the General Data Protection Regulation, the following provisions come into consideration in particular:

• Art. 6 para. 1 sentence 1 lit. a GDPR: The data subject has given consent to the processing of their personal data for one or more specific purposes.
• Art. 6 para. 1 sentence 1 lit. b GDPR: The processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract.
• Art. 6 para. 1 sentence 1 lit. c GDPR: Processing is necessary for compliance with a legal obligation to which the controller is subject.
• Art. 6 para. 1 sentence 1 lit. f GDPR: Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

We will refer you again to the legal basis for the processing at the relevant points in this privacy policy.

b) Consent of guardians under Art. 8 GDPR

A guardian must consent to all data processing on this website for which the consent of a minor under the age of 16 is required. You can withdraw consent at any time. Processing carried out until withdrawal remains lawful.

c) Processing of information under Section 25 (1) TDDDG

If we store information on your terminal equipment or access information already stored there, for example cookies or entries in your browser’s local storage, we do so as a rule on the basis of your consent, Section 25 (1) TDDDG. If an exception under Section 25 (2) no. 1 and no. 2 TDDDG applies, we do not require consent. This website currently does neither (see item 7).

4. Transfer of personal data

Transferring personal data is also processing within the meaning of item 3 above. Data is only passed on to third parties if there is a legal basis for the processing. For example, we disclose personal data to persons or companies that act as processors for us pursuant to Art. 28 GDPR, meaning they are instructed and controlled by us.

In accordance with the requirements of the GDPR, we conclude a contract with each of our processors to bind them to data protection regulations.

5. Storage period and erasure

We will erase your personal data if it is no longer necessary for the purposes for which it was collected or otherwise processed, and the processing is not necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims. The specific storage and erasure periods for each processing activity are set out in the sections below.

6. SSL / TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL / TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from http:// to https:// and by the lock symbol in your browser line. When encryption is active, the data you transmit to us cannot be read by third parties.

7. Cookies and storage on your device

This website itself sets no cookies and stores no entries in your browser’s local storage. Our host Cloudflare may set strictly necessary cookies when delivering the pages for security reasons (for example to defend against automated access); they serve only secure operation and contain no advertising or analytics identifiers. It loads no scripts, fonts, images or other content from other companies’ servers; every file comes from our host (item 9). That is why this website has no consent banner: there is nothing we would need your consent for. The page Services and cookies in detail records this.

If we use a service that accesses your device in future, we will ask for your consent per service beforehand and extend this privacy policy.

8. Links into the application

This website contains no forms. Links such as “Go to Nevito” lead into the application at app.nevito.de. What you enter there, for example when registering, we process under the application’s privacy policy, not under this one.

9. Collection and storage of personal data, and the nature and purpose of its use

a) External hosting

Our website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare Workers). For this reason, all personal data collected on our website is processed on the servers of our host. The host processes your data only on our instructions and insofar as this is necessary for the performance of the services on the website. We have concluded a data processing agreement with Cloudflare.

b) When visiting the website

When you access our website, the browser used on your terminal device automatically sends information to the server of our website, which is temporarily stored in a log file. The following information is collected without your intervention:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Website from which access is made (referrer URL)
• The browser used and, if applicable, the operating system of your computer as well as the name of your access provider

We process this data to ensure a smooth connection to the website, to evaluate system security and stability, to analyse errors, and for further administrative purposes.

Data that allows conclusions to be drawn about your person, such as the IP address, is deleted after 7 days at the latest. If we store the data beyond this period, it is pseudonymised so that it can no longer be assigned to you.

The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes listed above. In no case do we use the collected data to draw conclusions about your person.

c) Cloudflare as a content delivery network and web firewall

On our website we use a content delivery network and the web firewall of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. For this purpose Cloudflare may process IP addresses, information regarding the routing of data traffic, the system configuration and other information about the traffic.

For the content delivery network, the information transfer between your browser and our server is technically routed via the Cloudflare network so that we can optimise the loading speed of our website. The web firewall is intended to prevent unauthorised access, automated abuse and other illegal activities.

The processing is carried out pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR on the basis of our legitimate interest in the secure and efficient provision of our website.

We have concluded a data processing agreement with Cloudflare. Insofar as data is transferred to the USA, this is safeguarded by the certification of Cloudflare, Inc. under the EU-U.S. Data Privacy Framework pursuant to Art. 45 para. 1 GDPR as well as by EU standard contractual clauses pursuant to Art. 46 para. 2 lit. c GDPR. Further information: https://www.cloudflare.com/privacypolicy/

d) Contact by email

You can contact us by email. We process the data you send, in particular your name, your email address and the content of your message, to handle your request. The processing is based on Art. 6 para. 1 sentence 1 lit. b and f GDPR.

Our mailboxes for nevito.de are operated by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, with servers in Germany. A data processing agreement under Art. 28 GDPR is in place with All-Inkl.

We delete messages no later than 6 months after the matter has been closed, unless they are needed for a further contractual relationship. If a contract is concluded, we are subject to statutory retention periods, for example under the German Commercial Code (HGB) and Fiscal Code (AO), and delete the data once they expire.

10. Analysis and tracking tools

We use no analysis or tracking tools on this website. We see visitor numbers only as aggregated statistics in our host’s administration interface (item 9), without any script in your browser.

11. External media and social networks

We embed no videos, maps, fonts or other third-party content and use no social network plugins.

12. Use of AI systems

To optimise our processes, we may use artificial intelligence technologies when handling your enquiry, for example to prepare responses or to structure requests. The systems used operate in accordance with the principles of the GDPR. Decisions that have legal or similarly significant effects on you are not made solely by automated means; a human is always responsible for them.

13. Rights of the data subject

You have the following rights:

a) Information

Pursuant to Art. 15 GDPR, you have the right to request information about your personal data processed by us. This includes the processing purposes, the categories of personal data, the recipients, the planned storage period, the existence of a right to rectification, erasure, restriction or objection, the right to lodge a complaint, the origin of your data, and the existence of automated decision-making.

b) Rectification

Pursuant to Art. 16 GDPR, you have the right to the immediate rectification of incorrect or incomplete personal data.

c) Erasure

Pursuant to Art. 17 GDPR, you have the right to demand the immediate erasure of your personal data, insofar as further processing is not necessary, for example for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, or for the establishment, exercise or defence of legal claims.

d) Restriction of processing

Pursuant to Art. 18 GDPR, you can request the restriction of processing, for example where you contest the accuracy of the data, or where the processing is unlawful and you object to erasure.

e) Data portability

Pursuant to Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, and to request the transmission of this data to a third party.

f) Withdrawal

Pursuant to Art. 7 para. 3 GDPR, you have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of the processing carried out until then.

g) Complaint

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

h) Objection

Insofar as your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing, insofar as there are grounds arising from your particular situation or the objection is directed against direct advertising. If you wish to exercise your right of withdrawal or objection, an email to the address in item 1 is sufficient.

i) Automated decisions in individual cases

You have the right not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you. No such automated decision-making takes place on our website.

14. Amendment of the privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services. If we amend the privacy policy, this will be indicated on the website.

Last updated: 17 October 2026