Information about processing persona data by EVA PAY UG (haftungsbeschränkt) further named as EVA PAY according to the European GDPR regulation EU 2016/679 from 25.05.2018.

Responsible for the processing of personal data:

EVA PAY UG (haftungsbeschränkt)
Kurparkstr. 13
63619 Bad Orb






  1. Personal data
  2. Cookies
  3. Google Analytics
  4. External Links
  5. Social Media



  1. Personal data and how it is processed

1.1 What is personal data?

Personal data is information, with which a natural person can be either identified or is identifiable. Such data can be Name, birthday, e-mail address, address, country, job position, telephone number, fax number, company, used products, etc. EVA PAY may obtain this kind of data from you through contact via e-mail or contact form.


1.1.1 Technical data

Furthermore, EVA PAY may obtain so-called “technical data” which shall be used for statistical and analytical measures or optimization of the customer experience on the website. This technical data may include the following:

– Internet Browser

– Operating system

– Configuration data like language, region, text size, etc.

– IP-Address

– Service Provider

– Screen resolution

– Logfiles


1.2 Purpose and processing of personal data

Any processing of submitted personal data is for specific use only, as in the case of providing a service. Actively obtained personal data may only be used for contact purposes and will only be used for that specific use. The specific use may be to reply to request or provide offers in regard to the service.

Legal basis of processing your personal data is the fulfillment of contract. In order to provide you with the necessary performance guarantee we might need to be able to process your personal data to successfully offer you our service.

Should you agree to enable us to contact you for marketing purposes, we may contact you with E-Mail Newsletters. Should you consent our usage of your personal data we may also use your technical data for improving and personalizing our web service for you.

EVA PAY will not use your personal data for any other purposes than stated above without your personal consent.


1.3 Storage and deletion

Your personal data will be processed for specific uses only and according to highest data security standards. Should your personal data become unneeded after fulfilment of contract, it will be deleted after a maximum period of 3 months with respect to data security measurements.


1.4 Access to personal data

You can write an e-mail to, if there is any personal data saved in our databases and if so which data. If you wish and no fulfilment of contract is coherent, you may ask for alteration or deletion of this personal data and we will do so according to data security conformity.



1.5 Data receivers

Your personal data will be processed by EVA PAY from the necessary departments, that need to know your personal data.


EVA PAY has assigned external service providers to act as data processors of personal data on behalf of EVA PAY. These providers mainly support EVA PAY with the hosting of the websites and for statistical and analytical marketing methods in regard to the usage of the website. EVA PAY has signed adequate agreements regarding that contract of data processing.


These service providers may be located in countries outside of the EU. Should this be the case, we make sure, that the data receiver is treating personal data according to GDPR conformity.

Other than that, EVA PAY will not submit your personal data to any third parties, unless official and governmental legal measures must be followed. Personal data will never be sold, rented or swapped with others.


1.6 Mailing of information via e-mail

In case you have agreed, your personal data may be used by EVA PAY to contact you for marketing and advertisement purposes via e-mail or telephone. This approval is optional. You may revoke your given consent at any time and will not receive further advertisements.


1.7 Data security for minors

The offers of EVA PAY are not directed at children. EVA PAY assumes that no personal data from minors will be transmitted.


1.8 Technical and organizational data security

EVA PAY is applying all necessary technical and organizational measurements to prevent misuse of personal data. This includes illegal data theft or manipulation and data loss. In such a case, affected persons will be informed and legal and technical countermeasures will be taken. Employees of EVA PAY are all instructed about data security and privacy and all obligated to act accordingly.


1.9 Retention period

Your personal data will be stored as long as necessary and in order to satisfy your request or fulfill the contract. If your personal data is to become needless, we will delete and/or anonymize your personal data irrevocably and in accordance to GDPR regulations.  Exemptions of this procedure might occur in case of legally binding retention periods according to commercial law requirements or other official or governmental requirements. In this case, the duration of saving your data may vary.


1.9 Individual rights

According to privacy law you may under certain circumstances have the right to (i) get information about your saved data, (ii) modify this data, (iii) restrict access to this data, (iv) delete this data (v) request data portability, (vi) revoke your consent or (vii) appeal. For this matter you may contact our Data Security Department:

datasecurity (at)


You have the right to complain towards regulatory authorities.





  1. Cookies

EVA PAY is using “Cookies” in order to improve functionality and usability of the website.


2.1 What are cookies?

Cookies are text files, that will be saved on the user’s device in order to enable an analysis of the user’s website behavior. Most of the cookies from EVA PAY will be deleted after the end of the browsing session. Other cookies may stay on the device and enable EVA PAY to recognize the user at the next visit to the website.

2.2 Partner companies from EVA PAY are not allowed to collect, process or use personal data via the use of cookies.

2.3 Users can prevent the saving or alteration of cookies by adapting their browser settings. Users may also delete cookies in the settings of the browser. EVA PAY is informing the user, that in such a case, the full functionality of the website may not be guaranteed.


2.4 When first visiting the EVA PAY website, the user will be notified about the usage of cookies in the websites of EVA PAY. By accepting that message and/or by further using the website you acknowledge and accept the data privacy policy from EVA PAY.



  1. Usage of Google Analytics

3.1 This website uses Google Analytics, a web service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“). Google Analytics uses cookies, which are text files, that are saved on the device of the user in order to analyze website behaviour of the user. Such obtained information may be sent to Google and may be saved by Google. IP-addresses obtained in the EU will be shorted and not presented in full. Google will analyze this kind of data on behalf on EVA PAY, in order to optimize usage of the website and to enable EVA PAY to improve quality and availability of its services.

3.2 Users of this platform can prevent the tracking of cookies by installing a browser plugin tool from Google (  or deactivate the cookie function in the browser’s settings.


Further information to the terms of use and data privacy can be found on the following Google websites:





  1. External Links

Links from thrid-parties may be published on the websites from EVA PAY. In general, links will be marke das such by including the link and/or the company/product logo. EVA PAY has no influence whatsoever on the content or design of that linked website. By linking to other website, EVA PAY does not take ownership of the linked content.



  1. Social Media

EVA PAY has an official representation on the following platforms and linked usernames.








We inform you, that the data security regulations ( as well as the imprint ( from our company website do apply to the social media platforms as well and are valid in addition to the corresponding terms on the specific platform. If not stated otherwise and in doubt, our terms are exlusively binding. We highly advise users not to publish any personal data on the social media platforms. Any posted personal data will be deleted immediately to guarantee conformity with GDPR measures.