Privacy Policy • EveryCarbon • High-performance shielding materials

Last updated: 19 October 2026

1. Introduction

At EveryCarbon, we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, https://everycarbon.bio/, contact us or interact with our business.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable German data protection legislation.

2. Data Controller

The entity responsible for processing your personal data is:

EveryCarbon UG (haftungsbeschränkt)

Tübinger Str. 46
70178 Stuttgart, Germany

Email: hello@everycarbon.bio

Website: https://everycarbon.bio/

For questions regarding this Privacy Policy or the processing of your personal data, please contact us using the email address above.

3. Personal Data We Collect

Depending on how you interact with our website, we may collect the following categories of personal data.

3.1 Information You Provide

When you complete our contact form or communicate with us directly, we may collect:

Full name
Email address
Company or organisation name
Information contained in your message
Any additional information you voluntarily provide

We use this information to respond to enquiries, discuss potential partnerships, provide information about our technologies and products, and manage business communications.

3.2 Information Collected Automatically

When you visit our website, certain technical information may be processed automatically, including:

IP address
Browser type and version
Operating system and device information
Date and time of access
Pages requested
Referring website, where available
Technical logs and error information

This information may be necessary to deliver the website, maintain its security, identify technical issues and ensure its proper operation.

3.3 Cookies and Similar Technologies

Our website may use cookies and similar technologies to support essential functionality and, where enabled and permitted, measure website performance.

Further information is provided in Section 7.

4. Purposes and Legal Bases for Processing

We process personal data only when we have an appropriate legal basis under Article 6 of the GDPR.

4.1 Responding to Enquiries

When you contact us through our website or by email, we process your information to respond to your request and communicate with you.

Legal basis: Article 6(1)(b) GDPR, where processing is necessary for pre-contractual measures, or Article 6(1)(f) GDPR, where processing is necessary for our legitimate interest in responding to business enquiries.

4.2 Business Relationships and Partnerships

We may process contact and professional information to communicate with prospective customers, commercial partners, manufacturers, technology collaborators, investors and other business contacts.

Legal basis: Article 6(1)(b) GDPR, where applicable, or Article 6(1)(f) GDPR, based on our legitimate interest in developing and maintaining professional relationships.

4.3 Website Operation and Security

We process technical information to operate, maintain and secure our website, prevent misuse and resolve technical issues.

Legal basis: Article 6(1)(f) GDPR, based on our legitimate interest in maintaining a functional and secure website.

4.4 Website Analytics

Where website analytics tools are enabled, we may process information about website usage to understand visitor interactions and improve our content and services.

Where required by law, analytics technologies will only be activated after obtaining your consent.

Legal basis: Article 6(1)(a) GDPR, where consent is required.

4.5 Legal Obligations

We may process personal data where necessary to comply with applicable legal or regulatory requirements.

Legal basis: Article 6(1)(c) GDPR.

5. Contact Forms and Communications

Our website provides a contact form through which visitors can submit enquiries relating to EveryCarbon, its technology, products and business activities.

When you submit the form, we process the information you provide for the purpose of handling your enquiry.

Fields marked as mandatory are necessary for us to process your request. If you do not provide the required information, we may be unable to respond.

Data submitted through the contact form may be processed by our website infrastructure and email service providers.

We do not use information submitted through the contact form for unrelated marketing purposes without an appropriate legal basis.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

6. How We Share Personal Data

We may share personal data with trusted third parties where necessary for the purposes described in this Privacy Policy.

These may include:

Website hosting and infrastructure providers
Website maintenance and technical support providers
Email and communication service providers
Website analytics providers, where enabled
Professional advisers, where necessary
Competent public authorities, where disclosure is legally required

Where service providers process personal data on our behalf, we take appropriate steps to ensure that contractual safeguards are in place, as required by Article 28 GDPR.

We do not sell personal data.

7. Cookies and Website Technologies

Cookies are small files that may be stored on your device when you visit a website.

Our website may use the following categories of cookies.

7.1 Strictly Necessary Cookies

These cookies support essential website functionality, security and the storage of privacy preferences.

Where they are strictly necessary for the operation of the website, they may be used without consent, in accordance with applicable law.

7.2 Analytics Cookies

If analytics services are enabled, these cookies may help us understand how visitors interact with our website, including which pages are visited and how the website performs.

Where required, these cookies are used only with your prior consent.

7.3 Third-Party Cookies

Certain external services or embedded content may place cookies or use similar technologies.

Where these technologies require consent, they will be subject to the applicable consent requirements.

7.4 Managing Your Cookie Preferences

Where a cookie consent management tool is provided, you can manage or withdraw your preferences through that tool.

You can also manage cookies through your browser settings. Disabling certain cookies may affect website functionality.

For more information about the cookies actually used on our website, please refer to the cookie information made available through our website’s cookie management interface, where applicable.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected.

Retention periods depend on the type of information and the applicable legal requirements.

In particular:

Contact form submissions: retained for the time necessary to respond to enquiries and manage any resulting correspondence or business relationship.
Business communications: retained as necessary for the relevant professional relationship and any applicable legal obligations.
Technical and security logs: retained only for the period reasonably necessary for website operation, troubleshooting and security.
Consent records: retained as necessary to demonstrate compliance with applicable consent requirements.

Where statutory retention requirements apply, relevant information may be retained for the legally required period.

Once personal data is no longer required, it will be deleted or anonymised, unless continued retention is legally justified.

9. International Data Transfers

Our website and associated services may involve service providers located outside the European Economic Area (EEA).

Where personal data is transferred to countries outside the EEA, we ensure that such transfers comply with applicable data protection requirements.

Depending on the circumstances, appropriate safeguards may include:

An adequacy decision issued by the European Commission
Standard Contractual Clauses approved by the European Commission
Other lawful transfer mechanisms recognised under the GDPR

Where applicable, additional safeguards will be implemented to protect personal data.

You may contact us to request information about the safeguards relevant to your personal data.

10. Data Security

We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration and unlawful disclosure.

These measures may include encrypted connections, access controls, secure hosting infrastructure, software updates and appropriate administrative procedures.

Although we take reasonable steps to protect personal information, no method of electronic transmission or storage can be guaranteed to be completely secure.

11. Your Rights Under the GDPR

If your personal data is processed under the GDPR, you have the following rights, subject to applicable legal conditions:

Right of access (Article 15)

You may request information about the personal data we process concerning you and obtain a copy of that data.

Right to rectification (Article 16)

You may request the correction of inaccurate personal data or completion of incomplete information.

Right to erasure (Article 17)

You may request the deletion of your personal data in circumstances provided for by law.

Right to restriction of processing (Article 18)

You may request that we restrict the processing of your personal data under certain conditions.

Right to data portability (Article 20)

Where applicable, you may request to receive your personal data in a structured, commonly used and machine-readable format.

Right to object (Article 21)

You may object to the processing of personal data based on our legitimate interests, subject to applicable conditions.

Right to withdraw consent (Article 7(3))

Where processing is based on your consent, you may withdraw that consent at any time.

Right to lodge a complaint (Article 77)

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that your personal data has been processed unlawfully.

You may contact the data protection authority responsible for your place of residence, place of work or the location of the alleged infringement.

To exercise any of these rights, please contact hello@everycarbon.bio.

We will respond within the time limits required by applicable data protection legislation, generally within one month of receiving your request.

12. Third-Party Websites and Social Media

Our website may contain links to third-party websites, including professional networking platforms such as LinkedIn.

When you follow an external link, you leave our website and become subject to the privacy practices of the relevant third-party provider.

We do not control the data processing practices of external websites and recommend reviewing their privacy policies before providing personal information.

13. Children’s Privacy

Our website is intended primarily for business professionals, researchers, commercial partners, investors and other individuals interested in our technologies and products.

We do not knowingly seek to collect personal data from children.

If we become aware that personal data from a child has been collected without an appropriate legal basis, we will take steps to address the situation in accordance with applicable law.

14. Automated Decision-Making

We do not use personal data collected through our website to make solely automated decisions that produce legal effects or similarly significant effects concerning individuals within the meaning of Article 22 GDPR.

If this practice changes, we will provide the information required under applicable data protection legislation.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business operations, website functionality, data processing practices or applicable legislation.

Any updates will be published on this page, together with a revised “Last updated” date.

We encourage visitors to review this Privacy Policy periodically.