Privacy Policy

Last updated: January 5, 2026

Evolature Lab (“we”, “us”) respects your privacy and processes personal data in accordance with the GDPR and applicable laws. This website is primarily informational and does not use third-party analytics or advertising trackers.

Who We Are (Data Controller)

This Privacy Policy applies to evolature.com. Evolature Lab acts as the data controller for the processing described on this page.

Data We Process

We may process the following categories of personal data:

• Technical server data (log data)
  When you access the website, our server may automatically record technical information such as IP address, user-agent (browser/device), requested URL, timestamp, and error codes. This data is used for security, abuse prevention, troubleshooting, and basic operational reliability.
• Correspondence data
  If you contact us by email, we will process the information you provide (e.g., your email address, message content, and any attachments) for the purpose of responding and maintaining reasonable records related to the request.

Cookies and Tracking

We do not use third-party analytics (e.g., Google Analytics), advertising pixels, or cross-site tracking. We aim to operate cookie-less by default. If any cookies are used at all, they are limited to strictly necessary technical purposes (e.g., basic site functionality) and are not used for profiling or marketing.

Legal Bases for Processing (GDPR)

• Legitimate interests (Art. 6(1)(f)) — to operate, secure, and protect the website, prevent abuse, and maintain service reliability (technical logs).
• Steps prior to entering into a relationship / responding to requests (Art. 6(1)(b)) and/or legitimate interests (Art. 6(1)(f)) — when you voluntarily contact us and we respond to your message (correspondence).

Sharing of Data with Third Parties

We do not sell personal data. We may rely on service providers necessary to operate the website and email (e.g., hosting and mail infrastructure). Such providers may process data on our behalf only to deliver the service. We may also disclose data if required to comply with a legal obligation or to protect our rights and the security of the website.

Data Retention

• Server logs: retained only for as long as needed for security and operational purposes, then deleted or anonymized.
• Email correspondence: retained as long as necessary to handle the request and maintain reasonable research/administrative records, unless a longer retention is required by law.

Your Rights (GDPR)

Depending on the circumstances and the legal basis, you may have the right to request access, rectification, erasure, restriction of processing, to object, and to data portability. Where processing is based on consent, you may withdraw consent at any time (withdrawal does not affect the lawfulness of processing before withdrawal). You also have the right to lodge a complaint with a supervisory authority in the EEA.

Data Security

We take reasonable technical and organizational measures to protect data. However, no method of transmission over the Internet or method of electronic storage is fully secure.

International Data Transfers

We do not intentionally transfer personal data outside the EEA. If any service provider processes data outside the EEA, such transfers will be protected using appropriate legal safeguards (e.g., Standard Contractual Clauses), as required.

Automated Decision-Making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

External Links

This website may contain links to external sites. We are not responsible for the privacy practices of third-party websites. Please review their policies separately.

Changes to This Privacy Policy

We may update this policy from time to time. The current version will always be available on this page with the “Last updated” date.