1. Data Controller
EvoMed Consulting GmbH
Geschäftsführer: Dr. med. Amel Havkic
Email: info@evomed-consulting.eu
Website: https://evomed-consulting.eu
2. Introduction
This Privacy Policy explains how we collect, use, share, and protect information in relation to the StarMap Assessment Platform ("the Platform"). We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
3. Information We Collect
3.1 Information You Provide Directly
- Account Information: When you create an account using OAuth (Google or Microsoft), we collect your name, email address, and profile picture from your OAuth provider.
- Contact Details: First name, last name, email address, phone number, company name.
- Assessment Data: Your responses to assessment questions, including text inputs and voice recordings (if you choose to use voice input).
- Professional Information: Company type, company size, product/solution details, development stage.
3.2 Information Collected Automatically
- Usage Data: How you interact with the Platform, including pages visited, features used, and assessment progress.
- Technical Data: IP address, browser type, device information, operating system.
- Cookies: Session cookies, authentication tokens, and preference settings (see our Cookie Policy).
3.3 Information from Third Parties
- OAuth Providers: Profile information from Google or Microsoft when you authenticate.
- Calendly Integration: Scheduling information if you book a consultation.
4. Legal Basis for Processing
- Consent: For optional data processing activities and cookie usage.
- Contract: To provide the assessment services you requested.
- Legitimate Interests: To improve our services, ensure security, and conduct business operations.
- Legal Obligations: To comply with applicable laws and regulations.
5. How We Use Your Information
- Provide and maintain the StarMap Assessment Platform
- Process and analyze your assessment responses
- Generate personalized reports and recommendations
- Communicate with you about your assessment
- Improve our services and develop new features
- Ensure platform security and prevent fraud
- Comply with legal obligations
6. Data Sharing and Disclosure
6.1 Service Providers
- OpenAI: For AI-powered scoring and report generation (processed data only, no personal identifiers).
- PostgreSQL Database Hosting: Secure cloud database storage.
- Calendly: For scheduling consultations (optional).
6.2 Legal Requirements
We may disclose information if required by law, court order, or government regulation.
6.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
7. Data Retention
- Assessment Data: 3 years from completion for analysis and follow-up.
- Account Information: As long as your account is active plus 1 year.
- Communications: 2 years for business correspondence.
- Technical Logs: 90 days for security and debugging purposes.
8. Your Rights
Under GDPR, you have the following rights:
- Access: Request a copy of your personal data.
- Rectification: Correct inaccurate or incomplete data.
- Erasure: Request deletion of your data ("right to be forgotten").
- Restriction: Limit processing of your data.
- Portability: Receive your data in a structured format.
- Objection: Object to certain types of processing.
- Withdraw Consent: Withdraw previously given consent.
To exercise these rights, contact us at info@evomed-consulting.eu.
9. Data Security
- Encryption in transit (HTTPS/TLS)
- Encrypted database storage
- Access controls and authentication
- Regular security audits
- Employee training on data protection
10. International Data Transfers
Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place through:
- Standard Contractual Clauses
- Adequacy decisions
- Privacy Shield certification (where applicable)
11. Children's Privacy
The Platform is not intended for children under 16. We do not knowingly collect personal data from children.
12. Updates to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or Platform notification.
13. Contact Information
Data Protection Officer
EvoMed Consulting GmbH
Email: info@evomed-consulting.eu
Phone: +49 176 1794 7614
Address: Hafenallee 43, 63067 Offenbach
14. Supervisory Authority
You have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.
© 2025 EvoMed Consulting GmbH. All rights reserved.