Privacy Policy

Introduction and organizational info

We, at abi group GmbH, are dedicated to serving our customers and contacts to the best of our abilities. Part of our commitment involves the responsible management of personal information collected through our website evmquery.com, and any related interactions. Our primary goals in processing this information include:

• Enhancing the user experience on our platform by understanding customer needs and preferences.
• Providing timely support and responding to inquiries or service requests.
• Improving our products and services to meet the evolving demands of our users.
• Conducting necessary business operations, such as billing and account management.

It is our policy to process personal information with the utmost respect for privacy and security. We adhere to all relevant regulations and guidelines to ensure that the data we handle is protected against unauthorized access, disclosure, alteration, and destruction. Our practices are designed to safeguard the confidentiality and integrity of your personal information, while enabling us to deliver the services you trust us with.

We do not have a designated Data Protection Officer (DPO) but remain fully committed to addressing your privacy concerns. Should you have any questions or require further information about how we manage personal information, please feel free to contact us at hello@evmquery.com.

Your privacy is our priority. We are committed to processing your personal information transparently and with your safety in mind. This commitment extends to our collaboration with third-party services that may process personal information on our behalf, such as in the case of sending invoices. Rest assured, all activities are conducted in strict compliance with applicable privacy laws.

Scope and application

Our privacy policy is designed to protect the personal information of all our stakeholders, including website visitors, registered users, and customers. Whether you are just browsing our website evmquery.com, using our services as a registered user, or engaging with us as a valued customer, we ensure that your personal data is processed with the highest standards of privacy and security. This policy outlines our practices and your rights related to personal information.

Data we process and the legal basis for processing

Account data

When you create an account we process your email address, a hashed password or single sign-on identifier, the API keys we issue you (stored hashed), your plan tier, your current credit counter, and the IP address of your last login. The legal basis is Article 6(1)(b) GDPR (performance of the contract to provide the Service).

Billing data

If you subscribe to a paid plan, we process your name, billing address, VAT ID (where provided), country, payment method token, Stripe customer ID, and invoice history. The legal bases are Article 6(1)(b) GDPR (performance of the contract) and Article 6(1)(c) GDPR (legal obligations, in particular tax and commercial retention requirements).

Usage and telemetry data

For each query made through the Service, we log a timestamp, the chain and contract address targeted, a hash of the Expression, the result status, the credit cost, and a short-lived trace for debugging. We donot retain the full decoded result payload beyond what is required to deliver the response to you. The legal basis is Article 6(1)(f) GDPR (legitimate interest in operating, securing, debugging, and improving the Service). You can object to this processing; see "User rights and choices" below.

Wallet addresses and on-chain identifiers

Wallet addresses and other on-chain identifiers are public blockchain data. When you submit them in Expressions they can, in combination with information you or third parties hold, allow re-identification of natural persons and therefore qualify as personal data under the GDPR. Where that is the case, you act as the controller in respect of that data and we act as your processor. OurData Processing Addendum governs that processing and is incorporated into the contract automatically.

Support data

If you contact us, we process the content of your message and any attachments in order to answer you. The legal basis is Article 6(1)(b) GDPR where your enquiry relates to your subscription, and otherwise Article 6(1)(f) GDPR (legitimate interest in responding to enquiries).

Retention periods

• Account data: until the account is deleted, plus 30 days for abuse and fraud forensics, after which the data is permanently removed.
• Invoices and billing records: 10 years after the end of the respective calendar year, as required by Section 147 of the German Fiscal Code (AO) and Section 257 of the German Commercial Code (HGB).
• Usage logs (full fidelity): 30 days, after which logs are aggregated or deleted.
• Aggregated, non-identifying usage statistics:indefinitely, since they no longer relate to an identifiable person.
• Support conversations: up to 3 years after the last interaction, unless a longer retention is justified by an open issue or legal dispute.

International transfers

Some of our subprocessors are located in or route data through countries outside the European Economic Area. Where that is the case, we rely on one or more of the following transfer mechanisms to ensure an appropriate level of protection in accordance with Chapter V GDPR: the European Commission's Standard Contractual Clauses, an adequacy decision, or certification under the EU-US Data Privacy Framework. The specific transfer basis for each current subprocessor is listed in theData Processing Addendum.

Data storage and protection

Data storage

Personal information is stored in secure servers. For services that require international data transfer, we ensure that such transfers comply with all applicable laws and maintain data protection standards equivalent to those in our primary location.

Data hosting partners: We partner with reputable data hosting providers committed to using state-of-the-art security measures. These partners are selected based on their adherence to stringent data protection standards.

Data protection measures

• Encryption: To protect data during transfer and at rest, we employ robust encryption technologies.
• Access control: Access to personal information is strictly limited to authorized personnel who have a legitimate business need to access the data. We enforce strict access controls and regularly review permissions.

Data sharing and disclosure

At abi group GmbH, we are committed to safeguarding your personal information and ensuring it is treated with the utmost respect. This commitment extends to how we handle the sharing and disclosure of your data.

Sharing personal information

Third-party service providers: We may share your information with third-party service providers who perform services on our behalf. Such trusted parties may have access to personally identifiable information on a need-to-know basis and will be contractually obliged to keep your information confidential. These partners are prohibited from using your personal information for any purpose other than to provide these services to abi group GmbH, and they are required to maintain the confidentiality of your information.

Data processing agreements

When we share your data with third-party service providers, we do so under the protection of Data Processing Agreements (DPAs) that ensure your information is managed in accordance with GDPR and other relevant data protection laws. These agreements mandate that third parties implement adequate technical and organizational measures to ensure the security of your data.

Transparency and control

We believe in transparency and providing you with control over your personal information. You will always be informed about any significant changes to our sharing practices, and where applicable, you will have the option to consent to such changes.

Your trust is important to us, and we strive to ensure that your personal information is disclosed only in accordance with this policy and when there is a justified reason to do so. For any queries or concerns about how we share and disclose personal information, please reach out to us at hello@evmquery.com.

User rights and choices

At abi group GmbH, we recognize and respect your rights regarding your personal information, in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. We are committed to ensuring you can exercise your rights effectively.

Your rights

• Right of access (Art. 15 GDPR): You have the right to request access to the personal information we hold about you and to obtain information about how we process it.
• Right to rectification (Art. 16 GDPR): If you believe that any personal information we hold about you is incorrect or incomplete, you have the right to request its correction or completion.
• Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal information when it is no longer necessary for the purposes for which it was collected, among other circumstances.
• Right to restriction of processing (Art. 18 GDPR): You have the right to request that we restrict the processing of your personal information under certain conditions.
• Right to data portability (Art. 20 GDPR): You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit those data to another controller.
• Right to object (Art. 21 GDPR): You have the right to object to the processing of your personal information, under certain conditions, including processing for direct marketing.
• Right to withdraw consent (Art. 7(3) GDPR): Where the processing of your personal information is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable data protection laws.

Exercising your rights

To exercise any of these rights, please contact us at hello@evmquery.com. We will respond to your request in accordance with applicable data protection laws and within the timeframes stipulated by those laws. Please note, in some cases, we may need to verify your identity as part of the process to ensure the security of your personal information.

We are committed to facilitating the exercise of your rights and to ensuring you have full control over your personal information. If you have any questions or concerns about how your personal information is handled, please do not hesitate to get in touch with us.

Cookies and tracking technologies

At abi group GmbH, we value your privacy and are committed to being transparent about our use of cookies and other technologies on our website evmquery.com.

Cookie categories

Our consent banner groups cookies and similar technologies into the following categories:

• Essential: Required for the website to function, such as keeping you signed in and remembering your cookie choice. They do not require consent. On evmquery.com this covers two first-party cookies:session_active, which reflects whether you are signed in, andcookie_consent, which stores your banner choice for around six months. It also covers the Cal.com booking dialog, which is loaded only at the moment you click a booking button: that click is your request for the service, so no prior consent applies.
• Analytics: Used to understand how visitors use our website so we can improve it. Our analytics is provided by Plausible Analytics, which is cookieless: see "Cookieless analytics" below. We also use Microsoft Clarity for session replays and heatmaps: see "Session replay and heatmaps (Microsoft Clarity)" below.

Cookieless analytics

We measure website usage with Plausible Analytics, provided by Plausible Insights OU. Plausible does not use cookies and stores no personal data. It does not track individual users across sites or devices. Your IP address is used only briefly to compute a salted, daily rotating hash used to count visits; the IP address itself is not retained. Because no personal data is stored and no cookie is set, this analytics runs on our legitimate interest in understanding website usage under Article 6(1)(f) GDPR rather than on your consent. SeePlausible's privacy policy for details.

Session replay and heatmaps (Microsoft Clarity)

We also use Microsoft Clarity, provided by Microsoft Ireland Operations Limited (part of Microsoft Corporation, based in the USA), for session replays and heatmaps that help us understand and improve the user journey. Clarity sets the _clck and _clskcookies and records anonymised interaction data, including clicks, scrolling, mouse movement, page views, browser and device data, and a truncated IP address. Form field input is masked. Data is transferred to the USA under the European Commission's Standard Contractual Clauses, and Microsoft retains the data for 30 days. SeeMicrosoft's privacy statement for details.

Your choices and consent

Our consent banner is shown on every page load, not only on your first visit, so you can review or change your choice at any time. Its detail view lists each service together with its provider and purpose. From the banner you can:

• Accept all: Consent to the use of all cookies and related technologies.
• Reject non-essential: Only essential cookies will be used to provide you with necessary website functions.
• Customize your preferences: Choose which categories of cookies you wish to allow.

Where processing is based on your consent, you can withdraw that consent at any time by reopening the banner and changing your selection, as described under "Right to withdraw consent (Art. 7(3) GDPR)" above.

Direct marketing and communications

At abi group GmbH, we may use your personal information to send you direct marketing communications about our products, services, promotions, and other relevant information that we believe may be of interest to you. We are committed to ensuring that our direct marketing practices are transparent, lawful, and in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the ePrivacy Directive.

Obtaining consent for direct marketing

• Opt-in consent: We will obtain your explicit opt-in consent before sending you direct marketing communications, where required by law. This means that you will have the opportunity to actively consent to receiving marketing messages from us before we send them to you.
• Unsubscribe option: Every direct marketing communication we send will include clear instructions on how to unsubscribe or opt-out from receiving future marketing communications. You can exercise your right to opt-out at any time, and we will promptly honor your request to stop sending you marketing messages.

Types of direct marketing communications

We may use your personal information to send you direct marketing communications via email.

Managing your preferences

You have control over the direct marketing communications you receive from us. You can manage your communication preferences by using the unsubscribe link provided in our marketing emails or text messages.