Privacy

This notice covers visits to genral.de, direct email enquiries and the contact forms described below when they are enabled. The separate GEN│RAL application, its accounts, hotel reports, AI functions and payment processes are not covered by this website notice.

Processing for enabled enquiries is described below.

Controller: see Imprint.

Email: privacy@epv-group.com

We use IONOS SE, Germany, for domain administration and business email communication. When you contact us by email, we process your contact details, message, any attachments you send and technical delivery data to handle your enquiry. IONOS provides the email infrastructure. Processing by IONOS on our behalf is covered by a data processing agreement.

Article 6(1)(b) GDPR applies to enquiries by individuals concerning their own contract or pre-contractual steps they request. For business contacts and other enquiries, we rely on Article 6(1)(f) GDPR and our legitimate interest in handling business communications. Direct emails are separate from automated form and system messages.

IONOS DPA · IONOS privacy information

For an enabled Founding Partner or Enterprise enquiry, we send your name, email address, company, role, hotel, country, number of rooms, preferred start month, language, enquiry type and B2B and privacy acknowledgements to EPV │ GROUP's central enquiry process. This includes the source “genral” and a technical enquiry identifier for assignment and duplicate protection. The website does not maintain its own persistent enquiry database or file store for this purpose.

If the page address contains a valid letter-link reference (ref), we preserve it when switching languages within this website and pass it on only upon submission as an unverified origin hint in the message. It is distinct from the technical enquiry identifier and proves neither identity or actual letter receipt nor need, contract or payment. We set no additional cookies for this purpose, do not store the letter-link reference as plain text in browser storage and collect no additional visit statistics.

The details are used to process and answer your specific enquiry. Article 6(1)(b) GDPR applies only where you are an individual seeking your own contract. For business contacts, Article 6(1)(f) GDPR applies; the legitimate interest is reliable handling of the company's enquiry. Technical assignment and duplicate protection rely on Article 6(1)(f) GDPR and the interest in a secure, traceable enquiry process. Acknowledging that you have read the privacy notice is not consent to additional processing or advertising.

Access is limited to the people responsible for the enquiry and the technical providers actually involved. Group membership alone does not permit unrestricted disclosure. The central process is explained in EPV │ GROUP's privacy notice. An enquiry creates neither a customer account nor a contract or payment.

Fields marked as required are needed to process the form enquiry; without them, the form cannot be submitted. The IONOS information above applies to direct email enquiries. Please provide only information needed for your enquiry, not guest or employee lists or particularly sensitive information.

Accounts, trials, hotel reports, AI functions, support and any payment use are covered by the separate GEN│RAL application privacy notice. That information page can be read without signing in and starts neither a trial nor a purchase.

Document identifier: EPV-GEN-APP-PRIVACY-2026-09-08-V0.3. This website notice neither replaces nor changes the application notice. Visiting this information website does not create an application account. Application session, account and contract periods do not apply to website access logs. You may also request the application notice without active access by emailing privacy@epv-group.com.

Resend, a service of Plus Five Five, Inc., USA, is used for necessary system messages of the separate application. Its purposes, data categories and legal bases are described in the application privacy notice. Visiting this information website does not trigger such a system email. The website has no Resend email service of its own and sends no newsletters. Enabled forms pass an enquiry to the central process described above; any notifications within that process are separate.

Ireland is configured as the sending region for epv-group.com. This does not mean that all account data, content, logs or support data are processed exclusively in the EU. The provider documents do not establish a particular deletion period for website enquiries.

Resend privacy information · Resend DPA

We do not embed additional analytics or marketing-tracking services of our own on the public website. This is distinct from provider-side operational and security statistics; provider information and details of the security cookie appear in the concluding Website and hosting section.

When an enabled form is submitted, the browser tab stores a random enquiry identifier, a checksum of the details and, where applicable, the earliest retry time under genral.qualification.pending.v1. Form fields themselves are not stored there. An identifier or checksum is not anonymous merely because hashing is used. These values prevent an unconfirmed retry from creating a new enquiry.

The identifier is held in the tab's sessionStorage. After confirmed receipt, it is removed when the form is closed or reset; otherwise, it remains available for retries during the tab session. A browser restoring a session may restore the tab storage. You can remove it through your browser's website-data settings. Without this storage, safe form retries may not be available.

Storage and access support the form submission you expressly request under Section 25(2)(2) TDDDG. Subsequent personal-data processing relies on Article 6(1)(f) GDPR and the interest in secure delivery without duplicate cases. This is not permission for additional tracking.

Only when transitions to the application are subsequently enabled may the language, website source, selected button, originating page, preferred plan and any campaign parameters in the page address be passed on. They identify the selected entry point; no additional cookies are set for this purpose. Assignment relies on Article 6(1)(f) GDPR, not a blanket claim of contract performance. Storage in an application case is governed by the separate application notice. This transition is not offered in pre-launch mode.

The website processes form details for transmission and confirmation, without maintaining a persistent copy in its own website database. The tab identifier is handled as described above. This is separate from subsequent storage during central enquiry handling, in email mailboxes and in technical provider logs.

Relevant criteria are ongoing handling, necessary follow-up questions, documented closure and a specific continuing need for evidence. Centrally stored form enquiries are scheduled for deletion three calendar months after documented closure, unless a specific statutory duty or documented dispute requires retention. This period covers the central form record, not separate emails, provider logs or copies in the central handling system.

Direct emails are retained according to their handling purpose. Where a particular document is subject to a statutory retention duty, its document category and statutory start date determine the period. Possible future use does not justify indefinite retention. In a documented legal or security case, only the data needed for that purpose is retained; it must be deleted once that reason no longer applies.

Website access, error and security logs support delivery, troubleshooting and abuse prevention. Their retention is separate from application accounts, contracts and contact enquiries. Technical logs, platform statistics and backups are subject to the retention periods applicable at the provider used. Information on specific data categories, periods and retention criteria is available at privacy@epv-group.com.

Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction and data portability. Where processing is based on consent, you may withdraw it at any time with effect for the future. This does not affect the lawfulness of earlier processing.

To exercise your rights, email privacy@epv-group.com; no application account is required. We request additional identity information only to the extent needed where reasonable doubts exist. We handle requests without undue delay, normally within one month; any legally permitted extension and its reasons are communicated within that period.

Where processing relies on Article 6(1)(f) or (e) GDPR, you may object at any time for reasons relating to your particular situation. This also applies to profiling based on those provisions. We then stop the processing concerned unless we can demonstrate overriding compelling legitimate grounds or processing is necessary to establish, exercise or defend legal claims.

You may object to processing for direct marketing at any time without giving a reason, including associated profiling. Your data must then no longer be used for that marketing. This notice does not introduce advertising or profiling.

Send your objection to privacy@epv-group.com. No particular format or active access is required.

You may lodge a complaint with a data protection supervisory authority, particularly at your habitual residence, place of work or the place of the alleged infringement. For private-sector organisations in Bavaria, one point of contact is the Bavarian State Office for Data Protection Supervision, Promenade 18, 91522 Ansbach, Germany. www.lda.bayern.de

This website does not make decisions about you based solely on automated processing with legal or similarly significant effects under Article 22 GDPR. Technical form checks do not replace individual handling of your enquiry.

The public website is published with OpenAI Sites. For users in the European Economic Area, the provider documents name OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. Technical delivery includes Cloudflare services within the sub-processor structure.

Access data such as IP address, requested page or file, browser and device information, time, referrer, and error and security information is processed to provide a secure and stable website under Article 6(1)(f) GDPR and our interest in delivery, troubleshooting and abuse prevention. The platform may provide its own operational and visit statistics; this is not the same as additional marketing tracking embedded by us.

The provider documents describe incorporation of a Data Processing Addendum and the technical sub-processor chain. The service is subject to the contractual and privacy terms applicable to the account used. No particular data residency is promised. Processing, including logs, backups or support access, may take place outside the European Economic Area, particularly in the USA.

To protect against automated attacks, Cloudflare may set the technically necessary __cf_bm cookie. It contains encrypted information used to calculate a bot score, is not linked to a GEN│RAL application user ID and expires after approximately 30 minutes of inactivity. Storage or access is necessary to securely provide the digital service expressly requested and is based on Section 25(2)(2) TDDDG; subsequent processing for abuse prevention and operational security is based on Article 6(1)(f) GDPR. Processing may also take place outside the European Economic Area under the privacy frameworks of OpenAI and Cloudflare.

The provider's published Data Processing Addendum describes adequacy decisions and EU standard contractual clauses as possible bases for international transfers. The relevant basis is the one applicable to the particular recipient and processing activity under Chapter V GDPR. Information on the recipients, countries and safeguards actually used, and a copy of relevant safeguards, can be requested at privacy@epv-group.com, subject to necessary redactions to protect third parties.

OpenAI Sites privacy guidance · OpenAI sub-processors · Cloudflare cookie information