COOKIE POLICY

Effective date: December 5, 2025

This Cookie Policy explains how Evercity UG (haftungsbeschränkt) (“Evercity”, “we”, “us”, “our”) uses cookies and similar technologies on:

• our websites, including evercity.io, auth.evercity.io, carbon.evercity.io, and any other sites that link to this Cookie Policy (together, the “Websites”); and
• our web-based software-as-a-service climate finance platform and related applications (the “Platform”).

This Cookie Policy should be read together with our Privacy Policy and Terms of Service.

By clicking “Accept” in the cookie banner, adjusting your preferences, or continuing to use our Websites or Platform after seeing the cookie banner, you consent to the use of cookies as described in this Cookie Policy, to the extent required by applicable law.

1. What are cookies?
Cookies are small text files that are placed on your device (computer, tablet, smartphone) when you visit a website or use a web application. Cookies allow the website or application to recognise your device and store certain information about your preferences or past actions.

In addition to cookies, we may also use similar technologies such as:

• Web beacons / pixels – small invisible images or code snippets that track usage or email interactions.
• Local storage – browser-based storage used to hold data locally on your device.
• SDKs / tracking scripts – code snippets integrated in our Platform or third-party tools.

For simplicity, we refer to all of these technologies as “cookies” in this Cookie Policy.

2. Who sets the cookies?
Cookies may be set by:

• First-party cookies: placed directly by Evercity when you visit our Websites or use our Platform; and
• Third-party cookies: placed by third parties (e.g. analytics or marketing providers) when you visit our Websites or use our Platform. These third parties may collect data about your online activities over time and across different websites or applications.

3. Types of cookies we use and purposes
We use the following categories of cookies:

3.1 Strictly necessary cookies
These cookies are essential for the operation of our Websites and Platform and for providing core functionality, such as:

• allowing you to log in and maintain a secure session;
• enabling page navigation, access to secure areas, and basic Platform functions;
• enforcing security features (e.g. CSRF protection, load balancing).

Without these cookies, our Websites and Platform may not function properly.

Legal basis (EEA/UK): our legitimate interests (Art. 6(1)(f) GDPR) to operate a secure, functional online service. Consent is not required for these cookies.

Examples (indicative):

• Authentication/session cookies (e.g. session_id, auth_token)
• Security cookies (e.g. for load balancing, CSRF protection)

3.2 Functional / preference cookies
These cookies enable enhanced functionality and personalisation, such as:

• remembering your language, region or interface preferences;
• storing certain settings for your Company Account or views;
• improving user experience and usability.

If you disable these cookies, certain parts of the Websites or Platform may not function as intended.

Legal basis (EEA/UK):

• Your consent (Art. 6(1)(a) GDPR) where required; or
• Our legitimate interests (Art. 6(1)(f) GDPR) in providing a user-friendly service, where consent is not mandatory.

3.3 Analytics and performance cookies
These cookies help us understand how visitors use our Websites and Platform by collecting information such as:

• which pages are visited and for how long;
• how users navigate between pages or features;
• which browser or device types are used;
• aggregated performance and error statistics.

We use this data to:

• monitor and improve the performance and stability of our Websites and Platform;
• understand which features are most used or need improvement;
• generate anonymised or aggregated statistics for internal reporting.

Legal basis (EEA/UK): your consent (Art. 6(1)(a) GDPR), obtained via our cookie banner or preference centre. You can withdraw your consent at any time.

Examples of tools (indicative; to be adapted to actual stack):

• Web analytics tools (e.g. Google Analytics, Matomo or similar)
• Product analytics tools (e.g. mixpanel-type tools for feature usage)

3.4 Marketing and tracking cookies
If and where we use marketing / tracking cookies, they may be set by us or by third-party partners in order to:

• measure the effectiveness of our campaigns, events and online advertising;
• build aggregated audiences or segments for retargeting (e.g. showing you ads on other websites based on your visit to ours);
• track conversions (e.g. sign-ups, demo requests) following clicks on our ads.

These cookies may collect information about your browsing activity across different websites and services over time.

Legal basis (EEA/UK): your consent (Art. 6(1)(a) GDPR). Without your consent, these cookies will not be set.

Examples of tools (indicative only; use/adjust as relevant):

• LinkedIn Insight Tag
• Google Ads / remarketing tools
• Other ad or tracking pixels used in connection with marketing campaigns

4. Cookies used on the Platform vs. public Websites
We may use different cookies depending on whether you are:

• simply visiting our public Websites (e.g. marketing pages); or
• authenticated and using the Platform as a registered User.

On the Platform, cookies will typically focus on:

• authentication, security and session management;
• storing certain preferences and configuration options;
• optional analytics to understand feature usage (if enabled by consent, where required).

On our public Websites, we may additionally use analytics and marketing cookies to understand website traffic, improve content and measure the performance of campaigns.

5. How long do cookies stay on your device?
Cookies may be:

• Session cookies – stored only for the duration of your browser session and deleted when you close your browser; or
• Persistent cookies – stored on your device for a defined period (e.g. days, months or years) or until you delete them.

The specific storage periods may vary depending on the cookie and its purpose. Where we use third-party cookies, their retention periods are determined by the relevant provider. You can usually find these details in the provider’s own privacy or cookie policy.

6. Managing your cookie preferences

6.1 Through our cookie banner / preference centre
When you first visit our Websites, you will see a cookie banner allowing you to:

• accept all cookies;
• reject non-essential cookies; or
• customise your preferences by category (e.g. only allow necessary and functional cookies).

You can change your cookie preferences at any time by:

• clicking the “Cookie settings” (or similar) link in the footer of our Websites; or
• adjusting settings in the in-product cookie preference centre (where available).

Please note: strictly necessary cookies cannot be disabled, as they are required for basic operation and security.

6.2 Through your browser settings
Most web browsers allow you to:

• view which cookies are stored on your device;
• delete specific cookies or all cookies;
• block or restrict cookies from specific websites or all websites.

The exact steps depend on the browser you use (e.g. Chrome, Firefox, Safari, Edge). You can usually find instructions in the “Help” or “Settings” section of your browser.
If you block all cookies, our Websites or Platform may not function properly, and you may not be able to log in or use certain features.

6.3 Do Not Track (DNT) signals
Some browsers offer a “Do Not Track” (“DNT”) setting. There is currently no uniform standard on how websites should respond to DNT signals. At this time, our Websites and Platform do not respond to DNT signals. We will continue to monitor developments and may update this Cookie Policy if standards evolve.

7. Third-party cookies and data transfers
Some cookies on our Websites and Platform may be set by third parties that provide services to us, such as:

• analytics or product analytics providers;
• marketing, advertising and social media partners;
• infrastructure, hosting or security providers.

These third parties may process data outside the country in which you are located, including outside the European Economic Area (EEA) or the United Kingdom. Where required by law, we will ensure that appropriate safeguards (such as standard contractual clauses) are in place to protect your data. Further details can be found in our Privacy Policy.

We encourage you to review the privacy and cookie policies of the relevant third-party providers for more information about how they use cookies and process personal data.

8. Relationship with the Privacy Policy
Cookies may involve the processing of personal data (e.g. IP addresses, online identifiers, device information, usage data). Any such processing is carried out in accordance with our Privacy Policy, which explains:

• what personal data we collect;
• the legal bases for processing under the GDPR and other laws;
• your rights as a data subject (access, rectification, erasure, restriction, objection, data portability, etc.); and
• how to contact us or the relevant supervisory authority.

In case of any inconsistency between this Cookie Policy and our Privacy Policy regarding the processing of personal data, the Privacy Policy shall prevail.

9. Updates to this Cookie Policy
We may update this Cookie Policy from time to time, for example to reflect changes in:

• our use of cookies and similar technologies;
• applicable laws and regulatory guidance;
• the services or features offered via our Websites or Platform.

When we make material changes, we will:

• update the “Effective date” at the top of this Cookie Policy; and
• provide a notice on our Websites and/or in the Platform, or by email where appropriate.

Your continued use of our Websites or Platform after the effective date of the updated Cookie Policy will constitute your acceptance of the changes. If you do not agree, you should adjust your cookie settings and discontinue use of our services.

10. Contact us
If you have any questions about this Cookie Policy or our use of cookies, please contact us at:
Evercity UG (haftungsbeschränkt)
Neumannstraße 135
13189 Berlin, Germany
Email: info@evercity.io