Data Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

enari GmbH
Rheinpromenade 13
40789 Monheim am Rhein
Germany

Represented by: Saeed Firoz Ranjbar
Phone: +49 151 66024888
Email: info@enari-gmbh.com

2. General information

Protecting your personal data is important to us. We process personal data exclusively in accordance with the applicable data protection law, in particular the GDPR and the German Telecommunications Digital Services Data Protection Act (TDDDG).

Personal data means any information relating to an identified or identifiable natural person, for example your name, your email address or your IP address.

3. Hosting and delivery via Cloudflare

This website is hosted on Cloudflare Pages and delivered through the Cloudflare network. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”).

When you access the website, your browser automatically transmits information that Cloudflare processes in order to deliver the pages and to protect the website against attacks and misuse. This includes in particular:

  • IP address
  • date and time of access
  • requested page or file
  • referrer URL
  • browser type and version
  • operating system

Legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and reliable provision of the website.

To protect the website, Cloudflare may set cookies that are strictly necessary for this purpose, for example to distinguish legitimate visitors from automated attacks. This is based on Section 25(2) No. 2 TDDDG.

Cloudflare processes this data on our behalf (Art. 28 GDPR). Cloudflare is certified under the EU-U.S. Data Privacy Framework; transfers of data to the USA are therefore based on the adequacy decision of the European Commission (Art. 45 GDPR). Further information can be found in Cloudflare’s privacy policy.

4. Contact form

You can contact us using the form on this website. We process the following data:

  • name
  • company
  • email address
  • your message (optional)

Name, company and email address are required so that we can deal with your enquiry. Providing this data is voluntary; without it, however, we cannot process your enquiry via the form.

We use this data solely to handle and respond to your enquiry. Your entries are transmitted to our email inbox using the email delivery service Resend (Plus Five Five, Inc., USA). Resend processes the data on our behalf (Art. 28 GDPR) and is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). Our email inbox is hosted by STRATO (see section 6).

Legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or to pre-contractual measures, and Art. 6(1)(f) GDPR in all other cases. Our legitimate interest lies in responding to enquiries addressed to us.

5. Spam protection with Cloudflare Turnstile

To protect the contact form against spam and automated abuse, we use Cloudflare Turnstile, a service provided by Cloudflare (see section 3). Turnstile is only loaded once you start filling in the contact form — not when you merely visit a page.

Turnstile checks whether the form is being used by a human. For this purpose, Cloudflare processes in particular your IP address, information about your browser and device (for example browser type and screen resolution) and technical signals from the check. According to Cloudflare, Turnstile does not use cookies, and the data is not used for advertising purposes.

Legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting our website and our inbox against spam and abuse. Where information is read from your device, this is done on the basis of Section 25(2) No. 2 TDDDG, as it is strictly necessary to provide the contact form you are using. Further information can be found in the Turnstile privacy addendum.

6. Contact by email

If you email us, we process your email address and the information contained in your message in order to deal with your request. Our email inbox is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, which processes the data on our behalf (Art. 28 GDPR). The legal bases are the same as for the contact form (see section 4).

7. No tracking, no external content

We do not use analytics, advertising or tracking technologies, which is why this website does not display a cookie or consent banner. Fonts are delivered together with the website and are not loaded from third-party servers. The website does not embed videos, maps or social media plug-ins.

8. Recipients of data

We only disclose your personal data to the service providers named in this policy, who process it on our behalf, or where we are legally obliged to do so. We do not sell personal data.

9. Storage period

We store personal data only for as long as is necessary for the respective purpose. Enquiries are deleted once they have been fully dealt with, unless statutory retention obligations require longer storage — for example for business correspondence under commercial and tax law (six or ten years).

10. Your rights

Under the GDPR, you have the following rights with regard to your personal data:

  • right of access (Art. 15 GDPR)
  • right to rectification (Art. 16 GDPR)
  • right to erasure (Art. 17 GDPR)
  • right to restriction of processing (Art. 18 GDPR)
  • right to data portability (Art. 20 GDPR)
  • right to object (Art. 21 GDPR, see section 11)
  • right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, simply contact us at info@enari-gmbh.com. The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).

11. Right to object

Where we process your personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.

12. SSL/TLS encryption

This website uses TLS encryption to protect the transmission of content, such as the enquiries you send us. You can recognise an encrypted connection by “https://” in your browser’s address bar.

13. Changes to this policy

We may update this policy to reflect changes to our website or to legal requirements. The version published on this page applies.

Last updated: October 2026