Legal
Privacy policy
This English version is provided for your convenience. Only the German version (Datenschutzerklärung) is legally binding.
1. Controller
Alexander Claßen, ennoSI
Klinkumer Straße 25, 41844 Wegberg, Germany
Email: contact@ennosi.de
2. Principles
This website does not set cookies, does not use analytics or tracking tools and does not embed content from third parties. The font is served by this website itself, not by an external service. That is why there is no cookie banner.
3. Hosting and server logs
The website is delivered via Cloudflare (Cloudflare Workers; Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you visit the site, Cloudflare processes technically necessary data, in particular your IP address, the date and time of access, the page requested and information about your browser, in order to deliver the site and protect it against attacks.
The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in providing the website securely and reliably. A data processing agreement is in place with Cloudflare. For transfers to the USA, Cloudflare relies on the EU-US Data Privacy Framework and on standard contractual clauses.
Cloudflare processes this data only for as long as is necessary to deliver and protect the website. I do not keep access logs myself; for the contact form, only technical error messages are logged, without any content and without IP addresses.
4. Contact form
When you use the contact form, I process the details you enter: your name, email address and message, and also your company, phone number and the topics you select, if you provide them. I use these details only to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or to steps prior to entering into one, and Art. 6(1)(f) GDPR otherwise (legitimate interest in answering enquiries).
On the technical side, a small function running on Cloudflare (Cloudflare Workers) receives the details, checks them and forwards them to my mailbox by email. The content is not stored on the web server. To keep out automated spam, your browser solves a small computing task while you fill in the form; no third-party service is involved and no cookie is set. So that a solved task cannot be reused from other computers, the check includes a non-reversible value derived from your IP address. The same value is kept for no longer than a minute to limit the number of requests per sender; beyond that, it is neither stored nor passed on.
Name, email address and message are required; without them I cannot reply. All other details are optional.
5. Contact by email
When you email me or use the contact form, the message is processed by Heinlein Hosting GmbH (mailbox.org), Berlin, with whom a data processing agreement is in place. The legal basis is Art. 6(1)(b) GDPR where it relates to a contract or to steps prior to entering into one, and Art. 6(1)(f) GDPR otherwise.
I keep your enquiry for as long as it is needed to handle it and answer any follow-up questions. If it leads to an engagement or the correspondence is relevant for tax purposes, I keep it for the statutory periods (six years for business correspondence, eight years for accounting records, section 147 of the German Fiscal Code). All other messages are deleted once they have been dealt with.
6. Your rights
You have the right of access (Art. 15 GDPR) and the rights to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Just write to the email address above.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
No automated decision-making, including profiling, takes place.
7. Right to object
Where I process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object to this at any time on grounds relating to your particular situation (Art. 21 GDPR). I will then stop processing the data unless there are compelling legitimate grounds for the processing that override your interests, or the processing serves the establishment, exercise or defence of legal claims. An informal message to the email address above is enough.
Last updated: November 2026