Privacy Policy

As of: October 2026

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

ENSERV EIS GmbH
represented by the managing directors Klaus Probsthain and Oliver Schnoor
Wernerusstraße 33
29227 Celle
Phone: +49 (0)5141 7548-0
Email: info@enserv.de

For all questions regarding data protection, you can reach us at datenschutz@enserv.de.

 

2. Overview

We process personal data only to the extent necessary to provide a functional website, to respond to your enquiries, to carry out application procedures or to fulfil our contractual and legal obligations. Personal data is any information that can be used to identify you personally.

We use no tracking or marketing tools and do not create user profiles. For simple access statistics, we use only the data-minimising Statify plugin (see Section 7). Third-party content such as Google Maps or YouTube is only loaded after you have given your explicit consent (see Section 9).

3. Legal Bases

We process your data on the basis of the following provisions:

  • Art. 6(1)(a) GDPR – your consent (e.g. for loading external content)
  • Art. 6(1)(b) GDPR – performance of a contract and pre-contractual measures (e.g. quotation requests, applications)
  • Art. 6(1)(c) GDPR – compliance with legal obligations (e.g. retention obligations under tax and commercial law)
  • Art. 6(1)(f) GDPR – our legitimate interest (e.g. secure and stable operation of the website)

Where information is stored on or read from your end device (e.g. cookies), this is done on the basis of Section 25(1) TDDDG (consent) or Section 25(2) No. 2 TDDDG (strictly necessary).

4. Hosting

This website is hosted by:

ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68
02742 Friedersdorf
Germany

The servers are located in Germany. When you access our website, the data listed in Section 5 is processed on the host’s servers. The basis is our legitimate interest in a reliable and secure provision of our website (Art. 6(1)(f) GDPR). We have concluded a data processing agreement with ALL-INKL.COM pursuant to Art. 28 GDPR. Further information can be found in the provider’s privacy information at all-inkl.com.

5. Server Log Files

Each time our website is accessed, the host automatically collects information transmitted by your browser:

  • IP address of the requesting device
  • Date and time of access
  • Page or file accessed
  • Referrer URL (previously visited page)
  • Browser type and version, operating system used
  • Amount of data transferred and HTTP status code

This data is technically necessary to deliver the website and to ensure stability and security (e.g. defence against attacks). The legal basis is Art. 6(1)(f) GDPR. The data is not merged with other data sources. The log files are automatically deleted or anonymised after a short time [ggf. konkrete Frist laut ALL-INKL-Einstellung eintragen].

6. Cookies and Local Storage

We only use technically necessary cookies or entries in your browser’s local storage. These include in particular storing your decision on whether external content (Google Maps, YouTube) may be loaded, as well as storing your parts list in the product catalogue (see Section 8). The legal basis is Section 25(2) No. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR or – for proof of your consent – Art. 6(1)(c) GDPR.

[Name des Cookies/Consent-Tools und Speicherdauer eintragen, z. B. „Cookie privacy_embeds (Avada), Speicherdauer 30 Tage“]

You can delete or block cookies at any time in your browser settings.

7. Access Statistics with Statify

To count page views anonymously, we use the WordPress plugin Statify. Statify records only the date of the page view, the page accessed and, where applicable, the referrer URL. No IP addresses, no cookies and no other identifiers are stored; no link to an individual can be established. The data is stored exclusively in our own database on our host’s server and is not passed on to third parties.

The legal basis is our legitimate interest in a data-minimising analysis of the use of our website (Art. 6(1)(f) GDPR). The statistics data is automatically deleted after [z. B. 365] days.

8. Parts List in the Product Catalogue

In our product catalogue, you can add products to a parts list in order to find them again later or to enquire about them together. So that your selection is retained when switching between pages, we store the saved products server-side in your session. For this purpose, your browser automatically sets the technically necessary session cookie PHPSESSID when the page is accessed. It contains only a random session identifier; the list of selected products is assigned to this session on the server side and is not stored permanently or transmitted to third parties unless you submit it yourself.

The cookie is a pure session cookie: it expires automatically as soon as you close your browser or after a certain period of inactivity.

Storage only takes place if you actively use the parts list. It is strictly necessary for this function expressly requested by you; the legal basis is Section 25(2) No. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR. You can empty the parts list yourself at any time.

You can send your parts list to us via the enquiry form. We transmit the selected products to us by email together with the details you provide (first name, last name, company if applicable, email address, preferred means of contact, telephone number and times you can be reached if applicable, message and, depending on the product, further details you have filled in, including a file you have uploaded if applicable). These details are not stored in our website’s database; the data is processed solely for sending. On request, we will additionally send you a copy of this email to your own email address. We use the details exclusively to process your enquiry. The legal basis is your consent expressly given when submitting (Art. 6(1)(a) GDPR) and Art. 6(1)(b) GDPR (pre-contractual measures). The information in Section 11 applies to the retention period of the email received by us.

9. External Content Only After Consent

On some pages, we would like to show you maps from Google Maps or videos from YouTube. This content is not loaded automatically. Instead, you first see a placeholder. Only when you actively consent there is a connection established to the servers of the respective provider. At a minimum, your IP address and technical information about your browser are transmitted; the provider may set its own cookies.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw your consent at any time with effect for the future by [z. B. die gespeicherten Cookies in Ihrem Browser löschen / den Link „Datenschutz-Einstellungen“ im Footer nutzen].

Google Maps

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. After your consent, the map is loaded directly from Google servers. Data may also be transferred to Google LLC in the USA.

Google’s privacy policy: https://policies.google.com/privacy

YouTube

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We embed videos in enhanced privacy mode (youtube-nocookie.com). After your consent, a connection to YouTube’s servers is established; YouTube thereby learns which of our pages you have visited. If you are logged in to your YouTube or Google account at the same time, YouTube can assign this to your personal profile. You can prevent this by logging out beforehand. Data may also be transferred to Google LLC in the USA.

Google’s privacy policy: https://policies.google.com/privacy

Data Transfer to the USA

Google LLC is certified under the EU-US Data Privacy Framework. For transfers to certified companies, an adequacy decision of the European Commission exists (Art. 45 GDPR). In addition, Google relies on standard contractual clauses of the European Commission (Art. 46(2)(c) GDPR).

10. Fonts

The fonts used on this website are stored locally on our host’s server and are delivered from there. No connection is made to servers of Google Fonts, Adobe Fonts or other third-party providers.

11. Contact by Email or Telephone

If you contact us by email or telephone, we process your details (e.g. name, email address, telephone number, company, content of your enquiry) to handle your request and for possible follow-up questions.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or serves to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries (Art. 6(1)(f) GDPR).

Your data will be deleted once your enquiry has been finally processed and no statutory retention obligations apply (e.g. 6 years for business letters under Section 257 HGB, 10 years for accounting records under Section 147 AO).

Please note: unencrypted emails can be read by third parties in transit. Please therefore do not send us particularly confidential information by unencrypted email.

12. Applications

You can apply to us by email. We process your application data (e.g. contact details, cover letter, CV, references) exclusively to carry out the application process. The legal basis is Art. 6(1)(b) GDPR (initiation of an employment relationship) in conjunction with Section 26 BDSG. Where you voluntarily provide us with special categories of personal data (e.g. information on a severe disability), we process these on the basis of Art. 9(2)(b) GDPR.

Only the persons in our company involved in the selection process have access to your documents. They are not passed on to third parties.

If an employment relationship is established, your data will be transferred to your personnel file for the purpose of carrying out the employment relationship. If you receive a rejection, we will delete your documents no later than 6 months after the end of the process. This period serves to defend against possible claims under the General Equal Treatment Act (AGG; Art. 6(1)(f) GDPR). If you would like to be included in an applicant pool, we will only store your data with your explicit consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

13. Customer and Contract Data

We process personal data of our customers and business partners to the extent necessary for the establishment, performance or termination of a contractual relationship (Art. 6(1)(b) GDPR). Data is only passed on to third parties where this is necessary for contract processing (e.g. to the credit institution commissioned with payment processing) or where we are legally obliged to do so. After completion of the order, the data is deleted in compliance with statutory retention periods.

14. SSL/TLS Encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in the address bar and the padlock symbol in your browser. When encryption is active, the data you transmit to us cannot be read by third parties.

15. Your Rights

You have the following rights against us with regard to your personal data:

  • Access to your data stored by us (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability in a common, machine-readable format (Art. 20 GDPR)
  • Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR); the lawfulness of processing carried out until then remains unaffected

An informal notification to datenschutz@enserv.de is sufficient.

Right to Object (Art. 21 GDPR)

If we process your data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

The State Commissioner for Data Protection of Lower Saxony (Die Landesbeauftragte für den Datenschutz Niedersachsen)
Prinzenstraße 5
30159 Hannover
www.lfd.niedersachsen.de

16. Retention Period

Unless a more specific retention period is stated in this policy, we store your data only for as long as is necessary for the respective purpose or as statutory retention periods apply. After that, it will be deleted.

17. No Automated Decision-Making

Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.

18. Objection to Advertising Emails

We hereby object to the use of contact data published as part of the legal notice obligation for sending unsolicited advertising and information materials. We expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example by spam emails.

19. Changes to This Privacy Policy

We will adapt this privacy policy as soon as changes to our website or the legal situation require it. The version published here at any given time applies.