Privacy notice pursuant to Art. 13 GDPR.

What personal data Enixma GmbH collects through this website, on what legal basis, for how long, and how to exercise your rights under the EU General Data Protection Regulation.

1. Controller

2. What we collect on this site

2.1 Server log files

When you access this site, your browser automatically transmits information that is stored in server log files: IP address (truncated where practicable), date and time of the request, requested URL, HTTP status code, transferred bytes, referrer, browser user-agent. Legal basis: Art. 6 (1)(f) GDPR — legitimate interest in operating, securing and stabilising the website. Retention: log files are deleted after 30 days unless retention is necessary for the investigation of a concrete security incident.

2.2 Briefing-request form

When you submit the briefing-request form on the home page, your browser opens your mail client and pre-fills an email to info@enixma.net with the data you entered: name, organisation, country, message. The form does not transmit data to this server; sending the email is your action. We process the email under Art. 6 (1)(b) GDPR (pre-contractual measures) and Art. 6 (1)(f) GDPR (legitimate interest in responding to enquiries). Retention: enquiries are retained for as long as needed to answer them and then for the period required by German tax and commercial law (up to 10 years for documents with tax relevance).

2.3 Cookies and tracking

This website does not set cookies, does not embed third-party analytics, and does not load advertising or tracking pixels. Web fonts are loaded from fonts.googleapis.com and fonts.gstatic.com; this transmits your IP address to Google Ireland Limited as font-server operator. Legal basis: Art. 6 (1)(f) GDPR — consistent typography in line with our visual identity. If you prefer not to share your IP address with the Google font CDN, please disable web fonts in your browser or use a privacy-protecting browser configuration.

3. Recipients of personal data

Personal data submitted via the briefing-request form is received by the Enixma engineering and sales team in Hamburg. No data is transferred to third countries outside the EU/EEA from this website. Hosting is provided by {{HOSTING_PROVIDER}}, which acts as our processor under Art. 28 GDPR.

4. Your rights

Under the GDPR you have the right, at any time, to:

• Access the personal data we hold about you (Art. 15 GDPR)
• Rectify inaccurate data (Art. 16 GDPR)
• Erasure of your data, subject to statutory retention obligations (Art. 17 GDPR)
• Restrict the processing of your data (Art. 18 GDPR)
• Receive your data in a portable format (Art. 20 GDPR)
• Object to processing based on legitimate interests (Art. 21 GDPR)
• Withdraw a previously given consent (Art. 7 (3) GDPR) without affecting the lawfulness of processing prior to withdrawal

To exercise any of these rights, write to info@enixma.net. You also have the right to lodge a complaint with the competent supervisory authority — in Hamburg this is the Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (datenschutz-hamburg.de).

5. ITS-deployment data (out of scope of this website)

This privacy notice covers only personal data processed via this website. Personal data processed in the context of an Enixma ITS deployment — for example, video frames captured by Sentinel, plate reads captured by Lunar, or telemetry processed by Nexus — is governed by a separate Data Processing Agreement (Auftragsverarbeitungsvertrag, AVV) between the operating authority (controller) and Enixma GmbH (processor). The AVV defines lawful basis, purpose limitation, retention, deletion, and the technical and organisational measures (TOMs) applied to each module deployment.

6. Changes to this notice

We may amend this notice to reflect changes in our processing activities or in the applicable law. The current version is always available at this URL. Material changes will be flagged at the top of this page for at least 30 days.