Privacy policy
As of October 2026. This is a translation; in case of doubt, the German version applies.
I. Name and address of the controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection provisions is:
EnoPark GmbH i.G. (in formation)
represented by the managing directors Jan Richter and Jakob Lenz
Bücklestraße 3e
78467 Konstanz
Germany
Phone: +49 176 66611137
Email: kontakt@enopark.de
Data protection officer
You can reach our external data protection officer as follows:
Andrea Prinz
Datenschutz Prinz GmbH
Industriestr. 10
91154 Roth, Germany
Email: info@datenschutz-prinz.de
II. General information on data processing
1. Scope of processing of personal data
We generally collect and use personal data of our users only to the extent necessary to provide a functional website as well as our content and services. Personal data is regularly collected and used only with your consent. An exception applies where obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by law.
2. Purposes and legal bases for processing personal data
Where we obtain your consent for processing operations, Art. 6(1)(a) GDPR serves as the legal basis. Where processing is necessary for the performance of a contract, Art. 6(1)(b) GDPR serves as the legal basis; this also applies to processing necessary for pre-contractual measures. Where processing is necessary to comply with a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis. Where processing is necessary to safeguard a legitimate interest of our company or a third party and your interests, fundamental rights and freedoms do not override that interest, Art. 6(1)(f) GDPR serves as the legal basis.
3. Erasure of data and storage period
Your personal data will be erased or blocked as soon as the purpose of storage no longer applies. Storage may continue if this is provided for by European or national legislators in EU regulations, laws or other provisions to which the controller is subject. Data will also be blocked or erased when a storage period prescribed by those provisions expires, unless further storage is necessary for the conclusion or performance of a contract.
4. Recipients and transfers to third countries
Your data is only passed on to third parties in the cases described below. Processing by the service providers involved takes place on the basis of data processing agreements pursuant to Art. 28 GDPR. Where processing takes place in third countries outside the EU/EEA (Google Analytics, Microsoft Bookings and HubSpot, see below), it is based on an adequacy decision of the EU Commission (EU-US Data Privacy Framework) or on appropriate safeguards pursuant to Art. 46 GDPR (EU standard contractual clauses).
III. Processing on this website
1. Hosting, provision of the website and server log files
This website is operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, on servers in Germany. We have concluded a data processing agreement with Hetzner pursuant to Art. 28 GDPR. All content of the website, including fonts, images and videos, is delivered from this server; we do not use external content delivery networks or font services.
The server automatically collects and stores information in so-called server log files, which your browser transmits automatically. These include: browser type and version, operating system, referrer URL, page requested, time of the server request and IP address. This data is not merged with other data sources. Temporary storage of your IP address is necessary to deliver the website to your device. This purpose also constitutes our legitimate interest pursuant to Art. 6(1)(f) GDPR. The data is erased as soon as it is no longer required for the purpose for which it was collected. Collecting the data to provide the website and storing it in log files is essential for operating the website; consequently, there is no possibility to object.
2. Contact by email and phone
You can contact us via the email addresses or phone numbers provided. In this case, your email address or phone number and the data transmitted with your message are processed. Your data is only passed on to the service providers involved and is used exclusively to handle our conversation. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in answering enquiries addressed to us. If your enquiry aims at concluding a contract, Art. 6(1)(b) GDPR is an additional legal basis. Your data will be erased, subject to statutory retention periods, as soon as it is no longer required, which is regularly the case when the conversation has ended, i.e. when the circumstances show that the matter has been conclusively resolved. You may object to the storage of your data at any time; in that case the conversation cannot be continued.
3. Savings calculator and requesting an analysis
Calculator statistics. If you have consented to “EnoPark calculator statistics” in the consent banner, we transmit your entries in the savings calculator (number of parking spaces and reservable spaces, fee per reservation, electricity price) to our server datacollection.enopark.cloud, which is also operated at Hetzner in Germany. We use these values anonymously to improve the calculator and our offer. For technical reasons your IP address is transmitted in the process. No cookies are set for this. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR, which you can withdraw at any time with effect for the future under “Cookie settings”. Without consent, no entries are transmitted.
Analysis by email. If you request an analysis via the calculator, we process your name, email address, optionally your phone number and your calculator entries in order to calculate your site and send you the analysis. The data is stored on our server datacollection.enopark.cloud at Hetzner in Germany and transmitted to our customer management system HubSpot (HubSpot Germany GmbH) in order to process your enquiry, which notifies the responsible members of our staff by email. Our HubSpot account is hosted in the EU data centre in Germany; HubSpot's sub-processors may also process data outside the EU. The legal bases are your consent pursuant to Art. 6(1)(a) GDPR and pre-contractual measures pursuant to Art. 6(1)(b) GDPR. The data will be erased once the enquiry has been conclusively handled and no contract is concluded, unless statutory retention periods apply. You can withdraw your consent at any time by email to kontakt@enopark.de.
4. Appointment booking via Microsoft Bookings
Via the “Book a demo” and “Discuss the result with us” buttons, we offer the option of booking an appointment online directly with the Microsoft Bookings tool. You are redirected to an external Microsoft page; no data is transferred to Microsoft before you click. When booking, the following data is processed: selected appointment (date and time), first and last name, email address and voluntary information such as address, phone number and message. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland; a data processing agreement pursuant to Art. 28 GDPR has been concluded with Microsoft for the use of Bookings. Processing by Microsoft Corporation in the USA cannot be ruled out; it is safeguarded by the adequacy decision for the EU-US Data Privacy Framework and EU standard contractual clauses. The data entered in the online form is transmitted to us so that the appointment can take place. It is not passed on to any other recipients. Processing takes place for the purpose of holding the appointment pursuant to Art. 6(1)(b) GDPR (pre-contractual measures). Data is erased once the purpose no longer applies, i.e. after the appointment has taken place, or after the end of any resulting contractual relationship, subject to statutory retention periods. If you object to the processing, the appointment cannot be arranged this way and your data will be erased.
5. Consent banner
On this website we use a consent banner developed in-house; no data is transmitted to third parties in the process. In the banner you can select each service requiring consent individually; these services are not loaded before you consent. We store your choice and when you made it in your browser's LocalStorage under the entry “enopark-consent” for 12 months, after which we ask again. The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (proof of consent) and Section 25(2) no. 2 TDDDG. You can change or withdraw your consent at any time with effect for the future via the “Cookie settings” link at the bottom of every page. On withdrawal, the cookies concerned are deleted and the page is reloaded so that the withdrawn services are no longer active.
6. Google Analytics 4
With your consent, we use the Google Analytics 4 service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) on our website. The required Google tag (gtag.js) is only loaded from www.googletagmanager.com after you have consented. The purpose is to evaluate visitor numbers, pages and sections viewed and events such as clicks on “Book a demo” or use of the savings calculator in order to improve our offer. In particular, your IP address (not stored in Analytics according to Google), device and browser information, your approximate location, pages viewed, the referring page and clicks and events are processed. We have disabled Google Signals and advertising features.
Processing is based on your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG and on a data processing agreement with Google. The data collected is erased as soon as it is no longer required for audience measurement, at the latest after the retention period set at Google has expired. Google sets the following cookies, which remain stored until you withdraw your consent, for a maximum of 13 months:
- Name: _ga; purpose: distinguishes individual users; provider: Google; lifetime: until withdrawal or 13 months.
- Name: _ga_PRTB8BVJ1G; purpose: stores the session state; provider: Google; lifetime: until withdrawal or 13 months.
Google may also use the data collected for its own purposes. For data transfers outside the EU, in particular to the USA, Google relies on the adequacy decision for the EU-US Data Privacy Framework and on EU standard contractual clauses. Further information is available at support.google.com/analytics/answer/6004245 and in Google's privacy policy at policies.google.com/privacy. You can withdraw your consent at any time with effect for the future via “Cookie settings”.
7. Links to external sites
Our website contains links to external offers, for example to our team's LinkedIn profiles or to reports on awards. Merely visiting our website does not transfer any data to these providers. Only when you click a link do the privacy provisions of the respective provider apply. Your browser then only transmits the origin of our website (referrer policy “strict-origin-when-cross-origin”).
IV. Your rights as a data subject
As a data subject you have the following rights:
- pursuant to Art. 15 GDPR, the right to obtain information about your personal data processed by us to the extent specified there;
- pursuant to Art. 16 GDPR, the right to demand without delay the rectification of inaccurate or the completion of your personal data stored by us;
- pursuant to Art. 17 GDPR, the right to demand the erasure of your personal data stored by us, unless further processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
- pursuant to Art. 18 GDPR, the right to demand the restriction of processing of your personal data where you contest the accuracy of the data, the processing is unlawful but you oppose erasure, we no longer need the data but you require it for the establishment, exercise or defence of legal claims, or you have objected to processing pursuant to Art. 21 GDPR;
- pursuant to Art. 20 GDPR, the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller;
- pursuant to Art. 7(3) GDPR, the right to withdraw consent at any time with effect for the future;
- pursuant to Art. 77 GDPR, the right to lodge a complaint with the competent supervisory authority: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, www.baden-wuerttemberg.datenschutz.de, poststelle@lfdi.bwl.de.
V. Your right to object
Where we process personal data as explained above to safeguard our overriding legitimate interests, you may object to this processing with effect for the future. If processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If processing is carried out for other purposes, you only have a right to object on grounds relating to your particular situation. After you have exercised your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. This does not apply if processing is carried out for direct marketing purposes; in that case we will no longer process your personal data for this purpose.
VI. Information on data processing in connection with social media profiles
Our social media presence allows us to inform prospects and customers about our work, contact them directly and open a dialogue. We only process your data if you voluntarily contact us via the respective profile and enter into a dialogue with us there. This constitutes our legitimate interest pursuant to Art. 6(1)(f) GDPR, which serves as the legal basis for processing. We do not pass on data we receive from you via the profiles to third parties. We do not store any personal data processed in the course of contact with us via the respective profile or made available to us by the profile provider. Processing generally only takes place within the respective profile.
Via insights functions, we receive automatically provided statistics on our accounts. These only contain aggregated data that cannot be related to individual persons; they are not identifiable for us. Please note that social media providers may collect and store data from website visitors without a user account when the respective profile is accessed, and may use cookies and similar technologies. Further information on the scope, purposes of processing, storage period and your rights and options to object can be found in the privacy policy of the respective social network.
Data processing by LinkedIn
LinkedIn is a platform of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. In part there is a data processing relationship, and in part LinkedIn and we as page operator act as independent controllers. LinkedIn provides profile operators with so-called insights. Detailed information can be found in the data processing agreement between us and LinkedIn: linkedin.com/legal/l/dpa. LinkedIn uses data for its own purposes; information on this is available at linkedin.com/legal/privacy-policy. According to LinkedIn, EU standard contractual clauses apply to processing outside the EU/EEA; processing in the USA is covered by participation in the EU-US Data Privacy Framework.