ENITOR
Loading content.
Product and page data is being prepared.
ENITOR
Product and page data is being prepared.
Legal information
Last updated: 25 August 2026
ENITOR Aich Metallbau GmbH, Stöcklenstraße 3, 89597 Munderkingen, Germany
Telephone: 07393 2011 · Email: info@enitor.de
This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When you access the website, Vercel processes data such as your IP address, time of access, requested URL, referrer, user agent, response status and technical error data to deliver and secure the website and diagnose faults. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of the website. Production Functions currently run in the US region iad1 by default. Under the Hobby plan currently in use, runtime logs are normally available for one hour. Build logs are linked to the relevant deployment and may be retained for longer. See the Vercel Data Processing Addendum for further details.
We use Supabase, Inc., USA, for the content database, administrator accounts and media storage. The data processed comprises published content and media and, within the protected administration area, administrator contact details, roles, password hashes, sessions, TOTP two-factor data and audit events. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is secure content administration and an auditable record of administrative changes. Administrator sessions normally expire after seven days. The production project uses the AWS region eu-central-1 (Frankfurt) for its primary database. Supabase may use additional subprocessors and backups as part of its platform; details are provided in its contractual privacy documentation. Supabase documents its regions and data residency and its security and privacy options in its official documentation.
If you contact us through an enquiry form, by email or by telephone, we process the contact, company, product and project details you provide, together with voluntary information, to respond and take pre-contractual steps. The legal basis is Article 6(1)(b) GDPR and, for business contacts, additionally Article 6(1)(f) GDPR. Required fields are marked accordingly. The privacy checkbox solely confirms that you have read this privacy policy; it is not consent to processing that is necessary to handle the enquiry.
Technical documents or images attached voluntarily are processed with your enquiry. Please do not send unnecessary personal, confidential or special-category data. The enquiry and attachment are not stored permanently in the application database. They are transmitted to our mailbox via Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). Resend processes email addresses, metadata, message content and any attachments. See the Resend Data Processing Addendum for details.
Enquiries that do not result in a contract and are not subject to a statutory retention duty are deleted no later than twelve months after handling is completed. If correspondence becomes relevant to a business transaction, commercial correspondence is generally kept for six years and accounting records for eight years. The periods begin in accordance with the applicable statutory provisions, in particular Section 257 HGB and Section 147 AO. Data may be retained for longer where necessary to establish, exercise or defend legal claims.
We set the technically necessary enitor_locale cookie for one year to remember your language choice. The enquiry list is stored only in your browser's local storage and is deleted automatically no later than 90 days after the last change. You can remove both at any time through your browser settings. The legal basis for storing or accessing this information is Section 25(2)(2) TDDDG; subsequent processing relies on Article 6(1)(f) GDPR and our interest in remembering your chosen language and product selection.
The embedded map is loaded only after your express consent. Your browser then connects to Google and transmits data including your IP address, technical device and browser information and the page requested. The provider in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; processing in other countries may occur. The legal bases are your consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR. Your selection remains in local storage until you withdraw it, which you can do directly on the map. The address and external directions link work without the embedded map. Further details are available in Google's privacy policy.
No external analytics or tracking system is currently active. If this changes, this policy will be updated before activation and any required consent will be obtained.
Access is limited to responsible staff and the named technical service providers where required. Vercel, Supabase and Resend are US providers, and Vercel also processes production Function data in the USA. Where personal data is processed outside the European Economic Area, the providers state in their privacy terms that they use appropriate transfer mechanisms, in particular an applicable certification under the EU-US Data Privacy Framework or EU Standard Contractual Clauses. Details of recipients, subprocessors and safeguards are provided in the provider information linked above.
Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction, data portability and objection. You may withdraw consent at any time with effect for the future. We do not use solely automated decision-making, including profiling. To exercise your rights, email info@enitor.de.
You may lodge a complaint with a data protection supervisory authority. The authority responsible for our registered office is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Heilbronner Straße 35, 70191 Stuttgart, Germany, email: poststelle@lfdi.bwl.de. Information and the complaint procedure are available from the supervisory authority's website.