This website processes as little personal data as possible. Whatever is processed is listed here in full, with purpose, legal basis and retention period.
AENUMA GmbH i. G.
Elise-Streb-Straße 2
63263 Neu-Isenburg
Germany
Email: hallo@aenuma.com
The company is in the process of being incorporated. Until it is entered in the commercial register, the controller within the meaning of the General Data Protection Regulation (GDPR) is the pre-incorporation company; upon registration, its rights and obligations pass to AENUMA GmbH. We will update this policy once the registration has taken place.
We have not appointed a data protection officer, as the requirements of Art. 37 GDPR and Section 38 of the German Federal Data Protection Act (BDSG) are not met. For any privacy questions, you can reach us at the address above.
This website is built to process as little personal data as possible. We do not embed external fonts, map services, social media plugins or advertising networks. Whatever data is still processed is described here in full, together with its purpose, legal basis and retention period.
Every processing activity is based on your consent (Art. 6 (1)(a) GDPR), on taking steps to enter into or perform a contract (Art. 6 (1)(b) GDPR), or on our legitimate interest in operating this website securely and reliably (Art. 6 (1)(f) GDPR). Where cookies or similar technologies that are not technically necessary are used, we additionally ask for your consent under Section 25 (1) of the German Telecommunications Digital Services Data Protection Act (TDDDG).
This website is hosted by Raidboxes GmbH, Hafenstraße 32, 48153 Münster, Germany. The servers are located in Germany. Raidboxes processes data solely on our instructions, based on a data processing agreement under Art. 28 GDPR.
Each time a page is accessed, the web server automatically records technical information in log files:
This processing is technically necessary to deliver the website, keep it stable and detect attacks. The legal basis is Art. 6 (1)(f) GDPR. This data is not combined with other data sources or analyzed for marketing purposes. Log files are deleted after 30 days at the latest, unless they are exceptionally needed for longer to investigate a specific security incident.
Cookies are small text files stored on your device. We distinguish between two groups.
These are required for the website to work and for your privacy choice to be saved. They include the cookies of our consent tool, which start with cmplz_ and store your choice for up to twelve months, as well as temporary cookies used to secure forms. Under Section 25 (2) no. 2 TDDDG, no consent is required for these cookies; the legal basis for the subsequent processing is Art. 6 (1)(f) GDPR.
All other cookies, in particular those used for audience measurement, are only set after you have agreed in the banner. Until then, the related scripts are blocked and not loaded. You can change or fully withdraw your choice at any time via the cookie settings link in the footer. Withdrawal takes effect for the future and does not affect the lawfulness of processing carried out before it.
We use the software Complianz for consent management. It runs on our own server and does not transfer any data to third parties. As proof of your decision, we store the time and content of your consent.
On our homepage, you can sign up for early access to our application aenuma. We ask for your name and work email address as required fields and, optionally, your company, your role and a free-text description of what you would like aenuma to solve for you.
Your details are stored in this website’s database at our hosting provider and additionally sent by email to our mailbox hallo@aenuma.com (see section 6). When you sign up, we also store the time and technical details such as your IP address so that misuse can be traced.
We use your details solely to contact you personally about early access, prepare your access and inform you about the launch. This does not include a newsletter. The legal basis is your consent under Art. 6 (1)(a) GDPR, which you give by ticking the box in the form, and, insofar as it concerns entering into a user agreement, Art. 6 (1)(b) GDPR.
We delete your entry once contact regarding early access has been completed, but no later than 24 months after you signed up. If you withdraw your consent, we delete the entry without undue delay. You can withdraw at any time with an informal email to hallo@aenuma.com. If a business relationship arises from the contact, the statutory retention periods of six or ten years under Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO) apply.
If you write to us directly, we process your message and sender details to handle your request. The legal basis is Art. 6 (1)(b) GDPR where your request relates to a contract, and otherwise Art. 6 (1)(f) GDPR. We delete messages once your request has been dealt with and no retention obligations apply.
We run our mailboxes on Microsoft 365 (Exchange Online) provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft processes the data as a processor under a contract pursuant to Art. 28 GDPR. Microsoft stores mailbox content in data centers in Germany; otherwise, Microsoft’s EU Data Boundary applies. A transfer to Microsoft Corporation in the United States cannot be ruled out in individual cases, for example for support or security purposes. Microsoft is certified under the EU-U.S. Data Privacy Framework; in addition, standard contractual clauses under Art. 46 (2)(c) GDPR apply.
Please note that unencrypted emails can be read in transit. For confidential content, we can agree on an encrypted channel on request.
We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The service helps us understand which content is read and where visitors leave.
The service is only loaded after your explicit consent. As long as you have not agreed, the analytics script is blocked, no cookies are set and no data is sent to Google. The legal basis is Section 25 (1) TDDDG and Art. 6 (1)(a) GDPR.
If you consent, the following data, among other things, is processed: pages viewed and time spent, approximate location at city level, device and browser type, operating system, screen resolution, traffic source and a randomly generated identifier that recognizes your device for the lifetime of the cookie. Google Analytics 4 does not store IP addresses permanently; they are used to determine approximate location and then discarded. The cookies used start with _ga and last up to two years.
A transfer to Google LLC in the United States cannot be ruled out. Google LLC is certified under the EU-U.S. Data Privacy Framework, so an adequacy decision of the European Commission applies; in addition, Google has entered into standard contractual clauses under Art. 46 (2)(c) GDPR. Despite these safeguards, access to the data by U.S. authorities cannot be completely ruled out.
Event data is automatically deleted from our Google Analytics property after 14 months at the latest. You can withdraw your consent at any time via the cookie settings in the footer. For more information, see Google’s privacy policy.
We use Google Search Console to see which search terms lead to our pages and whether there are technical errors. The analysis is purely aggregated and based on data that Google collects during search anyway. No scripts are run and no cookies are set on this website for this purpose, and no data from your visit is sent to Google. We cannot draw conclusions about individual people from these reports.
The Poppins font used on this website is served from our own server. There is no connection to Google Fonts or any other content delivery network, and your IP address is not transferred to third parties for this purpose. We do not embed videos, maps or social media buttons.
This website provides information about our application aenuma and accepts sign-ups for the waitlist. The application itself runs separately at app.aenuma.com and is currently available by personal invitation only. Separate privacy information applies to the application, which we will link here once the application opens to more users. No data is transferred to the application when you visit this website.
We only share personal data where this is necessary to provide our service, you have consented or we are legally obliged to do so. Regular recipients are our hosting provider Raidboxes GmbH and our email provider Microsoft Ireland Operations Limited as processors and, if you have consented, Google Ireland Limited. In addition, tax and legal advisors may gain access to contract data to the extent provided by law. We do not sell data.
You have the following rights with regard to the personal data concerning you:
An informal message to hallo@aenuma.com is sufficient to exercise these rights. It is free of charge.
Where we process data on the basis of legitimate interests under Art. 6 (1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims (Art. 21 (1) GDPR).
Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence or of the alleged infringement. The authority responsible for us is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information)
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany
This website is delivered exclusively over an encrypted connection (TLS), which you can recognize by the padlock icon in your browser’s address bar and the https:// prefix. In addition, we take technical and organizational measures under Art. 32 GDPR to protect your data against loss, alteration and unauthorized access. Only authorized persons have access to the administration of this website, via personal accounts secured with multiple factors.
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place. You are under no legal or contractual obligation to provide us with personal data. Without your details, however, we cannot add you to the waitlist or handle your request.
We update this privacy policy whenever our processing changes, for example because we add or remove a service. The version published at the time of your visit applies.
