Privacy policy
1. Controller
VAKURA
Owner: Ing. Enis Meral (sole proprietorship)
Ludwigstraße 21
74532 Ilshofen
Germany
Phone: +49 174 9226196
Email: info@vakura.eu
No data protection officer has been appointed, as the legal requirements for doing so are not met.
2. In brief
This website sets no cookies and uses no advertising or tracking services. For simple visitor statistics we use Cloudflare Web Analytics without cookies (see section 3). Fonts and program libraries are hosted on our own server. We process personal data only as far as necessary to deliver the website and to handle your enquiries.
3. Hosting and server logs
The website is operated by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. With every request, Cloudflare processes technically necessary data: IP address, date and time, the page requested, the amount of data transferred, browser and operating system, and the previously visited page.
The purpose is to deliver the website securely and reliably, including defending against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in a secure and functioning website. A data processing agreement under Art. 28 GDPR is in place with Cloudflare.
Data may be transferred to the USA in the process. Cloudflare, Inc. is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission's adequacy decision (Art. 45 GDPR). Cloudflare deletes the log data after a short period, and we do not combine it with other data.
For visitor statistics we use Cloudflare Web Analytics. When you open a page, your browser loads a small script from Cloudflare and reports the page visited, the previously visited page, browser, operating system, country and loading times. No cookies are set, nothing is stored on your device and no user profiles are created; we only see aggregated figures. The purpose is to learn which pages are read and how visitors find us. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in improving our website. The information on Cloudflare above applies to the contract and transfer. You can prevent the statistics by blocking scripts from static.cloudflareinsights.com in your browser.
4. Enquiry form, email and phone
When you write to us via the enquiry form or by email, or call us, we process the information you provide: name, company, email address, phone number, your message, and photos and details of parts. We use it to answer your enquiry, assess feasibility and prepare a quotation.
The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in answering enquiries.
When you use the enquiry form, your photos are reduced in size in your browser and stored at Cloudflare in storage located in the European Union (Cloudflare R2). We receive your details and the links to the photos by email in our mailbox at Hostinger. This email is sent via Plus Five Five, Inc. (Resend), 2261 Market Street #5039, San Francisco, CA 94114, USA, as a processor through a data centre in the European Union; Resend is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). The photos are deleted automatically from this storage after 30 days; anything we need for your quotation or order is transferred to our records. A hidden check field keeps automated spam out; no additional data is collected for this.
Our mailbox is operated by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus, as a processor. The data remains within the European Union.
Please make sure that photos of parts do not show people, vehicle registration plates or other personal details.
5. Retention
Enquiries that do not lead to an order are deleted no later than twelve months after the last contact. If an order is placed, we keep the records for as long as commercial and tax law requires (Section 257 HGB, Section 147 AO), usually six to ten years.
6. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). An informal message to info@vakura.eu is sufficient.
Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).
You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Heilbronner Straße 35, 70191 Stuttgart, Germany.
7. Obligation to provide data, automated decisions
You are not obliged to provide us with data. Without contact details, however, we cannot answer your enquiry. No automated decision-making or profiling takes place.
Last updated: October 2026. This is a translation. The German version prevails.