Privacy policy

1. Controller

Bluwerk Ventures GmbH, Braaker Grund 7, 22145 Braak, Germany. Email: connect@engera.com.

Questions about data protection go to privacy@engera.com.

2. Hosting and server logs

This website runs on Amazon Web Services (AWS) servers in the Frankfurt region (eu-central-1) and is delivered through the AWS content delivery network. On every request the server processes technically necessary data: IP address, date and time, page requested, data volume transferred, browser type and operating system. This data is kept in logs and deleted after 30 days at the latest.

The legal basis is Art. 6 (1) (f) GDPR: our legitimate interest in a secure and stable operation of the website.

3. Cookies

This website sets no cookies for analytics or advertising. Reach measurement (section 4) works without cookies too.

Only technically necessary cookies are used: one stores the chosen language; anyone signed in to Engera receives two cookies holding the signed-in state and the display name for the website header. These cookies require no consent (Section 25 (2) TDDDG).

4. Web analytics

To understand how this website is used we run Umami, a privacy-friendly analytics service by Umami Software, Inc. It records pages viewed, the referring page, browser, operating system, device type and country. Umami sets no cookies and stores nothing on your device. The IP address is not stored; it is only used transiently to derive an identifier that changes daily and cannot be reversed, so neither attribution to a person nor recognition across other websites is possible. Your browser's Do Not Track setting is honoured.

The data is processed on servers in the European Union and deleted after six months. The legal basis is Art. 6 (1) (f) GDPR: our legitimate interest in knowing which content is read and where visitors come from. Consent under Section 25 TDDDG is not required because no information is stored on or read from your device. If you prefer not to be counted, open engera.com/?stats=off once: that browser is then permanently left out.

5. Contact and access requests

When you email us or request access to Engera through the form, we process the data you provide (name, email address, company, request) to handle your enquiry. The data is kept while the enquiry is open and deleted afterwards unless statutory retention duties apply.

The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or (f) GDPR.

6. Applications

Applications reach us by email at jobs@engera.com. We process the data they contain (CV, cover letter, contact details) solely for the application process. After the process ends we delete the documents within six months at the latest, unless you agree to a longer retention.

The legal basis is Section 26 of the German Federal Data Protection Act (BDSG) together with Art. 6 (1) (b) GDPR.

7. Sign-in and use of the platform

Signing in to Engera works without a password, through a one-time code sent by email. For this we use Supabase (authentication and database, hosted in the EU) and Amazon Simple Email Service for delivery. Processing of data inside the platform is governed by the data processing agreement with the respective customer.

8. Recipients and third-country transfers

Processors with access to data from this website are Amazon Web Services EMEA SARL (hosting, email delivery), Supabase Inc. (authentication, database) and Umami Software, Inc. (web analytics). Processing takes place in data centres in the European Union. Where access from a third country cannot be ruled out in an individual case, it rests on the EU Commission's standard contractual clauses.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can also complain to a data protection supervisory authority, for example the Independent Centre for Data Protection Schleswig-Holstein (ULD).

Write to privacy@engera.com.

10. Changes

We update this policy when the website or the legal situation changes. The version published here applies.