Privacy Policy

Last updated: April 2025

1. Controller

Evolus IT Solutions GmbH
Kellergasse 239
A-2103 Langenzersdorf
Austria

Data Protection Officer: Moritz Meier
E-Mail: privacy@enemail.de

2. What Data We Collect

We collect personal data only to the extent necessary to provide our service. This includes:

  • Account data: email address, username, and password hash (created during registration)
  • Connection data: IP addresses are processed temporarily for delivery and security purposes; we do not retain IP logs beyond what is operationally and legally required
  • Email data: messages, contacts, and attachments stored in your mailbox — encrypted at rest using zero-knowledge encryption. We cannot read your email content.
  • Payment data: processed via our payment providers; we store only a transaction reference, not full card details

We do not use tracking pixels, behavioural analytics, advertising networks, or any form of profiling. There is no tracking on this website.

3. Legal Basis for Processing

Account and service delivery Art. 6(1)(b) GDPR — performance of a contract
Legal obligations (e.g. retention periods) Art. 6(1)(c) GDPR — legal obligation
Security and abuse prevention Art. 6(1)(f) GDPR — legitimate interests
Optional features requiring consent Art. 6(1)(a) GDPR — consent

4. Infrastructure and Data Location

enemail's infrastructure runs on dedicated bare-metal servers operated by Evolushost, located in Frankfurt, Berlin, and Vienna. Your data is stored exclusively within the European Union and is subject solely to European law. We do not use US cloud providers or any infrastructure outside the EU.

5. Third-Party Services

Cloudflare CDN and DDoS protection. Certified under the EU-US Data Privacy Framework. Privacy Policy
Payment provider Used for subscription billing. Only transaction references are stored on our end.

We do not integrate Google Analytics, Meta Pixel, or any other third-party tracking or advertising services.

6. Data Retention

We retain your account data for as long as your account is active. Upon account deletion, all personal data and email content is permanently deleted within 30 days, except where retention is required by Austrian or EU law (e.g. accounting records: 7 years).

7. Your Rights

Under the GDPR, you have the following rights:

  • Right of access (Art. 15 GDPR) — request a copy of the data we hold about you
  • Right to rectification (Art. 16 GDPR) — correct inaccurate data
  • Right to erasure (Art. 17 GDPR) — request deletion of your personal data
  • Right to restriction (Art. 18 GDPR) — restrict how we process your data
  • Right to data portability (Art. 20 GDPR) — receive your data in a machine-readable format
  • Right to object (Art. 21 GDPR) — object to processing based on legitimate interests
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at privacy@enemail.de. We will respond within 30 days.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde):

Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna, Austria
www.dsb.gv.at

9. Zero-Knowledge Architecture

enemail is built on a zero-knowledge principle: your emails are encrypted on your device before being stored on our servers. We hold only encrypted ciphertext. In the event of a legal data request, we can only provide data that we actually possess — which does not include the content of your emails.

10. Changes to This Policy

We may update this policy to reflect changes in our services or legal requirements. Material changes will be communicated to registered users by email. The current version is always available at enemail.de/privacy.