Controller & Scope

Neli Arabi GmbH, Teltower Damm 57, 14167 Berlin, Germany, is the controller responsible for the processing of personal data described in this policy. This policy applies to visitors of this website and to individuals who contact us regarding our private Commerce ERP platform.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection law.

Information We Collect

We collect only what is necessary to operate this website and respond to inquiries. No analytics, advertising, or behavioural tracking tools are deployed on this site.

Purpose & Legal Basis

We process the data above to operate and secure this website (Art. 6(1)(f) GDPR, legitimate interest), to respond to your inquiries and licensing requests (Art. 6(1)(b), pre-contractual measures), and to comply with statutory record-keeping obligations where applicable (Art. 6(1)(c)).

Data Sharing

We do not sell personal data. Information you submit may be shared with our hosting provider, and where relevant, internal teams across our Berlin, New York, and London offices for the sole purpose of evaluating and responding to your inquiry.

We do not transfer personal data to third parties for marketing purposes.

Retention

Server log data is retained for a limited period for security purposes and then deleted. Inquiry and contact data is retained only as long as necessary to respond to your request or as required by applicable commercial and tax record-keeping law.

Your Rights

Under the GDPR, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data, subject to legal retention obligations
• Object to or restrict certain processing activities
• Lodge a complaint with a competent data protection authority

International Offices

Neli Arabi GmbH operates offices in Berlin (headquarters), New York, and London. Where data is processed outside the European Economic Area, we ensure an adequate level of protection through appropriate safeguards under applicable data protection law.