Privacy notice
This notice describes personal-data processing when you visit this automotive design website or contact Neli Arabi GmbH. Updated 22 October 2026.
1. Controller and contact
Neli Arabi GmbH, Teltower Damm 57, 14167 Berlin, Germany, represented by Managing Director Neli Arabi, is responsible for the processing described here. You can contact us about privacy at contact@neliarabi.design or +49 30 84788122.
2. Website delivery and security
The website is delivered using technical hosting, content-delivery and network-security services. Providing the pages necessarily involves technical connection data, including your IP address, requested resource, time of access, browser or device information and technical error or security information. These service providers process such data to deliver the website, maintain availability and investigate misuse.
For the website operation for which we are responsible, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is a secure, reliable website. Connection data are technically necessary for delivery; the page cannot be delivered without them. We do not operate a separate visitor database or add our own application access-log system. Provider-managed technical records are retained according to the operational, security and legal purposes described in the providers' privacy information.
3. Cookies, preferences and external content
The page code supplied by Neli Arabi GmbH contains no advertising or analytics tracking and does not set cookies or use localStorage. Language and appearance choices are held in page memory and reflected in the URL so that linked pages can use the same settings. Fonts, images and scripts are served with this website; no maps, social-media widgets or externally embedded videos are loaded.
Technical access-control and security mechanisms may be used by the hosting platform. Where terminal storage or access is strictly necessary to supply a service you expressly request, section 25(2) TDDDG applies. This page adds no optional advertising or analytics tracking.
4. Contact by email or telephone
The enquiry assistant creates an email draft locally in your browser. Name, email address, project focus, vehicle and message fields remain in the open page until you open the draft in your email application. The website does not submit them to a server. The local processing serves your requested preparation of an enquiry under Article 6(1)(b) GDPR. Sending the message remains your decision in your email application.
The partnership enquiry assistant works locally in the same way. It prepares your name, company, business email, website or portfolio, role, proposed collaboration area, experience, markets and collaboration proposal for your own email draft. These entries are not submitted to a website server. The contact-processing purposes, legal bases and retention criteria described here also apply if you choose to send the email.
Clicking an email link opens your own email application. No message is sent automatically. If you send an inquiry, we process the contact details, message content, technical communication metadata and any vehicle or project information you choose to provide. We use them to respond, discuss a possible project and manage the correspondence.
Article 6(1)(b) GDPR applies to inquiries about a potential or existing contract. Other business correspondence is processed under Article 6(1)(f) GDPR; our legitimate interest is responding to and managing business communications. Providing information is voluntary, but we need a means of reply and sufficient project information to handle your request. Please initially send only information needed for your inquiry.
Our communication and IT service providers may process the information for technical delivery and administration. Information is accessible only to persons who need it for the relevant purpose. We do not automatically forward inquiries to vehicle manufacturers or conversion workshops through this website.
5. Recipients and international processing
Recipients may include hosting, content-delivery, network-security, email and IT service providers, authorised personnel and, where legally required, authorities or professional advisers. International infrastructure may involve processing outside the EU/EEA, including in the United States.
The hosting and network providers describe international transfers based on adequacy decisions, applicable certification under the EU–US Data Privacy Framework or European Commission standard contractual clauses. The applicable arrangement depends on the provider and service. For further information about recipients, transfers and the means of obtaining copies of safeguards, contact contact@neliarabi.design.
6. Retention
We keep inquiry and correspondence data only while needed to answer and manage the matter, perform an agreed contract, comply with retention duties or establish, exercise or defend legal claims. Completed inquiries without a continuing purpose are deleted in the ordinary course. Where a document is subject to a statutory retention duty, the applicable legal period determines retention; access is limited to that purpose. Technical data managed by infrastructure providers follow their documented operating, security and legal retention criteria. We do not claim a fixed provider log-deletion period or exclusively German data storage.
7. Your rights
Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. If processing is based on consent, you may withdraw it at any time with future effect. Contact contact@neliarabi.design to exercise your rights.
You may lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work or the alleged infringement. The Berlin authority is Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, Germany; mailbox@datenschutz-berlin.de; www.datenschutz-berlin.de.
8. Automated decisions and updates
This website does not carry out profiling or decisions based solely on automated processing that produce legal or similarly significant effects. It contains no newsletter registration, payment function or server-based inquiry form. This notice will be updated if the website's data processing changes.