Privacy policy

The controller for personal data on this website is FNLY IT UG (haftungsbeschränkt), Am Kraftwerk 23, 34582 Borken, Germany, represented by its managing director Alina Schmid.

Phone: +49 5682 7369200, email: info@fnly-group.com. You can reach us at this address for all privacy questions and to exercise your rights.

This website runs on servers we operate ourselves in the data center of Hetzner Online GmbH in Falkenstein, Germany. We have a data processing agreement with Hetzner under Art. 28 GDPR. Connections to this website are encrypted with TLS.

When you open this website, your browser transmits technical data to our server, such as your IP address, date and time, the page requested, the referring website, browser and operating system. Our server uses this data only to deliver the page. The legal basis is Art. 6 (1) (f) GDPR. We do not store access logs.

If you open fnly-group.com without a language in the address, we redirect you to the matching language version. For this we use your browser's language setting and determine the country you are in from your IP address, using a database on our own server (IP geolocation by DB-IP, db-ip.com, license CC BY 4.0). Your IP address is not shared with third parties and not stored. The legal basis is our legitimate interest in showing you the site in your language (Art. 6 (1) (f) GDPR).

If you pick a language in the language switcher, we store that choice in a cookie ("fnly_group_locale", valid for one year) so we do not redirect you again on your next visit. The cookie is required for this function you explicitly requested and contains only the code of the chosen language version.

We store your choice in the consent banner in your browser's local storage (entry "fnly-consent") so the banner does not reappear on every page. Any service that is not strictly necessary loads only with your consent. You can change or withdraw your consent at any time through "Cookie settings" in the footer.

If you consent to "Statistics", we use the open source software Matomo to measure how this website is used. The statistics server at statistik.fnly-group.com is run by FNLY Group in Germany, and the data is not shared with third parties. Your IP address is shortened by two bytes before storage. Matomo sets the cookies "_pk_id" (13 months) and "_pk_ses" (30 minutes). The legal basis is your consent under Art. 6 (1) (a) GDPR. Raw data is deleted after 395 days.

If you consent to "Marketing", we use services of the advertising platforms on which we run ads: Google Ads (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland), the Meta Pixel for Facebook and Instagram (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland) and the TikTok Pixel (TikTok Technology Limited, Dublin, Ireland). Without your consent, these services are not loaded. They set cookies or similar identifiers and transmit data such as your IP address, device and browser information, the pages you view and whether you sent a request or booked a call. This lets us measure which ads lead to requests and show ads on these platforms to visitors of our website. The legal basis is your consent under Art. 6 (1) (a) GDPR. For data collected through the Meta Pixel, we and Meta are joint controllers under Art. 26 GDPR. The providers may transfer data to the United States. Google LLC, Meta Platforms, Inc. and LinkedIn Corporation are certified under the EU-US Data Privacy Framework. We honor Global Privacy Control signals as an opt-out.

If you use the contact form, we process your name, email address, optionally your company and phone number, the topic you chose and your message, in order to answer your request. If it concerns one of our brands, we forward it to the responsible FNLY Group company. The legal basis is Art. 6 (1) (b) and (f) GDPR.

Your details are sent by our server through Microsoft Graph as an email to our Microsoft 365 mailbox. We do not run a database for form submissions. To prevent abuse, the server briefly keeps your IP address in memory for at most one hour. We delete your request once it is resolved and no legal retention periods apply. Applications are deleted no later than six months after the process ends.

For online appointments we use Microsoft Bookings. Your browser does not connect to Microsoft: the time picker on this page requests open times through our server, and only your booking is sent by our server to Microsoft Bookings. No cookies are set.

When you book, we process your name, email address, phone number, optionally your company and message, the chosen time and your device's time zone, in order to hold the call and send you a confirmation. The legal basis is Art. 6 (1) (b) GDPR. To prevent abuse, the server briefly keeps your IP address in memory, as with the contact form. We delete the data once it is no longer needed for the call and a possible collaboration.

We use Microsoft 365 from Microsoft Ireland Operations Limited, Dublin, Ireland, for email, calendar and appointments, under a data processing agreement. Transfers to the United States cannot be ruled out. Microsoft Corporation is certified under the EU-US Data Privacy Framework.

Without your consent we do not load fonts, scripts or images from third-party servers; ad tags load only after you consent to the “Marketing” category. This website links to the websites of our brands. Data is transferred only when you click such a link, and the privacy policy of that website applies there.

You have the following rights regarding your personal data:

• access under Art. 15 GDPR
• rectification under Art. 16 GDPR
• erasure under Art. 17 GDPR
• restriction of processing under Art. 18 GDPR
• data portability under Art. 20 GDPR
• objection under Art. 21 GDPR
• withdrawal of consent under Art. 7 (3) GDPR, effective for the future

You may lodge a complaint with a supervisory authority. Ours is the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

We update this privacy policy when the website or the law changes. The version published here applies.