Skip to main content Go to search Go to main navigation
Menu
Privacy Policy

Unless stated otherwise below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This only applies as long as no other information is provided in the subsequent processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.


Server Log Files
You can visit our websites without providing any personal information.
Every time you access our website, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.
The processing is carried out on the basis of Art. 6 (1) (f) UK GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our offering.

Contact

Data Controller
Please feel free to contact us. The data controller responsible for data processing is: Thomas Nautsch, Veit-Stoß-Str.20 90579 Langenzenn, Germany, 091197917230, info@fenau.eu

Customer Initiated Contact by Email
If you initiate business contact with us via email, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of handling and responding to your contact request.
If the contact serves to carry out pre-contractual measures (e.g., consultation in case of purchase interest, quoting) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 (1) (b) UK GDPR.
If the contact is made for other reasons, this data processing is based on Art. 6 (1) (f) UK GDPR out of our overriding legitimate interest in processing and answering your request. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data based on Art. 6 (1) (f) UK GDPR.
We will only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.


Collection and Processing when using the Contact Form
When you use the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing is for the purpose of making contact.

If the contact serves pre-contractual measures or concerns an already concluded contract, this processing is based on Art. 6 (1) (b) UK GDPR.
If the contact is made for other reasons, the processing is based on Art. 6 (1) (f) UK GDPR. In this case, you have the right to object to this processing at any time.
We use your email address solely to process your request. Your data will be deleted afterwards.

Use of Google Maps API Address Validation
We use the address validation service provided by Google (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland "Google") on our website. The data processing is intended to verify your entries in our forms in real time, correct typos, and complete missing data. Your data may be transferred to the USA. An adequacy decision exists for the USA (the UK Extension to the EU-US Data Privacy Framework), and Google is certified. The processing is based on Art. 6 (1) (f) UK GDPR. You have the right to object at any time on grounds relating to your particular situation.

Collection and Processing of Job Applications via Email
The processing of your personal data is for the purpose of making contact and deciding whether to establish an employment relationship. The processing is based on Art. 6 (1) (b) UK GDPR. Your data will be deleted no later than six months after the end of the process, unless you have consented to us keeping it in our applicant pool (Art. 6 (1) (a) UK GDPR).

WhatsApp Business
If you contact us via WhatsApp, we use the WhatsApp Business version of WhatsApp Ireland Limited. The data processing serves to process your request (Art. 6 (1) (b) or (f) UK GDPR). Data may be transferred to servers of Meta Platforms Inc. in the US (certified under the Data Privacy Framework).


Use of WeTransfer
We use the WeTransfer B.V. service to send large files. The processing is based on Art. 6 (1) (a) UK GDPR with your consent. The International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses (SCCs) are used to safeguard transfers outside the UK/EEA if necessary.

Customer Account and Orders

When opening a customer account and placing orders, we collect your personal data to the extent necessary for the performance of the contract (Art. 6 (1) (b) UK GDPR). Your data is transmitted, for example, to the transport companies, payment providers, and IT service providers selected.

Advertising

Email Advertising (Newsletter and Existing Customers)
We use your email address to send newsletters only if you have expressly consented to this (Art. 6 (1) (a) UK GDPR). You can revoke this consent at any time.
If you are already a customer, we may use your email address for direct advertising of similar products (Art. 6 (1) (f) UK GDPR and the Privacy and Electronic Communications Regulations (PECR)). You can object to this use at any time.
We use Brevo (formerly Sendinblue) for sending emails.


Payment Providers and Credit Checks

PayPal, PayPal Check-Out and Ratepay
We use the payment services of PayPal (Europe) S.à.r.l. et Cie, S.C.A. The processing is necessary for the performance of the contract (Art. 6 (1) (b) UK GDPR). For certain payment methods (such as purchase on account or direct debit), PayPal or Ratepay may perform a credit check (Art. 6 (1) (f) UK GDPR). You can object to this processing directly to PayPal or Ratepay.


Cookies and Tracking

Our website uses cookies. For technically necessary cookies, the processing is based on our legitimate interest (Art. 6 (1) (f) UK GDPR). For all other cookies (analytics, marketing), the processing is carried out only with your explicit consent (Art. 6 (1) (a) UK GDPR and PECR), obtained via our consent management tool (CookieFirst). You can revoke your consent at any time.

Tools used (subject to prior consent):
- Google Analytics 4, Google Ads, Google Maps, YouTube, Google Fonts, reCAPTCHA (Google Ireland Limited)
- Meta Pixel and Social Plug-ins Facebook/Instagram (Meta Platforms Ireland Limited)
- LinkedIn Insight-Tag (LinkedIn Ireland Unlimited Company)
- Hotjar (Hotjar Ltd.)
- HubSpot (HubSpot, Inc.)
- TikTok Pixel (TikTok Technology Limited)
- ADCELL Affiliate Network
- Vimeo
- FontAwesome
For all these services, data may be transferred to third countries (especially the USA). The transfer is safeguarded either by an adequacy decision (UK-US Data Bridge) or appropriate safeguards such as the UK Addendum to the EU SCCs.


Data Subject Rights and Storage Duration

Duration of Storage
Your data will be kept for as long as necessary for the complete processing of the contract and will subsequently be stored in accordance with statutory retention periods (especially tax and commercial law) before being deleted.


Rights of the Data Subject
In accordance with applicable regulations (UK GDPR and DPA 2018), you have the following rights:
- Right of access (Art. 15 UK GDPR)
- Right to rectification (Art. 16 UK GDPR)
- Right to erasure (Art. 17 UK GDPR)
- Right to restriction of processing (Art. 18 UK GDPR)
- Right to data portability (Art. 20 UK GDPR)
- Right to object (Art. 21 UK GDPR): You can object at any time to processing based on legitimate interests (Art. 6 (1) (f) UK GDPR) or for direct marketing purposes.


Right to Lodge a Complaint with the Supervisory Authority
In accordance with Art. 77 UK GDPR, you have the right to lodge a complaint with the supervisory authority if you consider that the processing of your personal data is unlawful. In the UK, the competent supervisory authority is the ICO (Information Commissioner's Office - www.ico.org.uk).


Last updated: [Please insert current date]