Privacy Policy

1. Who is responsible for your personal data?

Fernco GmbH is responsible for the processing of personal data described in this policy. This policy explains how we handle personal data when you visit www.fernco.de or contact us through the website.

Fernco GmbH
Hessenring 31
37269 Eschwege
Germany

Email: impressum@fernco.de
Telephone: +49 (0) 5651 2296400
Website: www.fernco.de

Please contact us using these details if you have questions about this policy or wish to exercise your data protection rights.

2. Enquiries and contact forms

When you contact us, request a callback, enquire about a product or report a website issue, we process the information you provide. Depending on how you contact us, this may include your name, company, email address, telephone number, country, enquiry category and message. Product enquiries may also identify the product and page associated with your request.

We use this information to respond to your enquiry, provide assistance and handle any related correspondence. Fields marked as required are needed to process the relevant request. Please do not include sensitive personal information unless it is necessary for your enquiry.

Where processing is necessary to enter into or perform a contract with you, the legal basis is Article 6(1)(b) of the General Data Protection Regulation (GDPR). For other correspondence, including enquiries made on behalf of a business, our legitimate interest in responding to requests and managing business communications provides the basis under Article 6(1)(f) GDPR. Where we request and rely on your consent, the legal basis is Article 6(1)(a) GDPR.

3. Website operation and security

Technical information is processed when you access the website. This may include your IP address, browser and device information, requested pages, access times and information about errors or suspicious activity.

This information is used to deliver the website, maintain its availability, investigate technical problems and protect against unauthorised access and misuse. The legal basis is our legitimate interest in operating a secure and reliable website under Article 6(1)(f) GDPR.

We use Wordfence as part of our website security measures. Security checks may involve processing IP addresses and information about requests or login attempts to identify and prevent malicious activity.

4. Cookies and consent preferences

We use CookieYes to manage cookie preferences and record consent choices. Necessary technologies support functions such as remembering your privacy preferences and protecting the website. Optional analytics technologies are subject to your consent.

You can review or change your choices using the cookie preferences control on the website. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

For information about the cookies used, their purposes and their durations, please see our Cookie Policy.

5. Website analytics

We use Google Analytics 4, configured through Google Tag Manager, to understand how visitors use the website and identify opportunities for improvement. Analytics tracking is configured to require your analytics consent. The legal basis for this processing is Article 6(1)(a) GDPR.

Analytics information may include pages visited, interactions, device and browser information, referral sources and approximate geographic information. We also measure clicks on email and telephone links and successful form submissions.

Our custom form-submission tracking sends a form identifier to Google Analytics. It does not send the name, email address or message entered into the form. A recorded email or telephone click indicates that a link was selected, not that an email was sent or a call completed.

You can withdraw analytics consent through the website’s cookie preferences control.

6. Service providers and external websites

Personal data may be processed by service providers involved in website hosting, technical maintenance, communications, security, consent management and analytics. Information may also be disclosed where required by law or where necessary to establish, exercise or defend legal claims.

Some pages include third-party content, such as maps or videos. When this content loads, the provider may receive information such as your IP address, browser details and the page from which the content was requested. Please consult the relevant provider’s privacy information for details of its processing.

Our website also contains links to external websites. Those websites are operated independently and have their own privacy policies.

Some providers may process personal data outside the European Economic Area. The applicable data protection requirements depend on the provider, processing location and transfer arrangements. Please contact us if you would like information about the arrangements applicable to your personal data.

7. Retention of personal data

Retention depends on the purpose for which information was collected, whether an enquiry or business relationship remains ongoing, applicable legal record-keeping requirements and any need to establish, exercise or defend legal claims.

Enquiry information is retained for handling the request and any necessary follow-up. Records subject to statutory retention requirements may need to be kept after the enquiry has concluded. Technical, security, consent and analytics records are subject to the settings and operational requirements of the relevant systems.

You may contact us for further information about the retention of your personal data or to request its deletion. Deletion rights are subject to applicable legal requirements and exceptions.

8. Your data protection rights

Subject to the conditions and exceptions in applicable data protection law, you have the right to:

  • Request access to your personal data and information about how it is processed.
  • Request correction of inaccurate data or completion of incomplete data.
  • Request deletion of your personal data.
  • Request restriction of processing.
  • Receive eligible data in a structured, commonly used and machine-readable format and request its transfer to another controller where applicable.
  • Object, on grounds relating to your particular situation, to processing based on legitimate interests.
  • Object at any time to processing for direct marketing purposes.
  • Withdraw consent at any time where processing is based on consent.

To exercise your rights, please contact us using the details above. We may request information reasonably necessary to verify your identity.

9. Complaints

You have the right to lodge a complaint with a data protection supervisory authority, particularly in the country of your habitual residence, workplace or the alleged infringement.

The supervisory authority for Hessen is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Website: datenschutz.hessen.de

10. Changes to this policy

We may update this policy to reflect changes to the website, our processing activities or applicable requirements. Please review it periodically for the latest information.

Last updated: 6 November 2026