Privacy policy

2. Provision of the website and creation of log files Description and scope of data processing: Each time our website is called up, our system automatically collects data and information from the computer system of the calling computer. The following data is collected: – Your IP address, URL and service provider – the page visited and the duration of your visit, – the name of any downloaded files, – the date and time of the request, – the access status (client and service errors), – the description of the type of web browser used and the operating system used, – the referrer URL (address of the Internet page that refers to the website), The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Legal basis for data processing: The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f DS-GVO. Purpose of data processing: The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session. The purpose of the storage in log files is to ensure the functionality and stability of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes, a comparison with other data or a transfer to third parties does not take place in this context. These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f DS-GVO. Duration of storage:

3. Online orders Description and scope of data processing: You have the option of ordering some of our products via our online shop. The order can be placed both with and without customer registration. We collect, store and process the following data for your order: – First and last name – Billing address and, if applicable, different delivery address – E-mail address and telephone number – Order details: goods ordered, quantity – Your other order and delivery details, if applicable – Your bank details (for direct debit payment method) – For customer registration: e-mail address and password For the purpose of dispatching the ordered products, we transmitted your data to a postal delivery service. Legal basis for data processing: The legal basis for processing is Art. 6 para. 1 lit. b DS-GVO, as a contractual relationship is established and processed with the data. Purpose of data processing: The collection, storage and use of the data transmitted as part of your order serve exclusively to conclude and execute the purchase contract. Duration of storage:

4. E-mail contact, contact form, callback request Description and scope of data processing: For all requests, you can contact us by e-mail at info@fennobed.de. In this case, the personal data transmitted with the e-mail, the content as well as the date and time of your e-mail will be stored. On our website, you will also find a contact form that you can use to contact us. You can also leave a telephone callback request. When you fill out the contact form or the form for a telephone callback, the data entered is transmitted to us and stored by us. This is the following data: – Your name – Your e-mail address – Subject and content of your message – Your address (when ordering our catalogue) – In case of a callback request: Your telephone number – In case of a callback request: Your preferred date and time for a callback Your data will not be passed on to third parties in the case of a contact request outside of an order request. The data will only be used for the processing of the conversation or the processing of an order. Legal basis for data processing: The legal basis for the processing of data transmitted in the course of sending an e-mail, the contact form or a call-back request is Art. 6 para. 1 lit. f DS-GVO. Our legitimate interest is to answer your contact request. Purpose of the data processing: The processing of the data from the e-mail and the contact form serves us solely to process the contact request. Duration of storage:

5. Use of cookies Description and scope of data processing: Our website uses cookies. Cookies are small text files that are stored locally in the cache of your internet browser. The cookies enable the recognition of the internet browser and thus enable us to improve the comfort and quality of our services, e.g. by saving user settings. Cookies do not cause any damage to your computer and do not contain viruses. The following data is stored in the cookies: language settings and contents of the shopping basket. It is also possible to use our website without cookies. You can deactivate the storage of cookies in your internet browser, restrict it to certain websites or set your internet browser to notify you before a cookie is stored. You can delete the cookies from your computer’s hard drive at any time using the data protection functions of your Internet browser. In this case, the functions and user-friendliness of the offer could be restricted Browsers allow you to block and delete cookies. The following links show you how to adjust the settings in the following common browsers: Chrome: https: //support.google.com/chrome/answer/95647?hl=de Firefox: https: //support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen Internet Explorer: https: //support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies Safari: https://support.apple.com/kb/PH21411?viewlocale=de_DE&locale=de_DE Blocking technically necessary cookies may impair the functionality of this website. We also use cookies on our website that enable an anonymous analysis of the surfing behaviour of our website users. When you access our website, we ask you to consent to the use of such cookies. If you give your consent, the following processing will take place: Google Analytics with anonymisation function The website then uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as „Google“. Google Analytics uses „cookies“, which are text files placed on your computer, to help the website analyse how users use the site. It is possible to assign data, sessions and interactions across several devices to a pseudonymous user ID and thus to analyse the activities of a user across devices. The information generated by the cookies, such as the time, place and frequency of your website visit, including your IP address, is transmitted to Google in the USA and stored there. We use Google Analytics on our website with the IP anonymisation function activated. In this case, your IP address will already be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and thus anonymised. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not, according to its own information, associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. Furthermore, Google offers a deactivation add-on for the most common browsers, which gives you more control over what data Google collects about the websites you visit. The add-on tells the JavaScript (ga.js) of Google Analytics that no information about the website visit should be transmitted to Google Analytics. However, the Google Analytics browser deactivation add-on does not prevent information from being transmitted to us or to other web analytics services we may use. For more information on how to install the browser add-on, please click on the following link: https://tools.google.com/dlpage/gaoptout?hl=de If you visit our site via a mobile device (smartphone or tablet), you must click this link instead to prevent tracking by Google Analytics within this website in the future. This is also possible as an alternative to the above browser add-on. By clicking the link, an opt-out cookie will be set in your browser, which is only valid for this browser and this domain. If you delete the cookies in this browser, the opt-out cookie will also be deleted, so you will have to click the link again. Google Audiences We also use Google Audiences („GA Audiences“), another web analytics service provided by Google. This service collects and stores data from which pseudonymised usage profiles are created. This technology enables us to display targeted advertising on other external pages of the Google Partner Network to users who have visited our website. GA Audience uses, among other things, cookies that are stored on your computer and other mobile devices (e.g. smartphones, tablets, etc.) and which enable an analysis of the use of the respective devices. Some of the data is analysed across devices. GA Audience receives access to the cookies created in the context of the use of Google Analytics. In the course of use, data, such as in particular the IP address and activities of the user, may be transmitted to a server of the company Google LLC and stored there. Google LLC may transfer this information to third parties where required to do so by law, or where such data is processed by third parties. You can prevent the collection and forwarding of personal data (in particular your IP address) and the processing of this data by deactivating the execution of JavaScript in your browser or installing a tool such as ‚NoScript‘. You can also prevent the collection of data generated by the Google cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link(http://tools.google.com/dlpage/gaoptout?hl=de). Further information on data protection when using GA Audience can be found at the following link: https://support.google.com/analytics/answer/2700409?hl=en&ref_topic=2611283. DoubleClick by Google The online marketing tool DoubleClick by Google („DoubleClick“) is also used on our website. This is also an offer from Google. DoubleClick uses cookies to present you with ads that are relevant to you, to improve campaign performance reports or to prevent you from seeing the same ads more than once. A pseudonymous identification number (ID) is assigned to your browser in order to check which ads were displayed in your browser and which ads were viewed. In addition, DoubleClick can use the ID to record so-called conversions that are related to ad requests. This is the case, for example, if you see a DoubleClick ad and later call up our website with the same browser and make a request there. According to Google, the cookies do not contain any personal information. The information generated by the cookies is transferred by Google to a server in the USA for evaluation and stored there. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of DoubleClick, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider may obtain and store your IP address. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent the collection of data generated by the cookies and related to your use of the websites to Google as well as the processing of this data by Google by making the appropriate settings under the Ads Preferences Manager https://adsettings.google.com/anonymous?hl=devornehmen. Alternatively, you can deactivate the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at http://optout.aboutads.info/folgen. Legal basis for data processing: Insofar as personal data is processed using technically necessary cookies, the legal basis is Art. 6 (1) lit. f DS-GVO. For cookies that enable an analysis of your behaviour, we obtain your consent when you call up our website, which is the legal basis for the use of the cookies pursuant to Art. 6 (1) lit. a DS-GVO. Purpose of data processing: The purpose of using technically necessary cookies is to simplify the use of websites. Some functions of the online shop cannot be offered without the use of cookies. For the functioning of the ordering process, it is necessary, for example, that the contents of the shopping basket are recognised even after a change of page. These purposes are also our legitimate interest in processing the personal data according to Art. 6 para. 1 lit. f DS-GVO. Google Analytics is used for the purpose of improving the quality of our website and its content. Through the analysis cookie, we learn how the website is used and can thus constantly optimise our offer. Duration of storage:

6. Integration of Google Maps Our website also uses Google Maps to provide an overview of our locations and affiliated dealers. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. Description and scope of processing: By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. In addition, the data mentioned under „Provision of the website and creation of log files“ are transmitted. This takes place regardless of whether Google provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or designing its website in line with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. For more information on the purpose and scope of data collection and processing by Google, please refer to Google’s privacy policy. There you will also find further information on your rights in this regard and setting options for protecting your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework. Legal basis for processing: The legal basis for the processing of personal data is Art. 6 (1) lit. f DS-GVO. Purpose of data processing: The integration of Google Maps serves the sole purpose of offering you an overview of the locations of our business premises. Duration of storage:

7. Rights of the data subject If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller: Right to information: Pursuant to Art. 15 DS-GVO, you have the right to request information about your personal data processed by us; in particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if the data have not been collected directly from you by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its use. you can also request meaningful information about the details of this. Right to rectification: Pursuant to Art. 16 DS-GVO, you have the right to request the correction of inaccurate or incomplete personal data stored by us without delay. Right to erasure: Pursuant to Art. 17 DS-GVO, you have the right to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims. Right to restriction: Pursuant to Art. 18 DS-GVO, you have the right to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure, and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims, or you have objected to the processing pursuant to Art. 21 DS-GVO. Right to data portability: In accordance with Art. 20 DS-GVO, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller. Right of complaint: In accordance with Art. 77 DS-GVO, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose. In the present case, the competent supervisory authority is: The Hessian Data Protection Commissioner, P.O. Box 3163, 65021 Wiesbaden, Tel.: +49 (0) 611 1408-0, Fax: +40 (0) 611 1408-900, e-mail: Poststelle@datenschutz.hessen.de. Right of objection: