Below, we would like to inform you about data protection on our website, as well as the type, scope, and purpose of the personal data we collect, use, and process. Data protection is of utmost importance to us.

Personal data is all data with which you could be personally identified, such as name, IP address, telephone number, etc. Some of this data is processed automatically when you visit the website (e.g. IP address, browser type, operating system, etc.), or when you give us your consent to process it, or when you voluntarily provide us with your data, e.g. by entering your data into a form on our website.

We would also like to inform you about your rights under the GDPR.

You have the right at any time to obtain information about the origin, recipient and purpose of your personal data processed by us free of charge, as well as the right to correct or delete this data.

You also have the right to request the restriction of the processing of your personal data under certain circumstances. If you have given us your consent to data processing, you can revoke this consent at any time with effect for the future. You also have the right to lodge a complaint with the responsible data protection supervisory authority.

VThe data protection controller / processing body is the company

Isidor Feigl GmbH & Co. KG
Jakobsmühle 1, 93458 Eschlkam
Phone: + 49 (0) 99 48 / 9402-0
Email: info@feigl.de

Personally liable partner: Isidor Feigl Verwaltung GmbH
represented by the managing directors Stefan Feigl and Werner Feigl

Processing of your data within the scope of the services we provide

For our customers or business partners, or in the event that you are interested in our services, the type, scope, and purpose of the processing of your personal data are determined by the contractual or pre-contractual relationship between us. We process personal data that we request from you or that you provide to us in order to answer your inquiry, provide you with an offer, or process your order. Data subjects include interested parties, business partners, and contractual partners. The purpose of processing is the execution of contractual services, communication, and responding to contact inquiries, as well as office and organizational procedures.

Unless otherwise stated in the further information in this privacy policy, the processing of your data and its transfer to third parties is limited to the data that is necessary and appropriate to answer your inquiries and/or to fulfill the contract, to protect our rights and to fulfill legal obligations.

The data affected are:

• Inventory data (e.g. names, addresses)
• Payment details (e.g. bank account details, invoices) 
• Contact details (e.g. email address, telephone number, postal address) 
• Contract details (e.g., subject matter of the contract, contract duration)

The legal basis for data processing is Art. 6 I 1 lit. b GDPR, the fulfilment of the contract or the fulfilment of pre-contractual inquiries.

Unless a specific storage period is stated in this data protection declaration, we will store your personal data until the purpose for data processing no longer applies. We will delete your personal data when we no longer need it, i.e. after the contractual relationship between us has ended, or after our legitimate interest in further processing the data no longer applies, or when you request us to delete it. Mandatory legal provisions - in particular statutory retention periods - remain unaffected. Likewise, it may be necessary to process your personal data until the end of these periods in order to assert, exercise or defend legal claims arising from contractual relationships or to protect the rights of another natural or legal person. We will then only delete the personal data required for this purpose after these periods have expired. However, until these periods have expired, we limit the processing of this data to these purposes.

Accessing the website – processing of personal data and the type and purpose of use

 
When you visit our website, you transmit data to our web server via your internet browser (for technical reasons). The following data is processed in the server log files during an ongoing connection for communication between your internet browser and our web server:

• the page from which the file was requested – referrer URL
• the name of the file
• the date and time of the request
• a description of the type of web browser used / browser version and operating system
• IP address of enquiring computer
• Access status (file transferred, file not found, etc.)
• Amount of data transferred

For technical reasons (when you access the website), this data is stored temporarily. We cannot identify individuals based on this data. IP addresses are deleted or anonymized after 7 days at the latest.

The data is evaluated exclusively for internal purposes and does not allow us to draw any conclusions about you personally. It is not compared with other databases.

The data mentioned will be processed for the following purposes:

• Ensuring proper and smooth connection to the website,
• Ensuring comfortable use of the website,
• Evaluation of system security and stability

The legal basis for data processing is Art. 6 (1) (f) GDPR. The legitimate interest arises from the purposes for data collection listed above. Under no circumstances will we use the collected data to draw conclusions about you personally. You can visit the website without providing any personal information.

Cookies – Consent Tool

 
We use cookies on our website. Cookies are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, Trojans, or other malware.

The cookie stores information related to the specific device used. However, this does not mean that we directly know your identity. Cookies do not contain any personal data and therefore cannot be directly assigned to any user.

Cookies are used to make using our services more pleasant for you. For example, we use technically necessary session cookies to recognize that you have already visited individual pages of our website, to set the language, and to save the status of your shopping cart. These cookies are automatically deleted after you close your browser or after one day. The data processed by cookies is required for the aforementioned purposes to protect our legitimate interests and those of third parties in accordance with Art. 6 (1) (f) GDPR.

Furthermore, cookies may be used by third-party services with your consent. The legal basis for this is Art. 6 (1) (a) GDPR – your consent. These cookies are automatically deleted after a defined period of time. A detailed overview of the cookies and other technologies and service providers we use, their purposes and storage periods, the legal basis for cookie use, and further information can be found in our Consent Manager.

Using the Consent Manager, you can accept or reject individual or all cookies separately the first time you visit our website, and at any time thereafter, by placing a check mark/cross next to the respective cookie or removing it and saving the settings. These settings are stored on your computer or mobile device in the local storage. Therefore, they must be made and saved again if the device's local storage is deleted or a different device or browser is used. Please note that you may have to manually delete cookies that have already been set if you withdraw your consent.

Most browsers automatically accept cookies. However, you can configure your browser to refuse cookies or to always alert you before a new cookie is created. Each browser manages cookie settings differently. Refer to your browser's help menu for information on how to disable cookies or change settings.

Google Analytics

With your consent (Art. 6 (1) (a) GDPR), we use Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google). Google Analytics may use “cookies,” i.e. small text files placed on your computer to help the website analyze how users use the site. The information generated by the cookie about your use of the website, such as browser type/version, operating system used, referrer URL, host name of the accessing computer (IP address), and time of the server request, is transmitted to a Google server in the United States and stored there. Google may also use other technologies to access your device, such as anonymous, non-resolvable IDs (“ClientIDs”) or fingerprinting. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage, such as market research and website optimization. By using Google Analytics we can obtain the following information and data for the following purposes:

• Heatmaps – Google creates so-called heatmaps, meaning we see the areas you click on. This gives us precise information about where you are on our site and what interests you.
• Session duration – we see how long you spend on our site without leaving the page. If you've been inactive for 20 minutes, your session ends automatically.
• Bounce rate – a bounce is when you only view one page on our website and then leave our website again.
• Location – the IP address can be used to determine the country and your approximate location (city or region).
• Technical information, such as your browser type, your Internet service provider or your screen resolution.
• Source of origin – Google Analytics evaluates which website or advertisement you came to our site from.

This list is not intended to be exhaustive and is intended only as a general guide to data processing by Google Analytics.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. IP addresses are anonymized after your location has been determined, so that they cannot be traced back to you (IP masking). User- and event-level data stored by Google that is linked to cookies, user identifiers (e.g., User ID), or advertising IDs (e.g., DoubleClick cookies, Android advertising ID) is anonymized or deleted after 14 months. Details can be found at the following link: https://support.google.com/analytics/answer/7667196?hl=de

You can prevent the storage of cookies by adjusting your browser settings accordingly. Furthermore, you can prevent Google from collecting and processing your data (including your IP address) when using the website by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de , which prevents Google Analytics from collecting data.

Further information about data protection at Google can be found at https://policies.google.com/privacy?hl=de or by https://support.google.com/analytics/answer/6004245?hl=de

Google Search Console

We use Google Search Console (GSC) on our website, a free tool from Google that allows us to analyze and optimize the performance of our website. GSC does not collect any personal data and only provides aggregated information, such as:

• Search queries that lead to the website.
• Click numbers, impressions and positions in search results.
• Technical data such as crawling errors or indexing problems.

This data is not linked to individual people. This data is collected automatically when users use Google Search and is part of the general Google Terms of Service. The data is collected within Google Search if you have agreed to the Google Search Terms of Service. Using Google Search Console does not result in Google collecting additional data. GSC simply provides an interface to make this existing data accessible for SEO purposes. This happens without cookies or tracking pixels being placed on our website. Unlike Google Analytics, for example, GSC does not process any personal data. We cannot access user data.

Inquiries by email, fax or telephone

If you contact us by email, fax, or telephone, your inquiry, including all personal data resulting from it (e.g., name, inquiry), will be stored and processed by us for the purpose of processing your request. Your data will not be shared without your consent. There is no legal or contractual obligation to provide your data; however, processing your request is not possible without providing your data.

This data is processed on the basis of Art. 6 (1) (b) GDPR, provided your inquiry is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 (1) (a) GDPR) and/or on our legitimate interest (Art. 6 (1) (f) GDPR), as we have a legitimate interest in the effective processing of the inquiries addressed to us.

The data sent to us via contact requests (e-mail) will be stored by us until you request deletion, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory legal provisions—in particular, statutory retention periods—remain unaffected.

Data when using our contact form

 
If you send us a message using our contact form, the mandatory information is derived from the form. Entering an email address is necessary so that we can contact you via email. There is no legal or contractual obligation to provide your data; however, processing your request is not possible without it.

The data you enter into the contact form will be used by us exclusively to respond to your inquiry sent to us via the contact form. We will not pass on the data you enter into the contact form to third parties and will not use this data for any purposes other than answering your inquiry. The data is processed either for the purposes of fulfilling a contract to which the data subject is a party or for carrying out pre-contractual measures (Art. 6 I S. 1 lit b GDPR), or pursuant to Art. 6 I S. 1 lit a GDPR on the basis of your voluntarily given consent and/or on our legitimate interests (Art. 6 I S. 1 lit f GDPR), as we have a legitimate interest in the effective processing of the inquiries addressed to us.

Your data will be deleted after your request has been processed, provided that there are no legal retention obligations that prevent deletion.

Data protection when sending application documents

If you send us your application documents, we will use them exclusively to decide on your application and will not share your data with third parties. Please note that we currently do not offer data encryption for applications sent by email. However, you can send your attachments to us encrypted via email, for example, using the 7ZIP program (http://www.7-zip.de/) and provide us with your password separately, for example, by phone. You can also send us your application by mail at any time.

Application data is stored and managed separately from other data records.

If we conclude an employment contract with an applicant, the submitted data will be stored for the purpose of processing the employment relationship in compliance with statutory provisions. If no employment contract is concluded with the applicant, the application documents will be automatically deleted no later than six months after notification of the rejection decision, provided that no other legitimate interests of the data controller conflict with deletion or the applicant has expressly consented to longer storage and retention of their application, e.g., for possible future contact regarding vacancies. Other legitimate interests in this sense include, for example, the burden of proof in proceedings under the General Equal Treatment Act (AGG).

Data processing for the purpose of contacting you and processing your application data is carried out in accordance with Art. 6 I S. 1 lit. a, b GDPR on the basis of your voluntarily given consent, as well as for the implementation of pre-contractual measures.

Protecting our forms from automated access (Cloudflare Turnstile)

To protect our contact and application forms from abusive automated use (so-called bots) and spam, we use the "Turnstile" service from Cloudflare Germany GmbH, Rosental 7, 80331 Munich. Turnstile checks whether the input into our form is made by a human or by an automated program.

When you access a page containing a form, a connection is established to Cloudflare's servers. Your IP address, technical information about your browser and device (including browser type and version, operating system, language settings, and screen resolution), as well as interaction data (such as mouse and keyboard input on the form page) are transmitted to Cloudflare and analyzed there. Turnstile does not use cookies for advertising or tracking purposes and does not create cross-website user profiles.

The legal basis for processing is Article 6(1)(f) GDPR. Our legitimate interest lies in protecting our forms and the underlying systems from automated access, spam, and misuse, and in ensuring the proper operation of our website. The data is processed exclusively for this purpose and is not used to create user profiles.

The transfer of data to Cloudflare, Inc. in the USA cannot be ruled out. Cloudflare, Inc. is certified under the EU-US Data Privacy Framework; in addition, standard contractual clauses exist pursuant to Art. 46 para. 2 lit. c GDPR.

Further information on how user data is handled can be found in Cloudflare's privacy policy at https://www.cloudflare.com/de-de/privacypolicy/.

Data security – SSL encryption

We use the SSL (Secure Socket Layer) technology on our website to encrypt and protect the transmission of confidential content. When SSL encryption is activated, the data you transmit to us cannot be read by third parties. You can tell whether a specific page of our website is being transmitted encrypted by the closed key or lock symbol in your browser's status bar. If SSL encryption is enabled, your browser's address bar will display "https://."

Processing/disclosure of data

Your personal data will not be transferred to third parties for purposes other than those listed above or below.

We only share your personal information with third parties if:

• You have given your express consent in accordance with Art. 6 I S. 1 lit. a GDPR,
• this is legally permissible and according to Art. 6 I S. 1 lit. b GDPR is necessary for the fulfilment of contractual relationships or for the implementation of pre-contractual measures with you,
• in the event that we are legally obliged to disclose data in accordance with Art. 6 I S. 1 lit. c GDPR,
• processing pursuant to Art. 6 I S. 1 lit. f GDPR is necessary to protect our legitimate interests or those of a third party, unless the interests or fundamental rights and freedoms of the data subject which require protection of personal data prevail, in particular if the data subject is a child.
  
  

Affected rights

You have the right:

• in accordance with Art. 15 DSGVO, to request information about your personal data processed by us;
• in accordance with Art. 16 GDPR to immediately demand the correction of incorrect or completion of your personal data stored by us;
• pursuant to Art. 17 GDPR to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
• to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR;
• in accordance with Art. 20 GDPR to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible;
• Pursuant to Art. 7 III GDPR, you have the right to revoke your previously granted consent at any time. This means that we may no longer continue data processing based on this consent in the future.
• Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your habitual residence or place of work, or our headquarters. A list of data protection officers in Germany and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to object to data collection in special cases

If we process your personal data pursuant to Art. 6 (1) (f) GDPR to protect our legitimate interests, which override ours in the context of a balancing of interests, you have the right to object to the processing of your personal data with future effect pursuant to Art. 21 GDPR. If you wish to exercise your right of objection, simply send us an email.

After exercising your right of objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims. 

No automated decision-making or profiling takes place on our websites.

Change of this data protection declaration - status

Due to the ongoing development of our website and its offerings, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy in compliance with applicable data protection regulations. You can access and print the current privacy policy at any time on our website under "Data Protection."

Prepared by attorney Markus v. Hohenhau – www.e-anwalt.de (as of February 2025)