Legal

Privacy Policy

Note: This is a courtesy translation. The German version is legally binding. Last updated: 28 September 2026 (map service in the order portal, banner version 3).

1. Controller

Energie Fabrik Bodensee GmbH, Salemer Weg 1, 88662 Überlingen
Managing Director: Florian Hager
Email: info@feldfalke.com · Phone: +49 173 3706561
VAT ID: DE359003020

2. Hosting, server log files and visitor statistics

Server log files. Our websites are operated on our own servers of Hostinger International Ltd. in the EU. We have concluded a data processing agreement with Hostinger under Art. 28 GDPR. On every access, the web server automatically stores the following data: IP address, date and time, requested address (URL), previously visited page (referrer), browser and operating system (user agent) and the status code of the response. This is technically necessary to deliver the website and serves security purposes, such as defending against attacks and analysing errors. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and stable operation of our websites. The log files are automatically deleted after 7 days.

Visitor statistics from log files. From the log files we calculate aggregated figures once a day: page views per day and page, referring websites and the approximate number of distinct visitors. Requests from automated programs (bots) are filtered out. To count distinct visitors, we derive a check value from the truncated IP address and the browser type, encrypted with a random value that changes every day. The random value is deleted at the end of the day; after that, no attribution is possible. Only the totals are stored, no data on individual visitors. No cookies are set and no data is transferred to third parties. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to understand how our websites are used without involving third-party providers and to improve what we offer. Further processing of the log files for statistical purposes is compatible with the original purpose under Art. 5(1)(b) GDPR. You may object to this processing on grounds relating to your particular situation (Art. 21(1) GDPR). Contact: info@feldfalke.com.

3. Consent management

When you first visit feldfalke.com or auftrag.feldfalke.com, a banner asks whether you agree to services for statistics and marketing. Without your consent, these services are not loaded and no data is transferred to them. We store your choice in the cookie “ff_consent” for the domain feldfalke.com including its subdomains. The cookie contains only the version of the banner and your decision per category, but no identifier by which you could be recognised. Storing it is necessary so that we can respect your decision and do not have to ask you again on every page view. The legal basis is Section 25(2) no. 2 TDDDG. Insofar as personal data is processed, the legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR, i.e. our obligation to be able to demonstrate consent. The cookie is deleted after 12 months. After that, and whenever we change the services used, we ask you again. Your choice is not transmitted to us or to third parties. An exception applies when you submit an enquiry (see “Measurement of enquiries”).

You can withdraw or change your consent at any time with effect for the future. To do so, use the link “Cookie settings” at the bottom of every page or directly here: Open cookie settings. The lawfulness of processing carried out before withdrawal remains unaffected (Art. 7(3) GDPR).

Measurement of enquiries

If you submit an enquiry via auftrag.feldfalke.com and have consented to the statistics category, our server reports to Google Analytics that an enquiry has been completed. Only the pseudonymous Google Analytics identifier of your browser, the time and the type of event are transmitted. Your details from the form, such as name, contact details or field data, are not transmitted. The legal basis is your consent (Art. 6(1)(a) GDPR). Without consent, no report is made.

4. Web analytics and advertising

Only with your consent do we use the following services, also across domains to our order portal auftrag.feldfalke.com. We embed the Google services directly via the Google tag (gtag.js) with Consent Mode v2 in its basic setting: without your consent, no Google script is loaded and no data is transferred to Google, not even anonymised signals. We do not use Google Tag Manager. For all services, the storage of cookies and the reading of information on your device are based on your consent under Section 25(1) TDDDG; the processing of your personal data (IP address, device details, usage behaviour) is based on your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time (see “Withdrawal”). Google, Microsoft and Meta are certified under the EU-US Data Privacy Framework; transfers to the USA are based on the European Commission's adequacy decision of 10 July 2023, supplemented by standard contractual clauses.

Google Analytics 4 (statistics)

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Purpose: visitor numbers, pages used, origin of visitors, completion of enquiries. Google Analytics uses cookies and comparable technologies to recognise your browser and supplements the collected data with modelling. Cookies: _ga, _ga_* (up to 2 years). Further information: https://support.google.com/analytics/answer/6004245

Microsoft Clarity (statistics)

Provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Clarity creates heatmaps and records sessions: mouse movements, clicks and scrolling as well as the sequence of pages visited. Form entries and other text input are masked before transmission; the recordings do not show any entered content. Cookies: _clck (1 year), _clsk (1 day). Microsoft also uses the data for its own purposes, including improving its services and Microsoft Advertising, and is an independent controller in that respect. Further information: https://privacy.microsoft.com/en-gb/privacystatement

Google Ads conversion tracking (marketing)

Provider: Google Ireland Limited. Purpose: measuring whether clicks on our Google ads lead to enquiries. We learn the total number of users who clicked on our ads and completed an enquiry; we receive no information that identifies you personally. Cookie: _gcl_au (90 days). Google is an independent controller for this processing. Further information: https://policies.google.com/privacy

Meta Pixel (marketing)

Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. Purpose: measuring the success of our ads on Facebook and Instagram, i.e. whether an ad click led to an enquiry. Cookie: _fbp (90 days). Meta stores and processes the data and may link it to your Meta profile and use it for its own advertising purposes in accordance with Meta's data policy; we cannot influence this use. We and Meta Platforms Ireland Limited are joint controllers under Art. 26 GDPR for the collection of data via the pixel and its transmission to Meta; the subsequent processing by Meta is not part of the joint responsibility. The essentials of our agreement with Meta (Controller Addendum, https://www.facebook.com/legal/controller_addendum): we are responsible for providing the privacy information and for implementing the pixel on our website in a lawful manner; Meta is responsible for the data security of its products. You may exercise your data subject rights (e.g. access) regarding data processed by Meta directly with Meta; if you contact us, we forward your request to Meta. Meta's privacy policy: https://www.facebook.com/about/privacy/

Enhanced conversions and advanced matching (Google Ads, Meta)

When you submit a request in our order portal and have consented to the marketing category, the contact details you entered (e-mail, mobile number, name, address) are sent to Google Ads together with the conversion, exclusively as irreversible SHA-256 hashes created in your browser, and to Meta in the same way (“advanced matching”), solely so that your request can be attributed to the ad you came from. Without consent to the marketing category, no such transmission takes place. Legal basis: Art. 6(1)(a) GDPR and Section 25(1) TDDDG; consent can be withdrawn at any time.

5. Order portal

For enquiries via auftrag.feldfalke.com, we process the data provided there (contact details, field and order information) for preparing quotes and performing the contract (Art. 6(1)(b) GDPR).

Map service

In the order portal you draw your fields on an aerial map. The aerial image tiles are provided by Esri (Esri World Imagery, Environmental Systems Research Institute, Inc., Redlands, California, USA). Your browser loads these tiles exclusively from our own server; only our server then fetches them from Esri. Only the address of our server is transmitted to Esri, no data about visitors, in particular not your IP address, the page you visited or cookies. Our server caches the tiles for a short time. The legal basis for displaying the map is Art. 6(1)(b) GDPR (preparation and performance of the contract); no consent is required because no personal data reaches Esri. The fields you draw are processed for preparing your quote (see above).

Service record with signature

After a job, you can sign the service record on your own device. You receive the link by SMS or e-mail; it is valid for 14 days. We store your name, the signature image, date and time and the delivery channel as proof of the service provided (Art. 6(1)(b) GDPR). We also record the IP address and browser identifier of the signing device to protect the signature against misuse (Art. 6(1)(f) GDPR). These two technical details are deleted after 12 months; the service record itself is kept for the statutory retention periods.

6. Contacting us

If you contact us by email, phone or WhatsApp, we process your information to handle your enquiry. WhatsApp: the privacy policy of WhatsApp Ireland Ltd. additionally applies.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), as well as the right to lodge a complaint with a supervisory authority (for us: the State Commissioner for Data Protection of Baden-Württemberg).

8. Switzerland

For persons in Switzerland, the Swiss Federal Act on Data Protection (FADP) applies in addition. Recipients outside Switzerland are the providers named above in Ireland and, where applicable, in the USA. For the USA, an adequacy decision of the Federal Council exists for certified companies (Swiss-U.S. Data Privacy Framework, Annex 1 of the Data Protection Ordinance). The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).

9. SSL encryption

This website uses SSL/TLS encryption for all transmissions.