1. Data Controller and Contacts

Data processing is the responsibility of

FERI AG
Haus am Park
Rathausplatz 8-10
61348 Bad Homburg

Phone: +49 (0) 6172 916–0
Fax: +49 (0) 6172 916–9000
E-Mail: info@feri.de

Contact the Data Protection Officer:

The FERI Group's data protection officer can be contacted at datenschutz@feri.de.

2. Data Processing (Data, Purposes, Legal Basis, Recipients)

2.1 Loading the Consent Management Tool and Managing Consents

To request and manage consents for the use of cookies and other website-related data processing, we use the services of the service provider Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich (Cookiebot consent management tool). In doing so, the technically necessary information (IP address of the end device, time of access, access request, and, if applicable, additional data provided by the web browser being used) as well as the respective consent settings are transmitted to the provider. Processing ends at the conclusion of the respective session. The legal basis is the legitimate interest in implementing the collection, verification, and management of consents using a technically simple solution, Article 6(1)(f) of the GDPR.

2.2 Necessary Cookies for Website Use

Our website uses cookies that are necessary for the basic functions and operation of the website. Without these cookies, the website cannot function properly.
Details can be found at the end of this Privacy Policy under “4. Detailed Information on Cookies” as well as in the consent management tool under the “Necessary” section.

2.3 Analysis of the Type and Scope of Website Usage by Google Analytics and Matomo Using Cookies

With your consent (given in the Cookiebot consent management tool under the “Statistics” section), the Google Analytics analytics software operated by Google and the open-source software solution Matomo collect information on the time, duration, and scope of the pages visited, as well as details about the device used to access the site, such as the operating system, region, and browser type. The data is processed in a pseudonymized form to generate anonymous information about how the website is used, to continuously improve the website, and to better tailor the content to users. For this purpose, the information generated through the use of the website (including your truncated IP address) is transmitted to Google’s servers (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) via Google Analytics and to xpecto’s servers (xpecto talonec GmbH, Konrad-Zuse-Bogen 18, 82152 Krailling) via Matomo. It cannot be ruled out that Google USA may access this information; in such cases, data protection requirements are guaranteed by standard contractual clauses. The data is stored for up to 14 months.

Legal basis: Art. 6(1)(a) GDPR (consent).
Details on the cookies used can be found in Section 4, “Detailed Information on Cookies,” under “Statistics.”

2.4 Contact Form

The data fields provided in the contact form (name, contact information, message content) as well as information regarding the time of use are processed for the purpose of handling and responding to the inquiry. The data is transmitted to the FERI company named and identified on the respective contact form. The processing of data transmitted via the contact form is based on the legitimate interest in receiving, processing, and responding to inquiries from prospective customers, customers, and other website visitors, in accordance with Article 6(1)(f) of the GDPR. The data will be deleted within 12 months after the matter has been resolved; if contract-related information was transmitted via this channel, it will not be deleted immediately but will be stored in the customer file and deleted upon termination of the customer relationship.

To protect against abusive automated submissions (spam), the Google reCAPTCHA service is integrated into the contact form. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; access by Google USA cannot be ruled out, but data protection requirements are guaranteed in this case by standard contractual clauses. When the page is loaded, the IP address, browser and device information, and usage data are transmitted to Google and processed there. Processing is based on the legitimate interest in the security of our website and protection against misuse pursuant to Article 6(1)(f) of the GDPR.

2.5 Event Registration

To register for an event, your last name, first name, email address, company, participation status, additional comments, and the time of registration are collected and processed for the organization, conduct, and follow-up of the event, as well as for contacting you regarding all matters related to the respective event. The data is transmitted to the organizing FERI company listed on the registration page. The legal basis is your consent (Art. 6(1)(a) GDPR). If you are a customer, the information will be included in the transaction history in your customer file; if you are not a customer, the data will be deleted if you withdraw your consent or, at the latest, 3 years after your participation.

2.6 Newsletter

To send you the newsletter and add you to the mailing list, the contact information you enter on the registration page, as well as details regarding the topic and send time, will be processed. Data processing is necessary for receiving the newsletter and is based on the consent you provide on the registration page. (Legal basis: Art. 6(1)(a) GDPR). You may revoke this consent at any time via the unsubscribe link included in every newsletter. The newsletter is sent on behalf of and under the direction of FERI by a service provider (Newsletter2go). The data is deleted immediately upon unsubscribing from the newsletter.

2.7 Integration of Social Media Services and YouTube Videos

With your consent, news from LinkedIn and videos from YouTube may be displayed and used on the site. By clicking on the respective button or video, your IP address and the time of your page visit are transmitted to the respective provider (provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Gardner House 4, 5, 6, 2 Dublin, Ireland; Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland); this allows you to use the respective provider’s services, such as sharing the page on the network or giving it a “Like.” It cannot be ruled out that the respective U.S. parent company may become aware of this information; in such cases, data protection requirements are guaranteed by standard contractual clauses. The provider may be able to identify you (e.g., because you are logged in there at the same time) and thus associate your visit to the website with you personally and store this information. By clicking on the respective button, you consent to the transfer of your data to the respective provider; if you do not click, the data will not be transferred and the services will not be loaded. Consent applies on a case-by-case basis.

2.8 Portal Use (myFERI, Economics, FERI AIF Portal, FERI Portal, My FERI ART (Login))

1) Registration as a user is required to use the respective portal; for this purpose, your master data and contact information, as well as a password you provide, are processed to grant you secure access to your user account. This data is necessary for authentication and authorization, as well as to prevent unauthorized access, and is processed in accordance with Article 6(1)(b) of the GDPR. The registration data is deleted when you deactivate your user account.

(2) When logging in and using the portal, information regarding the time, duration, and scope of use, as well as login attempts, is processed. This processing is carried out to ensure the secure provision of services and to process your orders, and is based on Article 6(1)(f) of the GDPR. FERI has a legitimate interest in ensuring a secure service and in documenting the correct processing of orders. Usage data may be stored for up to 1 year.

(3) Cookies are set when you log in and use the respective portal. Details are described in the cookie management tool and below in section “4. Detailed Information on Cookies,” under the heading “Necessary.”

2.9 Whistleblower System

Our whistleblower system is designed to provide a confidential communication channel for whistleblowers and to enable the reporting of suspected compliance and legal violations.

In general, the whistleblower system can be used without providing personal data. However, whistleblowers have the option to voluntarily provide personal data (e.g., personal identification data, contact and address information, and report details).

For the whistleblower portal, FERI uses software provided by EQS (EQS Group AG, Karlstr 47, 80333 Munich), a data processor within the meaning of Article 28 of the GDPR. FERI’s internal review of the reported matters is conducted exclusively by a strictly limited group of individuals who are bound by confidentiality obligations. For the purposes of legal proceedings, it may be necessary to forward the reported matters to external entities (e.g., law firms, law enforcement agencies). No data is transferred to entities outside the EU or the EEA.

The documentation is deleted three years after the conclusion of the proceedings. The documentation may be retained for a longer period to comply with the requirements of the Whistleblower Protection Act or other legal provisions, as long as this is necessary and proportionate.

The legal basis for the processing of personal data is Article 6(1)(c) of the GDPR in conjunction with Section 10 of the Whistleblower Protection Act (HinSchG).

3. Your rights

Right of Access, Erasure, Rectification, Restriction, and Data Portability

You have the right to access your stored personal data and, provided the legal requirements are met, the right to have your data rectified, erased, or its processing restricted, or to have the data you have provided transferred.

Objection to Processing Based on Legitimate Interests

If your data is processed to safeguard overriding legitimate interests, you may object to this processing at any time if there are grounds that preclude such data processing.

Note: No automated decision-making, including profiling, within the meaning of Article 22 of the GDPR takes place.

Withdrawal of Consent

If your data is processed based on your consent, you may withdraw your consent at any time and stop the processing.

To exercise your rights, please contact us using the contact information provided above.

Right to File a Complaint

You have the right to file a complaint with the company’s data protection officer (see contact information above) or with a data protection supervisory authority; the supervisory authority responsible for FERI is the Hessian Commissioner for Data Protection and Freedom of Information, P.O. Box 3163, 65021 Wiesbaden.