Privacy Policy

1. Controller

The controller for data processing on this website is:
Fribas Holding GmbH i. Gr.
Erna-Paul-Str. 14
34121 Kassel, Germany
Phone: [PLATZHALTER: phone number]
E-mail: info@fribas.com

Full company details: legal notice.

2. Data protection officer

[PLATZHALTER: name, or “No data protection officer has been appointed pursuant to Art. 37 GDPR.” — the latter is the normal case at this company size; § 38 BDSG applies only from 20 persons permanently engaged in automated processing.]
Please address data protection enquiries to info@fribas.com.

3. Hosting (Cloudflare Pages)

This website is hosted as a static site by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare Pages). When the site is accessed, Cloudflare processes technically necessary connection data (IP address, date and time, file requested, volume transferred, referrer, browser type and operating system) in server log files. The legal basis is our legitimate interest in operating the site securely and reliably (Art. 6 (1) (f) GDPR).

A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare. The transfer to the USA is based on the EU standard contractual clauses in conjunction with Cloudflare’s certification under the EU-US Data Privacy Framework (Art. 45, 46 GDPR). Log file retention period: [PLATZHALTER: verify against the Cloudflare configuration, typically 24 h – 7 days].

4. Cookies and local storage

This website sets no cookies. It embeds no external fonts, maps, videos, social media plugins and no audience measurement. There is no profiling and no automated decision-making.

Exactly one technically necessary entry is stored in your browser’s local storage: the language you selected (fribas-lang). It contains no personal data, is not transmitted to a server, and is required to operate the site as you requested (§ 25 (2) no. 2 TDDDG). You can delete it at any time via your browser settings.

There is therefore no consent banner: this single entry requires no consent, and no optional services are integrated that would need one.

5. Contacting us by e-mail

There is no contact form on this site; no input is transmitted to us. If you write to us by e-mail, we process the information you provide (e-mail address, name, message content) solely in order to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or (f) GDPR. The data is deleted once the matter is concluded, unless statutory retention obligations (§ 147 AO, § 257 HGB) apply.

6. Links to other websites

This site links to doestat.com and to the website of the group company STATCON. Clicking a link takes you off this website; processing there is governed by the respective privacy policy. Your data is only transmitted to those sites once you click — there are no embedded contents that would open connections on mere page load.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6 (1) (f) GDPR (Art. 21). You may withdraw any consent given at any time (Art. 7 (3) GDPR).

8. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority. The competent authority is the one at the company’s registered seat — for Kassel that is the Hessian Commissioner for Data Protection and Freedom of Information, Wiesbaden — [PLATZHALTER: verify the full address and web address against datenschutz.hessen.de before release; competence follows the registered seat and changes with it].

9. Version and changes

This policy is dated: [PLATZHALTER: date of legal approval]. We will update it whenever the legal situation or our processing changes.