Privacy Policy
1. Data Controller and Contacts
Data processing is the responsibility of
FERI AG
Haus am Park
Rathausplatz 8-10
61348 Bad Homburg
Phone: +49 (0) 6172 916–0
Fax: +49 (0) 6172 916–9000
E-Mail: info@feri.de
Contact the Data Protection Officer:
The FERI Group's data protection officer can be contacted at datenschutz@feri.de.
2. Data Processing (Data, Purposes, Legal Basis, Recipients)
2.1 Loading the Consent Management Tool and Managing Consents
To request and manage consent for the use of cookies and other site-related data processing, the services of the service provider Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich—which operates in accordance with our instructions—are loaded (Cookiebot consent management tool). In doing so, the technically necessary information (the end device’s IP address, time of access, access request, and, if applicable, other data provided by the web browser being used) as well as the respective consent settings are transmitted to the provider. Processing ends at the conclusion of the respective session. The legal basis is the legitimate interest in implementing the collection, verification, and management of consents using a technically simple solution, Art. 6(1)(f) GDPR.
2.2 Necessary Cookies for Website Use
Our website uses cookies that are necessary for the basic functions and operation of the website. Without these cookies, the website cannot function properly.
Details can be found at the end of this Privacy Policy under “5. Detailed information about cookies” as well as in the consent management tool under the “Necessary” section.
2.3 Analysis of the nature and extent of website usage using Google Analytics
With your consent (given in the Cookiebot consent management tool under the “Statistics” section), Google Analytics—an analytics software operated by Google—collects information regarding the time, duration, and scope of the pages visited, as well as details about the device used to access the site, such as the operating system, region, and browser type. The data is processed in a pseudonymized form to generate anonymous information about how the website is used, to continuously improve the website, and to better tailor the content to users. For this purpose, the information generated through the use of the website (including your truncated IP address) is transmitted to Google’s servers (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) for use by Google Analytics. It cannot be ruled out that Google USA may access this data; in such cases, data protection requirements are guaranteed by standard contractual clauses.
The data is stored for up to 14 months.
Legal basis: Art. 6(1)(a) GDPR (consent). Details on the cookies used can be found in Section 4, “Detailed Information on Cookies,” under “Statistics.”
2.4 Contact Form
The data fields provided in the contact form (name, contact information, message) as well as information regarding the time of use are processed for the purpose of handling and responding to the inquiry. The data is transmitted to the FERI company named and identified on the respective contact form. The processing of data transmitted via the contact form is based on the legitimate interest in receiving, processing, and responding to inquiries from prospective customers, customers, and other website visitors, in accordance with Article 6(1)(f) of the GDPR. The data will be deleted within 12 months after the matter has been resolved; if contract-related information was transmitted via this channel, it will not be deleted immediately but will be stored in the customer file and deleted upon termination of the customer relationship.
To protect against abusive automated submissions (spam), the Google reCAPTCHA service is integrated into the contact form. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; access by Google USA cannot be ruled out, but data protection requirements are guaranteed in this case by standard contractual clauses. When the page is loaded, the IP address, browser and device information, and usage data are transmitted to Google and processed there. Data processing is based on our legitimate interest in ensuring the security of our website and protecting it from misuse, in accordance with Article 6(1)(f) of the GDPR.
2.5 Event Registration
When registering for an event, your last name, first name, email address, company, participation status, additional comments, and time of registration are collected and processed for the purpose of organizing, conducting, and following up on the event, as well as for contacting you regarding all matters related to the respective event. The data is transmitted to the organizing FERI company listed on the registration page. The legal basis for this is your consent (Art. 6(1)(a) GDPR). If you are a customer, the information will be added to the transaction history in your customer file; if you are not a customer, the data will be deleted if you withdraw your consent or, at the latest, 4 years after your participation.
2.6 Newsletter
To send you the newsletter and add you to the mailing list, we process the contact information you enter on the sign-up page, as well as details regarding the topic and the time of delivery. This data processing is necessary for you to receive the newsletter and is based on the consent you provide on the sign-up page. (Legal basis: Art. 6(1)(a) GDPR). You may revoke this consent at any time by clicking the unsubscribe link included in every newsletter. The newsletter is sent on behalf of and under the direction of FERI by a service provider (Newsletter2go). The data will be deleted immediately upon unsubscribing from the newsletter.
2.7 Integration of Social Media Services and YouTube Videos
With your consent, news from LinkedIn and videos from YouTube may be displayed and used on this page. By clicking on the respective button or video, your IP address and the time of your page visit will be transmitted to the respective provider (Provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Gardner House 4, 5, 6, 2, Dublin, Ireland; Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland); this allows you to use the respective provider’s services, such as sharing the page on social media or giving it a “Like.” It cannot be ruled out that the respective U.S. parent company may become aware of this information; in such cases, data protection requirements are guaranteed by standard contractual clauses. The provider may be able to identify you (e.g., because you are logged in there at the same time) and thus associate your visit to the website with you personally and store that information. By clicking the respective button, you consent to the transfer of your data to the respective provider; if you do not click the button, the data will not be transferred and the services will not be loaded. This consent applies on a case-by-case basis.
2.8 Portal Use (myFERI, Economics, FERI AIF Portal, FERI Portal, My FERI ART (Login))
(1) Registration as a user is required to use the respective portal; for this purpose, your personal and contact information, as well as a password you provide, are processed to grant secure access to your user account. This data is necessary for authentication and authorization, as well as to prevent unauthorized access, and is processed in accordance with Article 6(1)(b) of the GDPR. Your registration data will be deleted when you deactivate your user account.
(2) When you log in and use the portal, information regarding the time, duration, and scope of use, as well as login attempts, is processed. This processing is carried out to ensure the secure provision of services and to process your orders, and is based on Article 6(1)(f) of the GDPR. FERI has a legitimate interest in ensuring a secure service and in documenting the correct processing of orders. Usage data may be stored for up to 1 year.
(3) Cookies are set when you log in and use the respective portal. The details are described in the cookie management tool and below in section “5. Detailed Information about Cookies,” under the heading “Necessary.”
2.9 Whistleblower System
Our whistleblower system is designed to provide a confidential communication channel for whistleblowers and to enable the reporting of suspected compliance and legal violations.
In general, the whistleblower system can be used without providing personal information. However, whistleblowers have the option to voluntarily provide personal data (e.g., personal identification data, contact and address information, and report details).
For the whistleblower portal, FERI uses software provided by EQS (EQS Group AG, Karlstr 47, 80333 Munich), a data processor as defined in Article 28 of the GDPR. FERI’s internal review of the reported matters is conducted exclusively by a strictly limited group of individuals who are bound by confidentiality obligations. For the purposes of legal proceedings, it may be necessary to forward the reported matters to external entities (e.g., law firms, law enforcement agencies). No data is transferred to entities outside the EU or the EEA.
The documentation is deleted three years after the conclusion of the proceedings. The documentation may be retained for a longer period to comply with the requirements of the Whistleblower Protection Act or other legal provisions, provided this is necessary and proportionate.
The legal basis for the processing of personal data is Article 6(1)(c) of the GDPR in conjunction with Section 10 of the Whistleblower Protection Act (HinSchG).
3. Your rights
Right of Access, Erasure, Rectification, Restriction, and Data Portability
You have the right to access your stored personal data and, provided the legal requirements are met, the right to have your data rectified, erased, or its processing restricted, or to have the data you have provided transferred.
Objection to Processing Based on Legitimate Interests
If your data is processed to safeguard overriding legitimate interests, you may object to this processing at any time if there are grounds that preclude such data processing.
Note: No automated decision-making, including profiling, within the meaning of Article 22 of the GDPR takes place.
Withdrawal of Consent
If your data is processed based on your consent, you may withdraw your consent at any time and stop the processing.
To exercise your rights, please contact us using the contact information provided above.
Right to File a Complaint
You have the right to file a complaint with the company’s data protection officer (see contact information above) or with a data protection supervisory authority; the supervisory authority responsible for FERI is the Hessian Commissioner for Data Protection and Freedom of Information, P.O. Box 3163, 65021 Wiesbaden.
4. Data Processing on Social Media
4.1. Data Processing on the LinkedIn Page
When you visit and interact with our LinkedIn company page, personal data—in particular, usage and interaction data (Art. 26 GDPR)—is processed in collaboration with LinkedIn Ireland Unlimited Company (LinkedIn). This processing is intended to analyze the use of our company page and improve our communication.
The legal basis is Article 6(1)(f) of the GDPR; FERI has a legitimate interest in analyzing the reach of our company page.
Pursuant to the agreement, LinkedIn is the primary data controller responsible for fulfilling information obligations and ensuring technical and organizational measures (https://legal.linkedin.com/pages-joint-controller-addendum).
For all other processing activities carried out by LinkedIn, LinkedIn is the independent data controller.
FERI processes information provided when you contact us via the LinkedIn page under its own responsibility. This is done to respond to your inquiry or to establish contact and handle the associated technical administration. The legal basis is Article 6(1)(f) of the GDPR; FERI has a legitimate interest in responding to your inquiry. Your data will be deleted after final processing, provided that no statutory retention obligations preclude deletion in the specific case.
For more information on data processing by LinkedIn, as well as on potential transfers to third countries, retention periods, and your rights as a data subject, please refer to the provider’s privacy policy.
4.2 Data Processing on the YouTube Channel
On the FERI YouTube channel, Google Ireland Limited (Google) and FERI jointly process usage, device, and interaction data (Art. 26 GDPR). Google Ireland Limited is generally the primary controller for this processing. We process the information compiled by Google from this data in the form of statistics on visits to our profile, reports on the playback time of our videos, and user interactions.
FERI also processes the personal data you provide to us via YouTube—particularly when you post comments or contact us—in order to address your inquiry. The legal basis is Article 6(1)(f) of the GDPR; FERI has a legitimate interest in communicating with users and in adjusting the reach and target audience of published content.
Further information on data processing by Google, as well as on possible transfers to third countries, retention periods, and your rights as a data subject, can be found in the provider’s privacy policy.