1. Controller

Franken Carving – Stefan Steinbrich

Mitteldorfer Weg 22, 91085 Weisendorf, Germany

Phone: 09135 736275, Email: kontakt@franken-carving.de

Web: https://www.frankencarving.de

2. General Information on Data Processing

We only process personal data to the extent necessary for the provision of this website, our content, and services.

Legal Bases: Art. 6 para. 1 lit. a (Consent), lit. b (Contract/Initiation), lit. f GDPR (legitimate interests) as well as Section 25 TTDSG (Access to terminal device information).

You can change granted consents at any time with future effect in the Cookie Settings Center (Consentmanager).

3. Hosting & Server Logs (STRATO)

The website is hosted by STRATO AG, Otto-Ostrowski-Str. 7, 10249 Berlin (Processor, Art. 28 GDPR).

When the page is accessed, among other things, IP address, date/time, accessed URL, referrer, user agent are processed in server log files to ensure operation and security.

Legal Basis: Art. 6 para. 1 lit. f GDPR (Operation/Security).

Log files are deleted or anonymized after a limited period.

4. Cookies & Consent Management (Consentmanager CMP)

We use a Consent Management Platform (Consentmanager) to manage and document consents for cookies/tracking. For this purpose, a technically necessary cookie is stored (consent status, timestamp, categories).

Legal Basis: Section 25 para. 2 TTDSG (necessary) and Art. 6 para. 1 lit. c/f GDPR (Proof of obligation/Usability).

Via “Cookie Settings” (footer link), you can adjust your selection at any time.

Categories that can be used with consent:

• Essential: technically necessary cookies (e.g., consent, form protection).
• Statistics: e.g., Google Analytics 4.
• Marketing: e.g., Google Ads, Meta Pixel.
• External Media: e.g., embedded videos.

5. Google Tag Manager (GTM) – Consent Mode v2

We use Google Tag Manager (Google Ireland Ltd.). The GTM itself does not set tracking cookies, but it transmits technical metadata (e.g., IP) for tag delivery.

Consent Mode v2 ensures that statistics/marketing tags only become active after consent; without consent, only cookieless pings (aggregated signals without identifiers) are sent.

Legal Basis: Art. 6 para. 1 lit. f GDPR (Tag Management) as well as Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TTDSG for the respective triggered tools.

Third-country transfer: Google may transfer data to the USA; Standard Contractual Clauses (Art. 46 GDPR) apply.

6. Google Analytics 4 (GA4)

With granted consent, we use Google Analytics 4 for audience measurement. GA4 uses cookies/similar technologies. We use IP anonymization (truncation within the EU).

Legal Basis: Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TTDSG.

Recipient/Third Country: Google Ireland Ltd. / Google LLC (USA), Standard Contractual Clauses.

Revocation: at any time via the Cookie Center; optionally via a browser add-on from Google.

7. Google Ads (Conversion & if applicable Remarketing)

With consent, we use Google Ads (conversion measurement and, if applicable, remarketing). Cookies may be set and users recognized across websites to measure conversions or optimize advertising.

Legal Basis: Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TTDSG.

Recipient/Third Country: Google Ireland / Google LLC (USA), Standard Contractual Clauses.

Revocation: at any time in the Cookie Center.

8. Meta Tracking (Meta Pixel)

With consent, we use the Meta Pixel (Meta Platforms Ireland Ltd.) to measure advertising effectiveness and create target audiences. Among other things, IP address, user agent, and event parameters are processed; a comparison with Meta accounts is possible.

Legal Basis: Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TTDSG.

Recipient/Third Country: Meta Platforms Ireland / Meta Platforms Inc. (USA), Standard Contractual Clauses.

Revocation: at any time in the Cookie Center.

9. Contact & Forms (Fluent Forms)

When contacting us via Fluent Forms, we process your information (name, company, email, phone, message, possibly file attachments) to process your inquiry.

Legal Bases: Art. 6 para. 1 lit. b GDPR (Contract initiation) or lit. f GDPR (Communication).

The data is processed on our web server (Strato) and in our mailboxes and regularly reviewed and deleted as soon as it is no longer required for processing or statutory retention periods expire.

Technically necessary cookies/anti-spam mechanisms may be used to protect the form (essential category, Section 25 para. 2 TTDSG).

10. Modula Gallery & Embedded Media

For image galleries, we use Modula (delivery of images via our server). For external media (e.g., ARD Mediathek/YouTube/Vimeo), a connection to the provider is only established after your click on the preview (two-click solution via the CMP).

Legal Basis: Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TTDSG (for external media); essential for purely local image rendering.

11. Webfonts & Theme (Blocksy)

We embed webfonts locally; no fonts are loaded from external servers when accessed.

Legal Basis: Art. 6 para. 1 lit. f GDPR (uniform, performant display).

(If external CDNs are used in individual cases, we adapt the integration to the consent behavior.)

12. Security

This website uses TLS encryption (HTTPS). Data is thereby protected against unauthorized reading/manipulation during transmission.

13. Storage Duration / Deletion

Unless otherwise stipulated in this declaration, we store personal data only as long as it is necessary for the respective purposes or statutory retention obligations exist. Thereafter, data is deleted or anonymized.

14. Your Rights

You have the right to information (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) as well as to object to processing based on Art. 6 para. 1 lit. f GDPR (Art. 21 GDPR).

You can revoke granted consents at any time (Art. 7 para. 3 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), e.g., in your federal state.

Contact for exercising rights: kontakt@franken-carving.de

15. Recipients/Categories of Recipients

• Processors: Strato (Hosting), maintenance/agency if applicable, Consentmanager (CMP), Google (when using GA4/Ads), Meta (when using Pixel).
• Authorities/public bodies within the scope of legal obligations.

16. Data Transfers to Third Countries

For Google and Meta services, data may be transferred to the USA. The basis for this are Standard Contractual Clauses (Art. 46 GDPR). However, a level of protection equivalent to EU standards cannot always be guaranteed (e.g., government access). Services are therefore only activated after consent; the Consent Mode reduces data signals without consent.

17. Changes to this Declaration

We adapt this Privacy Policy if the legal situation, services, or processes change. The version published on this website at the time is applicable.