Privacy policy

The controller responsible for processing personal data on this website is FNLY Social UG (haftungsbeschränkt), Am Kraftwerk 23, 34582 Borken, represented by its managing director Alina Schmid.

Phone: +49 5682 7369200, email: info@fnly-group.com. You can reach us at this address with any questions about data protection and to exercise your rights.

Under Art. 37 GDPR (DSGVO) and § 38 BDSG (German Federal Data Protection Act) we are not obliged to appoint a data protection officer. The management handles your data protection requests directly.

This website runs on servers that we operate ourselves. The servers are located in the data centre of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, at the Falkenstein site in Germany. Hetzner provides the data centre, power and network connection. We have a data processing agreement with Hetzner pursuant to Art. 28 GDPR.

The connection to this website is encrypted with TLS. You can recognise this by the padlock symbol and "https" in the address bar.

Each time you open this website, your browser transmits data to our server for technical reasons, including:

• IP address of the requesting device
• date and time of access
• page or file requested
• website from which you came to us (referrer)
• browser and operating system used
• amount of data transferred and status code of the response

Our server processes this data only to deliver the requested page to you. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the technical provision of the website. We do not store access logs containing this information.

If you open fnly-social.com without a language in the address, we forward you to the matching language version. To do this we derive the country you are in from your IP address and take your browser's language setting into account. The country lookup uses a database on our own server (IP geolocation by DB-IP, https://db-ip.com, licence CC BY 4.0). Your IP address is not passed to third parties for this and is not stored. The legal basis is our legitimate interest in showing you the site in your language and with the prices and services for your market (Art. 6(1)(f) GDPR).

If you choose a language version yourself in the language selector, we store this choice in a cookie ("fnly_social_locale", valid for one year) so we do not redirect you again on your next visit. The cookie is required for this function you have explicitly requested (Section 25(2) no. 2 TDDDG) and only contains the code of the chosen language version.

We do not set cookies for advertising. We store your choice in the consent banner in your browser's local storage (localStorage, entry "fnly-consent") so that the banner does not appear again on every page view. This storage is strictly necessary for the service you requested and permitted under § 25 (2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act).

We only load services that are not strictly necessary with your consent pursuant to § 25 (1) TDDDG and Art. 6 (1) (a) GDPR. You can change or withdraw your consent at any time via the "Cookie settings" link in the footer of every page. The withdrawal applies to the future.

If you consent to the "Statistics" category, we use the open-source software Matomo to measure how our website is used. The statistics server at statistik.fnly-group.com is operated by FNLY Group in Germany, and the data is not passed on to third parties.

In doing so, we process your IP address, which is shortened by the last two bytes before storage, the pages viewed and the time spent on them, the website you came from, information on your device, browser and screen size, and actions such as submitting a form. For this purpose Matomo sets the cookies "_pk_id" (storage period 13 months) and "_pk_ses" (30 minutes).

We use the analysis to improve our content and to understand which pages lead to requests. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. The raw data is deleted after 395 days.

If you consent to the "Marketing" category, we use services of the advertising platforms on which we run ads: Google Ads (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland), the Meta Pixel for Facebook and Instagram (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland) and the TikTok Pixel (TikTok Technology Limited, Dublin, Ireland). Without your consent, these services are not loaded.

These services set cookies or similar identifiers and transmit data such as your IP address, information on your device and browser, the pages viewed and whether you sent a request or booked an appointment. This lets us measure which ads lead to requests and show ads again on these platforms to visitors of our website. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. For the collection via the Meta Pixel, we are joint controllers with Meta pursuant to Art. 26 GDPR.

The providers may transfer data to the USA. Google LLC, Meta Platforms, Inc. and LinkedIn Corporation are certified under the EU-US Data Privacy Framework, for which an adequacy decision pursuant to Art. 45 GDPR exists. You can withdraw your consent at any time via "Cookie settings" in the footer.

If you come to us via an ad and send a request, we transmit the campaign information from the page address, such as utm_campaign or gclid, together with your request. This tells us which campaign led to which request. The legal basis is our legitimate interest in measuring the success of our advertising pursuant to Art. 6 (1) (f) GDPR.

If you write to us via the contact form or the project request, we process the information you provide there: name, email address, company, phone number, the selected topic, your project details such as channels, scope, timeframe and budget range, and your message.

We use this data to answer your request and, where applicable, to prepare a quote. The legal basis is Art. 6 (1) (b) GDPR where your request aims at a contract, and otherwise our legitimate interest in answering requests pursuant to Art. 6 (1) (f) GDPR.

Our server transmits your information as an email to our Microsoft 365 mailbox via the Microsoft Graph interface. We do not operate a database for form entries. To protect against misuse, the server briefly processes your IP address in memory in order to limit too many requests in a short time. It is not stored permanently and is discarded after one hour at the latest.

We delete your request once it has been dealt with, unless statutory retention obligations prevent this. If your request leads to a contract, the retention periods under commercial and tax law of up to ten years apply.

If you contact us by email or phone, we process your information to handle your request. The same legal basis and storage period apply as for the contact form.

For email, calendar and appointment booking we use Microsoft 365 from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. We have a data processing agreement with Microsoft pursuant to Art. 28 GDPR.

Microsoft generally processes data for customers in the EU within the EU. A transfer to the USA cannot be ruled out. Microsoft Corporation is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the EU Commission pursuant to Art. 45 GDPR exists.

We use Microsoft Bookings for online appointment booking. Your browser does not connect to Microsoft: the appointment picker on this page queries available times via our server, and only your booking is transmitted by our server to Microsoft Bookings. No cookies are set in the process.

When you book an appointment, we process your name, your email address, your company, your phone number, your optional message and the selected time in order to hold the call and send you a confirmation. The legal basis is Art. 6 (1) (b) GDPR. To protect against misuse, the server briefly processes your IP address in memory, as with the contact form. We delete the data when it is no longer needed for the call and any possible collaboration.

The UGC price calculator runs entirely in your browser. Your entries are neither stored nor transmitted to us.

Without your consent we do not load fonts, scripts or images from third-party servers; ad tags load only after you consent to the “Marketing” category. The content of this website is delivered from our own servers.

This website contains links to services of other providers, for example to the websites of our sister brands FNLY IT and FNLY Agency or to map services for directions. Data is only transmitted when you click such a link. The respective provider is responsible for processing on the linked pages.

Your data is only received by those who need it for the purposes stated: our employees who handle your request and the processors Hetzner and Microsoft named above. Your data is not passed on for advertising purposes.

You have the following rights towards us regarding your personal data:

• Access pursuant to Art. 15 GDPR
• Rectification pursuant to Art. 16 GDPR
• Erasure pursuant to Art. 17 GDPR
• Restriction of processing pursuant to Art. 18 GDPR
• Data portability pursuant to Art. 20 GDPR
• Withdrawal of consent pursuant to Art. 7 (3) GDPR with effect for the future

Where we process data on the basis of a legitimate interest pursuant to Art. 6 (1) (f) GDPR, you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds.

You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (Hessischer Beauftragter für Datenschutz und Informationsfreiheit), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, www.datenschutz.hessen.de.

You are not obliged to provide us with data. Without the required information in the contact form, however, we cannot process your request. No automated decision-making, including profiling, pursuant to Art. 22 GDPR takes place.

We update this privacy policy when the website or the legal situation changes. The version published here applies.