Address / Contact

Website Operator:
Frank Hofschröer – Foalfinders
Ahlde 16 – 48488 Emsbüren, Germany
Phone: +49 151 646 32852
Email: info@foalfinders.com

Types of Data Processed

• Inventory data (e.g., name, address)
• Contact data (e.g., email, telephone number)
• Content data (e.g., text entries, photos, videos)
• Usage data (e.g., pages visited, access times)
• Meta/communication data (e.g., IP address, device information)

Categories of Data Subjects

Visitors and users of the online offering (collectively “users”).

Purposes of Processing

• Provision of the online offering, its functions and content
• Responding to contact requests and user communication
• Security measures
• Reach measurement & (where consented) marketing

Legal Bases

Unless otherwise specified, we process data based on:

• Art. 6(1)(a) GDPR (consent)
• Art. 6(1)(b) GDPR (contract/ pre-contractual measures)
• Art. 6(1)(c) GDPR (legal obligation)
• Art. 6(1)(f) GDPR (legitimate interests)

Special categories of data (Art. 9(1) GDPR) are processed only under Art. 9(2) GDPR.

Security Measures

We implement appropriate technical and organizational measures (TOMs) to ensure a level of security appropriate to the risk, including access controls, availability and integrity safeguards, data separation, and procedures for data subject rights and incident response. We apply data protection by design and by default when selecting and developing our systems.

Sharing with Processors / Third Parties

Disclosure or transfer of data to other persons/companies (e.g., processors, joint controllers, third parties) occurs only on a legal basis, with consent, where legally required, or based on our legitimate interests (e.g., use of service providers such as hosting).

Transfers to Third Countries

If data are processed outside the EU/EEA, this occurs only where an adequacy decision exists or appropriate safeguards per Art. 46 GDPR (e.g., EU Standard Contractual Clauses) are in place, or on the basis of consent or another legal permission.

Your Rights

• Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18) GDPR
• Data portability (Art. 20 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Withdrawal & Right to Object

You may withdraw consent at any time with effect for the future (Art. 7(3) GDPR). You may object at any time to processing based on legitimate interests (Art. 21 GDPR), in particular to processing for direct marketing.

Cookies & Direct Marketing

We use cookies. Necessary cookies are required for website operation. Analytics and marketing cookies are set only with your consent (opt-in). You can change your selection at any time in the cookie settings. A general opt-out from interest-based advertising is also possible via YourOnlineChoices. Disabling cookies may limit website functionality.

Erasure of Data

Data are erased or their processing restricted in accordance with legal requirements when the purpose no longer applies and no legal retention obligations prevent erasure. If data are not erased because they are required for other lawful purposes, processing is restricted to those purposes (blocking).

Changes to this Policy

We update this policy when changes in our processing make this necessary. Please check regularly. If your cooperation (e.g., consent) is required, we will inform you separately.

Business-Related Processing

We also process contract data (e.g., subject, term), payment data (e.g., bank details, history) and communications for providing contractual services, service & customer care, marketing, advertising and market research.

Agency Services

We process customer data within contractual services (e.g., consulting, campaign planning, software & design development/maintenance, implementation/handling, server administration, analytics/reporting, training). Processed data: inventory, contact, content, contract, payment, usage and meta data. We generally do not process special categories of data unless explicitly part of the assignment. Legal bases: Art. 6(1)(b) GDPR (contract) and Art. 6(1)(f) GDPR (analytics/optimization/security). Disclosure to third parties only where required for the assignment. As a processor, we act strictly on instructions (Art. 28 GDPR).

Deletion: after expiry of statutory warranty/retention periods; necessity reviewed regularly. Statutory retention (e.g., commercial/tax law) remains unaffected.

Comments & Posts

When users leave comments/posts, IP addresses may be stored temporarily on the basis of legitimate interests (Art. 6(1)(f) GDPR) to prevent abuse or clarify claims. User-provided information (e.g., name, contact, content) is stored until users object. Anti-spam procedures may be used.

Comment Subscriptions

Follow-up comments can be subscribed to with consent (double opt-in) (Art. 6(1)(a) GDPR). Unsubscribe at any time; each notification contains instructions.

Contacting Us

When contacting us (e.g., via form, email, phone, social media), we process user details to handle the request per Art. 6(1)(b) GDPR (contractual/pre-contractual) or Art. 6(1)(f) GDPR (other inquiries). Requests are reviewed for necessity; legal retention obligations remain unaffected.

Newsletter

Sent only with consent or legal permission; double opt-in and logging of subscription. Required data: email; optionally name for personalised addressing. Performance measurement and dispatch based on Art. 6(1)(a) GDPR (consent) or Art. 6(1)(f) GDPR (legitimate interest in direct marketing). You can unsubscribe at any time via the link in each email.

Hosting & Email Dispatch

For operation, security and maintenance of this online offering, we use hosting services (infrastructure, platform, compute, storage, databases, email dispatch). Processed data: inventory, contact, content, contract, usage, meta/communication data based on legitimate interests (Art. 6(1)(f) GDPR) and Art. 28 GDPR (processing on our behalf).

Web Analytics (Google Analytics)

We use Google Analytics for reach measurement and improvement of our offering if you consent. Legal basis: Art. 6(1)(a) GDPR. No non-essential cookies are set before consent. IP anonymization is active; pseudonymous usage profiles are created. Retention is typically up to 14 months.

You can change your choice anytime via the cookie settings or use the browser add-on: Google Analytics Opt-out . Google privacy: policies.google.com/privacy .

Social Media Presences

We maintain profiles on social networks to communicate and inform. Data may be processed outside the EU/EEA. Providers often process data for market research/advertising (usage profiles, cookies). Legal basis: our legitimate interests (Art. 6(1)(f) GDPR); where providers request consent, Art. 6(1)(a) GDPR.

Third-Party Content

Based on legitimate interests (analytics, optimization, economic operation; Art. 6(1)(f) GDPR) or your consent, we embed third-party content/services (e.g., videos, fonts). Processing of the IP address by the provider is technically necessary for delivery. Providers may use pixel tags and cookies for statistics/marketing.

YouTube

Provider: Google. Privacy: google.com/policies/privacy – Ads settings: adssettings.google.com .

Google Fonts

For uniform display we may load fonts from Google. IP addresses may be processed. Privacy: google.com/policies/privacy .

Google reCAPTCHA

Used to protect forms against abuse (bots). Provider: Google. Privacy: google.com/policies/privacy .

Google Maps

Interactive maps via Google Maps. Data processed may include IP and location (latter only with consent/device settings). Privacy: google.com/policies/privacy .

Facebook Social Plugins

We may embed Facebook/Meta plugins. Through embedding, the provider may receive information about page access; for logged-in users, assignment to the account may be possible. Privacy: facebook.com/about/privacy – Ad settings: facebook.com/settings?tab=ads .

Twitter

Functions/content from Twitter (X) may be embedded. Privacy: twitter.com/privacy – Personalization: twitter.com/personalization .

Instagram

Instagram content/functions may be embedded (Meta). Privacy: help.instagram.com/519522125107875 .

LinkedIn

LinkedIn content/functions may be embedded. Privacy: linkedin.com/legal/privacy-policy – Opt-out: linkedin.com/psettings/guest-controls/retargeting-opt-out .

Sharing Tools (AddThis)

We may use “AddThis” to share content. Legal basis: legitimate interests (Art. 6(1)(f) GDPR). Provider may process pseudonymous data (cookies) for marketing. Privacy: addthis.com/privacy – Opt-out: addthis.com/privacy/opt-out .