Privacy Policy

Thank you for visiting our website. This privacy notice explains how we process personal data when you use our website. Personal data means any information relating to an identified or identifiable natural person.

The controller under the GDPR is Alexander Kerschl, Paul-Keller-Str. 9, 84405 Dorfen, Germany, phone: +49 08081 60893-10, email: mail@faremex.it.

When you use our website for information purposes only, we collect data that your browser transmits to our server (server log files). This includes in particular:

• visited page/URL
• date and time of access
• amount of data transferred
• referrer URL
• browser type and version
• operating system
• full IP address

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in stability, security and functionality of the website). Server log files are stored for 14 days and then deleted automatically. The website is served exclusively over encrypted HTTPS (SSL/TLS).

For hosting and technical operation of this website, we use a hosting provider with servers in a data center in Germany (EU). Data collected via this website is processed there.

A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

This website uses only technically necessary cookies. We do not use any tracking, analytics or advertising; the language is selected via the URL (/de/ or /en/), not via cookies.

When you acknowledge the cookie notice, we store your choice in a technically necessary cookie (fx_cookie_consent, lifetime approx. 6 months). It contains no personal data and serves solely to avoid showing the notice on every visit. You can change your choice at any time via “Cookie settings” in the footer.

Exception: when you submit the contact form, the “Cloudflare Turnstile” spam-protection service is loaded, which may set a technically necessary cookie. Details are given in the “Contact Requests” section.

If you contact us via contact form or email, we process the data you provide (e.g. first name, name, email address, message) solely to handle your request. The legal basis is Art. 6(1)(f) GDPR; if your request is related to a contract, Art. 6(1)(b) GDPR also applies.

Delivery of the form message: the message submitted via the contact form is technically delivered to our mailbox via Microsoft 365 / Microsoft Graph. Microsoft acts as a processor in this respect.

Spam protection (Cloudflare Turnstile): to prevent spam and automated requests, our contact form uses “Cloudflare Turnstile” by Cloudflare, Inc. (USA). Your IP address and technical information about your browser are transmitted to and processed by Cloudflare; a technically necessary cookie may be set for this purpose. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in security and abuse prevention). The processing may involve a transfer to the USA.

We use Microsoft Teams for meetings with customers and prospects (consulting, support, projects). In doing so, we process the data you provide when joining or that arises during the meeting: name or display name, email address (if provided), video and audio data, chat messages, shared screen content and technical data (IP address, device and connection data, timestamps).

Transcript and AI summary: in meetings hosted by FAREMEX, a transcript is started automatically. Microsoft 365 Copilot uses it to create a summary of results, agreements and tasks. At the start, Teams asks each participant for consent. Without consent, that participant's microphone, camera and screen sharing remain blocked. Anyone who does not agree can say so at the start; the transcript is then stopped. Meetings are not video-recorded by default. The summary is not sent to participants automatically; we review it and share it only where necessary.

Legal basis: Art. 6(1)(b) GDPR (contract or pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in efficient communication and documentation). For the transcript and AI summary, the legal basis is your consent given via the prompt in Teams, Art. 6(1)(a) GDPR; you may withdraw it at any time.

Recipient: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, acts as a processor. Processing takes place within the EU Data Boundary. Where data is nevertheless transferred to third countries, this is based on the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

Storage period: we delete transcripts and summaries after 30 days.

Your rights as a data subject are described under Data Subject Rights.

Our website contains links to external services (for example Facebook and WhatsApp). Data is transferred to these providers only when you actively click the respective link.

The respective operators are solely responsible for data processing on their external websites.

Subject to the legal requirements, you have in particular the following rights:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to withdraw consent (Art. 7(3) GDPR)
• right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

If we process your data based on legitimate interests (Art. 6(1)(f) GDPR), you may object at any time for reasons arising from your particular situation.

The storage period for personal data depends on legal basis, processing purpose and statutory retention periods.

Data is deleted once it is no longer required for the relevant purpose and no legal retention obligations apply.