Privacy Policy

1. Introduction

Below we provide information about the processing of personal data when you use our website fuxam.com and our profiles on social media.
Personal data means all information relating to an identified or identifiable natural person, such as name or IP address.

1.1 Contact details

The controller pursuant to Art. 4 para. 7 GDPR is Fuxam GmbH, Französische Straße 20, Berlin, Germany, email: info@fuxam.de. The company is legally represented by Julian Schröder, Oliver Grübnau and Leo van den Brandt.
Our data protection officer can be reached at heyData GmbH, Schützenstraße 5, 10117 Berlin, www.heydata.eu, email: datenschutz@heydata.eu.

1.2 Scope of data processing, purposes of processing and legal bases

We explain the scope, purposes, and legal bases for processing personal data below. The most important bases are:

  • Art. 6(1)(a) GDPR (consent)
  • Art. 6(1)(b) GDPR (contract or pre-contractual measures)
  • Art. 6(1)(c) GDPR (legal obligation)
  • Art. 6(1)(1)(f) GDPR (legitimate interest, e.g. for technically necessary cookies)

1.3 Data processing outside the EEA

If data is transferred to service providers or third parties outside the EEA, an adequacy decision by the EU Commission pursuant to Art. 45 (3) GDPR ensures the lawfulness of the data transfer – for example for the United Kingdom, Canada or Israel.

For transfers to the USA, the following applies: If there is an adequacy decision and the service provider is certified under the EU-US Data Privacy Framework, the transfer is carried out on this basis. Otherwise, we generally use standard contractual clauses (Art. 46 (2) (b) GDPR). Many providers offer additional safeguards such as encryption or obligations to inform data subjects in the event of requests from public authorities.

1.4 Storage period

Unless otherwise indicated, personal data will be deleted as soon as it is no longer required for its purpose and there are no statutory retention periods that prevent deletion. If the data is still needed, for example to fulfill legal obligations, it will be blocked.

1.5 Rights of data subjects

The following rights are available to data subjects:

  • Information about the stored data
  • Rectification or erasure
  • Restriction of processing
  • Objection to processing
  • Data portability
  • Revocation of granted consents

You also have the right to lodge a complaint with a data protection supervisory authority. Contact details can be found at:https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

1.6 Obligation to provide data

In the context of a business relationship or any other relationship, you are only required to provide those personal data that are necessary for establishing, carrying out, and terminating the relationship, or that we are legally obliged to collect. Without this data, it is not possible to conclude a contract or provide services. Mandatory fields are marked as such.

1.7 No automated decision-making in individual cases

As a rule, we do not use fully automated decision-making in accordance with Article 22 GDPR. Should this occur in an individual case, you will be informed separately.

1.8 Contact

When you contact us, for example by email or telephone, we store the data you provide (e.g. names, email addresses) in order to respond to your inquiry. The legal basis is our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. The data will be deleted as soon as it is no longer required or if there are restrictions due to statutory retention obligations.

1.9 Customer surveys

We occasionally conduct customer surveys in order to improve our services. Legal basis: Art. 6(1)(f) GDPR. The data will be deleted after evaluation.

2. Newsletter

We reserve the right to occasionally inform customers who have already used our services or purchased goods from us about our offers by email or other means, provided they have not objected to this. The legal basis is Art. 6 (1) sentence 1 lit. f GDPR (direct advertising). You may object at any time free of charge, for example via a link in every email or by contacting us at our email address.

Interested parties can subscribe to a free newsletter. The data provided during registration will be used exclusively for sending the newsletter. Registration and consent are given by actively ticking a box on the website or on a paper form, or by some other clear action. Consent can be revoked at any time, e.g. via a link in the newsletter or by sending a message to info@fuxam.de. Any data processing carried out up to the time of revocation remains lawful. For optimization purposes, we also measure the open and click rates (Art. 6 para. 1 sentence 1 lit. a GDPR).

We use the following providers:

  • Intercom (R&D Unlimited Company, Dublin, Ireland) – processing in the EU
  • SendGrid (Twilio Ireland Limited, Dublin, Ireland) – processing in the USA
  • HubSpot (HubSpot Germany GmbH, Berlin) – Processing in the EU
  • Resend (Plus Five Five, Inc., San Francisco, USA) – Processing in the USA

Further information, in particular on data transfers outside the EEA as well as on the providers’ privacy policies, can be found on the respective websites of the service providers mentioned.

3. Data processing on our website

3.1 Notice for website visitors from Germany

Our website stores information on, or accesses information from, users’ end devices (e.g. cookies, IP addresses). Details can be found in the following sections. Technically essential access takes place on the basis of Section 25 (2) No. 2 TDDDG. Other storage or access is based on consent (Section 25 (1) TDDDG). Any further data processing is carried out in accordance with the GDPR.

3.2 Informational use of the website

When our website is used for information purposes only, meaning without any active transmission of data by the user, the following personal data is collected and processed in order to ensure the stability and security of our website (Art. 6 para. 1 sentence 1 lit. f GDPR):

  • IP address
  • Date and time of the request
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status / HTTP status code
  • respective amount of data transferred
  • Website from which the request originates
  • Browser
  • Operating system and interface
  • Language and version of the browser software.

This data is also stored in log files and deleted after 14 days at the latest.

3.3 Web Hosting and Provision of the Website

Our website is hosted by the following providers:

A transfer to the USA is safeguarded by an adequacy decision or standard contractual clauses.

Webflow also serves as a Content Delivery Network (CDN). The purpose is to ensure fast and stable page loading even at peak traffic times. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.

3.4 Contact form

Data transmitted via the contact form, as well as the content of the message, are used exclusively for processing the inquiry (Art. 6 para. 1 sentence 1 lit. f GDPR). The data will be deleted as soon as they are no longer needed or if statutory retention obligations no longer apply.

3.5 Job advertisements

We publish job advertisements on our website and, where applicable, on third-party platforms. Applicant data is processed for the purpose of handling the application process (Art. 88 GDPR in conjunction with Section 26 BDSG). Mandatory fields are marked. If a mandatory field is missing, the application cannot be processed. Voluntary information is provided on the basis of consent (Art. 6(1)(a) GDPR).

We kindly ask you to avoid providing sensitive information (e.g. relating to religion). If such information is transmitted, it will be processed on the basis of your consent (Art. 9(2)(a) GDPR).

Applicant data is passed on to relevant internal staff in the HR department, recruiters, and other parties involved in the selection process. After hiring, the data is deleted at the end of the employment relationship; otherwise, it is deleted no later than six months after a rejection, or after one year if consent has been given for use in further application procedures.

3.6 Booking Appointments

Website visitors can book appointments. For this purpose, the data entered and, where applicable, communication or metadata are processed (Art. 6(1)(f) GDPR).

3.7 Customer Account

If a customer account is opened, the respective data will be processed for the purpose of fulfilling and managing the user agreement (Art. 6(1) sentence 1 lit. b GDPR).

3.8 Payment service providers

Payments are processed via payment service providers such as Stripe Payments Europe, Ltd., Ireland, whereby the data entered during the ordering process is transmitted and processed (Art. 6 para. 1 sentence 1 lit. b GDPR).

3.9 Technically necessary cookies

We use technically necessary cookies on our website for the following purposes (Art. 6 para. 1 sentence 1 lit. f GDPR):

  • Storage of login data
  • Save search terms
  • Adoption of language settings
  • Setting Flash cookies for the playback of media content

3.10 Third-party providers

3.10.1 HubSpot

HubSpot (HubSpot Germany GmbH, Berlin) is used for analytics, marketing automation and lead generation. Processing takes place in the EU (Art. 6 para. 1 sentence 1 lit. f GDPR). Data is deleted once the purpose of processing no longer applies. Privacy policy:https://legal.hubspot.com/privacy-policy

3.10.2 Google Analytics

Google Analytics (Google LLC, USA) is used for analysis on the basis of your consent (Art. 6 (1) sentence 1 lit. a GDPR, which can be withdrawn at any time). Data transfers are safeguarded by an adequacy decision or standard contractual clauses. Privacy policy: https://business.safety.google/privacy/

3.10.3 Google Tag Manager

Google Tag Manager (Google Ireland Limited, Ireland) is used for advertising and analytics (consent required, Art. 6 (1) sentence 1 lit. a GDPR). Data transfers are governed as with Analytics. Privacy policy:https://business.safety.google/privacy/

3.10.4 heyData

We have integrated the data protection seal of heyData GmbH, Berlin. Only anonymized metadata/communication data is processed in the EU (Art. 6 para. 1 sentence 1 lit. f GDPR). Privacy policy:https://heydata.eu/datenschutzerklaerung

4. Data processing on social media platforms

We are present on social networks in order to present our organization and services. The operators regularly process user data for advertising purposes; profiles of online behavior may be created and cookies may be set. In addition, data may be processed outside the EU.

If users contact us via social media, the data will be processed for the purpose of responding to their inquiry (Art. 6 para. 1 sentence 1 lit. f GDPR).

4.1 Facebook

Meta Platforms Ireland Ltd., Dublin, Ireland, Privacy Policy: https://www.facebook.com/policy.php. Opt-out option: https://www.facebook.com/settings?tab=ads.

4.2 Instagram

Meta Platforms Ireland Ltd., Dublin, Ireland, Privacy Policy:https://help.instagram.com/519522125107875.

4.3 TikTok

TikTok Technology Limited, Dublin, Ireland, Privacy Policy:https://www.tiktok.com/de/privacy-policy.

4.4 YouTube

Google Ireland Limited, Dublin, Ireland, Privacy Policy: https://policies.google.com/privacy?hl=de.

4.5 LinkedIn

LinkedIn Ireland Unlimited Company, Dublin, Ireland, Privacy Policy: https://www.linkedin.com/legal/privacy-policy, Option to object: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

4.6 Xing

New Work SE, Hamburg, Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung.

5. Changes to this Privacy Policy

We reserve the right to change this privacy policy in the future. The current version is available at this location.

6. Questions and comments

If you have any questions or comments about this privacy policy, please feel free to contact us using the contact details provided above.