Privacy Policy
We take the protection of your personal data very seriously and inform you in detail below about how your data is handled.
Controller
Matthias Max
Lautenthaler Str. 42
38644 Goslar OT Hahnenklee
Email: kontakt@fewo-leonard.de
Access Data and Hosting
You can visit our website without providing any personal information. Each time a web page is accessed, the web server automatically stores a server log file containing, for example, the name of the requested file, your IP address, date and time of access, amount of data transferred, and the requesting provider (access data), and documents the access. This access data is evaluated solely for the purpose of ensuring trouble-free operation of the website and improving our services. This serves to protect our predominantly legitimate interests in the correct presentation of our services pursuant to Art. 6(1)(f) GDPR.
Data Processing for Contract Fulfilment
We collect personal data when you voluntarily provide it to us as part of your booking or when contacting us (e.g. via contact form or email). Mandatory fields are marked as such, as we require this data for contract processing or to handle your enquiry. Without this information, you cannot complete the booking or send the enquiry. We use the data you provide for contract processing and to handle your requests pursuant to Art. 6(1)(b) GDPR. After full completion of the contract, your data will be restricted for further processing and deleted after the expiry of any tax and commercial law retention periods pursuant to Art. 6(1)(c) GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6(1)(a) GDPR or we have reserved a further use of data that is permitted by law.
Contact
As part of customer communication, we collect personal data to process your enquiries pursuant to Art. 6(1)(b) GDPR when you voluntarily provide it to us when contacting us (e.g. via contact form or email). Mandatory fields are marked as such. After your enquiry has been fully processed, your data will be deleted unless you have expressly consented to further use or we have reserved a legally permitted use of data.
Data Processing for Payment
When processing payments, we work with technical service providers, credit institutions, and payment service providers. Depending on the payment method selected, we pass on the data necessary for processing the payment transaction to our service providers, credit institutions, or payment service providers, insofar as this is necessary for processing (Art. 6(1)(b) GDPR). In some cases, payment service providers collect the required data themselves, e.g. on their own website or via a technical integration in the ordering process. The privacy policy of the respective payment service provider applies. Where applicable, we pass on further data to our service providers, who use it as processors for the purpose of fraud prevention and optimisation of our payment processes (Art. 6(1)(f) GDPR).
Web Analytics with Matomo (cookieless)
We use the web analytics service Matomo (formerly Piwik) on our website. Matomo is open-source software hosted on our own server at stats.fewo-leonard.de. No data is shared with third parties.
Matomo is operated without cookies. No cookies are placed on your device and no fingerprinting is used. Instead, a so-called config_id is calculated based on anonymized data (operating system, browser, browser language, and anonymized IP address), which groups page views into a visit for a maximum period of 24 hours. No recognition beyond this period takes place.
The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the statistical analysis of user behaviour to optimize our website). No cross-site tracking takes place.
The following data is collected:
- Anonymized IP address (last two bytes are masked)
- Date and time of access
- Pages visited and files downloaded
- Referrer URL (the previously visited page)
- Browser, operating system, and screen resolution
Right to object: You can object to the collection of your data by Matomo at any time. Please use the following opt-out function:
Social Media
Our online presence on Facebook (by Meta) and Instagram (by Meta): Insofar as you have given your consent pursuant to Art. 6(1)(a) GDPR to the respective social media operator, data may be collected for market research and advertising purposes when you visit our online presences, from which usage profiles may be created using pseudonyms. These may be used to place advertisements within and outside the platforms. Cookies are generally used. For further details, please refer to the privacy notices of the respective providers; our cooperation is based on the EU Commission's standard contractual clauses.
Google reCAPTCHA
We use Google reCAPTCHA v3 on this website to protect against bots and abusive automated access. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA analyses website visitor behaviour based on various characteristics. This analysis begins automatically as soon as you enter the website. For the analysis, reCAPTCHA evaluates various information, including:
- IP address of the device
- Time spent on the website
- Mouse movements and keyboard input
- Operating system, browser and screen resolution
The data collected during the analysis is forwarded to Google. reCAPTCHA analyses run entirely in the background.
Data processing is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its web services from abusive automated access and spam.
For further information on Google reCAPTCHA, please refer to the Google Privacy Policy and Google Terms of Service.
Your Rights
As a data subject, you have the rights under Art. 15 to 21 GDPR: access, rectification, erasure, restriction of processing, data portability, and the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). You also have the right to object under Art. 21 GDPR to processing based on Art. 6(1)(f) GDPR. In the case of direct marketing, you may object at any time.
Contact
If you have any questions about the collection, processing, or use of your personal data, or for information, rectification, restriction, or deletion of data, as well as revocation of consent or objection to a particular use of data, please contact us using the details provided above.
Last updated: 05/2026