Privacy policy

Protecting your personal data is not only a legal obligation for us but a genuine concern. We only collect what we really need – and treat your data the way we would want ours to be treated. This page explains what information we collect, why we do so and what rights you have. If you have any questions about data protection, please feel free to contact us.

1. Controller

The controller for data processing on this website is:

Phone: +49 (0) 5247 4070-66
E-mail: info@fisekon.com

Data protection officer

Lea Camis Meschkat
E-mail: l.meschkat@fisekon.com

2. Legal basis and scope

We process personal data in accordance with:

• the General Data Protection Regulation (GDPR),
• the German Federal Data Protection Act (BDSG),
• the German Telecommunications Digital Services Data Protection Act (TDDDG, known as TTDSG until May 2024).

This policy applies to:

• visitors to this website,
• people who apply for a position with us,
• business partners and customers,
• employees.

3. Your rights

You have the following rights under the GDPR. An informal message to the contact details above is sufficient to exercise them:

• access to your stored data (Art. 15),
• rectification of inaccurate data (Art. 16),
• erasure (Art. 17),
• restriction of processing (Art. 18),
• data portability (Art. 20),
• withdrawal of consent with effect for the future (Art. 7 (3)) – the lawfulness of processing carried out before the withdrawal remains unaffected.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

4. Hosting and server log files

This website is hosted by:

When you visit the website, the server automatically processes data that your browser transmits:

• IP address,
• date and time of access,
• page or file requested,
• browser type and version, operating system,
• referring page (referrer URL).

Purpose

Delivering the website, stability and security of operation

Legal basis

Art. 6 (1) (f) GDPR (legitimate interest)

Retention

Log files are deleted after 14 days at the latest

Processing agreement

A data processing agreement (Art. 28 GDPR) is in place with the host

5. Encryption

This website uses TLS encryption throughout (recognisable by “https” and the lock symbol in your browser). Data you transmit to us cannot be read by third parties in transit.

6. Cookies and local storage

The website itself sets no cookies. Without your consent, no information is stored on or read from your device beyond what is strictly necessary to deliver the page (§ 25 TDDDG).

If you consent to audience measurement (section 7), Google Analytics sets cookies. Without your consent this does not happen.

We store your consent decision in your browser’s local storage (localStorage) so that we do not have to ask you on every visit. This storage is strictly necessary for the function and therefore does not require consent (§ 25 (2) no. 2 TDDDG). It contains only your choice and its date, no identifier of your person, and expires after 365 days.

7. Audience measurement (Google Analytics 4)

We use Google Analytics 4 to evaluate which pages are visited. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Measurement only starts after your express consent. Until then, no Google script is loaded and no connection to Google is established. If you decline, no measurement takes place at all; the website works unchanged.

With your consent, the following are processed:

• truncated IP address,
• pages visited, time spent and their order,
• origin of the visit (referring page, search term),
• browser, operating system, device type, approximate location,
• a random identifier in a cookie.

Purpose

Evaluating usage in order to improve the website

Legal basis

Art. 6 (1) (a) GDPR, § 25 (1) TDDDG (consent)

Retention

at Google according to the settings there, at most 14 months

Withdrawal

at any time with effect for the future via the “Change consent” link in the footer of every page

Transfer to the USA: Google also processes data on servers in the United States. Google LLC is certified under the EU-US Data Privacy Framework; standard contractual clauses apply in addition. Nevertheless, a level of protection fully equivalent to the European one cannot be guaranteed in every case – in particular, access by US authorities cannot be ruled out.

8. Contacting us

You can reach us by e-mail, by phone and via the forms on this website. A newsletter is currently not offered on this website. When you contact us, we process the details you provide – usually your name, company, contact details and the content of your message.

The forms on this website send nothing to us. Your entries stay in your browser; on submission the page assembles them into a finished e-mail and opens your own e-mail program with it. You send the message yourself, from your own mailbox – it reaches us like any other e-mail. Nothing is transmitted to our web server, nothing is stored there, and no third-party provider for forms or delivery is involved. There is therefore no automatic confirmation of receipt – what you sent is in your own sent-items folder.

Purpose

Handling your enquiry and follow-up communication

Legal basis

Art. 6 (1) (b) GDPR (initiating or performing a contract), otherwise Art. 6 (1) (f) GDPR

Retention

until your enquiry has been dealt with conclusively; business correspondence is additionally subject to the statutory retention periods (section 15)

9. Calculators and tools

The calculators provided on this website (e.g. cable cross-section, enclosure cooling) run entirely in your browser. Your entries are not transmitted to our server or to third parties, not stored and not evaluated. No personal data is processed.

10. Job applications

Applications reach us by e-mail – directly, or via the application form on this website, which assembles your details into a finished e-mail that you send yourself – as well as via job platforms (e.g. StepStone, JOIN). We process the data you provide as part of your application: master data, contact details, information on date of birth, start date, salary expectation, driving licence and German language skills, and the documents you attach to your message.

The application form likewise transmits nothing to our web server: your entries stay in your browser until your e-mail program takes them over (section 8). You attach your CV to that e-mail yourself. No documents are received or stored on the web server at any point, and there is no automatic confirmation of receipt.

Inclusion in our pool of applicants beyond the current procedure only takes place if you have given us that consent. In the form you do so by ticking the corresponding box – the sentence is then carried into the e-mail you send. This consent (Art. 6 (1) (a) GDPR) is voluntary, has no bearing on your application and can be withdrawn at any time with effect for the future – informally by e-mail toinfo@fisekon.com. The lawfulness of processing carried out up to the withdrawal remains unaffected.

Purpose

Conducting the application procedure

Legal basis

§ 26 (1) BDSG, Art. 6 (1) (b) GDPR; for inclusion in the pool of applicants Art. 6 (1) (a) GDPR (consent)

Retention

6 months after the procedure has ended; with your consent, inclusion in our pool of applicants for up to 12 months

11. Customers, partners, employees

We process data of prospects, customers and business partners to initiate and perform contracts and for communication (Art. 6 (1) (b) and (f) GDPR). We process our employees’ data for the purposes of the employment relationship (§ 26 BDSG).

12. Links to social networks

This website contains links to our profiles on LinkedIn, Instagram and YouTube. No content from these providers is embedded – the anniversary video, too, is a still image on our server that only leads to YouTube when clicked. A connection to the respective provider is only established when you click a link; from that point on, its privacy policy applies.

13. Fonts and external content

All fonts are delivered from our own server. There is no connection to Google Fonts or any other content network; your IP address is not transmitted to third parties for this. No maps, videos or other external content are embedded. The only exception is the audience measurement under section 7 – and only after your consent.

14. Recipients and disclosure

Your data is only passed on:

• to service providers working for us (hosting, e-mail and IT services) – on the basis of data processing agreements,
• where necessary to perform a contract,
• where there is a legal obligation (e.g. towards authorities).

Transfers to countries outside the EU/EEA only take place as part of the audience measurement under section 7 – and only after your consent.

15. Retention periods

We store personal data only for as long as it is needed for the respective purpose. It is then deleted unless statutory retention obligations apply – in particular retention periods under German commercial and tax law of six years (§ 257 HGB, business letters) or eight to ten years (§ 147 AO, accounting records and invoices).

16. No automated decision-making

No automated decision-making, including profiling (Art. 22 GDPR), takes place. Providing your data is neither legally nor contractually required; however, without the details needed for an enquiry or a contract we cannot process it.

17. Data security

We use technical and organisational measures to protect your data against loss, misuse and unauthorised access, and adapt these measures to technical developments.

18. Version and changes

This privacy policy is dated 14 August 2026. We will adapt it if the website, the services used or the legal situation change; the version published here applies.