Privacy policy
Controller
Capendo GmbH
Feine Heimat
Represented by: Maria Jose Capella
Äußere Sulzbacher Straße 155a
90491 Nürnberg
kontakt@die-feine-heimat.de
Hosting
This website is hosted by Vercel Inc. When you access the site, technically necessary data such as your IP address, time of access, page requested and browser type are processed in server logs. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure and stable operation).
These server logs serve only secure operation and the prevention of attacks. They are not combined with other data, not used to build user profiles and are deleted automatically after a short period. Vercel acts as our processor under a contract pursuant to Art. 28 GDPR.
Encryption
This website is transmitted exclusively over an encrypted connection (TLS). You can tell by the “https://” in your browser's address bar. Anything you send us, such as a contact form message, therefore cannot be read by third parties in transit.
Analytics and performance
If you agree, we use Vercel Web Analytics and Vercel Speed Insights to understand which pages are viewed and how quickly the site loads. Neither service sets cookies or uses identifiers that could recognise you across page views or websites. Only aggregated information is collected, such as the page viewed, the referring page, device type, browser, approximate country-level origin and loading times. No personal profiles are created. Because no information is read from or stored on your device, no consent would be required under § 25 TDDDG; we nonetheless load audience measurement only after your consent (Art. 6 (1) (a) GDPR). Without consent the script is never requested.
Google Analytics
Only if you consent to statistics do we additionally load Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics sets cookies on your device (including “_ga”) and records which pages you visit, how long you stay, where you came from, and technical details about your browser, operating system and approximate location. Your IP address is truncated by Google and not stored.
The legal basis is solely your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Without that consent neither the Google script is loaded nor a cookie set. We use Google Analytics purely for statistics: no advertising features, no audiences and no link to Google Ads are enabled. Transfer to Google LLC in the USA is possible; Google relies on the EU standard contractual clauses for this and is certified under the EU-US Data Privacy Framework.
You can withdraw your consent at any time via “Cookie settings” at the bottom of every page. We then instruct Google to stop analytics storage and delete the “_ga” cookies already set in your browser.
Contact form
If you write to us using the contact form, we process your name, e-mail address, optionally your phone number and your message in order to answer your enquiry. Delivery is handled by the service provider Resend (Resend, Inc., USA) acting as our processor. The legal basis is Art. 6 (1) (b) or (f) GDPR. We delete the data once your enquiry has been dealt with, unless statutory retention obligations apply.
Spam protection (Cloudflare Turnstile)
To protect the contact form against automated submissions we use Cloudflare Turnstile, a service provided by Cloudflare, Inc. A script from Cloudflare checks in the background whether the request comes from a human being, processing your IP address and technical characteristics of your browser and device. Turnstile sets no cookies for advertising or tracking purposes and creates no user profiles. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in preventing spam and abuse). Transfer to the USA is possible; Cloudflare relies on the EU standard contractual clauses for this.
Google Maps
The map on this website is only loaded after you have explicitly activated it. No data is transferred to Google before that. After your consent (Art. 6 (1) (a) GDPR), Google Maps loads content from servers operated by Google Ireland Limited and processes, among other things, your IP address. Transfer to the USA is possible. Clicking “Load map” applies to the current page view only; if you enable Google Maps in the privacy settings, your browser remembers that decision for future visits.
Fonts
The Montserrat typeface used on this site is served locally from our own server. No connection to Google Fonts is established.
Social media
We link to our profiles on Instagram and Facebook (Meta Platforms Ireland Limited). These are plain links, not embedded content: no social plugins, like buttons or tracking pixels are built into this website. As long as you do not click one of those links, no data is transmitted to Meta. Once you click, you leave this website and the privacy terms of the respective network apply.
Cookies and consent
This website uses no advertising cookies and no retargeting. Without your consent no cookie is set at all. The only strictly necessary storage is your privacy choice itself: it is kept under the key “fh-consent” in your browser's local storage, never leaves your device and contains no identifier that could be used to recognise you. Such storage is permitted without consent under § 25 (2) TDDDG. If you consent to statistics, Google Analytics additionally sets its “_ga” cookies.
The only optional items are audience measurement and the display of Google Maps. Neither is loaded before you have agreed. You can change or withdraw your choice at any time via “Cookie settings” at the bottom of every page. A withdrawal takes effect immediately and is just as easy as giving consent in the first place.
Recipients and transfers to third countries
We pass personal data on only to service providers who help us operate this website, and only as far as the respective purpose requires. These are: Vercel Inc. (hosting and audience measurement), Resend, Inc. (delivery of form e-mails), Cloudflare, Inc. (spam protection for the form) and – in each case only after your consent – Google Ireland Limited (Google Analytics and the map).
Processing in the USA is possible with these providers. They rely on the European Commission's standard contractual clauses for this and, where they are certified, on the EU-US Data Privacy Framework. We do not sell data and do not pass it on for advertising purposes.
Retention
We store personal data only for as long as the respective purpose requires. Server logs are deleted automatically after a short period. Contact form enquiries are deleted once they have been dealt with conclusively, at the latest after six months. This differs only where statutory retention obligations apply – for instance where an enquiry turns into a business transaction that we must retain for six or ten years under § 257 HGB and § 147 AO. Your privacy choice remains stored in your browser until you change it or clear your browser's local storage. Google Analytics cookies expire after two years at the latest; the data collected there is deleted automatically after 14 months.
No automated decision-making
We use no automated decision-making and no profiling within the meaning of Art. 22 GDPR. There are no advertising profiles, no retargeting and no sharing with advertising networks.
Your rights
You have the right at any time to information about the data we hold about you (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18) and to data portability (Art. 20). Where we base processing on a legitimate interest, you may object to it under Art. 21 GDPR.
Any consent you have given – for audience measurement or the map, for example – can be withdrawn at any time without giving reasons (Art. 7 (3) GDPR), most easily via “Cookie settings” at the bottom of every page. This does not affect the lawfulness of processing carried out before the withdrawal.
For any of these, an e-mail to kontakt@die-feine-heimat.de. Independently of this, you have the right under Art. 77 GDPR to lodge a complaint with a supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.
Status of this policy
This privacy policy applies from July 2026. We will update it if we change the website technically or start using new services. The version published here is the one that applies to your visit.