Information on the Processing of Personal Data for Our Customers, Suppliers, and Other Business Partners

Status: March 2026

1. Who is responsible for data processing and who is our data protection officer?

Fehn GmbH & Co. KG
Badergasse 58
96472 Rödental
Tel: +49 (0) 9563 7499-0
Fax: +49 (0) 9563 7499-30
Email: dsb@fehn.de

Compliance with data protection regulations is continuously monitored by our external data protection officer in your interest. If you require information or clarification, you can contact her directly:

Gabriele von Reichenbach von Thüngen
Data Protection Officer (TÜV Süd)
Data Protection Auditor (TÜV Nord)
Lawyer, Specialist Lawyer for IT Law, etc.
Hinterer Glockenberg 12
D-96450 Coburg
Telephone: +49 (0) 9561 / 35 47 811
Telefax: +49 (0) 9561 / 35 47 812
Email: dsb@fehn.de

2. What personal data do we have about you and where does it come from?

If you contract us or we contract you, we collect the following information:

  • Salutation, first name, last name
  • Email address
  • Address
  • Telephone number (landline and/or mobile)
  • Fax number
  • further information necessary for the execution of the contractual relationship, e.g. bank details

Your personal data is generally collected directly from you when contact is made. In some cases, we also collect personal data from publicly accessible sources (e.g., the internet).

3. For what purposes and on what legal basis is data processed?

This data is collected,

  • to identify you as our business partner
  • to be able to conduct the business relationship appropriately
  • for correspondence with you
  • for invoicing
  • for the settlement of any existing liability claims and the enforcement of any claims against you
  • if and to the extent covered by your consent, for the disclosure of dealer data to prospective buyers.

4. How long will your data be stored?

The personal data collected by us for the performance of the contract will be stored until the expiry of the statutory retention period and then deleted, unless we are obliged to store it for a longer period due to tax and commercial law retention and documentation obligations (from HGB, StGB or AO) in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR or you have consented to further storage in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

If data processing is carried out based on consent or to protect our legitimate interests in accordance with Art. 6 Para. 1 Sentence 1 lit. f DS-GVO, your personal data will be deleted after you exercise your right of withdrawal or objection. We ensure deletion through a deletion concept with regular checks of the data stocks.

5. Who receives your data?

Within our company, individuals receive your personal data if they need it to fulfill our contractual and legal obligations. Your personal data will not be transferred to third parties for purposes other than those listed below. Your personal data will be transferred to third parties if this is necessary for the processing of contractual relationships with you or for the fulfillment of a legal obligation, in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR. The transferred data may only be used by third parties for the purposes mentioned.

6. Is your data transferred to a third country?

We do not transfer personal data to third parties outside the scope of the GDPR.

7. Are automated individual decisions or profiling measures taken?

We do not use purely automated processing procedures to make a decision.

8. What rights can you assert as a data subject?

You have the right:

  • to withdraw your consent given to us at any time, in accordance with Art. 7 para. 3 GDPR. This means that we may no longer continue the data processing based on this consent for the future;
  • to request information about your personal data processed by us, in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data, if not collected from us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about their details;
  • to demand the immediate rectification of inaccurate or completion of your personal data stored by us, in accordance with Art. 16 GDPR;
  • to demand the erasure of your personal data stored by us, in accordance with Art. 17 GDPR, unless the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
  • to demand the restriction of the processing of your personal data, in accordance with Art. 18 GDPR, if the accuracy of the data is contested by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you require it for the establishment, exercise or defence of legal claims or you have objected to processing in accordance with Art. 21 GDPR;
  • in accordance with Art. 19 sentence 2 EU-DSGVO, the right to be informed by us, upon request, about the recipients to whom we have communicated the rectification, erasure or restriction of the processing of your personal data that you have asserted;
  • to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request the transfer to another controller, in accordance with Art. 20 GDPR;
  • to lodge a complaint with a supervisory authority, in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose.

9. Under what circumstances can you object to the processing of your personal data in accordance with Section 21 of the GDPR?

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons arising from your particular situation. If you wish to exercise your right to object, a message to one of the contact options listed above under 1. will suffice.

10. Where can you lodge a complaint?

You have the option to lodge a complaint with us, our external data protection officer mentioned above, or a data protection supervisory authority. The data protection supervisory authority responsible for our business location is the

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 27
91522 Ansbach
https://www.lda.bayern.de