Privacy
Find out how personal data is processed when you visit this website or contact us.
Controller
For questions about data protection, contact Anke Fochler & Gerda Fochler GbR at anfrage@fachwerk63.de or by post at Wiesengrund 4, 21441 Garstedt, Germany.
Hosting and website delivery
We use Cloudflare Workers and D1, provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, to deliver the website and temporarily store enquiries. IP addresses, request times, requested pages and technical browser and connection information are processed to deliver the site and prevent attacks. The basis is our legitimate interest in secure, reliable operation (Article 6(1)(f) GDPR).
Cloudflare also processes data outside the European Union. Its privacy policy and data processing terms linked below describe the safeguards and standard contractual clauses provided by the company.
Photographs, logos and fonts are served from the website project. Fonts are not loaded from external font services. No mapping provider is embedded in the page.
Enquiry form, phone and email
The enquiry form sends your first and last name and chosen contact method only after your explicit action: an email address or phone number. For a callback, you may add a preferred time window. Any duration and interests already selected are shown and sent with your details. Before sending, you choose whether to include your plans, a date, approximate group size, duration and message or discuss your plans personally. All selected details are sent together.
To prevent retries from creating another enquiry, the application stores contact details, language, initial duration and interests, and technical association and processing data in its contact database with a validity of seven days. The secret association key is stored there only as a hash. Your message and optional event details are processed for the email to the host. These temporary records are removed on further processing or by the implemented daily cleanup. With normal daily execution, physical deletion can occur up to 24 hours after expiry.
Enquiries are sent to anfrage@fachwerk63.de. Our email provider is Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. Contact details, messages and technical delivery information are processed for this purpose. Event enquiries are processed to take pre-contractual steps (Article 6(1)(b) GDPR). Other enquiries are processed in our legitimate interest in responding to them (Article 6(1)(f) GDPR).
The seven-day period applies to the website’s technical enquiry state, not email correspondence. We retain correspondence as long as needed to respond and deal with follow-up questions. Statutory retention duties may require longer storage under Article 6(1)(c) GDPR. Providing information is voluntary. Without a name and a way to contact you, we cannot process a form enquiry.
An email enquiry through the contact form generates one automatic acknowledgement. Retries of the same enquiry do not generate another acknowledgement.
You can also use the direct phone and email links. These open the appropriate application on your device. Clicking a link alone does not submit a form enquiry.
Downloading the brochure
When you request the brochure through a download form, you submit your email address to us. We receive it together with the language and download location as a separate brochure request at anfrage@fachwerk63.de. The PDF download starts after the submission is confirmed. This does not sign you up for a newsletter or create an event enquiry.
To process requests securely and avoid duplicate submissions, the website stores your email address and technical association data for seven days. A daily cleanup removes expired records; physical deletion can occur up to 24 hours after expiry. Entries remain only in browser memory. The email delivery and correspondence retention described above also apply to the incoming brochure request. Abuse prevention uses the same security check as the contact form.
External links and maps
Route planning uses a labelled link to Google Maps. You access the external map service only when you open it. The 360° tour in the spaces section loads only when you select “Start the 360° tour”. This connects to Google Maps; Google receives information including your IP address and browser details and may use cookies. Closing the tour removes the embed. Your choice is not stored and is independent of analytics consent. The respective provider’s information applies to processing on its service.
Form draft in your browser
Your form draft and a random association key remain in your browser’s session storage during your visit. This preserves your entries when changing language. The application discards the stored state on the next load once 24 hours have elapsed. Session storage belongs to the open browser tab.
This storage supports the enquiry you have started and lets you continue it. It is not used for advertising. The bases are Article 6(1)(b) or (f) GDPR and, for necessary device storage, section 25(2)(2) of the German TDDDG.
Abuse prevention
To limit abusive requests, a protected hourly verification value is derived from the IP address. The raw IP address is not stored in the application database for this purpose. Rate-limit data has a validity of one hour. Cloudflare Turnstile is also integrated. The security check is verified with Cloudflare on the server.
Turnstile processes information including IP addresses and browser and device signals. It is provided by Cloudflare, Inc., USA, and processing outside the EU is possible. The check prevents automated abusive requests, based on our legitimate interest in protecting the form (Article 6(1)(f) GDPR). Further details are provided in Cloudflare’s Turnstile privacy addendum.
Visitor statistics
With your voluntary consent, we use Google Analytics 4, provided by Google Ireland Limited, Ireland. It measures page views, enquiry steps and clicks on contact and directions links. Google receives usage data, technical browser and device information and the IP address required for the connection. Processing by Google in the USA is possible. We do not send names, email addresses, phone numbers or enquiry contents to analytics. URL parameters and fragments are removed before transmission.
Google Analytics loads only after you agree. The legal bases are Article 6(1)(a) GDPR and section 25(1) TDDDG. Analytics cookies are limited to 90 days. We store your choice in local browser storage for 180 days so we can respect it. User and event data retention follows the deletion periods configured in Google Analytics; aggregated standard reports have separate retention rules. Google signals and advertising personalisation are disabled.
You can withdraw your consent at any time for the future using the settings icon at the bottom right. The page then reloads to fully stop the analytics service. Analytics stays off without consent or when Do Not Track or Global Privacy Control is enabled. The contact form works independently of analytics.
WhatsApp and social networks
If you contact us through WhatsApp, we process your contact details and messages to respond to your enquiry. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. WhatsApp may process connection and usage data outside the EU. You can always contact us by phone or email instead. The basis for event enquiries is Article 6(1)(b) GDPR and for other enquiries Article 6(1)(f) GDPR. Our correspondence is subject to the retention periods described above.
Fachwerk63 maintains profiles on Facebook, Instagram and LinkedIn. This website does not embed social media feeds or videos. When you visit our external profiles, the platforms process data under their own terms, for example to associate visits with your account and produce usage statistics. Processing outside the EU is possible. Facebook and Instagram are provided by Meta Platforms Ireland Limited, and LinkedIn by LinkedIn Ireland Unlimited Company.
We handle messages to our profiles like other enquiries. Our public communications and use of aggregate profile statistics are based on our legitimate interest in communicating our offer (Article 6(1)(f) GDPR). For certain profile statistics, we share responsibility with the platform provider. You may exercise your rights with us or the provider. See the provider’s privacy information for further details and settings.
Facebook and Instagram privacy policy
Rights and contact
Subject to the legal conditions, you have rights of access, rectification, erasure, restriction and data portability (Articles 15–20 GDPR). You may withdraw consent at any time for the future, without affecting the lawfulness of earlier processing.
Where processing is based on legitimate interests, you may object for reasons relating to your particular situation (Article 21 GDPR). You may object to direct marketing at any time. To exercise your rights, contact anfrage@fachwerk63.de or use the postal address above.
You may also complain to a supervisory authority, particularly where you live or work or where you believe an infringement occurred. Our competent authority is the State Commissioner for Data Protection of Lower Saxony, Germany. We do not make solely automated decisions about you with legal or similarly significant effects.
Last updated
22 October 2026