Data protection and data security

Thank you for your interest in our website. The protection of your personal data is very important to us. Below, we would like to provide you with detailed information about how we handle your data.

1. Name and contact details of the responsible party

Fjord Hütten GmbH
Bramstedtlunder Str. 7
25926 Bramstedtlund

Telefon: +49 (0) 4666 / 98 98 800
Fax: +49 (0) 4666 / 98 98 809
E-Mail: post@fjord-huetten.de

Managing Directors: Christian Naber, Lennard Martens
Commercial Register: AG Flensburg HRB 11031
VAT ID No.: DE 300 662 671

2. General information on data processing

The protection of your personal data is important to us. We treat your personal data confidentially and in accordance with the statutory data protection regulations (GDPR, BDSG, TTDSG).
This privacy policy informs you about what data we collect on our website, for what purposes and on what legal basis.

3. Hosting

Our website is hosted by an external service provider:
[Insert hosting provider, e.g. IONOS SE, Strato AG or All-Inkl GmbH]

The hosting provider processes the following data on our behalf to ensure the secure operation of the website:

IP address

Date and time of access

Browser type and browser version

Operating system

Referrer URL

Host name of the accessing computer

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).
Storage period: Log files are usually deleted after 7–30 days.
A contract for order processing (Art. 28 GDPR) has been concluded.

4. Collection of personal data when using the website
When using our website for purely informational purposes (no login, no form submission), we only process the above-mentioned server log files.
Beyond that, personal data is only collected if you voluntarily provide it to us (e.g. via the contact form or by email).

5. Contacting us

If you contact us by email, telephone or via a form, we will process your details (name, email address, telephone number, message text) in order to process your enquiry.

Legal basis:

Art. 6 (1) (b) GDPR (initiation or fulfilment of a contract)

Art. 6 (1) (f) GDPR (legitimate interest in processing general enquiries)

Storage period: We delete your enquiry as soon as it has been answered conclusively and there are no legal retention obligations.

6. Cookies and consent

Our website uses cookies. Cookies are small text files that are stored on your device.

We distinguish between:

- Essential cookies (technically necessary, e.g. for language settings or session ID)

- Optional cookies (analysis, statistics, marketing – only with consent)

Legal basis:

Art. 6 (1) lit. f GDPR, § 25 (2) TTDSG (for necessary cookies)

Art. 6 (1) lit. a GDPR, § 25 (1) TTDSG (for all other cookies after consent)

On your first visit, a cookie banner appears, allowing you to make your selection and revoke it at any time under ‘Cookie settings’ in the footer.

7. Use of Google Analytics (Google Analytics 4)
Provided you have given your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose: Analysis of usage behaviour to optimise our website.
Data: including IP address (anonymised), pages visited, length of stay, device information, source of origin.
IP anonymisation: Active; Google truncates your IP address within the EU.
Legal basis: Your consent (Art. 6(1)(a) GDPR, Section 25(1) TTDSG).
Storage period for event data: 2–14 months (depending on configuration).
Revocation: possible at any time via the cookie settings.
Recipient: Google Ireland Ltd. / Google LLC (USA).
Transfers to the USA are based on the EU–US Data Privacy Framework (DPF) or the EU Standard Contractual Clauses (SCCs).

Contract for order processing concluded in accordance with Art. 28 GDPR.
Further information: https://policies.google.com/privacy

8. Embedded content and services

a) Google Maps

Google Maps may be used to display interactive maps.
Provider: Google Ireland Limited (see above)
Legal basis: Consent (Art. 6(1)(a) GDPR, Section 25(1) TTDSG).
When activated, your IP address is transmitted to Google.
You can deactivate Google Maps in the cookie banner or revoke your consent.

b) YouTube videos
YouTube videos may be embedded on our website (YouTube service provided by Google Ireland Limited).
Where possible, we use the extended data protection mode so that data is only transmitted to YouTube when the video is played.
Legal basis: Consent (Art. 6(1)(a) GDPR).

9. Social media links

On our website, we may link to our profiles on platforms such as Instagram, Facebook, LinkedIn or YouTube.
Clicking on the respective icon establishes a connection to the respective platform.
The respective provider is solely responsible for the data processing that takes place there.

Note on Facebook/Instagram:
We are jointly responsible for our pages there with Meta Platforms Ireland Ltd. (Art. 26 GDPR). The agreement on joint responsibility can be found at
https://www.facebook.com/legal/terms/page_controller_addendum

10. Rights of data subjects

Under the GDPR, you have the following rights:

Information about the data processed (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure (‘right to be forgotten’, Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection to processing (Art. 21 GDPR)
Withdrawal of consent (Art. 7(3) GDPR)
Complaint to a supervisory authority (Art. 77 GDPR)

Competent supervisory authority:
Independent Centre for Data Protection Schleswig-Holstein (ULD)
Holstenstraße 98, 24103 Kiel
Web: https://www.datenschutzzentrum.de

11. Data security

We use the widely used SSL/TLS encryption method when you visit our website.
You can recognise an encrypted connection by the address line of the browser (‘https://’) and the lock symbol.

12. Duration of storage

Personal data will only be stored for as long as is necessary for the respective purpose or for as long as statutory retention periods exist.
Once the purpose no longer applies or the retention period has expired, the data will be deleted or anonymised.

13. Changes to this privacy policy

This privacy policy is currently valid and was last updated in October 2025.
Technical developments or legal changes may necessitate adjustments.
The current version can be found at any time at https://fjord-huetten.de/datenschutz.