Privacy policy
As of 19 October 2026
This policy describes what happens to your data on www.fuchs-baut-gaerten.de – only what this website actually does. We have deliberately kept it short. We are happy to answer any questions at info@fuchs-baut-gaerten.de.
1. Controller
Fuchs baut Gärten GmbH, Schlegldorf 91a, 83661 Lenggries, represented by the managing directors Ludwig Fuchs and Elisabeth Simon. Telephone +49 8042 91454-0, e-mail info@fuchs-baut-gaerten.de. Register court: Amtsgericht München, HRB 100910.
Enquiries about garden maintenance are handled by our sister company Fuchs Service GmbH (Schlegldorf 91a, 83661 Lenggries, operating site Am Kranzer 5, 83677 Reichersbeuern, managing directors Balbina Fuchs and Elisabeth Simon, Amtsgericht München HRB 105037). Both companies work from the same office; we pass your enquiry on internally for this purpose (Art. 6(1)(b) and (f) GDPR).
2. Data protection officer
Rechtsanwalt Michael F. Ochsenfeld, OCHSENFELD+COLL Rechtsanwälte, Bahnhofsallee 9, 31134 Hildesheim, telephone +49 5121 102210, e-mail gaertnervoneden@ochsenfeld.com.
3. Hosting and server logs
The website is operated by jweiland.net GmbH, Dresden; the data centre is in Frankfurt am Main (Germany). Whenever a page is opened, the server automatically processes your IP address, the date and time, the page requested, the amount of data transferred, your browser and operating system, and the page you visited before. The purpose is to deliver the page, keep it stable and defend against attacks (Art. 6(1)(f) GDPR). The host stores the logs only for as long as is necessary for security and error analysis. We serve fonts, images and scripts from our own server – no fonts or scripts are loaded from Google or other providers.
4. Cookie notice, local storage and consent counter
On your first visit, we ask whether we may load analytics and marketing services. You can allow both with “Einverstanden” (Agree), decline both with “Nur notwendige” (Necessary only), or allow only analytics or only marketing under “Einstellungen” (Settings). None of these services is loaded before you decide. With “Nur notwendige”, the website works without any restrictions.
We save your choice as an entry called “fbg_consent” in your browser’s local storage, so that we do not have to ask again on every visit. This entry is necessary for operation (Section 25(2) no. 2 TDDDG) and remains until you delete it or change your choice via the “Cookie-Einstellungen” (Cookie settings) link in the footer of every page. There you can withdraw your consent at any time with effect for the future.
We count your decision anonymously: we store the time, the choice made, whether the page was opened on a mobile device or on a desktop, and the page opened – without an IP address and without an identifier. It is not possible to link this to you personally (Art. 6(1)(f) GDPR).
5. Contact form, e-mail, telephone and WhatsApp
Through the contact form you send us your name, a telephone number or e-mail address and, optionally, a project address and a message. The data goes directly to our web server and by e-mail to our office. In addition, the server stores a backup copy of the enquiry so that no enquiry is lost due to an e-mail error; this copy is deleted automatically after 90 days. When you submit the form, we also record how you came to us (an ad on Google or Meta, direct visit, result of the garden type quiz), provided your browser supplies this information. A spam filter checks invisible form fields and the time taken to fill in the form; no further personal data is collected in the process.
The purpose is to process your enquiry and prepare a quote (Art. 6(1)(b) GDPR). We transfer the enquiry to our customer management system. If a contract is concluded, we keep the documents for the statutory periods (6 or 10 years, Section 257 HGB, Section 147 AO). If no contract is concluded, we keep the enquiry so that we can pick up where we left off if you contact us again later. We delete enquiries without a quote no later than three years after the last contact (Art. 6(1)(f) GDPR). If we have written you a quote, it counts as a commercial letter and must be kept for six years from the end of the year (Section 257 HGB); after that, we delete it.
The same applies if you write to us by e-mail or call us. The WhatsApp link on the website only opens your WhatsApp app; data is only transferred once you send a message there – the terms of WhatsApp Ireland Ltd. then apply.
6. Google Analytics 4 (only with your “Statistik” (analytics) consent)
With your consent, we load Google Analytics 4 (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). It measures which pages are visited and how often, where visitors come from and whether an enquiry was submitted. Google Analytics 4 does not store full IP addresses. Event data is deleted after 2 months, user-related data after 14 months. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework (Art. 45 GDPR), and standard contractual clauses also apply. We use Google Consent Mode: without your consent, Google receives no signal to store data. Legal basis: Art. 6(1)(a) GDPR, Section 25(1) TDDDG. You can withdraw consent via “Cookie-Einstellungen” (Cookie settings) in the footer.
6a. Microsoft Clarity (only with your “Statistik” (analytics) consent)
With your consent, we load Microsoft Clarity (Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). Clarity records how pages are used: mouse movements, clicks, scroll depth and page changes, summarised as heatmaps and as replays of individual sessions. Entries in form fields and text that you type are masked and never transmitted; the name, telephone number, e-mail address and message from the contact form are not contained in any recording. Clarity sets cookies (including “_clck”, “_clsk”) to keep sessions together. Data may be transferred to Microsoft Corporation in the USA; Microsoft is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). The purpose is to understand where visitors get stuck on the website, so that we can improve pages and forms. Legal basis: Art. 6(1)(a) GDPR, Section 25(1) TDDDG. You can withdraw consent at any time via “Cookie-Einstellungen” (Cookie settings) in the footer. Microsoft’s privacy notice: https://privacy.microsoft.com/de-de/privacystatement
7. Google Ads: conversion measurement, remarketing and click identifier (only with your “Marketing” consent)
We run ads on Google. With your consent, Google Ads measures whether an ad click led to an enquiry and can show you relevant ads later (remarketing). If you come to us via a Google ad, Google passes a click identifier (gclid or gbraid) to your browser. With your consent, we store it in local storage for up to 90 days, and it is transmitted to us together with your enquiry. If a quote or order follows later, we report only this identifier, the time and the order value back to Google Ads – without names, addresses or contact details. This is how Google recognises which ad led to an order. Provider: Google Ireland Ltd.; transfer to the USA on the basis of the EU-US Data Privacy Framework (Art. 45 GDPR). Legal basis: Art. 6(1)(a) GDPR, Section 25(1) TDDDG. Without your consent, no click identifier is stored or transmitted. You can withdraw consent via “Cookie-Einstellungen” (Cookie settings) in the footer.
8. Meta Pixel (Facebook, Instagram – only with your “Marketing” consent)
With your consent, we load the Meta Pixel of Meta Platforms Ireland Ltd. (Merrion Road, Dublin 4, Ireland). It measures the effect of our ads on Facebook and Instagram and enables remarketing. Data may be transferred to Meta Platforms, Inc. in the USA; Meta is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). We are jointly responsible with Meta for the measurement (Art. 26 GDPR); Meta provides the agreement for this at https://www.facebook.com/legal/controller_addendum. Legal basis: Art. 6(1)(a) GDPR, Section 25(1) TDDDG. You can withdraw consent via “Cookie-Einstellungen” (Cookie settings). Meta’s privacy notice: https://www.facebook.com/privacy/policy/
9. Videos (YouTube) and podcast
We initially embed videos only as a preview image from our own server. Only when you click “Play” is the video loaded from YouTube (Google Ireland Ltd.) in enhanced privacy mode (youtube-nocookie.com); YouTube then receives your IP address and may set cookies. The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). We link our podcast to Spotify and Apple Podcasts; data is only transferred once you are on their platforms, under the terms of those providers.
10. Map (OpenStreetMap)
On the contact page we show a map from the OpenStreetMap Foundation (St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom). When the map loads, the Foundation receives your IP address. Under the adequacy decision of the European Commission, the United Kingdom is regarded as a safe third country. The legal basis is our legitimate interest in showing you how to find us (Art. 6(1)(f) GDPR). Privacy information: https://wiki.osmfoundation.org/wiki/Privacy_Policy
11. Job applications
We accept applications by e-mail, telephone or WhatsApp. We process your documents only for the application process (Section 26 BDSG, Art. 6(1)(b) GDPR) and delete them six months after the process has ended, unless you agree to longer storage for future vacancies.
12. Credit check when concluding a contract
When contracts are concluded, and where there is a legitimate interest also for existing customers, we check creditworthiness through Creditreform Boniversum GmbH, Hammfelddamm 13, 41460 Neuss (Art. 6(1)(b) and (f) GDPR). Information on data processing at Boniversum: https://www.boniversum.de/eu-dsgvo/
13. Customer testimonials
On the home page we quote public Google reviews with names (Art. 6(1)(f) GDPR). The customers in our videos have given their written consent to publication (Art. 6(1)(a) GDPR).
14. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object (Art. 21 GDPR). You can withdraw any consent you have given at any time; the lawfulness of processing carried out until withdrawal remains unaffected. To do so, please contact info@fuchs-baut-gaerten.de. You can also lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, www.lda.bayern.de.
15. Changes
We will update this statement if the website or the legal situation changes. The version published here at any given time applies.
This is a courtesy translation. Only the German version is legally binding.
