Privacy policy

Last updated: 2 November 2026

This privacy policy explains how we process personal data when you visit zaun-factory.de or contact us. Company information is also available in our Legal notice.

1. Data controller and privacy contact

Flari GmbH
Triftstraße 37–38
13509 Berlin, Germany
Represented by managing director Dawid Galus

ZAUN-Factory is a brand of Flari GmbH. For privacy questions and to exercise your rights, contact us at info@zaun-factory.de, by telephone on +49 30 280 38 520 or by post at the address above.

2. Website operation, hosting and email

We use IONOS to host this website and provide our business email services. The provider is IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. IONOS processes on our behalf the data needed to provide and secure these services.

When you access the website, data processed includes your IP address, date and time, requested pages or files, data volume, status codes, referring page, and browser and operating-system information where transmitted by your browser. This enables delivery of the website, error analysis and prevention of misuse. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of our website.

According to IONOS’s general information, IP addresses in access logs are anonymised and log data is retained for a maximum of eight weeks. Information needed to investigate specific security incidents may be kept until the incident is resolved or claims have been asserted or defended. Further information: IONOS privacy information.

The website is transmitted using HTTPS encryption. Email communication passes through the mail servers involved; ordinary emails are not thereby fully end-to-end encrypted.

3. Contact and project enquiries

If you contact us through the form, by email or by telephone, we process your information to answer your enquiry, prepare a quotation or fulfil an order. The legal basis is Article 6(1)(b) GDPR where a contract or pre-contractual steps are involved. Other enquiries are handled under Article 6(1)(f) GDPR; our legitimate interest is appropriate communication with prospective and existing customers.

The project form requires an email address and a description of your project. Your name, telephone number, project postcode, approximate dimensions, delivery or installation preference and a photo or sketch are optional. The product category is sent with the enquiry to help us assign it correctly. JPG, PNG and PDF attachments up to 3 MB are allowed. Please submit only necessary documents and, where possible, no personal data of uninvolved third parties.

The form is provided by Contact Form 7 within our WordPress installation. Your information and any attachment are emailed to the persons responsible at Flari GmbH. Contact Form 7 itself does not provide an additional message archive in the WordPress database for this purpose. Emails and attachments retained for processing are subject to the retention rules below.

Providing your information is voluntary. Without the required contact details and description, however, we cannot meaningfully process a form enquiry. Project enquiries do not involve exclusively automated decisions producing legal or similarly significant effects.

4. Cookies and your consent choices

Cookies and similar storage mechanisms can enable technical functions or save your privacy settings. This website uses the WordPress plugin “Cookie Information | Free WP GDPR Consent Plugin”. Your choice is stored in the cookie wpgdprc-consent-6 ; its name may change when the consent version changes. A technical session cookie named PHPSESSID may be used to associate a session. WordPress login cookies are also used for signed-in administrators.

Where access to your device is strictly necessary for a function you expressly request, it is based on Section 25(2) TDDDG. Subsequent processing of personal data is based in particular on Article 6(1)(f) GDPR, for example to operate the website securely and manage your privacy choice. For optional device access and related processing, we obtain consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR.

You may withdraw consent at any time with effect for the future. This does not affect the lawfulness of processing before withdrawal. You can also view or delete cookies or restrict their storage in your browser. After deleting a saved consent choice, you may be asked to choose again.

No active visitor analytics

Google Analytics and Jetpack Stats are currently disabled. We do not currently use them to measure your page visits. Technical server logs for operation and security are unaffected. Google Maps and reCAPTCHA are loaded separately, only after you activate each service.

5. Google reCAPTCHA in the contact form

To protect against automated enquiries, the contact form uses Google reCAPTCHA v3. It is activated only when you click “Allow Google reCAPTCHA” in the form. Without activation, form submission remains blocked; you can always contact us by telephone or email instead.

When activated, Google processes in particular your IP address, browser and device information and interactions with the website to distinguish human use from automated access. This may include setting the cookie _GRECAPTCHA . The service is provided by Google; within the European Economic Area, the contact is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by Google LLC in the USA is also possible.

Activation is based on your consent under Article 6(1)(a) GDPR and, where your device is accessed, Section 25(1) TDDDG. You can end activation for future use by selecting “Withdraw consent and reload” in the form. This does not automatically delete data already sent to Google. Information about Google’s processing is available in its Privacy policy and the reCAPTCHA documentation.

6. Google Maps and directions

Our directions section includes an optional Google map for H8Q6+2C Berlin. Initially, a locally supplied graphic is shown. The map is requested from Google only when you click “Load Google Maps”. This may transmit your IP address, device and browser information, the page visited and map interactions to Google. Depending on usage and Google settings, cookies or similar technologies may be used and data may be linked to a signed-in Google account.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; processing by Google LLC in the USA is possible. The legal bases for loading the map are your consent under Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG. “Disable map” removes it again. A new activation is needed on your next visit. Withdrawal prevents further requests through this embed but does not reverse previous transmissions.

“Plan your route” and “View on Google Maps” are ordinary external links. Clicking them takes you away from our website to use Google Maps directly. Further information: Google privacy policy.

7. Google reviews and external services

We display selected publicly available Google reviews using “Widgets for Google Reviews” by Trustindex Ltd., Lechner Ödön fasor 3, 1095 Budapest, Hungary. Reviews are cached within our WordPress installation. On the new website, widget files and review images are served from our own domain. Displaying reviews therefore does not require activation of a Google map.

Data processed and published includes public profile names, review dates, star ratings and review texts. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is transparently presenting experiences with our company. Reviewers can contact us about this display. If a review is changed or deleted, you can notify us that an update is needed. Further information: Trustindex privacy information.

Our links to Facebook, Instagram, YouTube and the STAHLZAUN.DE online shop lead to independent services. Merely displaying profile and shop links does not connect to their destinations. Their privacy policies apply when you follow those links. Purchases in the linked shop are not processed through this information website’s contact form.

8. Recipients and international processing

Enquiry data can be accessed by the responsible persons at Flari GmbH and technical service providers required for operation, maintenance and email transmission. Where needed for an agreed order, we transmit necessary contact, delivery and project details to commissioned transport or installation companies. The legal basis is in particular Article 6(1)(b) GDPR. Disclosures required by law are based on Article 6(1)(c) GDPR.

External services may process data outside the European Economic Area, particularly in the USA. Authorities’ access rights and legal remedies may differ from those in the EU. International transfers are subject to Articles 44 et seq. GDPR, for example an applicable adequacy decision or appropriate contractual safeguards. Details of safeguards used for specific processing, and a copy where applicable, can be requested from our privacy contact.

9. Retention periods

We retain personal data only as long as needed for its purpose. For enquiries, this depends in particular on completion of processing and any subsequent quotation or contract fulfilment. Data is then deleted unless statutory retention duties or necessary evidence require otherwise. Retention of contractual and business documents depends on the applicable commercial and tax rules and the document type.

Where data is needed to assert or defend claims, further retention depends on the relevant limitation periods or duration of proceedings. Backup data is removed according to the backup and overwrite cycles. Data held by external providers is also subject to the retention and deletion rules described in their linked information.

10. Your data protection rights

Subject to the statutory requirements, you have rights of access to your personal data (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). You can withdraw consent at any time with effect for the future (Article 7(3)).

Right to object: If processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation (Article 21 GDPR). You may object to processing for direct marketing at any time without giving such grounds.

To exercise your rights, contact info@zaun-factory.de or write to the address above. You may also lodge a complaint with a data protection supervisory authority (Article 77 GDPR), particularly where you normally live or work, or where you believe a breach occurred. For Berlin: Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin.

11. Updates to this policy

We update this information when our website, services used or legal requirements change. The current version is available at this address.