Privacy Policy

Scope: Main website fairplay-digital.com

Last updated: October 8, 2025

This privacy policy informs you about how FairPlay Digital GmbH processes personal data when you visit our website and use our online appointment booking system.

1. Data Controller

FairPlay Digital GmbH Sonninstraße 22a 20097 Hamburg Germany

Email (general): info@fairplay-digital.com Email (privacy): privacy@fairplay-digital.com

Authorized Managing Directors: André Tietje, Yassine Hamza

VAT ID: DE363792704

Due to the nature and scope of data processing, the appointment of a Data Protection Officer pursuant to Art. 37 GDPR is not required.

2. Purposes, Data Categories, and Legal Bases

2.1 Website Visit / Server Logs

Data: IP address, date/time of request, time zone, request/URL, referrer, user agent, status code, amount of data transferred.

Purpose: Ensuring technical operations, analysis for defense against attacks and error diagnosis.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in stable, secure provision).

Retention period: Server log files are automatically deleted on a regular basis; typically after 7-30 days.

2.2 Consent Management (Cookie Banner)

Data: Your cookie/tracking preferences (consent status), timestamp, possibly anonymous device/session ID.

Purpose: Documentation and management of your consents.

Legal basis: Art. 6(1)(c) GDPR (legal documentation obligations) in conjunction with Art. 7 GDPR and Art. 6(1)(f) GDPR.

Note: Analytical cookies/tools are only set after your consent.

2.3 Google Analytics (GA4) - Only with Consent

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Data: Page views, interactions, approximate location data, device/browser information, referrer; IP anonymization enabled.

Purpose: Audience measurement and improvement of our website.

Legal basis: Art. 6(1)(a) GDPR (consent).

Retention period: Event/user data typically 2-14 months (configurable); cookies until withdrawal/deletion.

Third country transfer: Transfer to the USA is possible. Google uses Standard Contractual Clauses (SCC).

Opt-out: You can withdraw your consent at any time by clicking the cookie icon and deactivating the tracking option. Data already collected remains unaffected by withdrawal; future data collection will be stopped. You can also delete cookies in your browser.

2.4 Appointment Booking ("Book a meeting") via Microsoft Bookings

Provider/Data Processor: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland.

Data: Name, email, phone (optional), selected appointment/time zone, information about your inquiry.

Purpose: Planning, conducting, and follow-up of appointments (initial consultation/advisory).

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures/contract performance); alternatively Art. 6(1)(f) GDPR (communication/organization).

Retention period: Appointment data is deleted 30 days after appointment completion, unless statutory retention periods apply (particularly § 147 AO, § 257 HGB: 6-10 years for business-relevant documents).

Note: We use Microsoft 365 in the EEA version (data processing in the European Economic Area). We use Microsoft Exchange Online and Microsoft Bookings. Data transfer to third countries may occur in the context of support operations; Microsoft relies on EU Standard Contractual Clauses (SCC).

2.5 Communication via Email, Phone, or Contact Forms

Data: Communication content, contact details, metadata.

Purpose: Processing inquiries, preparing offers, customer communication. If you contact us via social networks such as LinkedIn, the privacy policies of the respective provider also apply.

Legal basis: Art. 6(1)(b) GDPR; alternatively Art. 6(1)(f) GDPR (legitimate interest in efficient communication).

Retention period: According to statutory retention periods (§ 147 AO, § 257 HGB: 6-10 years) or until completion of the inquiry if no retention obligation exists.

3. Recipients / Categories of Recipients

• Hosting/CDN: Vercel Inc. (provision and operation of website/CDN; server location: EU; data processing).
• Microsoft (Bookings / M365): Appointment management, email communication (data processing).
• Google (Analytics): Web analytics only with consent (data processing).
• Domain/DNS: STRATO (domain registrar/DNS; typically no content-related processing of website visitor data).
• Other service providers: Only when necessary for the above purposes and contractually secured through DPA/SCC where required.

4. Third Country Transfers

When using services from Google and Microsoft, transfer to third countries, particularly the USA, may occur. In these cases, the providers use EU Standard Contractual Clauses (SCC). However, residual risk cannot be completely excluded.

5. Retention Period

We process personal data only as long as necessary for the respective purposes or as long as statutory retention periods exist. Thereafter, the data will be deleted or anonymized.

6. Obligation to Provide Data

The provision of personal data is generally not required for using the website. However, certain information is necessary for appointment booking. Without this information, no appointment can be scheduled.

7. Automated Decision-Making / Profiling

Automated decision-making including profiling does not take place.

8. Your Rights (Art. 15-21 GDPR)

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection. Where processing is based on consent, you can withdraw it at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority, particularly at your place of habitual residence, workplace, or the place of the alleged infringement.

Contact for privacy inquiries: privacy@fairplay-digital.com

9. Cookie Overview

• Essential cookies: technically necessary functions, such as consent management and security.
• Analytics cookies (Google Analytics): only after consent for audience measurement.

You can delete cookies at any time via your browser settings or control their use via the cookie banner.

10. External Links

Our website may contain links to external sites. The respective providers are responsible for their content and data processing.

11. Changes to This Privacy Policy

We will update this privacy policy if legal or technical conditions change. The version published on this website shall apply.