Privacy Policy

1. Controller

FHC+P GmbH, Würmstraße 55, 82166 Gräfelfing, represented by its Managing Director Frederic Hoppenstock. Email: info@fhcp.de

This policy applies to the Adpressa product page, the registration of a publisher and the customer account. Data that a publisher processes with Adpressa about its readers, subscribers, authors or advertising customers is processed by us on behalf of the publisher. The publisher is the controller for such data, and the data processing agreement applies.

2. Visiting the product page

When the page is accessed, our web server stores technically necessary information: IP address, time, requested address, amount of data transferred, status code and the browser identifier. The purpose is secure operation and the defense against attacks. The legal basis is Art. 6(1)(f) GDPR (DSGVO); our legitimate interest is a stable and secure service. The logs are rotated daily and erased after 14 days.

The product page does not set any cookies and does not load any content from third-party servers. We deliver fonts from our own server.

For audience measurement, we use Matomo on our own servers (stats.fhcp.de). Here, Matomo operates without cookies, truncates IP addresses before storage and respects your browser's “Do Not Track” setting. We record the pages accessed, the referring page, browser and device type, and clicks on the demo buttons, but no user profile and no link to the information you provide in the contact form. The data remains on our servers and is not passed on to anyone. The purpose is to improve the page. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the analysis of our audience reach. You can object to the measurement by enabling “Do Not Track” in your browser or by writing to us at info@fhcp.de. We store the measurement data only for as long as the analysis of audience reach requires.

We record application errors without personal data in our own error log (GlitchTip) on our servers so that we can resolve malfunctions.

3. Registration of a publisher

For registration, we process the name of the publisher, your name, your email address, your password (only as an irreversible hash value), the versions of the General Terms and Conditions and of the privacy policy to which you have agreed and, if you wish, the modules you are interested in. To protect against misuse, we count requests per IP address. For this purpose, we do not store the IP address in plain text, but only as an encrypted check value.

The legal basis is Art. 6(1)(b) GDPR (initiation and conclusion of the contract). If you do not confirm the email address within 48 hours, we will erase the information no later than one day thereafter. After confirmation, we erase the registration request after 30 days; the data is then held in the customer account.

4. Contact and appointment requests

Via the contact page, you can ask a question or request a demo. For this purpose, we process your name, the name of the publisher or company, your email address, your telephone number if you wish, your concern and your message. We record your request in our internal system for handling requests on our servers. To protect against misuse, we count requests per IP address and per email address, in both cases only as an encrypted check value.

The purpose is to answer your request and to arrange an appointment by email; the legal basis is Art. 6(1)(b) GDPR (pre-contractual measures taken at your request). We erase your request as soon as it has been dealt with and no contract results from it.

5. Advertiser accounts in the ad marketplace

Businesses that place ads on the websites of participating publishers via the ad marketplace create an advertiser account. For this purpose, we process the company name, legal form, address, VAT ID, if desired the registry court and registration number, name of the contact person, email address, if desired the telephone number and a different billing address, as well as the password only as an irreversible hash value and the versions of the terms that were agreed to. To protect against misuse, we count requests per IP address and per email address, in both cases only as an encrypted check value.

After the email address has been confirmed, we verify the VAT ID with the European Commission's VAT Information Exchange System (VIES). Only the country code and number, as well as our own number as the requesting party, are sent there; what is returned is the validity, where applicable the name and address according to the register, and a query identifier, which we store with the account. The purpose is to verify whether a business stands behind the account and to ensure the correct VAT treatment. The legal basis is Art. 6(1)(b) GDPR and, for the verification of the number, additionally Art. 6(1)(c) GDPR.

If no one confirms the email address, we erase the account after 7 days. We erase rejected accounts 90 days after the rejection. Activated accounts exist for the duration of the contract; we retain invoices and accounting records in accordance with the retention periods under commercial and tax law of up to ten years. Ads are delivered and counted without cookies and without reader profiles.

6. Customer account and contract

To operate the customer account, we process company data, billing address, names and email addresses of the users, their roles, login times and a log of important actions. The legal basis is Art. 6(1)(b) GDPR and, for invoices and accounting records, additionally Art. 6(1)(c) GDPR in conjunction with the retention periods under commercial and tax law of up to ten years.

After the end of the contract, the publisher receives, upon request, a complete export of its data. Thereafter, we erase the publisher's data unless there is a statutory obligation to retain it.

7. Emails

We send emails that are necessary for the account and the contract: confirmation of the address, password resets, invitations and operational notices. We send advertising only with your express consent.

8. Artificial intelligence features

AI features run only if the publisher enables them and a person invokes them in the individual case. The text portions required for this are then sent to the provider chosen by the publisher: Mistral AI SAS, Paris, France, or OpenRouter Inc., USA. Transfers to the USA are subject to the Standard Contractual Clauses of the EU Commission. Every invocation is recorded in the publisher's log. This processing is carried out on behalf of the publisher.

9. Recipients

Our servers are located in a data center in Frankfurt am Main. The hosting service provider processes the data on our behalf pursuant to Art. 28 GDPR. The only other recipients are the providers named in Section 8, insofar as the publisher uses AI features, and, for advertiser accounts, the EU service VIES as described in Section 5, as well as authorities where we are legally obligated to do so. We do not sell any data.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You may withdraw your consent at any time with effect for the future.

You may lodge a complaint with a supervisory authority, for example the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach.

11. Contact

Please direct any questions about data protection to info@fhcp.de or to our address in Section 1.

12. Changes

If the processing changes, we will amend this policy. The version published at the time of your visit applies.