Privacy Policy

Privacy Statement

At F.A. Bernhardt GmbH, FAB we are committed to safeguarding and preserving the privacy of our users and value the confidence of our customers, employees and business partners. We strive always to comply with the laws of the countries in which we do business. The following Privacy Statement (“Privacy Statement“) and Terms & Conditions (“Terms“) govern your use of our Websites at, and (the “Website“) and any services we provide to you in accordance with the Terms (“Services“) and explain what happens to any personal data that you provide to us, or that we collect from you when you visit our Website and how we use cookies on our Website. In using our Website and/or Services you grant FAB permission to process and store the data uploaded in the manner described in this Privacy Statement.

  1. About F.A. Bernhardt GmbH, FAB

F.A. Bernhardt GmbH (trading as “FAB“) is a company incorporated in Germany (Register number HRB 43948, VAT No. DE128358680) with its registered address at Melkstattweg 27, 83646 Bad Tölz, Germany.

FAB is a data controller for the purposes of the applicable data protection legislation in respect of the data it gathers from you and other users of our Website and/or Services.

This Privacy Statement sets out how we will deal with all collected data, which can identify you or which can be used together with other information we are likely to have access to identify you (“Personal Data”).

  1. Information that we collect

In running and maintaining our Website and/or the Services we may collect the following Personal Data:

  • Information you give us This is information about you that you give us by filling in forms on our site, purchasing our Services or by corresponding with us by phone, e-mail or otherwise. It includes information you provide when you register to use our Services, register to subscribe to our newsletter, participate in social media functions on our site, enter a survey, and when you report a problem with our site. The information you give us may include names, addresses, email addresses and phone numbers.

  • Information we collect about you When you visit our site, we will automatically collect the following information:

    – technical information, including the Internet protocol (IP) address used to connect your computer to the internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, screen resolution, operating system and platform; and

    – information about your visit, including the full Uniform Resource Locators, clickstream to, through and from our site (including date and time), page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs) and methods used to browse away from the page.

  • Information we receive from other sources Where you have ordered or contracted with us for any Services, we may also be provided with your Personal Data via organisations we interact with in the relevant sector, such as our billing providers. We only use this data in order to deliver our Services We do not process any special categories of data (also commonly referred to as “sensitive personal data”).

  1. How we use and process your Personal Data
  • To enter into contracts with you Where you enter into a contract with us for our Services, we need to process your personal data to provide these Services to you. Our use of your personal data in this way includes sharing your personal data with the third-party agents, consultants and contractors we need to in order to provide the Services, as well as for the purposes of assessing fraud, credit and/or security risks. We need to process your personal data in this way to enter into and perform the contract for the Services you have asked us to provide. If you do not wish to provide us with your personal data in this way, you will be unable to use our Services.

  • When you contact us and when we provide customer services to you We may also process your personal data in order to provide various supporting customer services to you (such as where you contact us with a question in connection with our other services which we might be able to provide to you). Our legitimate interest to provide effective customer support services and we rely on your consent to handle your personal information in this way. If you do not provide us with the personal data we request from you for customer services purposes, we may not be able to fully answer your queries.

  • To make our site better We will also process your personal data in order to provide you with a more effective user experience (such as by displaying our website in a way which is tailored for your device and browsing habits). This processing means that your experience of our site will be more tailored to you, and that the Services you see on our site may differ from someone accessing the same site with different browsing habits. We also use various cookies to help us improve our site (more details are set out in our Cookies section), and share your personal data with third party analytics and search engine providers that assist us in the improvement and optimisation of our site. We will also process your personal data for the purposes of making our site more secure, and to administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes. The data processing condition we use in these circumstances is our legitimate interest to provide you with the best customer experience we can, and to ensure that our site is kept secure. You can prevent us from using your personal information in this way by using the ‘do not track’ functionality in your internet browser. If you enable do not track functionality, our site may be less tailored to your needs and preferences.

  • If our business is sold We will transfer your personal data to a third party:

    – in the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets (at all times in accordance with data protection legislation); or

    – if Cantab Research Limited or substantially all its assets are acquired by a third party, in which case Personal Data held by us about our customers will be one of the assets transferred to the purchaser. In each case, the data processing condition we rely on when we process your data in these circumstances is our legitimate interest to ensure our business can be continued by a purchaser. If you object to our use of your personal data in this way, the relevant seller or buyer of our business may not be able to provide services to you.

  • For marketing purposes If you have opted in via our website to receive marketing communications from us, we will handle your personal information for example (your name, email address and postal address and telephone number) to provide you with marketing communications in line with any preferences you have told us about. When we send you marketing emails, we rely on your consent to contact you for marketing purposes. Every email we send to you for marketing purposes will also contain instructions on how to unsubscribe from receiving them. You are not under any obligation to provide us with your personal data for marketing purposes. You can tell us that you do not want your personal information to be processed in this way at any time by contacting us at or, where relevant, by following the unsubscribe link shown in every marketing communication you receive from us.

  • For Google Analytics We use Google Analytics to collect data. We need this data to understand how you use our website so we can improve its design and functionality. We also need the data to get the most out of our marketing campaigns. With your consent, Google Analytics will process and collect your personal data (cookies and IP address) to give us valuable information. Google Analytics will transfer your data to the United States and store it for 26 months. To learn more about Google’s data processing, click here. According to EU laws Google must follow standard contractual clauses between Google Ireland Ltd. and Google LLC. Standard contractual clauses are legal clauses written by the European Commission. They are part of a contract between Google Ireland Ltd. and Google LLC, and Google LLC must follow them. Standard contractual clauses tell Google LLC what it can and cannot do with your data.

  1. Keeping your information secure

FAB takes seriously the trust you place in us. To prevent unauthorised access or disclosure, to maintain data accuracy, and to ensure the appropriate use of the information, FAB utilises reasonable and appropriate physical, technical, and administrative procedures to safeguard the information you send us. FAB retains data only as required or permitted by local law and while it has a legitimate business purpose.

  1. Where we store your data

As some of our hosting is provided by Hetzner Online AG and Microsoft Azure, the data that we collect from you may be stored in a location outside of the European Economic Area. This is because Microsoft Azure Services’ servers are located also outside of the EEA. The data that we collect from you will be stored in a location outside of the European Economic Area. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy. In particular, any transfer of your personal data made by us to a location outside of the EEA will be subject to compliance with the EU-US Privacy Shield. To learn more about the Privacy Shield Framework, you can visit the US Department of Commerce’s Privacy Shield website. All information you provide to us is stored on secure servers.

  1. How long we store your information for

Where you receive our services, we will retain your data for as long as you are a client of F.A. Bernhardt GmbH, and for a minimum of six years afterwards, to ensure that we are able to assist you should you have any questions, feedback or issues in connection with any of the Services you have received from us. Where we have processed your data for any other reason (such as where you have contacted us with a question in connection with our Services) subject to the paragraph above, we will retain your data for three years.

  1. Use of cookies

Cookies provide information regarding the computer used by a visitor. We may use cookies, where appropriate, to gather information about your computer in order to assist us in improving our Website. We currently use session cookies to track users; these are temporary and are deleted when the browser is closed. We also use third party cookies for Google analytics. By continuing to browse the site, you are agreeing to our use of cookies. We only use (and store) non-essential cookies on your computer’s browser or hard drive if you provide your consent. All non-essential cookies shall expire after 30 days.

Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, which we do not have any control over. These cookies are likely to be analytical/performance cookies or targeting cookies. We may gather information about your general internet use by using the cookie. Where used, these cookies are downloaded to your computer and stored on the computer’s hard drive. Such information will not identify you personally; it is statistical data which does not identify any personal details whatsoever.

You can adjust the settings on your computer to decline any cookies if you wish. This can be done within the “settings” section of your computer. For more information please read the advice at

  1. Your rights under data protection laws
  • Right access You have the right to receive confirmation as to whether your personal data is being processed by us, as well as various other information relating to our use of your personal data. You also have the right to access your personal data which we are processing. You can exercise the right in a variety of ways, and the easiest way for you do to this is likely to be contacting us at the email address detailed at the bottom of this Privacy Statement.

  • Right to rectification You have the right to require us to rectify any inaccurate personal data we hold about you. You also have the right to have incomplete personal data we hold about you completed, by providing a supplementary statement to us.

  • Right to restriction You have the right to restrict our processing of your personal data where:

    – the accuracy of the personal data is being contested by you;

    – the processing by us of your personal data is unlawful, but you do not want the relevant Personal Data erased;

    – we no longer need to process your personal data for the agreed purposes, but you want to preserve your personal data for the establishment, exercise or defence of legal claims; or

    – we are processing your personal data because of our legitimate interest to improve our site, provide customer services, or on the sale of our business (as set out above) and you:

    – object to our processing as set out above; and

    – want processing of the relevant personal data to be restricted until it can be determined whether our legitimate interest overrides your legitimate interest.

Where any exercise by you of your right to restriction determines that our processing of particular personal data is to be restricted, we will then only process the relevant personal data in accordance with your consent and, in addition, for storage purposes and for the purpose of legal claims.

  • Right to data portability You have the right to receive your personal data in a structured, standard machine-readable format and the right to transmit such personal data to another controller.

  • Right to data erasure You have the right to require we erase your personal data which we are processing where one of the following grounds applies:

    – the processing is no longer necessary in relation to the purposes for which your personal data were collected or otherwise processed;

    – our processing of your personal data is based on your consent, you have subsequently withdrawn your consent and there is no other legal ground we can use to process your personal data;

    – you object to the processing in as set out in this Privacy Statement and we have no overriding legitimate interest for our processing;

    – the Personal Data have been unlawfully processed; and

    – the erasure is required for compliance with a law to which we are subject.

You also have the right to lodge a complaint with the Information Commissioner’s Office, the supervisory authority for data protection issues in Germany.

  1. Your right to object under data protection laws

You have the right to object to us processing your personal data where we are processing your personal data:

  • based on our legitimate interests to improve our site, provide customer services, or on the sale of our business (as set out above). If you ask us to stop processing your personal data for these reasons, we will stop processing your personal data unless we can demonstrate compelling grounds as to why the processing should continue in accordance with data protection laws; and
  • for direct marking purposes. If you ask us to stop processing your personal data on this basis, we will stop.
  1. Third party links

On occasion we include links to third party applications, websites, products or services on our Website for your convenience and information. Where we provide a link, it does not mean that we endorse, make representations or approve that site’s policy towards visitor privacy. You should review their privacy policy before sending them any personal data.

  1. Changes to our Privacy Statement

Any changes we may make to our Privacy Statement in the future will be posted on our Website and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our Privacy Statement.

  1. Contacting us

Please do not hesitate to Contact Us regarding any matter relating to this Privacy Statement and our Terms & Conditions.

This Privacy Statement was last updated on 2023-02-18.