Legal
No cookies, no consent banner, no third-party content. What we do process — and why.
This is a translation for convenience. The German version at freshx.de/datenschutz/ is the authoritative one.
The controller for the processing of personal data on this website (Art. 4(7) GDPR) is:
We are not legally required to appoint a data protection officer.
Because it is the shortest honest answer, the omissions first:
Every time you open a page, your browser transmits technically necessary data that our web server writes to log files:
Purpose and legal basis: without this data the page cannot be delivered. We also use the logs to find errors, detect attacks and keep the service stable. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and functioning operation of this website.
Retention: logs are deleted after seven days at the latest, unless a specific security incident requires longer retention for investigation.
We want to know which content gets read. For that we run Matomo as our own installation on our own infrastructure (matomo.app.freshx.de). No external provider is involved; the data never leaves our systems.
Matomo runs without cookies (disableCookies). We collect the page requested, time on page, referrer, approximate region, device type and browser. The IP address is truncated before storage and thereby anonymised; visitors are not recognised across visits.
We also count a contact form submission as an event (formular_gesendet) so we know which page triggered an enquiry. The label carries the product line and the type of request — no names, no email addresses, no free text.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is designing and improving this website to fit actual demand. Since no information is stored on or read from your device, no consent under § 25 TDDDG is required.
Objection: you can object at any time by enabling “Do Not Track” in your browser — Matomo honours that setting — or by writing to the contact details in section 1.
On the home page and the product pages you can write to us via a form. We process:
The details are delivered by email to the responsible mailbox at FreshX only. There is no database and no ticketing system behind this form. Delivery runs over our own mail server (zim.freshx.de), TLS-encrypted.
Abuse prevention instead of a captcha: we use no captcha and no third-party bot protection. Instead we check a field invisible to humans, a minimum time to fill in the form, and limit requests per internet connection to five per hour. For that limit your IP address is held in memory only; it is neither stored nor sent along.
Legal basis: Art. 6(1)(b) GDPR where your enquiry concerns a contract or pre-contractual measures, otherwise Art. 6(1)(f) GDPR (interest in answering enquiries). Providing the data is not mandatory, but without a way to reach you we cannot reply.
You can also write or call us directly. In that case we process the data you give us in order to answer your enquiry — same legal basis as in section 5.
Your details reach only the people at FreshX who handle your request: enquiries about product information and appointments go to the management, detailed technical questions to the responsible engineers.
Website, analytics and mail server run on our own infrastructure. No processor within the meaning of Art. 28 GDPR is involved.
We keep enquiries for as long as necessary to handle them and answer follow-up questions, and afterwards until statutory retention periods expire (usually six to ten years under German commercial and tax law) where the correspondence belongs to a business transaction. If an enquiry does not lead to a business transaction, we delete it once the matter is closed.
You have the following rights against us at any time:
A message to the contact details in section 1 is enough for any of these. If you have given consent, you can withdraw it at any time; processing carried out before the withdrawal remains lawful.
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for FreshX GmbH is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.
This website links to our technical deep-dive pages at *.app.freshx.de and to blog.freshx.de. These run on the same infrastructure and this notice applies to them accordingly. Third-party websites we link to are governed by their own privacy notices.
Last updated: 27 August 2026