Privacy Policy
Last updated: 15 October 2026
1. Controller
The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (“GDPR”) is:
FXC Engineering GmbH
Forckenbeckstraße 50
52074 Aachen
Germany
Email: info@fxc-engineering.com
2. General Information
We take the protection of your personal data seriously. We process personal data only where this is necessary for the operation of our website, the handling of inquiries, the preparation of quotations, the establishment and management of business relationships, or where processing is otherwise permitted or required by law.
Personal data means any information relating to an identified or identifiable natural person.
This Privacy Policy describes the processing of personal data in connection with the use of our website and communications initiated through it.
Our website and commercial offering are intended exclusively for businesses, research institutions, universities and other professional users. We do not offer products to consumers through this website.
3. Website Hosting and Server Log Files
Our website is hosted by:
STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany
When you access our website, technical information required to deliver the website may be processed automatically by the web server. This may include in particular:
- IP address or information derived from the IP address
- date and time of access
- requested page or file
- browser type and version
- operating system
- referring website, where transmitted
- information relating to successful or unsuccessful requests
The purpose of this processing is to provide the website, ensure its stability and security, identify technical errors and protect our systems against misuse and attacks.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the secure, reliable and efficient operation of our website and IT infrastructure.
Where STRATO processes personal data on our behalf, it acts as a processor within the meaning of Article 28 GDPR. We have concluded a data-processing agreement with STRATO.
According to the applicable STRATO agreement, visitor log files relating to website hosting are retained for a maximum of seven days. STRATO also makes anonymised web server logs and aggregated website statistics available to hosting customers for a longer period. FXC Engineering does not routinely download, export or separately retain these logs, but may occasionally view the aggregated statistics.
4. Cookies and Browser Storage
We do not use analytics, advertising or behavioral tracking technologies on this website.
When you use the quotation basket, the website uses browser session storage (sessionStorage) to retain selected products, quantities, configuration choices and optional custom details while you navigate the website.
Session storage is not a cookie. The information is stored locally in your browser and is not automatically transmitted to FXC Engineering. You decide whether to send the prepared quotation request to us by email.
The basket is intended to remain available for the browser-tab session rather than being deliberately retained across later visits. Browser session-restoration functions may restore session data in some circumstances. You can remove individual items or clear the basket using the basket controls.
This storage is used solely to provide the quotation-basket function expressly requested by you and therefore does not require separate consent pursuant to Section 25(2) no. 2 TDDDG.
To the extent that personal data are processed in connection with the basket, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is providing the requested quotation functionality in a practical and data-minimising manner.
Because we do not use non-essential browser storage requiring consent, we do not currently display a cookie consent banner.
5. Contact and Requests for Quote
You can contact us by email and prepare a non-binding request for quote using the product configurator and quotation basket.
The website opens a prepared draft in your chosen email application or provides request text that you can copy into an email. It does not submit contact or quotation requests through a website form.
Preparing a request does not send it to FXC Engineering. We receive the information when you send the email.
Depending on the information you provide, we may process your name and business contact details, company or institution, selected products and product configurations, project or application information, message content, attachments and other information voluntarily provided by you.
A request for quote does not constitute a binding order or purchase.
Where you personally intend to become a party to a contract with us, processing is based on Article 6(1)(b) GDPR insofar as it is necessary to take steps at your request prior to entering into a contract.
In most B2B inquiries, the person contacting us acts on behalf of a company, university, research institution or other organization and is not personally the intended contractual party. In these cases, processing is based on Article 6(1)(f) GDPR.
Our legitimate interests are responding to business inquiries, preparing quotations, communicating with representatives and employees of potential customers and establishing or maintaining business relationships with their organizations.
You are not legally required to provide information when making an inquiry. However, without sufficient contact and request information, we may be unable to respond to your inquiry or prepare a quotation.
6. Contact by Email and Microsoft 365
For our business email and communication infrastructure, we use Microsoft 365 / Exchange Online.
When you email us, Microsoft processes the message content, attachments and related communication metadata as part of providing this service. Our website does not load Microsoft services merely to display its pages or prepare a quotation request.
Where service providers process personal data on our behalf, the processing is governed by the applicable data-processing agreements in accordance with Article 28 GDPR.
Where the communication concerns a contract or pre-contractual measures with you personally, the legal basis is Article 6(1)(b) GDPR.
Where you communicate with us as an employee, representative, researcher or other contact person of an organization, the legal basis is Article 6(1)(f) GDPR.
Our legitimate interest is conducting efficient and secure business communication with customers, prospective customers, suppliers, research partners and other professional contacts.
Where information must be retained to comply with statutory obligations, processing is based on Article 6(1)(c) GDPR in conjunction with the applicable legal provisions.
7. Retention of Inquiries and Business Correspondence
General inquiries that are not subject to a statutory retention obligation are normally deleted no later than 24 months after the last substantive communication, unless continued storage is necessary for a specific legitimate purpose.
Requests for quote, quotations and related correspondence may constitute commercial correspondence under German law. Where statutory retention obligations apply, we retain the relevant information for the legally required period.
Commercial correspondence falling within Section 257 of the German Commercial Code (Handelsgesetzbuch – HGB) is generally subject to a retention period of six years, beginning at the end of the calendar year in which the respective commercial correspondence was received or sent.
If an inquiry results in a contractual relationship, additional statutory retention obligations may apply to documents created in connection with that relationship.
Where personal data is retained solely because of a statutory retention obligation, it will no longer be actively used for purposes incompatible with that obligation.
8. Recipients and International Data Transfers
Within FXC Engineering GmbH, personal data is accessible only to employees who require the information for the relevant purpose.
Depending on the processing concerned, personal data may also be made available to service providers used by us, in particular STRATO GmbH for website hosting and Microsoft group companies and subprocessors in connection with Microsoft 365 and Exchange Online.
Where these service providers process personal data on our behalf, they are engaged in accordance with Article 28 GDPR where required.
STRATO's data-processing agreement provides for contractual processing within the European Union or European Economic Area unless a transfer to a third country is required to provide the relevant service.
Microsoft operates covered Microsoft 365 services under its EU Data Boundary for eligible EU and EFTA customers. Due to Microsoft's global infrastructure and documented exceptions, processing or access outside the European Economic Area may nevertheless occur in certain circumstances.
Where personal data is transferred to a country outside the European Economic Area for which the European Commission has not adopted an adequacy decision, appropriate safeguards are used where required. These safeguards may include the European Commission's Standard Contractual Clauses pursuant to Article 46 GDPR.
We may also disclose personal data where this is required by law, by a competent authority or court, or where disclosure is necessary for the establishment, exercise or defence of legal claims.
9. Your Rights
Subject to the conditions laid down in the GDPR, you have the right to request access to personal data concerning you under Article 15 GDPR; request rectification under Article 16 GDPR; request erasure under Article 17 GDPR; request restriction of processing under Article 18 GDPR; receive personal data in a structured, commonly used and machine-readable format where Article 20 GDPR applies; and object to processing based on Article 6(1)(f) GDPR under Article 21 GDPR.
Please note that the right to erasure does not apply where we are legally required to retain the relevant information or where another statutory exception applies.
To exercise your rights, you may contact us at:
Where we process your personal data on the basis of Article 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object at any time to such processing.
If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless processing is required for the establishment, exercise or defence of legal claims.
10. Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.
The supervisory authority responsible for data protection matters in North Rhine-Westphalia is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
Email: poststelle@ldi.nrw.de
You may also contact another competent supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement.
11. Security and Changes to this Privacy Policy
We use appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or unauthorized access. Our website is transmitted using encrypted HTTPS connections.
We may update this Privacy Policy if our website, technical infrastructure, business processes or applicable legal requirements change. The version published on this website at the relevant time applies.
Last updated: 15 October 2026