Privacy policy

The German version is legally binding: Datenschutzerklärung.

In this privacy policy we inform you, in accordance with Art. 13 of the General Data Protection Regulation (GDPR), which personal data we process when you visit this landing page and when you request an appointment, for what purposes and on what legal basis, and which rights you have.

Last updated: October 2026 · Version 2026-10

1. Controller

The controller within the meaning of Art. 4(7) GDPR is:

FPF AGENCY
Beethovenstraße 22
12683 Berlin
Germany
Email: hp@fpf.de
Phone: +49 30 56 30 14 93

2. Data protection officer

We are not required to appoint a data protection officer (§ 38 BDSG, Art. 37 GDPR). If you have any questions about data protection, please contact us at the address given above.

3. Key points at a glance

4. Provision of the website and server log files

When this page is accessed, our hosting provider automatically processes data transmitted by your browser: IP address, date and time of access, page or file accessed, amount of data transferred, referrer URL, browser type and version, and operating system.

Purpose: delivery of the page, ensuring stability and security, detecting and defending against attacks.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and error-free operation of the website.
Retention period: The log files are deleted after 7 days unless they are needed to investigate a specific security incident.

Hosting provider: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

Transmission is encrypted via TLS (recognisable by “https://” in the address bar).

5. Appointment and contact form

Data processed:

Purpose: handling your enquiry, arranging an appointment at PSI 2027 or by video/telephone, and sending you the information requested. We sort enquiries internally by target group and preferred appointment in order to plan meetings at the trade fair. No automated decision-making within the meaning of Art. 22 GDPR takes place.

Legal basis: your consent pursuant to Art. 6(1)(a) GDPR and – insofar as your enquiry is aimed at concluding a contract – Art. 6(1)(b) GDPR (pre-contractual measures).

Procedure: Your details are transmitted to our server via an encrypted connection and forwarded from there by email to our sales team. At the same time, we send you an acknowledgement of receipt to the email address you provided. The data are not stored in a database on the web server.

Proof of consent: Together with your enquiry, we store the date, time and version of this privacy policy to which you consented. This serves to meet the obligation to demonstrate consent under Art. 7(1) GDPR (Art. 6(1)(c) GDPR).

Obligation to provide data: You are under no statutory or contractual obligation to provide us with data. Without the mandatory information, however, we cannot process your enquiry.

Retention period: We delete your data as soon as your enquiry has been fully dealt with, but no later than 6 months after the last contact if no contract is concluded. If a business relationship is established, the statutory retention periods for commercial and business letters apply (up to 6 years under § 257 HGB (German Commercial Code), up to 10 years under § 147 AO (German Fiscal Code) for tax-relevant documents).

6. Protection against misuse of the form

To prevent automated mass requests, our server stores a hashed (pseudonymised) value of your IP address and the time for each form submission. After more than five requests within ten minutes, submission is temporarily blocked. In addition, the form contains a field that is invisible to humans and detects bots.

Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is protecting our systems against misuse and spam.
Retention period: no more than 48 hours, after which the data are deleted automatically.

7. Newsletter

You will only receive information about RECORDIA and PSI by email if you tick the separate, voluntary box in the form. Your subscription only becomes effective once you have confirmed it via a link in a confirmation email (double opt-in).

Legal basis: Art. 6(1)(a) GDPR in conjunction with § 7(2) no. 2 UWG (German Act against Unfair Competition). Subscription and confirmation are logged (time, IP address) as proof of consent (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR).
Mailing service provider: MailPoet, a WordPress plugin (provider: Automattic Inc., USA). Subscriber data is stored in our WordPress installation hosted by IONOS in Germany. Emails are sent via the MailPoet Sending Service; your email address and sending data are therefore transferred to Automattic Inc. in the USA on the basis of the European Commission’s adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR).
Unsubscribing: at any time via the unsubscribe link in every email or by message to the address given above.
Retention period: until you unsubscribe. After that, we may store your email address on a block list to prevent it from being sent further mailings (Art. 6(1)(f) GDPR).

8. Recipients

Your data are received only by the people at FPF AGENCY who handle your enquiry and by the following service providers acting on our behalf and in accordance with our instructions (Art. 28 GDPR):

Your enquiry is handled exclusively by FPF AGENCY and is not automatically forwarded to third parties. Where necessary for a quotation or the implementation of a project, FPF AGENCY may pass your data on to the manufacturer Recordia S.R.L., 92024 Canicattì (AG), Italy. This takes place on the basis of a data processing agreement pursuant to Art. 28 GDPR; Italy is a member of the European Union.

9. Transfers to third countries

Your data are not transferred to countries outside the European Union or the European Economic Area. The exception is the newsletter, which is sent via MailPoet to Automattic Inc., USA (see section 7).

10. Your rights

You have the following rights against us with regard to the personal data concerning you:

Withdrawal of consent: You may withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR), e.g. by email to the address given above. The lawfulness of the processing carried out before the withdrawal remains unaffected.

Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The supervisory authority responsible for us is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, www.datenschutz-berlin.de.

Right to object under Art. 21 GDPR

Where we process your data on the basis of Art. 6(1)(f) GDPR (legitimate interests), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. If your data are processed for direct marketing purposes, you may object to this at any time without giving reasons.

11. Changes to this privacy policy

We will amend this privacy policy if the data processing or the legal situation changes. The version published on this page at the time applies.