Our Privacy Policy

1. Data protection at a glance

The protection of personal data is important to us. Below, we inform you which personal data is processed when you visit our website firstware.com, for what purposes this happens, on what legal basis the processing is carried out and which rights you have under the General Data Protection Regulation.

Personal data means any information that can be used to identify you personally. This includes, for example, your name, email address, telephone number, IP address or technical usage data.

2. Controller

The controller responsible for data processing on this website is:

FirstAttribute AG
Am Büchele 18
86928 Hofstetten
Germany

Phone: +49 8196 998 4330
Fax: +49 89 215 442 49
Email: info@firstattribute.com

Authorised member of the management board: Andreas Martin
Chairman of the Supervisory Board: Thomas Pietz

Registered in the commercial register of the Local Court of Augsburg
Commercial register number: HRB 31511

VAT identification number pursuant to Section 27a of the German VAT Act:
DE213979707

3. Data Protection Officer

The Data Protection Officer of FirstAttribute AG is:

Andreas Martin
FirstAttribute AG
Am Büchele 18
86928 Hofstetten
Germany

Phone: +49 8196 998 4330
Email: info@firstattribute.com

The Data Protection Officer is the contact person for all questions relating to the protection of personal data and the exercise of data subject rights.

4. General information on data processing

We process personal data only to the extent necessary to provide this website, respond to enquiries, ensure technical security, present our services or statistically evaluate our website.

Depending on the processing activity, processing is carried out in particular on the basis of:

• Art. 6(1)(a) GDPR, if you have given us your consent.
• Art. 6(1)(b) GDPR, if processing is necessary for the performance of pre-contractual measures or a contract.
• Art. 6(1)(c) GDPR, if we are legally obliged to process the data.
• Art. 6(1)(f) GDPR, if processing is necessary to safeguard our legitimate interests.

Where cookies or comparable technologies are used on our website that are not technically necessary for the operation of the website, they are used only on the basis of your prior consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

5. Hosting and server log files

Our website is operated and hosted by FirstAttribute AG itself.

When you access our website, the server automatically processes information transmitted by your browser. This may include in particular:

• IP address
• date and time of access
• page or file accessed
• amount of data transferred
• referrer URL
• browser type and browser version
• operating system used
• requesting provider

The processing of this data is necessary to provide the website technically, to ensure the stability and security of the website and to detect misuse, technical faults or attacks.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and error-free provision of our website.

Server log files are stored only for as long as this is necessary for the purposes stated above. This data is not merged with other data sources.

6. Contact via the Divi contact form

If you contact us via the contact form on our website, we process the data you enter in order to handle your enquiry. The contact form is provided via the Divi contact form module.

In particular, the contact details you enter are processed, such as your name, email address, telephone number, company and the content of your message. The data is used to handle your enquiry and is transmitted to us by email.

The legal basis is Art. 6(1)(b) GDPR if your enquiry is aimed at concluding or performing a contract or pre-contractual measures. In all other cases, processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in properly responding to incoming enquiries.

The data you transmit will be deleted once your enquiry has been finally processed and no statutory retention obligations prevent deletion.

7. Appointment booking with Microsoft Bookings

On our website, we offer you the option of booking appointments online. For this purpose, we use Microsoft Bookings, a service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

When you book an appointment via Microsoft Bookings, the data you enter is processed. This may include in particular:

• name
• email address
• telephone number
• company
• desired appointment
• booked service
• voluntary information in the message field

The processing is carried out for the purpose of planning, conducting and following up on the booked appointment. The legal basis is Art. 6(1)(b) GDPR if the appointment booking is related to pre-contractual or contractual measures. Otherwise, processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in efficient appointment planning and communication.

Microsoft processes data on our behalf. Contractual provisions for order processing are in place for this purpose.

Processing of personal data by Microsoft outside the European Union cannot be ruled out. For data transfers to third countries, adequacy decisions, standard contractual clauses or other appropriate safeguards pursuant to Art. 44 et seq. GDPR may apply in particular.

Further information on data processing by Microsoft can be found in Microsoft’s privacy information.

8. Cookies and comparable technologies

Our website uses cookies and comparable technologies. Cookies are small text files that are stored on your end device. Some cookies are technically necessary for the website to function properly. Other cookies are used for analysis, reach measurement or improving our offering.

Technically necessary cookies are used on the basis of Section 25(2) TDDDG. The associated processing of personal data is carried out on the basis of Art. 6(1)(f) GDPR.

Cookies and comparable technologies that are not technically necessary, in particular for analysis and marketing purposes, are used only if you have given your prior consent. The legal basis is Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

You can withdraw or change your consent at any time with effect for the future.

9. Consent management with Borlabs Cookie

We use Borlabs Cookie on our website, a consent management tool provided by Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany.

Borlabs Cookie is used to obtain, manage and document your consent to the storage of certain cookies and the use of external services. A technically necessary cookie is set in which your cookie selection is stored.

According to the provider, Borlabs Cookie itself does not transmit any personal data to Borlabs. The consent information is stored locally on our website.

Borlabs Cookie is used to fulfil legal obligations to obtain and document consent. The legal basis is Art. 6(1)(c) GDPR. Where its use also serves the legally compliant and user-friendly management of consent, processing is additionally carried out on the basis of Art. 6(1)(f) GDPR.

10. Google Tag Manager

We use Google Tag Manager on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows website tags to be managed and integrated centrally. Other services, in particular Google Analytics, may be triggered via Google Tag Manager. Google Tag Manager itself does not create user profiles and, according to Google, does not store IP addresses or measurement IDs that are associated with a specific person.

Google Tag Manager is used only after you have given your consent, insofar as services requiring consent are loaded via it. The legal basis is Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

You can withdraw or change your consent at any time with effect for the future via the cookie settings.

11. Google Analytics

We use Google Analytics on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables us to statistically evaluate the use of our website and improve our offering. Among other things, the following data may be processed:

• pages accessed
• time spent on the website
• click behaviour
• origin of visitors
• browser used
• operating system
• device type
• approximate geographic origin
• interactions with the website

We use Google Analytics with the default settings. According to Google, Google Analytics 4 does not store IP addresses permanently. IP addresses are used during collection to derive geographic information and are then discarded. The retention of user- and event-related data is based on the default settings configured in Google Analytics.

Google Analytics uses cookies and comparable technologies. The information generated by these technologies may be transmitted to Google servers and processed there. Processing by Google LLC in the USA cannot be ruled out.

Google Analytics is used only after you have given your consent. The legal basis is Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

You can withdraw or change your consent at any time with effect for the future via the cookie settings.

12. Google Search Console

We use Google Search Console, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Search Console is used for technical analysis and optimisation of our visibility in Google Search. Via Search Console, we receive in particular aggregated information about the search queries through which our website is found, which pages are displayed in Google Search, whether technical problems exist and how our website is indexed.

Google Search Console generally does not set cookies on our website for visitor analysis and does not create personal user profiles on our behalf. Where personal data is processed, this is done for the technical analysis, troubleshooting and search engine optimisation of our website.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technical monitoring, optimisation and findability of our website.

13. External links

Our website may contain links to external websites. If you click on an external link, you leave our website. The respective provider is responsible for data processing on the linked websites.

14. Security of data processing

We take technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure. This includes, in particular, the encrypted transmission of our website via TLS/SSL.

Please note that data transmission on the internet can never be fully protected against access by third parties.

15. Storage period

We store personal data only for as long as this is necessary for the respective processing purposes or statutory retention periods apply.

If the purpose of processing no longer applies or a statutory retention period expires, the corresponding data will be deleted or blocked, unless there is another legal basis for further processing.

16. Recipients of personal data

Within FirstAttribute AG, only those departments that need personal data to fulfil the purposes stated above have access to it.

In addition, personal data may be transmitted to technical service providers, IT service providers, analytics providers or communication service providers insofar as this is necessary for the provision and operation of our website.

Where service providers process personal data on our behalf, we conclude data processing agreements with them pursuant to Art. 28 GDPR.

17. Data transfer to third countries

When using services from international providers, in particular Google and Microsoft services, personal data may be transferred to countries outside the European Union or the European Economic Area, especially to the USA.

Such a transfer takes place only where there is a data protection basis for it, in particular an adequacy decision, certification under the EU-US Data Privacy Framework, standard contractual clauses or other appropriate safeguards pursuant to Art. 44 et seq. GDPR.

18. Your rights

Under the GDPR, you have in particular the following rights:

• right of access to the personal data processed by us.
• right to rectification of inaccurate data.
• right to erasure of your personal data.
• right to restriction of processing.
• right to data portability.
• right to object to certain processing activities.
• right to withdraw consent given with effect for the future.

In addition, you have the right to lodge a complaint with a data protection supervisory authority.

The supervisory authority responsible for us is:

Bavarian State Office for Data Protection Supervision
Promenade 18
91522 Ansbach
Germany

19. Right to object pursuant to Art. 21 GDPR

If we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

20. Withdrawal of consent

You may withdraw consent already given at any time with effect for the future. The lawfulness of processing carried out until the withdrawal remains unaffected.

You may withdraw your consent in particular via the cookie settings on our website or by contacting us by email.

21. Obligation to provide personal data

When visiting our website for informational purposes only, you do not have to actively provide any personal data. However, technically necessary data, in particular server log data, is processed automatically so that the website can be accessed.

If you wish to contact us or book an appointment, we need the respective required information in order to process your enquiry. Without this information, processing your enquiry may not be possible.

22. Automated decision-making

Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.

23. Validity and changes to this privacy policy

We reserve the right to amend this privacy policy if technical, legal or organisational changes occur.

Last updated: September 2026