Privacy policy

in accordance with the GDPR & the German Federal Data Protection Act — Last updated: 25 October 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Friedenstor Bestattungen GmbH
Cranachstraße 24
60596 Frankfurt am Main
Deutschland
Represented by: Igor Kononov (Geschäftsführer)

Phone: +49 1517 063 08 71
Phone (2): +49 171 83 333 31
E-mail: info@friedenstor.de

2. Data protection officer

We are not required to appoint a data protection officer, as fewer than 20 people in our company are permanently engaged in the automated processing of personal data (§ 38 (1) BDSG). For any data protection matters, please contact the controller named under section 1 directly.

3. Collection and processing of personal data

We collect and process personal data only to the extent necessary for the provision of our services or where you have given us your express consent.

When you visit our website, the web server automatically records the following data in server log files:

  • IP address of the requesting device (truncated/anonymised)
  • Date and time of access
  • URL requested and volume of data transferred
  • Browser type, browser version and operating system
  • HTTP status code and referrer URL

This data is used solely to ensure the correct and secure operation of the website and is deleted automatically after 7 days. It is not merged with any other data sources.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the technically faultless and secure operation of the website).

4. Contact form and e-mail contact

If you contact us via the contact form or by e-mail, the data you provide (name, e-mail address, telephone number, message content and the language you selected) is processed in order to handle your enquiry and stored in our database.

Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in responding to customer enquiries).

Notification of our team: So that we can respond to enquiries promptly around the clock, every incoming enquiry automatically triggers an e-mail as well as a short notification to an internal chat on the Telegram service (Telegram FZ-LLC, Dubai, UAE). This short notification contains your name, your contact details and an extract of your message. The transfer takes place on the basis of Art. 6 (1) (f) GDPR; a transfer to third countries outside the EU cannot be ruled out. If you wish to avoid this, please contact us by telephone only.

The data is deleted once your enquiry has been finally dealt with, unless statutory retention obligations apply.

5. Processing in connection with funeral services

In order to fulfil our contractual obligations, we process the following categories of personal data:

  • Details of the client (name, address, contact details)
  • Details of the deceased (insofar as required for the funeral)
  • Bank details for invoicing
  • Data required to liaise with authorities, cemeteries and crematoria

Legal basis: Art. 6 (1) (b) GDPR (performance of a contract), Art. 6 (1) (c) GDPR (legal obligations).

6. Disclosure of data to third parties

Your personal data is only disclosed to third parties where this is necessary in order to perform the contract (e.g. cemeteries, crematoria, registry offices, stonemasons) or where required by law. Data is never passed on for advertising purposes.

7. Cookies and local storage

Our website uses strictly necessary cookies and entries in your browser's local storage that are required for proper operation. These include in particular a session cookie, a security token for forms (CSRF) and the entry cookie_consent, which records your decision on the cookie notice.

Legal basis: § 25 (2) no. 2 TDDDG in conjunction with Art. 6 (1) (f) GDPR. No consent is required for this storage.

All other, non-essential services — in particular the audience measurement described in section 8 — are only loaded after you have given your express consent.

8. Audience measurement with Google Analytics and Google Ads

If you have given your consent in the cookie notice, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to analyse the use of our website statistically (e.g. pages viewed, time spent, approximate location, device used).

Your IP address is truncated by Google and is not merged with any other Google data. A transfer of data to Google LLC servers in the USA cannot be ruled out; Google LLC is certified under the EU-US Data Privacy Framework, and the European Commission's standard contractual clauses apply in addition.

Legal basis: Art. 6 (1) (a) GDPR and § 25 (1) TDDDG (consent). Without your consent, no analytics script is loaded and no data is transferred to Google.

Google Ads conversion tracking: With the same consent, we use Google Ads conversion tracking (Google Ireland Limited). If you reach our website via one of our ads, a cookie is set that allows Google to recognise whether you then submit the contact form or click a phone number or WhatsApp. The content of the form is not transmitted. We do not use personalised advertising (remarketing).

You may withdraw your consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out up to that point.

Withdraw consent / change your choice now

9. Other services used

Hosting and image delivery: Images and media files are delivered via Amazon S3 (Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg) from the Frankfurt am Main data centre region (eu-central-1). For technical reasons, your IP address is transmitted to this service when files are retrieved. The legal basis is Art. 6 (1) (f) GDPR.

Google reviews: The Google rating displayed on our website is retrieved and cached exclusively on our server. No data from your browser is transmitted to Google in the process.

Error logging: We use Sentry (Functional Software, Inc., San Francisco, USA) to detect technical faults. Only technical error data is recorded; the transmission of personal data such as cookies, IP addresses or user identifiers is disabled. The legal basis is Art. 6 (1) (f) GDPR.

Maps: We do not embed any third-party maps directly. The link to Google Maps is only called up when you click on it; from that point on, Google's privacy policy applies.

10. SSL encryption

For security reasons, this website uses SSL/TLS encryption (recognisable by the “https://” in the address bar). Data transmitted cannot be read by third parties.

11. Retention period

We store personal data only for as long as is necessary for the respective processing purpose or as long as statutory retention periods apply. Business records are retained for up to 10 years in accordance with § 257 HGB and § 147 AO.

12. Your rights as a data subject

You have the following rights with regard to your personal data:

  • Right of access (Art. 15 GDPR) – you may request information about the data we hold about you.
  • Right to rectification (Art. 16 GDPR) – you may request the correction of inaccurate data.
  • Right to erasure (Art. 17 GDPR) – you may request the deletion of your data, unless statutory retention obligations apply.
  • Right to restriction of processing (Art. 18 GDPR) – you may request that processing be restricted.
  • Right to data portability (Art. 20 GDPR) – you may receive your data in a structured, commonly used and machine-readable format.
  • Right to object (Art. 21 GDPR) – you may object to the processing of your data.
  • Right to withdraw consent (Art. 7 (3) GDPR) – consent once given may be withdrawn at any time with effect for the future.

To exercise your rights, please contact: info@friedenstor.de

13. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. The authority responsible for us is:

The Hessian Commissioner for Data Protection and Freedom of Information
Postfach 3163
65021 Wiesbaden
datenschutz.hessen.de

14. Validity and amendment of this privacy policy

This privacy policy is currently valid and dated 25 October 2026. As our website develops further, or as a result of changed statutory or regulatory requirements, it may become necessary to amend this privacy policy. The current version can be accessed on this page at any time.

Call us