Privacy Policy

Last updated: September 2026

French IT Consulting Ltd. is subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where we offer goods or services to individuals in the European Economic Area or monitor their behaviour within the EEA, the EU General Data Protection Regulation (EU GDPR) also applies.

1. Data Controller

The controller responsible for processing personal data through this website and the official Freshpack social media accounts is:

French IT Consulting Ltd.
trading under the brand Freshpack

Registered office:
167–169 Great Portland Street
5th Floor
London W1W 5PF
United Kingdom

Company Number: 06592873
Registered in England and Wales

Telephone: +445603008889
Email: info@fresh-pack.de
Website: www.fresh-pack.de

2. Scope of This Privacy Policy

This Privacy Policy applies to the website www.fresh-pack.de and the official Freshpack social media accounts, particularly the Freshpack Facebook page.

External websites, platforms and third-party profiles are governed by the respective providers’ privacy policies.

3. General Information on Data Processing

We process personal data only where necessary to operate this website, respond to enquiries, initiate or manage business relationships, fulfil legal obligations or act on the basis of consent.

Personal data means any information relating to an identified or identifiable natural person. This may include names, contact details, IP addresses, communication content and technical usage information.

We process personal data primarily on the following legal bases:

• Article 6(1)(a) GDPR – consent;
• Article 6(1)(b) GDPR – performance of a contract or steps taken prior to entering into a contract;
• Article 6(1)(c) GDPR – compliance with a legal obligation;
• Article 6(1)(f) GDPR – legitimate interests.

Where applicable, processing is also carried out in accordance with the UK GDPR and the UK Data Protection Act 2018.

4. Hosting and Server Log Data

When you access this website, the hosting provider automatically processes certain technical information. This may include:

• IP address;
• date and time of access;
• requested page or file;
• amount of data transferred;
• browser type and version;
• operating system;
• referring URL;
• access status or HTTP status code.

This information is processed to provide the website securely and reliably, analyse technical errors and prevent misuse or unlawful access.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and technically stable operation of this website.

Server log data is retained only for as long as necessary for these purposes unless legal retention obligations or security-related reasons require longer storage.

Hosting provider:
[Insert the name and complete address of the hosting provider]

Where legally required, we have entered into a data processing agreement with the hosting provider.

5. Contacting Us

If you contact us by email, telephone or through a contact form, we process the information you provide. This may include:

• your name;
• company name;
• email address;
• telephone number;
• subject and content of your message;
• any other information you provide voluntarily.

We process this information to respond to your enquiry and any related follow-up questions.

If your enquiry relates to entering into or performing a contract, the legal basis is Article 6(1)(b) GDPR. In other cases, processing is based on our legitimate interest in responding to business and general enquiries under Article 6(1)(f) GDPR.

Your data will be deleted once your enquiry has been fully resolved, provided that no statutory retention obligations or other legitimate reasons require continued storage.

6. Quotations and Business Relationships

If you request a quotation or enter into a business relationship with us, we process the contact, company, communication and contractual information required for this purpose.

Processing is carried out to take steps before entering into a contract and to perform contractual obligations under Article 6(1)(b) GDPR.

Where statutory accounting, tax, record-keeping or evidential requirements apply, processing is also based on Article 6(1)(c) GDPR.

Business and accounting records are retained in accordance with the applicable statutory retention periods.

7. Cookies and Consent Management

Our website uses cookies and similar technologies. Certain cookies are technically necessary for the website to function properly. Other technologies, including those used for analytics, embedded media or marketing, are used only after you have provided your consent.

Technically necessary cookies are used on the basis of Article 6(1)(f) GDPR and the applicable legislation governing the storage of or access to information on a user’s device.

Non-essential cookies and comparable technologies are used exclusively on the basis of your consent under Article 6(1)(a) GDPR.

You can change or withdraw your consent at any time with future effect through the cookie settings available on this website.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

8. Google Analytics 4

If you have consented through our cookie banner, we use Google Analytics 4, a web analytics service provided by:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics helps us understand how visitors use our website and enables us to improve its content and performance.

The information processed may include:

• technical or shortened IP information;
• device and browser information;
• pages visited;
• source of the website visit;
• approximate location information;
• interactions with the website;
• date and duration of the visit.

Google Analytics is activated only after you have provided your consent. The legal basis is Article 6(1)(a) GDPR.

Information collected through Google Analytics may also be processed by Google companies or service providers outside the European Economic Area. According to Google, recognised transfer mechanisms are used, including the EU–US Data Privacy Framework or Standard Contractual Clauses where applicable.

Further information is available at:

https://policies.google.com/privacy

You may withdraw your consent at any time through the cookie settings on our website.

9. Google Fonts

Where possible, the fonts used on this website are stored locally on our web server and loaded directly from it. When fonts are hosted locally, no connection to Google’s servers is established.

If Google Fonts are loaded directly from Google servers, this will occur only after you have provided your consent. In this case, your IP address and technical device information may be transmitted to Google.

The provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

The legal basis is Article 6(1)(a) GDPR. You may withdraw your consent at any time through the cookie settings.

Further information is available at:

https://policies.google.com/privacy

10. Google Maps

Where Google Maps is embedded on this website, the map service will be activated only after you have provided your consent.

The provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

When a map is loaded, your IP address, device information and, depending on your settings, location data may be transmitted to Google. Information may also be processed by Google companies or service providers outside the European Economic Area.

The legal basis is Article 6(1)(a) GDPR.

Further information is available at:

https://policies.google.com/privacy

11. YouTube Videos

Where YouTube videos are embedded on our website, they will be loaded only after you have provided your consent.

The provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

When a video is loaded or played, your IP address, device information, details of the page you visited and other usage information may be transmitted to Google or YouTube.

If you are signed in to your YouTube or Google account, Google may associate your visit with your user account.

The legal basis is Article 6(1)(a) GDPR.

Further information is available at:

https://policies.google.com/privacy

12. Freshpack Facebook Page

We operate an official Freshpack page on Facebook. For users within the European Economic Area, the platform is provided by:

Meta Platforms Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland

When you visit or interact with our Facebook page, Meta and Freshpack may process personal data. This may include information about:

• page visits;
• likes, reactions and comments;
• messages and other communications;
• interactions with our posts;
• technical device and account information.

Meta provides us with aggregated statistics known as Page Insights. These statistics help us understand how visitors use our Facebook page and enable us to improve our content.

For certain processing activities relating to Page Insights, Meta and French IT Consulting Ltd. may act as joint controllers.

We do not have complete control over the nature, extent and duration of the processing carried out by Meta.

Further information about Meta’s processing activities and your privacy settings is available at:

https://www.facebook.com/privacy/policy/

If you contact us through Facebook, we process the information you provide to respond to your message.

Depending on the nature of your enquiry, the legal basis is Article 6(1)(b) or Article 6(1)(f) GDPR. Where consent is required, processing is based on Article 6(1)(a) GDPR.

13. Recipients of Personal Data

Where necessary and legally permitted, personal data may be disclosed to the following categories of recipients:

• hosting and IT service providers;
• email and communication service providers;
• analytics and platform providers;
• tax advisers, legal advisers and other professional advisers;
• public authorities where disclosure is legally required;
• other service providers acting on our behalf.

Where a service provider processes personal data on our behalf, we enter into the legally required data processing agreements.

14. International Data Transfers

As French IT Consulting Ltd. is established in the United Kingdom, personal data may be processed in the United Kingdom.

When certain service providers are used, personal data may also be transferred to countries outside the European Economic Area, particularly the United States.

International transfers take place only where the applicable legal requirements are met.

The safeguards used may include:

• adequacy decisions issued by the European Commission or the UK Government;
• the EU–US Data Privacy Framework;
• Standard Contractual Clauses;
• the UK International Data Transfer Agreement or UK Addendum;
• other legally recognised safeguards.

15. Retention Periods

We retain personal data only for as long as necessary for the purpose for which it was collected.

Data may be retained for a longer period where:

• statutory retention obligations apply;
• the information is required to establish, exercise or defend legal claims;
• continued processing is covered by valid consent;
• another lawful reason for continued retention exists.

Once the purpose no longer applies and any statutory retention period has expired, the data will be deleted or anonymised.

16. Your Data Protection Rights

Subject to the applicable legal requirements, you have the following rights:

• the right to access your personal data;
• the right to correct inaccurate or incomplete data;
• the right to request deletion of your data;
• the right to restrict processing;
• the right to data portability;
• the right to object to certain processing;
• the right to withdraw consent;
• the right to lodge a complaint with a supervisory authority.

You may withdraw your consent at any time with future effect.

To exercise your rights, please contact:

Email: info@fresh-pack.de

17. Right to Object

Where we process personal data on the basis of our legitimate interests under Article 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation.

If personal data is processed for direct marketing purposes, you may object to that processing at any time without giving a reason.

18. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority.

The UK supervisory authority is:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom

Website: https://ico.org.uk/

You may also contact the supervisory authority responsible for your usual place of residence, place of work or the location of the alleged infringement.

19. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, alteration, unauthorised access and other forms of misuse.

Data transmitted through this website is encrypted using HTTPS or TLS. However, completely risk-free transmission of information over the internet cannot be guaranteed.

20. Automated Decision-Making

We do not generally use decision-making based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you.

21. Changes to This Privacy Policy

We may amend this Privacy Policy if legal requirements, the services used on this website or our processing activities change.

The version published on this website at the relevant time will apply.