PRIVACY POLICY – NEXT
 

Date: 11 September 2026

This privacy policy applies to the NEXT website, including its language versions. It provides information on the processing of personal data when visiting the website, searching for retailers, contacting us and in connection with our newsletter.
 

1. DATA CONTROLLER

The data controller is:

Fendt-Caravan GmbH
Gewerbepark Ost 26
86690 Mertingen
Germany

Telephone: +49 (0) 9078 9688-0
Email: info@fendt-caravan.de
 

2. DATA PROTECTION OFFICER

You can contact our Data Protection Officer at:

Fendt-Caravan GmbH
Data Protection Officer
Gewerbepark Ost 26
86690 Mertingen
Germany

Email: datenschutz@fendt-caravan.de
 

3. GENERAL INFORMATION ON DATA PROCESSING

We process personal data in order to provide the website, respond to enquiries and offer the features you have requested. We require your consent for the statistical analysis of website usage, advertising measurements and the integration of external content. The purposes and legal bases for each type of processing are explained below.

Technical service providers assist us with the operation, maintenance and support of the website, as well as with the distribution of the newsletter. These providers are granted access to personal data to the extent necessary for their respective tasks. The requirements of Article 28 of the GDPR apply to processing carried out on our behalf. The analytics, advertising and media services listed below may also process data under their own or joint responsibility.

Personal data is deleted or anonymised when the purpose for which it was processed no longer applies and there is no legal basis for further storage. In particular, the completion of an enquiry, the cancellation of a newsletter subscription and the completion of the relevant analysis are decisive factors. Statutory retention obligations and the necessary retention of evidence or documents relating to specific legal claims remain unaffected. The retention periods and deletion criteria described below apply to individual types of data. Any shorter retention periods already agreed upon are not extended by this statement.

4. HOSTING AND TECHNICAL ACCESS DATA

The website is hosted by the following service provider:

[k:i] GmbH
Neubergstraße 30 a
97072 Würzburg
Germany

When you access the website, technical connection data is processed. This includes the IP address, date and time, the page or file requested, the volume of data transferred and the access status. In addition, information regarding the browser and operating system is collected, as well as the address of the previously visited page, provided that your browser transmits this information.

This processing serves to deliver the website, investigate technical errors, and detect and prevent unauthorised access. The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the reliable operation and protection of our website.

The retention of technical logs depends on whether the data is still required for error analysis or for investigating a security-related incident. Data relating to a specific security incident may be retained until the investigation has been concluded and any necessary legal clarification has been provided. No further storage is envisaged solely for the sake of retaining data.

 

5. COOKIES AND CONSENT MANAGEMENT WITH USERCENTRICS

Cookies and similar technologies

Our website uses cookies and similar storage technologies. These enable settings and identifiers to be stored on your device and read when you visit the site again. Web beacons and scripts may also access information on your device.

Without your consent, such storage and access are only permitted insofar as they are strictly necessary for a digital service you have expressly requested. The legal basis for this is Section 25(2)(2) of the TDDDG.

For storage and access that are not strictly necessary, we require your consent in accordance with Section 25(1) of the TDDDG. The associated processing of personal data is based on Article 6(1)(a) of the GDPR. Consent to statistical analysis does not automatically include the use of marketing services.

Usercentrics

We use the following to retrieve, store and manage your consents:

Usercentrics GmbH
Sendlinger Straße 7
80331 Munich
Germany

The data processed includes your selection, the time of your decision, a consent identifier, the version and language of the consent notice, as well as technical details such as your IP address, browser information and the website visited. Storing this data enables us to take your selection into account and to provide evidence that consent has been given.

The legal basis for this documentation is Article 6(1)(c) of the GDPR in conjunction with Article 7(1) of the GDPR. The necessary storage of your selections on your device is carried out in accordance with Section 25(2)(2) of the TDDDG.

With regard to the duration of storage, a distinction must be made between the selection stored in the browser and the proof of consent. The retention period for browser information is set out in the service information within the privacy settings. Proof of consent is retained for the duration of the processing based on that consent and beyond, insofar as it is required to fulfil obligations to provide evidence or to clarify legal claims.

Changing your preferences and withdrawing consent

You can use the privacy settings on the website to select or decline optional services and change your decision at a later date. There you will find further details on the services, their purposes and the cookies or similar identifiers used.

You may withdraw your consent at any time with effect for the future. The lawfulness of the processing up to the point of withdrawal remains unaffected. The withdrawal applies to future processing that requires consent; it does not reverse any data transfers that have already taken place. Your rights to erasure and to restriction of processing remain in force.

You can access the general content of the website even without consenting to analytics and marketing services. Separate authorisation is required for external content.
 

6. CONTACT

If you contact us by email, telephone or by other means, we will process your contact details and the information relating to your enquiry. This may include your name, your email address, your telephone number, information about a vehicle and the content of your message.

We use this information to process your enquiry and for the associated communication. If the enquiry relates to a contract with you or pre-contractual measures at your request, the legal basis is Article 6(1)(b) of the GDPR. We process other enquiries on the basis of Article 6(1)(f) of the GDPR. Our legitimate interest lies in responding to enquiries addressed to us.

Providing this information is voluntary. Without sufficient contact details or information regarding the matter in question, we may not be able to process an enquiry.

Once the enquiry has been processed, the data will be deleted, provided there are no statutory retention obligations and the data is no longer required for the establishment, exercise or defence of legal claims.

 

7. STORE LOCATOR

The dealer search function allows you to find NEXT retail partners. Dealer details are provided in a separate module on the website. An external map view is not part of this function.

The search criteria you enter, such as a postcode or a town, are used to display suitable retailers. Technical connection data is also processed when retrieving the required data.

The legal basis for providing the dealer search is Article 6(1)(f) of the GDPR. Our legitimate interest lies in enabling interested parties to search for a retail partner. The search criteria are required to carry out the search; this does not, in itself, constitute authorisation for their use for advertising purposes.

Subject to the relevant consent, interactions with the dealer search function may also be analysed. In the case of the event tracking set up for Meta, this also includes details such as postcode, town or a specific retailer. These details may be processed together with technical identifiers and are therefore not anonymous solely because the visitor’s name is missing. Further details can be found in the sections on the respective tracking and advertising services.

If you contact a retailer via their specified contact details or website, they will process your enquiry on their own responsibility. The retailer’s privacy policy applies to any further advice and communication.

8. NEWSLETTERS VIA CLEVERREACH

Subscription and distribution

For our NEXT newsletter, we use:

CleverReach GmbH & Co. KG
Schafjückenweg 2
26180 Rastede
Germany

The newsletter provides information about NEXT, our products, news and events. The subscription button on the NEXT website leads to an external CleverReach registration page, which opens in a new browser tab. The sign-up form is not directly embedded in the NEXT website. The connection to CleverReach required for this is only established when the external sign-up page is opened.

Your email address is required to subscribe. You may provide your first name on a voluntary basis.

Registration takes place via the double opt-in procedure. After submitting the form, you will receive an email containing a confirmation link. The newsletter will only be activated once this confirmation has been provided. To provide evidence of registration, the relevant consent information, as well as the times and technical details of the registration and confirmation, are documented. This may include the respective IP addresses.

The sending of the newsletter is based on your consent in accordance with Article 6(1)(a) of the GDPR. The documentation of consent is based on Article 6(1)(c) of the GDPR in conjunction with Article 7(1) of the GDPR.

Personalised analysis of opens and clicks

A personalised performance measurement system has been set up for the newsletter. This records whether a newsletter has been opened and which links contained therein have been accessed. These events can be attributed to the respective recipient. The analysis is therefore not carried out exclusively on an anonymous basis.

Tracking pixels and individually assigned links may be used for this purpose. The information processed includes details of the message sent, the opening or click event, the time of the event and the content accessed, as well as technical connection and device information. The analysis serves to understand the use of our newsletters and to improve their content.

For this personalised performance measurement, we require consent in accordance with Article 6(1)(a) of the GDPR. Where information is stored on or read from your device, Section 25(1) of the TDDDG also applies. Consent to marketing services on the NEXT website does not replace the required consent to the personalised analysis of newsletter usage. Nor does the mere mention of this in this privacy policy constitute consent.

Withdrawal and erasure

You may withdraw your consent to receive the newsletter at any time via the unsubscribe link in each issue or by sending us a message. You may also contact us to withdraw your consent to the analysis of personal data for performance measurement.

Once you have unsubscribed, you will no longer receive any further newsletters. Unconfirmed subscriptions and unsubscribed recipient records are automatically deleted after one month.

This is to be distinguished from records required to substantiate prior consent or to resolve a specific legal dispute. Any further retention of such records is limited to this purpose and ceases when the records are no longer required. It does not entitle us to continue sending the newsletter or to carry out personalised performance tracking.
 

9. WEB ANALYTICS WITH MATOMO

Subject to your consent, we use the self-hosted web analytics software Matomo. The installation is operated under our technical domain next.myfendt.com. The following provider is used to host the Matomo installation:

IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany

Matomo analyses which content and features of the NEXT website are being used. The results help us to further develop the website and identify usability issues.

The data processed includes the pages and files accessed, the date and time, the origin of a visit, campaign information and interactions with the website. In addition, technical information is collected regarding the browser, operating system, device, screen resolution and language. The IP address is processed to establish a connection with the Matomo server; an approximate geographical location can be derived from connection data.

The analysis can link visits and actions using identifiers. The configuration used employs cookies under the domain of the visited website. The following standard retention periods apply:

• _pk_id: 13 months; browser recognition and association of visits.
• _pk_ses: 30 minutes; association of actions with a visit.
• _pk_ref: six months; storage of referral and association information.

Browser functions or deletion initiated by you may shorten the actual storage period.

A user ID, heatmaps, session recordings and form analyses are not enabled in the Matomo configuration described for NEXT.

The legal basis is your consent pursuant to Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. Matomo is used for statistical analysis. Consent to Matomo does not automatically authorise the transfer of data to Google Ads or Meta.

The duration of a cookie is not the same as the retention period for data already transmitted to the Matomo server. For the usage data stored there, the decisive factor is whether it is still required for the creation and verification of usage statistics, for the analysis of changes to the website, or for the resolution of an identified problem. If this need no longer applies, personal or pseudonymous raw data must be deleted or anonymised. Statistics that do not relate to specific individuals may be retained for longer.

The analysis data is processed within the self-hosted installation and is not transferred to the manufacturer of the Matomo software solely on the basis of the use of that software.
 

10. MATOMO TAG MANAGER

We use the Matomo Tag Manager to manage the analytics and marketing scripts used on the NEXT website. Google Ads conversion tracking is also integrated via this tool.

The Tag Manager organises the execution of the scripts. The services integrated via this tool constitute separate data processing operations and are described in the relevant sections. The technical integration of the Tag Manager does not constitute consent to an analytics or marketing service.

Scripts requiring consent are only executed in accordance with your selection in the privacy settings. The legal basis arises from the respective processing; the Tag Manager does not constitute separate authorisation for tracking.
 

11. GOOGLE ADS AND CONVERSION TRACKING

We use Google Ads conversion tracking. The provider is:

Google Ireland Limited
, Gordon House
, Barrow Street
, Dublin 4
, Ireland

Purpose and scope of data

We use conversion tracking to check whether a Google advert leads to an interaction on the NEXT website that we have defined. This includes selected interactions that are also the subject of our existing website and campaign analyses, in particular the use of the retailer search function. Submitting a contact form is not currently set up as a separate Google Ads conversion.

The following data may be processed: IP address, browser and device information, date and time, the page address accessed (including any URL parameters transmitted), the previously visited page, cookies and other online identifiers, as well as details regarding the advert, the click on the advert and the triggered event. This analysis is used to link website interactions to advertising campaigns and to assess their effectiveness.

Consent and Basic Consent Mode

Tracking is integrated via the Matomo Tag Manager. Google Ads will only be loaded once you have explicitly consented to the service within the ‘Marketing’ category.

We use Basic Consent Mode. Without the required consent, the Google Ads tags remain blocked. In this case, neither cookie-based measurements nor cookie-free measurement signals are sent to Google via this tracking.

The legal basis is Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG.

Currently, conversion tracking only

Neither Google Ads remarketing nor any personalised advertising based on it is currently set up for the NEXT website. The ‘Enhanced Conversions’ function is not used. Therefore, no additional matching of contact data takes place via this function.

Recipients and storage

Google processes data from the Google Ads service described here under its own responsibility under data protection law. Processing by Google LLC in the United States is possible. For transfers to third countries, the information in Section 14 applies.

The retention periods for the cookies and similar identifiers used can be found in the privacy settings. We use the analytics available in our advertising account to analyse campaign results and to plan further advertising. The retention period is determined by the length of time for which the results are still required to evaluate the campaign in question and to compare it with subsequent campaigns.

Further storage by Google is governed by its processing purposes, the relevant account settings, and security and statutory retention requirements. Further information can be found in Google’s Privacy Policy.
 

12. META PIXEL AND META ADS

We use the Meta Pixel and associated measurement and advertising functions. The provider is:

Meta Platforms Ireland Limited
, Merrion Road
, Dublin 4, D04 X2K5
, Ireland

Events tracked and purposes

This integration is used to measure and optimise our advertising on Facebook and Instagram. It enables visits and actions on the NEXT website to be attributed to an advert.

The following are tracked: page views (“Pageview”), events designated as “Leads” and a separately defined conversion for interactions with the retailer search function. For the retailer search, the postcode, town or a specific retailer name are specified as event parameters.

In addition, the IP address, pages visited and their addresses, the previously visited page, date and time, browser and device information, cookies and other online identifiers, as well as details relating to the respective advertising campaign, may be processed. Such data may be personally identifiable, even if no name is transmitted.

Meta may link this information with other data held by it and associate it with a Facebook or Instagram account. This may result in the creation of interest profiles, which are used to select and target advertising.

Planned enhancements

Remarketing, Custom Audiences, enhanced data matching and the Conversions API are also planned for Meta campaigns.

Remarketing is used to target previous visitors with adverts again. Custom Audiences enable the creation of target groups based on specific characteristics or actions. With enhanced data matching, additional identifying details, such as email addresses or telephone numbers, can be used to match data held by Meta. Converting such details into hash values does not remove their personal nature. The Conversions API allows event data to be transmitted server-side rather than exclusively via the browser.

These additional processing activities require adequate information and consent. Information regarding the specific additional data types actually used in this context will be provided prior to their collection. Consent that relates solely to event measurement carried out to date does not automatically extend to new matching or transmission functions.

Legal basis and responsibility

For the collection and transmission of data subject to consent, we use Article 6(1)(a) of the GDPR as the legal basis. Where information is stored on or accessed from the end device, Section 25(1) of the TDDDG also applies. Consent is given via the data protection settings for Meta within the ‘Marketing’ category. Server-side transmission must not circumvent the consent decision made.

We share responsibility with Meta Platforms Ireland Limited for the collection and transmission of the relevant event data in accordance with Article 26 of the GDPR. We are responsible for the integration on our website and for providing the necessary information and obtaining consent. Meta is responsible for the subsequent independent processing of this data within its own systems.

You may exercise your data protection rights both with us and with Meta. The division of responsibilities between the data controllers does not limit these rights. Further details are set out in the Joint Controller Agreement for Meta Business Tools.

Storage and transfer to third countries

We use the results available in our advertising account to evaluate the respective campaign and to compare it with other advertising measures. The retention of personal data must be limited to the period necessary for this purpose. Meta’s privacy policy applies to any further processing and storage in its own systems.

Processing by Meta Platforms, Inc. in the United States is possible. The applicable requirements are set out in Section 14.
 

13. SOCIAL WALL AND EXTERNAL LINKS

The Curator.io service is provided for the optional display of selected social media posts. The provider is:

Curator Group Pty Ltd
69 Ruthven Street
Bondi Junction NSW 2022
Australia

Email: support@curator.io

The Social Wall displays posts containing text, images and publicly visible profile information. The posts may link to the relevant external platform. Opening such a link is distinct from the display of the posts on the NEXT website.

When the Social Wall is accessed, your browser may establish connections to Curator.io and to the servers providing the displayed content. In doing so, your IP address, date and time, the page accessed, browser and device information, and technical access data may be processed. The service also provides a count of feed views.

To activate this feature, we require your consent in accordance with Article 6(1)(a) of the GDPR and, in the case of device access requiring consent, additionally in accordance with Section 25(1) of the TDDDG.

The provider is based outside the European Union and the European Economic Area. There is no general adequacy decision by the European Commission for Australia. Activation involving the transfer of personal data to a third country therefore requires, in addition, a valid data protection basis for this transfer. Until this requirement is met, the external Social Wall remains deactivated. Consent to cookies or to the display of content does not replace the necessary safeguards for transfers to third countries.

If the feature is enabled at a later date, the legal basis for the transfer and storage information applicable to the specific service will be provided before consent is given.

The rest of the content on the NEXT website is available independently of the Social Wall. If you open an external link, the operator of the destination page will process data in accordance with their own privacy policy.
 

14. DATA TRANSFERS TO THIRD COUNTRIES

In the case of the services described, in particular Google Ads and Meta, personal data may be processed outside the European Union and the European Economic Area. The requirements of Articles 44 et seq. of the GDPR apply additionally to such transfers.

For transfers to certified organisations in the United States, the European Commission’s adequacy decision on the EU-US Data Privacy Framework applies. This can only be relied upon if the relevant recipient is effectively certified and the specific processing is covered by the certification. Google LLC declares its participation in this data protection framework.

Where a transfer is not covered by an adequacy decision, appropriate safeguards are required. These may include the European Commission’s Standard Contractual Clauses pursuant to Article 46 of the GDPR. Their use requires that they have been agreed for the transfer in question and that the necessary level of protection is ensured, where necessary through supplementary measures.

A transfer option mentioned in this privacy policy does not constitute blanket consent to any further recipients or countries of processing. In the absence of a lawful basis, the transfer in question must not take place.

You can obtain information on the safeguards used for a specific processing operation and access to the relevant provisions from our Data Protection Officer.
 

15. YOUR RIGHTS

Subject to the statutory conditions, you have the right to access your personal data under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR and the right to restriction of processing under Article 18 of the GDPR.

Under Article 20 of the GDPR, you may also request to receive the data you have provided in a structured, commonly used and machine-readable format, provided that we process this data automatically on the basis of your consent or a contract. Direct transfer to another data controller will take place where technically feasible.

To exercise your rights, you may contact us or our Data Protection Officer.

Withdrawal of consent

You may withdraw your consent at any time with effect for the future. For the services on the website, the privacy settings are available to you. For the newsletter, you can use the unsubscribe link or contact us. The lawfulness of the processing carried out up to the point of withdrawal remains unaffected.

Right to object

If your data is processed on the basis of Article 6(1)(f) of the GDPR, you may object at any time on grounds relating to your particular situation. This also applies to profiling based on this provision.

Following such an objection, we will no longer process the data in question, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

You may object at any time, without giving any reason, to the processing of your data for direct marketing purposes. This also applies to profiling insofar as it is related to direct marketing. The data will then no longer be processed for these purposes.

Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority, in particular at the place of your habitual residence, your place of work or where the alleged infringement occurred.

The competent authority for Fendt-Caravan GmbH is:

Bavarian State Office for Data Protection Supervision
Promenade 18
91522 Ansbach
Germany

Postal address:
PO Box 1349
91504 Ansbach
Germany
 

16. DATA SECURITY AND CHANGES

We implement technical and organisational measures to protect personal data. The connection to the NEXT website is TLS-encrypted. This protects the data transmitted between your browser and the web server. We will update this privacy policy if the processing operations described or the relevant legal requirements change. This does not replace any new consent that may be required.

FURTHER INFORMATION ON DATA PROTECTION

Usercentrics:
usercentrics.com/privacy-policy-cmp/

CleverReach:
www.cleverreach.com/de-de/datenschutz/

Matomo – Cookies:
matomo.org/faq/general/faq_146/

Google – Privacy policy:
policies.google.com/privacy

Google – Data retention:
policies.google.com/technologies/retention

Google – Data transfers:
policies.google.com/privacy/frameworks

Meta – Privacy policy:
www.facebook.com/privacy/policy/

Meta – Joint responsibility for Business Tools:
www.facebook.com/legal/controller_addendum

Curator.io:
curator.io/privacy-policy

Bavarian State Office for Data Protection Supervision:
www.lda.bayern.de/de/kontakt.html