Data Protection & Data Security

With Fairmas, you operate your financial planning and management reporting in an absolutely legally secure and GDPR-compliant manner.

This page will help you to integrate our applications in your company in a legally compliant way (no legal advice). Fairmas aims to provide its customers with easy-to-use, high-performance and legally compliant software.
Below we have summarized the most important points.

Data processing by order

In the case of the licensing of our software, the order processing (AV) regulates the transfer of personal data. In this context, you are the customer, as you transfer user data to Fairmas, and Fairmas is the contractor, as we receive and process this data.

In order to comply with the legal provisions of the GDPR, Fairmas provides you with an Agreement on Commissioned Processing in accordance with the legal provisions of Art. 28 of the GDPR and the other data protection requirements of the General Data Protection Regulation. This agreement is part of a separate license agreement with the customer.
Example of a current AV agreement.

Qualified service providers

Modern and high-performance software applications require a large number of resources and services. Based on that, Fairmas is dependent on the cooperation with external service providers. Of course, we only use selected professional partners who meet our requirements for data protection and IT security.
Under the following link you will find an overview of our current service providers.

Competent contact persons

The management and the externally appointed data protection officer of Fairmas GmbH are responsible for data protection. For questions regarding data protection, you can reach us as follows:
E-mail:  datenschutz@fairmas.com

Secure communication

The communication between your browser and our server is tap-proof thanks to the secured SSL communication. Our software always forces every communication to the tap-proof SSL variant. You can always tell by the https:// in the address bar of your browser.

Automatic data backup

We completely backup all data to a separate server every 24 hours. Even in the unlikely event of a hardware failure, the data can be restored shortly thanks to the data backup.

Your data in a secure data center

Our applications are operated in a secure high-performance data center run by a professional service provider. For customers within the European Union, data is always stored and processed in the EU legal area (in accordance with the General Data Protection Regulation). The data centers of our partners always have the highest standards for failure and access protection and are operated with electricity from renewable sources. Of course, the cooperation between us and the service provider is also contractually regulated, and we are regularly audited.

No transfer of data to third parties

Under no circumstances will your data be passed on to unauthorized third parties. We use the data of our users exclusively for the purposes of access security, documentation and the provision of reports. Fairmas offers some customers the optional Single Sign On Feature (hereinafter “SSO”) from third-party providers for automatic login to the user account. Data transfer to this third-party provider only takes place if the customer has explicitly requested and set this up.
The above-mentioned information largely relates to the provision of software applications as part of a direct contractual and contractual relationship with the customer. An overview of data protection in relation to the operation of this website can be found here.

Service Providers

Qualified service providers

Modern and high-performance software applications require a multitude of resources and services. Based on that, Fairmas is dependent on cooperation with external service providers. It goes without saying that we only use selected, professional partners who meet our high requirements for data protection and IT security.

Subcontracting relationships

Fairmas shall cooperate with the subcontractors named below in a subcontracting relationship in order to provide the main service in accordance with the licence agreement with the Customer. This cooperation is subject to a contractual agreement in accordance with Art. 28 (2-4) DSGVO.
Company / SubcontractorAddress/CountryService
Host Europe GmbHHansestr. 111,
51149 Cologne
Germany		Provision, management and
maintenance of IT hardware (server) and
data lines.
Hetzner Online GmbH Industriestraße 25
91710 Gunzenhausen
Germany 		Provision, management and
maintenance of IT hardware (server) and
data lines.
Microsoft Corporation

Responsible in Europe:
Microsoft Ireland Operations Ltd.		One Microsoft Way
Redmond, Washington 98052, USA

Attn: Data Protection
One Microsoft Place
South County Business Park, Leopardstown
Dublin 18, D18 P521, Ireland		Provision, management and
maintenance of IT hardware (server) and
data lines, including provision of software
applications for editing and displaying
data as well as support and consulting
services.
Sendinblue GmbH
(“Brevo”)
Köpenicker Str. 126, 10179 Berlin
Germany		Transmission of system messages and reports to software users and registered recipients via e-mail or SMS.
IONOS SEElgendorfer Str. 57
56410 Montabaur
Germany		Receipt, storage and forwarding of
business management data and
transmission of system messages and
reports to software users and registered
recipients by email or SMS.
Cloudflare Inc. 101 Townsend Street
San Francisco, CA, 94107
USA
Provision of security and performance
services for internet-facing applications,
incl. Web Application Firewall (WAF)
Argo Smart Routing (Zone Level, to
optimize network performance) and DNS
Services. Processes network traffic on
behalf of the customer to deliver security,
reliability, and performance
improvements.
We reserve the right to change and update this overview of subcontracting relationships. Clients are requested to regularly inform themselves about the current subcontracting relationships.

Status: September 2025

Download as PDF here.
The above-mentioned subcontractors only refer to the provision of software applications within the framework of a direct contractual and order relationship with the customer.
An overview of data protection in relation to the operation of this website can be found here.