1. Privacy at a glance
General information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.
Data collection on this website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You will find the operator’s contact details in the section "Controller" of this privacy policy.
How do we collect your data?
On the one hand, your data is collected when you actively provide it to us, for example by e-mail or via the appointment booking. On the other hand, certain technical data is collected automatically by our IT systems when you visit the website (e.g. browser, operating system, time of page access).
What do we use your data for?
Data is collected to ensure the error-free provision of the website and the security of our IT systems. This website does not use any analytics or tracking tools.
What rights do you have regarding your data?
You have the right to receive information about the origin, recipients and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data, to withdraw any consent given at any time with effect for the future, and, under certain circumstances, to request the restriction of processing. You have the right to lodge a complaint with the competent supervisory authority.
2. Hosting
1blu GmbH (web hosting)
This website is hosted by 1blu GmbH, Riedemannweg 60, 13627 Berlin, Germany. The servers are located in Germany. When the website is accessed, the host processes technically necessary connection data (e.g. IP address, timestamp, browser information) in server log files in order to deliver the website and ensure the security of the service.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a reliable and secure presentation of the website). No personal data is transferred to a third country outside the EU.
3. General notes and mandatory information
Controller
The controller for data processing on this website is:
FlowQ Beratungs- & Servicegesellschaft mbH
Zeppelinstraße 73
81669 Munich, Germany
Phone: +49 (0) 89 2000 0719
Email: info@flowq.de
Storage period
Unless a more specific storage period is stated in this privacy policy, your personal data remains with us until the purpose for the data processing no longer applies. If you assert a justified request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing it (e.g. retention periods under tax or commercial law).
SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the browser address line changing from "http://" to "https://".
Revocation of your consent
Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. The lawfulness of the data processing carried out up to the withdrawal remains unaffected.
Right to lodge a complaint
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, their place of work or the place of the alleged violation.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format.
Information, correction and deletion
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to correction or deletion of this data.
Right to object (Art. 21 GDPR)
Where data processing is based on Art. 6(1)(f) GDPR (legitimate interest), you have the right to object, on grounds relating to your particular situation, to the processing of your personal data at any time. On this website, this applies to processing in server log files, to hosting and to the handling of your enquiries by e-mail or phone, insofar as we base it on legitimate interest. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Where your personal data is processed for direct marketing, you have the right to object at any time, without stating reasons, to the processing of your data for such marketing. If you object, we will no longer process your data for these purposes.
Please send your objection informally to datenschutz@flowq.de or to the address given in the section "Controller". It is free of charge for you.
4. Data collection on this website
Server log files
When the website is accessed, technically necessary connection data (e.g. IP address, timestamp, browser type and version, operating system, referrer URL) is processed in server log files. This data is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR.
Contact by e-mail or phone
If you contact us by e-mail or phone, we process your details to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual or contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in the effective handling of enquiries).
Appointment booking with Cal.com (two-click embed)
For appointment bookings we offer an embed of Cal.com (Cal.com, Inc., USA). The embed is designed in two stages: when you open the booking dialog, only a notice is displayed at first. A connection to Cal.com is only established once you actively click "Load calendar". Only then can Cal.com set cookies and process personal data (e.g. IP address and the appointment details you enter).
The legal basis for the embed is your consent pursuant to Art. 6(1)(a) GDPR; the processing of appointment data takes place for the implementation of pre-contractual measures pursuant to Art. 6(1)(b) GDPR. Transfers to the USA are based on the EU Commission’s standard contractual clauses. Further information: Cal.com privacy policy.
Web fonts (locally hosted)
This website uses fonts that are hosted locally on our server for a consistent presentation. No connection to servers of Google or other third-party providers is established.
No analytics or tracking tools
This website does not use any analytics tools (e.g. Google Analytics), advertising trackers or social media plugins. No cookies subject to consent requirements are set without your active consent.
Market calculator: sample companies and appointment offer by e-mail
Purpose: If you enter your name, company and e-mail address in the market calculator, we check your name and company against your e-mail address so that the analysis only goes to genuine company requests, and send you a confirmation e-mail. After you confirm, we send you sample companies for your chosen segment and an offer to book an intro call. If you choose to give a phone number, we use it only for questions about the sample companies. The sample companies are company data, not data about you.
Legal basis: Your consent under Art. 6(1)(a) GDPR. We use double opt-in: your consent becomes effective only when you click the confirmation link. As proof under Art. 7(1) GDPR we log the time of your entry, the version of the consent text shown and the time of confirmation.
Data processed: Name, company, e-mail address, phone number if given, chosen segment, the timestamps above and a hashed network value (not the plain IP address) used solely to prevent abuse, stored until confirmation but for no more than 7 days.
Storage period: Unconfirmed requests are deleted after 7 days. Confirmed consents and related data are stored for 24 months or until you withdraw consent, whichever comes first.
Recipients: HubSpot, Inc., USA (CRM; transfer based on the EU-US Data Privacy Framework and EU standard contractual clauses, see the sub-processor list for customers), the mail server used for sending (netcup GmbH, Nuremberg) and the database and automation infrastructure (Hetzner Online GmbH, Falkenstein).
Withdrawal: You may withdraw your consent at any time, informally and with effect for the future, e.g. by e-mail to info@flowq.de. Processing carried out before withdrawal remains lawful.