Privacy Policy

 

Privacy Statement

With this privacy statement, we would like to inform you about the type, scope, and purpose of the processing of personal data (hereinafter also referred to as “data”). Personal data includes all data that has a personal reference to you, such as your name, address, email address, or user behavior. The privacy policy applies to all data processing operations carried out by us, both as part of our core business activities and for the online media we provide.

Who is responsible for data processing at our company:

Flexora GmbH Gutzkowstraße 30 D-01069 Dresden

+49 (0) 351 2506 0555 info@flexora.de

Processing of Your Data in the Context of Our Company’s Core Activities

If you are our customer or business partner or are interested in our services, the type, scope, and purpose of the processing of your data depend on the contractual or pre-contractual relationships between us. In this sense, the data we process includes all those data provided by you for the purpose of utilizing contractual or pre-contractual services and that are required to process your inquiry or the contract concluded between us. Unless otherwise stated in this privacy statement, the processing and disclosure of your data to third parties are limited to what is necessary and appropriate to respond to your inquiries and/or fulfill the contract between you and us, to protect our rights, and to comply with legal obligations. We will inform you about the data required for this before or during data collection. If we use third-party providers to provide our services, the privacy policies of the respective third-party providers apply.

Relevant Data:

  • Basic data (e.g., names, addresses)
  • Payment data (e.g., bank details, invoices)
  • Contact data (e.g., email address, phone number, mailing address)
  • Contract data (e.g., contract details, contract duration)

Relevant Individuals: Interested parties, business, and contractual partners

Processing Purpose: Execution of contractual services, communication, and response to contact inquiries, office and organizational procedures

Legal Basis: Fulfillment of contract and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legal obligation, Art. 6 para. 1 lit. c GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

Your Rights Under the GDPR

Under the GDPR, you have the following rights, which you can exercise at any time by contacting the responsible party named in Section 1 of this Privacy Policy:

  • Right to Access: You have the right to request information about whether and which data we process about you.
  • Right to Rectification: You have the right to request the correction of inaccurate data or the completion of incomplete data.
  • Right to Erasure: You have the right to request the deletion of your data.
  • Right to Restriction: In certain cases, you have the right to request that we only process your data in a restricted manner.
  • Right to Data Portability: You have the right to request that we provide your data to you or another responsible party in a structured, commonly used, and machine-readable format.
  • Right to Lodge a Complaint: You have the right to file a complaint with a supervisory authority. The competent authority is the one at your usual place of residence, your workplace, or our company headquarters.

Right of Withdrawal

You have the right to revoke your consent to data processing at any time.

Right to Object

You have the right to object at any time to the processing of your data that we base on our legitimate interest under Art. 6 para. 1 lit. f GDPR. If you exercise your right to object, we kindly ask you to explain your reasons. We will then no longer process your personal data unless we can demonstrate compelling legitimate reasons that outweigh your interests and rights.

Regardless of the above, you have the right at any time to object to the processing of your personal data for advertising and data analysis purposes.

Please direct your objection to the contact address of the responsible party listed above.

When Do We Delete Your Data?

We delete your data when we no longer need it or when you request us to do so. This means that—unless otherwise specified in the individual data protection notices of this privacy policy—we delete your data:

  • When the purpose of the data processing no longer applies, and thus the respective legal basis mentioned in the individual data protection notices no longer exists, such as:
    • After the termination of the contractual or membership relationships between us (Art. 6 para. 1 lit. a GDPR)
    • After our legitimate interest in further processing or storage of your data ceases (Art. 6 para. 1 lit. f GDPR)
  • If you exercise your right to withdraw consent and no other legal basis under Art. 6 para. 1 lit. b-f GDPR applies
  • If you exercise your right to object and there are no compelling legitimate reasons preventing the deletion

However, if we need to retain (certain parts of) your data for other purposes—such as tax retention periods (generally 6 years for business correspondence or 10 years for accounting records), the assertion, exercise, or defense of legal claims from contractual relationships (up to four years), or to protect the rights of another natural or legal person—we will delete (the relevant part of) your data only after these periods expire. Until the expiration of these periods, we will restrict the processing of this data to these specific purposes (fulfilling retention obligations).

Cookies

Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters that are stored on your device. Cookies primarily serve to exchange information between your device and our website. This includes, for example, language settings on a website, login status, or the position where a video was last watched.

When visiting our website, two types of cookies are used:

  • Temporary Cookies (Session Cookies): These store a session ID, which allows various requests from your browser to be assigned to the same session. Session cookies are deleted when you log out or close your browser.
  • Persistent Cookies: Persistent cookies remain stored even after you close your browser. This allows our website to recognize your device when you return. These cookies store information such as language settings or login details. Additionally, these cookies can document and store your browsing behavior. This data may be used for statistical, marketing, and personalization purposes.

Besides the classification above, cookies can also be distinguished based on their purpose:

  • Necessary Cookies: These are cookies that are essential for the operation of our website, such as storing logins or shopping cart data during your session or cookies set for security purposes.
  • Statistics, Marketing, and Personalization Cookies: These are cookies used for analytical purposes or measuring reach. Such “tracking” cookies can store information about entered search terms or the frequency of page views. Additionally, a user’s browsing behavior (e.g., viewing certain content, using functions, etc.) can be stored in a user profile. These profiles are used to display content to users that matches their potential interests. If we use services that store cookies for statistics, marketing, and personalization purposes on your device, we will inform you separately in the following sections of our privacy policy or as part of obtaining your consent.

Affected Data:

  • Usage data (e.g., access times, clicked web pages)
  • Communication data (e.g., information about the used device, IP address)

Affected Persons: Users of our online services

Processing Purpose: Displaying our website, ensuring the operation of our website, improving our online offerings, communication, and marketing

Legal Basis:

  • Legitimate Interest, Art. 6 para. 1 lit. f GDPR
  • Consent, Art. 6 para. 1 lit. a GDPR

Web Hosting

We use a provider to host our websites, where our websites are stored and made available for retrieval on the internet (hosting). The provider may process all data transmitted by your browser when using our websites. This includes, in particular, your IP address, which the provider requires to deliver our online offering to your browser, as well as any inputs you make on our website.

In addition, the provider we use may process:

  • The date and time of access to our website
  • Time zone difference to Greenwich Mean Time (GMT)
  • Access status (HTTP status)
  • The amount of data transferred
  • The internet service provider of the accessing system
  • The browser type and version used
  • The operating system used
  • The website from which you accessed our website
  • The pages or subpages you visit on our website

Affected Data:

  • Content data (e.g., posts, photos, videos)
  • Usage data (e.g., access times, clicked pages)
  • Communication data (e.g., information about the used device, IP address)

Affected Persons: Users of our website

Processing Purpose: Displaying our websites, ensuring the operation of our websites

Legal Basis: Legitimate interest, Art. 6 para. 1 lit. f GDPR

Web Host Commissioned by Us: STRATO

Service Provider: STRATO AG, Pascalstr. 10, 10587 Berlin Website: https://www.strato.de/hosting/ Privacy Policy: https://www.strato.de/datenschutz/

Contact

If you contact us via email, social media, telephone, fax, mail, our contact form, or otherwise, and provide us with personal data such as your name, phone number, or email address, or other details about yourself or your inquiry, we process this data to respond to your request within the framework of our pre-contractual or contractual relationships.

Affected Data:

  • Master data (e.g., names, addresses)
  • Contact data (e.g., email address, phone number, postal address)
  • Content data (texts, photos, videos)
  • Contract data (e.g., contract subject, contract duration)

Affected Persons: Prospective customers, clients, business and contract partners

Processing Purpose: Communication and response to contact inquiries, office and organizational procedures

Legal Basis: Contract fulfillment and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

Advertising via Email, Mail, or Telephone

For our advertising communication via email, mail, or telephone, we process personal data. You can object to receiving our marketing materials at any time or revoke your previously given consent.

To prove, in case of doubt, that we had your consent, we may store your data for up to 4 years after your objection or revocation. However, we will no longer use your data for further purposes. If you request earlier deletion, we will comply after confirming that you originally gave us your consent.

Affected Data:

  • Contact data (e.g., email, phone number, postal address)
  • Master data (e.g., names, addresses)

Affected Persons: Communication partners

Processing Purpose: Direct marketing via email, mail, or telephone

Legal Basis: Consent, Art. 6 para. 1 lit. a GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

Use of the App

Our application collects and processes minimal user data to ensure proper functionality and secure usage. Collected Data When using our app, the following information is collected:
  • Technical information about the operating system and app version
  • Error and crash reports to improve stability
  • Anonymous usage statistics to optimize user experience (if you consent)
No User Identification The collected data is purely technical and does not allow direct identification of the user. No personal data such as name, email address, or location data is stored. Data Processing and Storage The collected information is used solely for maintenance, error analysis, and software improvement. No data is shared with third parties or used for advertising purposes. Data Transfer Depending on the server location, the collected data may be transferred outside the European Union. In such cases, we ensure that adequate data protection measures are implemented in accordance with GDPR requirements. For further information on data processing within our desktop app, please contact us using the details provided in the privacy policy.

Web Analytics and Statistics

To analyze visitor flows on our website and evaluate statistics, we use web analytics services. These services collect data such as the website you came from (referrer), the pages you accessed, the duration of your visit, and your interactions. Additionally, data about your browser, computer system, and device type are collected. Depending on your consent, demographic data (e.g., age, gender) and location data may also be processed.

Affected Data:

  • Usage data (e.g., access times, clicked pages)
  • Communication data (e.g., device information, IP address)

Affected Persons: Users of our online offerings

Processing Purpose: Reach measurement, campaign performance evaluation, remarketing, and interest-based marketing

Legal Basis:

  • Consent, Art. 6 para. 1 lit. a GDPR
  • Legitimate interest, Art. 6 para. 1 lit. f GDPR

Google Analytics

Service Provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA EU Headquarters: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland Website: https://marketingplatform.google.com/intl/en/about/analytics/ Privacy Policy: https://policies.google.com/privacy?hl=en Opt-Out Option: https://tools.google.com/dlpage/gaoptout?hl=en

Third-Party Plugins We Use

We have embedded plugins in the form of “social media buttons” from the providers we use on our website. You can recognize which plugin belongs to which provider by the respective logo marking the plugin. When you access a page of our online presence that contains such a plugin, a connection is automatically established between your browser and the provider’s servers, and the provider sets a cookie on your device. At this point, data transfer may already take place, even if you do not have an account with the respective social network operator or are not logged into it while visiting our website.

Additionally, further interactions with the respective social plugin (e.g., clicking the “Like” button on Facebook or the “Re-Tweet” button on Twitter) will transmit data to the provider.

Affected Data:

  • Usage data (e.g., access times, clicked web pages)
  • Communication data (e.g., information about the used device, IP address)

Affected Persons: Users of our website

Processing Purpose: Displaying our website, providing content, ensuring the operation of our website

Legal Basis: Consent via cookie consent banner, Art. 6 para. 1 lit. a GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

We use the following plugins:

Calendly

Service Provider: Calendly, LLC, 271 17th St NW, Ste 1000, Atlanta, GA 30363, USA Website: https://calendly.com Privacy Policy: https://calendly.com/privacy

Content Services

We use certain services to display specific content or graphics (videos, images, music, fonts, maps) on our website. The services we use process your IP address at the time of your visit to our website, as this is necessary to display the respective content in your browser. Additionally, the providers of these services may set further cookies on your device, collecting information about your usage behavior, interests, the device and browser you use, as well as the time and duration of your session.

We use the following content services:

Google Maps

Service Provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA EU Headquarters: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland Website: https://www.google.com/maps Privacy Policy: https://policies.google.com/privacy Opt-Out Option: https://tools.google.com/dlpage/gaoptout?hl=en

Google Web Fonts

Service Provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA EU Headquarters: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland Website: https://fonts.google.com/ Privacy Policy: https://policies.google.com/privacy

Security Measures

We implement technical and organizational security measures in accordance with the state of the art to comply with data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties.

Current Status and Changes to This Privacy Policy

This privacy policy is currently valid and was last updated in February 2025. Due to legal or regulatory changes, it may become necessary to adjust this privacy policy.

This privacy policy was created with the help of the privacy policy generator from SOS Recht. SOS Recht is a service provided by Mueller.legal, a law firm based in Berlin.