Privacy Policy

 

Privacy Statement

With this privacy statement, we would like to inform you about the type, scope, and purpose of the processing of personal data (hereinafter also referred to as “data”).
Personal data includes all data that has a personal reference to you, such as your name, address, email address, or user behavior.
The privacy policy applies to all data processing operations carried out by us, both as part of our core business activities and for the online media we provide.

Who is responsible for data processing at our company:

Flexora GmbH
Gutzkowstraße 30
D-01069 Dresden

+49 (0) 351 2506 0555
info@flexora.de

Processing of Your Data in the Context of Our Company’s Core Activities

If you are our customer or business partner or are interested in our services, the type, scope, and purpose of the processing of your data depend on the contractual or pre-contractual relationships between us.
In this sense, the data we process includes all those data provided by you for the purpose of utilizing contractual or pre-contractual services and that are required to process your inquiry or the contract concluded between us.
Unless otherwise stated in this privacy statement, the processing and disclosure of your data to third parties are limited to what is necessary and appropriate to respond to your inquiries and/or fulfill the contract between you and us, to protect our rights, and to comply with legal obligations.
We will inform you about the data required for this before or during data collection. If we use third-party providers to provide our services, the privacy policies of the respective third-party providers apply.

Relevant Data:

  • Basic data (e.g., names, addresses)
  • Payment data (e.g., bank details, invoices)
  • Contact data (e.g., email address, phone number, mailing address)
  • Contract data (e.g., contract details, contract duration)

Relevant Individuals: Interested parties, business, and contractual partners

Processing Purpose: Execution of contractual services, communication, and response to contact inquiries, office and organizational procedures

Legal Basis: Fulfillment of contract and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legal obligation, Art. 6 para. 1 lit. c GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

Your Rights Under the GDPR

Under the GDPR, you have the following rights, which you can exercise at any time by contacting the responsible party named in Section 1 of this Privacy Policy:

  • Right to Access: You have the right to request information about whether and which data we process about you.
  • Right to Rectification: You have the right to request the correction of inaccurate data or the completion of incomplete data.
  • Right to Erasure: You have the right to request the deletion of your data.
  • Right to Restriction: In certain cases, you have the right to request that we only process your data in a restricted manner.
  • Right to Data Portability: You have the right to request that we provide your data to you or another responsible party in a structured, commonly used, and machine-readable format.
  • Right to Lodge a Complaint: You have the right to file a complaint with a supervisory authority. The competent authority is the one at your usual place of residence, your workplace, or our company headquarters.

Right of Withdrawal

You have the right to revoke your consent to data processing at any time.

Right to Object

You have the right to object at any time to the processing of your data that we base on our legitimate interest under Art. 6 para. 1 lit. f GDPR.
If you exercise your right to object, we kindly ask you to explain your reasons.
We will then no longer process your personal data unless we can demonstrate compelling legitimate reasons that outweigh your interests and rights.

Regardless of the above, you have the right at any time to object to the processing of your personal data for advertising and data analysis purposes.

Please direct your objection to the contact address of the responsible party listed above.

When Do We Delete Your Data?

We delete your data when we no longer need it or when you request us to do so.
This means that—unless otherwise specified in the individual data protection notices of this privacy policy—we delete your data:

  • When the purpose of the data processing no longer applies, and thus the respective legal basis mentioned in the individual data protection notices no longer exists, such as:
    • After the termination of the contractual or membership relationships between us (Art. 6 para. 1 lit. a GDPR)
    • After our legitimate interest in further processing or storage of your data ceases (Art. 6 para. 1 lit. f GDPR)
  • If you exercise your right to withdraw consent and no other legal basis under Art. 6 para. 1 lit. b-f GDPR applies
  • If you exercise your right to object and there are no compelling legitimate reasons preventing the deletion

However, if we need to retain (certain parts of) your data for other purposes—such as tax retention periods (generally 6 years for business correspondence or 10 years for accounting records), the assertion, exercise, or defense of legal claims from contractual relationships (up to four years), or to protect the rights of another natural or legal person—we will delete (the relevant part of) your data only after these periods expire.
Until the expiration of these periods, we will restrict the processing of this data to these specific purposes (fulfilling retention obligations).

Cookies

Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters that are stored on your device. Cookies primarily serve to exchange information between your device and our website. This includes, for example, language settings on a website, login status, or the position where a video was last watched.

When visiting our website, two types of cookies are used:

  • Temporary Cookies (Session Cookies): These store a session ID, which allows various requests from your browser to be assigned to the same session. Session cookies are deleted when you log out or close your browser.
  • Persistent Cookies: Persistent cookies remain stored even after you close your browser. This allows our website to recognize your device when you return. These cookies store information such as language settings or login details. Additionally, these cookies can document and store your browsing behavior. This data may be used for statistical, marketing, and personalization purposes.

Besides the classification above, cookies can also be distinguished based on their purpose:

  • Necessary Cookies: These are cookies that are essential for the operation of our website, such as storing logins or shopping cart data during your session or cookies set for security purposes.
  • Statistics, Marketing, and Personalization Cookies: These are cookies used for analytical purposes or measuring reach. Such “tracking” cookies can store information about entered search terms or the frequency of page views. Additionally, a user’s browsing behavior (e.g., viewing certain content, using functions, etc.) can be stored in a user profile. These profiles are used to display content to users that matches their potential interests. If we use services that store cookies for statistics, marketing, and personalization purposes on your device, we will inform you separately in the following sections of our privacy policy or as part of obtaining your consent.

Affected Data:

  • Usage data (e.g., access times, clicked web pages)
  • Communication data (e.g., information about the used device, IP address)

Affected Persons: Users of our online services

Processing Purpose: Displaying our website, ensuring the operation of our website, improving our online offerings, communication, and marketing

Legal Basis:

  • Legitimate Interest, Art. 6 para. 1 lit. f GDPR
  • Consent, Art. 6 para. 1 lit. a GDPR

Web Hosting

We use a provider to host our websites, where our websites are stored and made available for retrieval on the internet (hosting). The provider may process all data transmitted by your browser when using our websites. This includes, in particular, your IP address, which the provider requires to deliver our online offering to your browser, as well as any inputs you make on our website.

In addition, the provider we use may process:

  • The date and time of access to our website
  • Time zone difference to Greenwich Mean Time (GMT)
  • Access status (HTTP status)
  • The amount of data transferred
  • The internet service provider of the accessing system
  • The browser type and version used
  • The operating system used
  • The website from which you accessed our website
  • The pages or subpages you visit on our website

Affected Data:

  • Content data (e.g., posts, photos, videos)
  • Usage data (e.g., access times, clicked pages)
  • Communication data (e.g., information about the used device, IP address)

Affected Persons: Users of our website

Processing Purpose: Displaying our websites, ensuring the operation of our websites

Legal Basis: Legitimate interest, Art. 6 para. 1 lit. f GDPR

Web Host Commissioned by Us: STRATO

Service Provider: STRATO AG, Pascalstr. 10, 10587 Berlin
Website: https://www.strato.de/hosting/
Privacy Policy: https://www.strato.de/datenschutz/

Contact

If you contact us via email, social media, telephone, fax, mail, our contact form, or otherwise, and provide us with personal data such as your name, phone number, or email address, or other details about yourself or your inquiry, we process this data to respond to your request within the framework of our pre-contractual or contractual relationships.

Affected Data:

  • Master data (e.g., names, addresses)
  • Contact data (e.g., email address, phone number, postal address)
  • Content data (texts, photos, videos)
  • Contract data (e.g., contract subject, contract duration)

Affected Persons: Prospective customers, clients, business and contract partners

Processing Purpose: Communication and response to contact inquiries, office and organizational procedures

Legal Basis: Contract fulfillment and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

Advertising via Email, Mail, or Telephone

For our advertising communication via email, mail, or telephone, we process personal data. You can object to receiving our marketing materials at any time or revoke your previously given consent.

To prove, in case of doubt, that we had your consent, we may store your data for up to 4 years after your objection or revocation. However, we will no longer use your data for further purposes. If you request earlier deletion, we will comply after confirming that you originally gave us your consent.

Affected Data:

  • Contact data (e.g., email, phone number, postal address)
  • Master data (e.g., names, addresses)

Affected Persons: Communication partners

Processing Purpose: Direct marketing via email, mail, or telephone

Legal Basis: Consent, Art. 6 para. 1 lit. a GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

Use of the App

Our application collects and processes minimal user data to ensure proper functionality and secure usage.

Collected Data
When using our app, the following information is collected:

  • Technical information about the operating system and app version
  • Error and crash reports to improve stability
  • Anonymous usage statistics to optimize user experience (if you consent)

No User Identification
The collected data is purely technical and does not allow direct identification of the user. No personal data such as name, email address, or location data is stored.

Data Processing and Storage
The collected information is used solely for maintenance, error analysis, and software improvement. No data is shared with third parties or used for advertising purposes.

Data Transfer
Depending on the server location, the collected data may be transferred outside the European Union. In such cases, we ensure that adequate data protection measures are implemented in accordance with GDPR requirements.

For further information on data processing within our desktop app, please contact us using the details provided in the privacy policy.

Web Analytics and Statistics

To analyze visitor flows on our website and evaluate statistics, we use web analytics services. These services collect data such as the website you came from (referrer), the pages you accessed, the duration of your visit, and your interactions. Additionally, data about your browser, computer system, and device type are collected. Depending on your consent, demographic data (e.g., age, gender) and location data may also be processed.

Affected Data:

  • Usage data (e.g., access times, clicked pages)
  • Communication data (e.g., device information, IP address)

Affected Persons: Users of our online offerings

Processing Purpose: Reach measurement, campaign performance evaluation, remarketing, and interest-based marketing

Legal Basis:

  • Consent, Art. 6 para. 1 lit. a GDPR
  • Legitimate interest, Art. 6 para. 1 lit. f GDPR

Google Analytics

Service Provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
EU Headquarters: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://marketingplatform.google.com/intl/en/about/analytics/
Privacy Policy: https://policies.google.com/privacy?hl=en
Opt-Out Option: https://tools.google.com/dlpage/gaoptout?hl=en

For the purpose of designing our website in line with user needs and continuously optimizing our pages, we use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.com) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”).

In this context, pseudonymized user profiles are created and cookies (see Section 4) are used. The information generated by the cookie about your use of this website, such as:

  • Browser type/version
  • Operating system used
  • Referrer URL (the previously visited page)
  • Host name of the accessing computer (IP address)
  • Time of the server request

is transmitted to and stored on a Google server in the United States.

The information is used to evaluate website usage, compile reports on website activities, and provide further services related to website and internet usage for the purposes of market research and the needs-based design of these internet pages. This information may also be transferred to third parties where required by law or where such third parties process the data on Google’s behalf.

Under no circumstances will your IP address be combined with other Google data. IP addresses are anonymized so that they cannot be assigned to a specific individual (IP masking).

You can prevent the installation of cookies by adjusting the settings of your browser software accordingly; however, please note that in this case you may not be able to use all functions of this website to their full extent.

You may also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address), as well as the processing of this data by Google, by downloading and installing the browser add-on available at:
https://tools.google.com/dlpage/gaoptout

As an alternative to the browser add-on, particularly for browsers on mobile devices, you can also prevent data collection by Google Analytics by clicking this link. An opt-out cookie will be set that prevents the future collection of your data when visiting this website. The opt-out cookie applies only to this browser and only to our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help Center:
https://support.google.com/analytics/answer/6004245

Matomo 

We use the open-source software Matomo to analyze and statistically evaluate the use of our website. For this purpose, cookies are used (see Section 4).

The information generated by the cookie about your use of the website is transmitted to our servers and compiled into pseudonymized user profiles. This information is used to evaluate the use of the website and to enable the needs-based design and optimization of our website. The information is not disclosed to third parties.

Under no circumstances is the IP address linked to any other data relating to the user. IP addresses are anonymized so that they cannot be assigned to a specific individual (IP masking).

Your visit to this website is currently being tracked by Matomo web analytics. Click here (https://matomo.org/docs/privacy/) to prevent your visit from being tracked in the future.

Google Tag Manager

We use Google Tag Manager, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), on our website.

Google Tag Manager is used to manage website tags through a single interface. The tool itself (which implements the tags) generally does not process users’ personal data. It merely triggers other tags that may, in turn, collect data.

When Google Tag Manager is accessed, Google collects your IP address as well as other technical metadata (such as device and browser information, pages visited, and the time of access) and transmits this information to Google servers, including servers located in the United States.

The use of Google Tag Manager is based on your consent pursuant to Article 6(1)(a) GDPR (and Section 25(1) TDDDG, where applicable). You may withdraw your consent at any time with effect for the future.

We have entered into a Data Processing Agreement (Data Processing Terms) with Google Ireland Limited. Google processes the data on our behalf and may not use it for its own purposes.

It cannot be ruled out that data may be transferred to and stored by Google’s parent company, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

From the perspective of the European Union, the United States is considered a third country. Data transfers are carried out on the basis of the EU-U.S. Data Privacy Framework (DPF). Google LLC is certified under this framework, thereby ensuring an adequate level of data protection.

In addition, Google uses the European Commission’s approved Standard Contractual Clauses (SCCs) as a safeguard for international data transfers. These clauses contractually obligate Google to maintain a level of data protection equivalent to that required under European data protection law, even when processing data in the United States.

Ahrefs

This website uses services provided by Ahrefs Pte. Ltd., 16 Raffles Quay, #33-03 Hong Leong Building, Singapore 048581 (“Ahrefs”), to analyze and improve search engine optimization (SEO) and the visibility of our website.

Ahrefs is a tool for analyzing backlinks, keywords, and website traffic. In connection with its use, the following data may be processed in particular:

  • IP address (in anonymized or truncated form, where possible)
  • Information about the websites accessed
  • Referrer URLs (previously visited pages)
  • Device and browser information
  • Date and time of your visit
  • SEO-related usage and connection data

The use of Ahrefs is based on our legitimate interest in optimizing the presentation of our online services and improving our search engine rankings. The legal basis for this processing is Article 6(1)(f) GDPR.

Ahrefs is headquartered in Singapore. Singapore is a third country outside the European Union (EU) and the European Economic Area (EEA). The European Commission has adopted an adequacy decision for Singapore. Therefore, data transfers to Singapore are permitted pursuant to Article 45 GDPR. In addition, Ahrefs has committed to complying with the European Union’s standard data protection clauses to ensure an adequate level of data protection.

Further information regarding data protection and the processing of personal data by Ahrefs can be found in the Ahrefs Privacy Policy.

Contentsquare

We use the web analytics service Contentsquare, provided by Contentsquare GmbH and/or Contentsquare SAS, to better understand user behavior on our website and to optimize our content and overall user experience.

Contentsquare enables us to analyze user interactions on our website, such as mouse movements, clicks, scrolling behavior, and the use of specific page areas. The collected data is processed in anonymized or pseudonymized form so that no direct conclusions can be drawn about your identity.

The processing of this data is carried out to improve the usability of our website, identify errors, and design content and functionality in a user-friendly manner.

The processing is based on your consent pursuant to Article 6(1)(a) GDPR, where such consent has been provided. Alternatively, processing may be carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR, provided that an appropriate balancing of interests has been conducted.

In connection with the use of Contentsquare, the following data may be processed in particular:

  • Anonymized IP address
  • Technical information about your device and browser
  • Interaction data (clicks, scrolling behavior, time spent on pages)
  • Visited pages and navigation within the website

Direct identification of your person is not possible through this data. Your IP address is masked or anonymized by Contentsquare immediately after collection to prevent any direct association with an individual. Sensitive inputs (e.g., information entered into forms) are automatically blocked by Contentsquare’s systems and are neither collected nor stored.

The collected data is retained only for as long as necessary to fulfill the purposes described above and is subsequently deleted.

You may withdraw your consent at any time with effect for the future. In addition, you have the right to object to the processing of your data. To do so, please use the relevant settings in our cookie banner or contact us directly.

Further information about data protection and privacy practices at Contentsquare can be found at:

https://contentsquare.com/privacy-and-security/

Third-Party Plugins We Use

We have embedded plugins in the form of “social media buttons” from the providers we use on our website. You can recognize which plugin belongs to which provider by the respective logo marking the plugin. When you access a page of our online presence that contains such a plugin, a connection is automatically established between your browser and the provider’s servers, and the provider sets a cookie on your device. At this point, data transfer may already take place, even if you do not have an account with the respective social network operator or are not logged into it while visiting our website.

Additionally, further interactions with the respective social plugin (e.g., clicking the “Like” button on Facebook or the “Re-Tweet” button on Twitter) will transmit data to the provider.

Affected Data:

  • Usage data (e.g., access times, clicked web pages)
  • Communication data (e.g., information about the used device, IP address)

Affected Persons: Users of our website

Processing Purpose: Displaying our website, providing content, ensuring the operation of our website

Legal Basis: Consent via cookie consent banner, Art. 6 para. 1 lit. a GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

We use the following plugins:

Calendly

Service Provider: Calendly, LLC, 271 17th St NW, Ste 1000, Atlanta, GA 30363, USA
Website: https://calendly.com
Privacy Policy: https://calendly.com/privacy

We use the appointment scheduling service Calendly, a service provided by Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA.

Calendly enables prospective customers and clients to schedule appointments through our website. When using Calendly, personal data is processed. This includes, in particular, first and last name, email address, telephone number (if provided), preferred appointment times, and any additional information entered into the booking form.

When accessing the appointment booking function, technical data such as IP address, device information, browser type, and the date and time of access may also be transmitted to Calendly. Processing is carried out to enable appointment scheduling and the related communication.

When you book an appointment, the data entered into the booking form (e.g., name, email address, telephone number, or notes) is transmitted to Calendly. Processing of this data is necessary to confirm, organize, and manage your selected appointment. Calendly connects with our calendar system to check availability and provide a seamless booking experience. Your data is processed for the purpose of scheduling and conducting appointments, as well as sending appointment confirmations and reminders.

The use of Calendly is based on Article 6(1)(f) GDPR. Our legitimate interest lies in efficient and user-friendly appointment management. If the appointment scheduling serves the implementation of pre-contractual measures or the performance of a contract, processing is additionally based on Article 6(1)(b) GDPR.

Calendly is a U.S.-based provider. Therefore, data collected by Calendly is generally stored and processed on servers located in the United States. To ensure compliance with European data protection standards, Calendly is certified under the EU-U.S. Data Privacy Framework (DPF).

The data you provide in connection with appointment scheduling will remain with us until the purpose for storage no longer applies or until you request deletion, provided that no statutory retention obligations prevent deletion.

We have entered into a Data Processing Agreement (DPA) with Calendly. This ensures that Calendly processes your data exclusively in accordance with European data protection requirements and does not disclose it to third parties.

Calendly’s Privacy Policy and further information on privacy and security can be found at:
https://calendly.com/pages/privacy

 

HubSpot

We use the services of HubSpot Ireland Limited, 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland (hereinafter “HubSpot”) on our website.

HubSpot is an integrated software solution for customer relationship management (CRM) as well as marketing, analytics, and communication purposes. In particular, HubSpot enables us to provide contact forms and manage inquiries.

When you contact us via forms, personal data is processed through HubSpot. This includes, in particular:

  • IP address
  • Time of form submission
  • URL of the page on which the form was completed
  • Contact information voluntarily provided by you (e.g., name, email address, telephone number, and message content)

The processing of this data is carried out exclusively for the purpose of handling and responding to your inquiry.

Personal data is processed on the basis of Article 6(1)(a) GDPR, provided that you have given your consent.

Where processing is necessary for handling your inquiry or for the implementation of pre-contractual measures, it is based on Article 6(1)(b) GDPR.

Furthermore, processing is carried out on the basis of our legitimate interest (Article 6(1)(f) GDPR) in efficiently and systematically handling incoming customer inquiries.

We have concluded a Data Processing Agreement (DPA) with HubSpot to ensure the protection of your data in accordance with legal requirements. Since HubSpot is a U.S.-based company, data may be transferred to the United States. HubSpot is certified under the EU-U.S. Data Privacy Framework, ensuring an adequate level of data protection in line with EU standards.

The data you enter in the contact form remains with us until you request its deletion or the purpose for data storage no longer applies (e.g., after your inquiry has been fully processed). Mandatory legal provisions, in particular statutory retention periods, remain unaffected.

Further information on data processing by HubSpot can be found in HubSpot’s Privacy Policy:
https://legal.hubspot.com/privacy-policy

 

Content Services

We use certain services to display specific content or graphics (videos, images, music, fonts, maps) on our website. The services we use process your IP address at the time of your visit to our website, as this is necessary to display the respective content in your browser. Additionally, the providers of these services may set further cookies on your device, collecting information about your usage behavior, interests, the device and browser you use, as well as the time and duration of your session.

We use the following content services:

Google Maps

Service Provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
EU Headquarters: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://www.google.com/maps
Privacy Policy: https://policies.google.com/privacy
Opt-Out Option: https://tools.google.com/dlpage/gaoptout?hl=en

Google Web Fonts

Service Provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
EU Headquarters: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://fonts.google.com/
Privacy Policy: https://policies.google.com/privacy

Security Measures

We implement technical and organizational security measures in accordance with the state of the art to comply with data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties.

Current Status and Changes to This Privacy Policy

This privacy policy is currently valid and was last updated in February 2025. Due to legal or regulatory changes, it may become necessary to adjust this privacy policy.

This privacy policy was created with the help of the privacy policy generator from SOS Recht. SOS Recht is a service provided by Mueller.legal, a law firm based in Berlin.