Privacy Policy

    1. Responsible Party

    Flumarix Systems UG (haftungsbeschränkt)
Junoweg 23
39118 Magdeburg
Email: info@flumarix.de

    2. Collection and Storage of Personal Data

    a) Website Visit

    When accessing our website, information from your browser is automatically transmitted to our server (e.g., IP address, browser type, date and time of access). This data is technically required to display the website content correctly and ensure system security. Our websites are hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. IONOS processes personal data (e.g., IP addresses, log files) on our behalf in accordance with Art. 28 GDPR to ensure secure and stable operation of the website. A data processing agreement (DPA) has been concluded for this purpose. For more information, see: https://www.ionos.de/hilfe/datenschutz/

    b) Contact Form

    When you use our contact form, the data you enter (name, email address, message, and optionally phone and company details) is collected. The data is stored in our database to document your request and assign follow-up requests. Additionally, the entered data is transmitted to us via email to respond to your request promptly. Data processing is based on: • Art. 6 para. 1 lit. b GDPR (processing requests and pre-contractual measures) and • Art. 6 para. 1 lit. f GDPR (our legitimate interest in efficient communication and the ability to process recurring or related requests comprehensibly). For storing and processing data submitted through the form, we use Supabase (Supabase Inc.). The project is hosted in an EU region (Germany/Frankfurt), so data is processed within the EU. However, access from the USA by the provider cannot be completely ruled out due to Supabase Inc.'s corporate structure. In this case, transmission also occurs based on Standard Contractual Clauses (SCC) according to Art. 46 GDPR. For more information, see Supabase's privacy policy: https://supabase.com/privacy

    c) Use of Lovable (Frontend Development and Deployment)

    For the development and deployment of our web interface, we use the service Lovable (Lovable Inc., USA). During the delivery of the frontend, your IP address and other connection data may be processed by Lovable due to technical reasons. Where personal data is transferred to the USA, this is done based on Standard Contractual Clauses (SCC) according to Art. 46 GDPR, along with supplementary organizational measures. For more information, see Lovable's privacy policy: https://lovable.dev/privacy

    d) Use of hCaptcha

    We use the hCaptcha service (Intuition Machines, Inc., USA) as part of our login function to distinguish human input from automated bots and ensure the security of our systems. Personal data such as IP address and other technical information (e.g., browser and device information, mouse movements) are transmitted to hCaptcha servers and processed there. Data transmission is based on Art. 6 para. 1 lit. f GDPR (our legitimate interest in protecting our website from automated attacks and abuse). Where data is transferred to the USA, this is done based on Standard Contractual Clauses (SCC) according to Art. 46 GDPR. For more information, see hCaptcha's privacy policy: https://www.hcaptcha.com/privacy

    3. Data Sharing

    We do not share your personal data with third parties unless: • You have explicitly consented, • We are legally required to do so, or • It is necessary for contract fulfillment (e.g., hosting or IT service providers as data processors).

    4. Storage Duration

    We store contact requests and associated personal data for up to two years to ensure comprehensible communication for recurring or later requests. After this period, the data is deleted unless legal retention obligations exist.

    5. Your Rights

    You have the right to: • Receive information about personal data we store (Art. 15 GDPR), • Request correction of incorrect data (Art. 16 GDPR), • Request deletion of your data (Art. 17 GDPR), • Request restriction of processing (Art. 18 GDPR), • Receive your data in a transferable format (Art. 20 GDPR), • Withdraw any given consent at any time (Art. 7 para. 3 GDPR), • File a complaint with a supervisory authority (Art. 77 GDPR).

    6. Data Security

    We implement appropriate technical and organizational measures to protect your data from manipulation, loss, destruction, or unauthorized access.

    7. External Links

    Our privacy policy contains links to the privacy policies of external service providers (e.g., IONOS, Supabase, Lovable, hCaptcha). Please note that we cannot be held responsible for the content and currency of these external websites. The operators of the linked pages are solely responsible for their content.