Imprint

Provider identification

This website is operated by flustix GmbH. The company is legally represented by its managing director, Malte Biss.

Registration

VAT ID: DE311839341
Charlottenburg Local Court (Amtsgericht Charlottenburg)
HRB 186148 B

Address

FLUSTIX GmbH
Kronprinzendamm 20
10711 Berlin

Contact

Phone: +49 (0) 30 3982 0696 0
E-mail: contact@flustix.com

Liability

This website is compiled with the greatest possible care. Nevertheless, no guarantee can be given for the accuracy and correctness of the information it contains. Any liability for damages arising directly or indirectly from the use of this website is excluded, unless caused by intent or gross negligence. Where this website links to internet pages operated by third parties, FLUSTIX GmbH accepts no responsibility for their content.

FLUSTIX GmbH is neither obliged nor generally willing to participate in dispute resolution proceedings before a consumer arbitration board (§ 36 German Consumer Dispute Resolution Act, VSBG).

For the out-of-court settlement of consumer disputes, the European Union has set up an online platform (“ODR platform”) that you can turn to. You can find the platform at http://ec.europa.eu/consumers/odr/.

Responsible for content

FLUSTIX GmbH
Kronprinzendamm 20
10711 Berlin
Germany

Trademarks

Unless otherwise stated, all trademarks on this website are protected under trademark law in favour of FLUSTIX GmbH and/or the artists. This applies in particular to label names, logos and emblems.

Design & Development

Dan Sax – Content & Communications Coordinator @ flustix
d.sax@flustix.com

Image credits

Hero section: Dan Sax
About us: Dan Sax
Consultation: Dan Sax
Regulation: Dan Sax
Study: Dan Sax
Contact: Dan Sax

1. Controller

The controller responsible for data processing on this website is:

FLUSTIX GmbH
Kronprinzendamm 20
10711 Berlin
Germany

Represented by its managing director, Malte Biss.
Phone: +49 (0) 30 3982 0696 0
E-mail: contact@flustix.com

For privacy-related questions, please contact contact@flustix.com.

2. Principles of data processing

We process personal data only to the extent necessary to provide a functional website and our content. The legal bases are in particular Art. 6(1) GDPR: consent (lit. a), performance of a contract or pre-contractual measures (lit. b), compliance with a legal obligation (lit. c) and the safeguarding of our legitimate interests (lit. f).

3. Hosting

This website is hosted by a service provider in Germany:

Mittwald CM Service GmbH & Co. KG
Königsberger Straße 4–6
32339 Espelkamp, Germany

The provider processes, on our behalf, the data generated when you visit the website. This is based on a data processing agreement (Art. 28 GDPR); the servers are located in Germany. The legal basis is our legitimate interest in secure and reliable operation (Art. 6(1)(f) GDPR).

The certification database runs on the subdomain datenbank.flustix.com. It is hosted by the same provider under the same conditions; when you open the database pages, data (such as company logos) is loaded from there, producing the same server log files as described above.

4. Server log files

When you access the website, the server automatically collects information that your browser transmits and that is technically necessary to display the website and to ensure its stability and security:

• IP address of the accessing device
• date and time of access
• page or file requested
• referring page (referrer)
• browser and operating system used

This data is stored only briefly and then deleted. It is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR.

5. Cookies and local storage

This website does not use tracking cookies for audience measurement and does not use a cookie banner. A cookie is stored in one single case: if you object to measurement via the opt-out function (see section 8), a technically necessary cookie named “mtm_consent_removed” is set to store your decision permanently.

In addition, the website places a few technically necessary entries in your browser’s local storage. There are exactly four:

• “flx-hinweis-gesehen” records that you have acknowledged the privacy notice at the bottom of the screen, so that it does not reappear on every page view. This entry remains until you clear your browser data.
• “scrollTarget” remembers, when you click a menu item, which section of the target page you wanted to jump to.
• “blogUebersicht” remembers your selection in the blog overview, that is the search term, category and page number, so that you return to the same place after reading an article.
• “flx-wp-frei” records that you have completed the form before a whitepaper download, so that you do not have to complete it again for further downloads. The entry contains no personal data and expires after one year.

Your browser deletes the last two entries as soon as you close the tab.

All of these entries remain on your device, are transmitted neither to us nor to third parties, and contain no identifier by which a person could be recognised. They are not used to analyse your behaviour. Under Section 25(2) TDDDG no consent is required for them, because they are strictly necessary to provide the functions you have requested.

6. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in your browser's address bar.

7. Audience measurement with Matomo (cookieless)

To analyse and improve our website, we use the open-source software Matomo. We host Matomo ourselves. The data is processed exclusively on our own server in Germany (stats.flustix.com) and is not shared with third parties.

Matomo is configured in a data-minimising way:

• No tracking cookies are set and no persistent identifiers are stored on your device.
• Nor are any characteristics of your device read out, such as screen resolution, colour depth or installed browser extensions. Only the information your browser transmits anyway when a page is requested is evaluated.
• Your IP address is shortened before storage (the last 2 bytes are removed) and is not stored in full. The full IP address is used only briefly for approximate geolocation and is then discarded.
• No cross-site tracking takes place.
• The referrer URL is anonymised; only the domain of the referring website is stored.
• Campaign parameters contained in links, such as source, medium, campaign and content variant, may be evaluated for aggregated measurement of our marketing activities.
• Clicks on certain internal navigation anchors and external calls to action, such as appointment booking, quote request, database or LinkedIn links, may be recorded in Matomo as generic events. No full destination URLs, URL parameters or visible link texts are transmitted.
• The “Do Not Track” setting of your browser is respected where it is technically transmitted.

The data collected may include, for example, the pages accessed, the origin of the visit, campaign parameters, generic click events, the approximate region, and the browser and device type your browser reports itself. The purpose is statistical analysis of website usage in order to measure reach, evaluate campaigns in aggregated form and improve the website.

If you access our website via a campaign link, for example from LinkedIn, campaign parameters contained in the URL, such as source, medium, campaign and content variant, may be evaluated. We use these parameters exclusively for aggregated measurement of our marketing activities and not to identify individual persons.

As this measurement neither stores information on your device nor accesses information already stored there, no consent under Section 25 TDDDG (the German implementation of the ePrivacy Directive) is required. The legal basis for the subsequent processing is our legitimate interest in privacy-friendly, needs-based analysis of our website (Art. 6(1)(f) GDPR). The raw data collected is deleted after no more than 180 days.

8. Objection to audience measurement (opt-out)

You can object to being measured by Matomo at any time with effect for the future. Simply clear the box below.

Your objection is then stored on your device in a cookie named “mtm_consent_removed”. This cookie is the only one that can arise in connection with audience measurement at all. It is created solely by your objection and serves only to honour it on future visits. Such storage requires no consent under Section 25(2) TDDDG, because it is strictly necessary to carry out the wish you have expressly stated.

9. Contacting us

If you contact us by email or telephone, we process your details in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures or contract) or Art. 6(1)(f) GDPR (legitimate interest in responding to your enquiry).

Contact form: you can send us a message on our contact page. We collect the details you enter: first and last name, email address, company and your message, and optionally position and telephone number.

The form is not embedded from a third party. Merely opening the page transfers no data to third parties and sets no third-party cookies. When you submit the form, your details first go to our own server. From there we forward them to our customer relationship system HubSpot, where we store them to handle your enquiry, and additionally by email to our own mailbox.

HubSpot is operated by HubSpot, Inc., Two Canal Park, Cambridge, MA 02141, USA. We use the European instance of the service; data is stored on servers within the European Union, although access from the USA cannot be ruled out. The basis is a data processing agreement under Art. 28 GDPR, which forms part of HubSpot's terms of service and includes the EU Commission's standard contractual clauses for transfers to third countries. For details see HubSpot's privacy policy: https://legal.hubspot.com/privacy-policy

The legal basis for processing the form details is your consent under Art. 6(1)(a) GDPR, given when you submit the form, and Art. 6(1)(b) GDPR where your enquiry concerns a contract. You may withdraw your consent at any time with effect for the future, for example informally by email to contact@flustix.com. This does not affect the lawfulness of processing carried out before the withdrawal.

We delete your enquiry as soon as it is no longer required for the stated purpose, at the latest once the underlying matter has been concluded and no statutory retention obligations apply.

10. Downloading whitepapers

Some documents, namely our whitepapers, are provided in exchange for contact details. We ask for first and last name, email address and company; the telephone number is optional. The purpose is to provide the requested document and to be able to respond to your enquiry about it.

The legal basis is Art. 6(1)(b) GDPR, as the processing serves to fulfil your request and to initiate a possible contractual relationship, supplemented by Art. 6(1)(f) GDPR based on our legitimate interest in addressing prospective customers.

The details are not stored on our server. It receives them and forwards them directly to our customer management system HubSpot; details on this, including transfers to third countries, can be found in sections 11 and 12. We additionally receive an email notification so that no enquiry is lost.

So that you do not have to enter your details again for a further download, your browser stores an entry in local storage after submission (see section 5). This entry contains no personal data, only a note that the form was completed and the point in time. It expires after one year. You can delete it at any time by clearing your browser data.

In the form you can additionally and voluntarily consent to receiving email updates on certification and regulation. This consent is not a condition for the download and can be withdrawn at any time with effect for the future, for example by an informal message to contact@flustix.com.

11. External services and links

Our website links to external services: the appointment tool HubSpot Meetings for first calls, the form tool Typeform for certification enquiries, and our profiles on LinkedIn and Instagram.

These contents are not embedded in the website. Data is transferred to the respective providers only when you actively click the corresponding link and open their page. The privacy terms of the respective provider then apply. These providers may be based outside the EU.

12. Transfer to third countries

For the operation of this website (hosting, reach measurement, fonts) we use services and servers located in Germany.

The contact form is an exception: the details entered there are transmitted to HubSpot (see “Contacting us”). The provider is a company based in the USA. Data is stored on servers within the European Union, but access from the USA cannot be ruled out. For that case, the EU Commission's standard contractual clauses apply as a safeguard under Art. 46(2)(c) GDPR; in addition we base the transfer on your explicit consent under Art. 49(1)(a) GDPR, given when you submit the form. The USA does not offer a level of data protection equivalent to European law; in particular, access by US authorities cannot be excluded.

If you actively click one of the external links (see “External services and links”), the privacy terms of the respective provider apply, which may be based outside the EU.

13. Storage period

Unless a more specific storage period is stated in this privacy policy, your personal data remains with us until the purpose of the processing no longer applies. If you make a legitimate request for erasure or withdraw consent, your data will be deleted, provided there are no legally permissible grounds for further storage (e.g. retention periods under tax or commercial law); in that case, deletion takes place once those grounds no longer apply.

14. Your rights

With regard to your personal data, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent with effect for the future (Art. 7(3) GDPR)

To exercise your rights, a message to contact@flustix.com is sufficient.

15. Right to object

Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), such as audience measurement with Matomo, you have the right to object at any time on grounds relating to your particular situation.

16. Advertising e-mails

We hereby object to the use of the contact data published under our legal-notice obligation for sending unsolicited advertising and information materials. We expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example by spam e-mails.

17. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The authority responsible for us is:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin, Germany
https://www.datenschutz-berlin.de

18. Currency and amendment of this privacy policy

This privacy policy is currently valid. As our website develops, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy.