Imprint

Provider identification

This website is operated by flustix GmbH. The company is legally represented by its managing director, Malte Biss.

Registration

VAT ID: DE311839341
Charlottenburg Local Court (Amtsgericht Charlottenburg)
HRB 186148 B

Address

FLUSTIX GmbH
Kronprinzendamm 20
10711 Berlin

Contact

Phone: +49 (0) 30 3982 0696 0
E-mail: contact@flustix.com

Liability

This website is compiled with the greatest possible care. Nevertheless, no guarantee can be given for the accuracy and correctness of the information it contains. Any liability for damages arising directly or indirectly from the use of this website is excluded, unless caused by intent or gross negligence. Where this website links to internet pages operated by third parties, FLUSTIX GmbH accepts no responsibility for their content.

FLUSTIX GmbH is neither obliged nor generally willing to participate in dispute resolution proceedings before a consumer arbitration board (§ 36 German Consumer Dispute Resolution Act, VSBG).

For the out-of-court settlement of consumer disputes, the European Union has set up an online platform (“ODR platform”) that you can turn to. You can find the platform at http://ec.europa.eu/consumers/odr/.

Responsible for content

FLUSTIX GmbH
Kronprinzendamm 20
10711 Berlin
Germany

Trademarks

Unless otherwise stated, all trademarks on this website are protected under trademark law in favour of FLUSTIX GmbH and/or the artists. This applies in particular to label names, logos and emblems.

Design & Development

Dan Sax – Head of Design & Marketing @ flustix
d.sax@flustix.com

1. Controller

The controller responsible for data processing on this website is:

FLUSTIX GmbH
Kronprinzendamm 20
10711 Berlin
Germany

Represented by its managing director, Malte Biss.
Phone: +49 (0) 30 3982 0696 0
E-mail: contact@flustix.com

For privacy-related questions, please contact contact@flustix.com.

2. Principles of data processing

We process personal data only to the extent necessary to provide a functional website and our content. The legal bases are in particular Art. 6(1) GDPR: consent (lit. a), performance of a contract or pre-contractual measures (lit. b), compliance with a legal obligation (lit. c) and the safeguarding of our legitimate interests (lit. f).

3. Hosting

This website is hosted by a service provider in Germany:

Mittwald CM Service GmbH & Co. KG
Königsberger Straße 4–6
32339 Espelkamp, Germany

The provider processes, on our behalf, the data generated when you visit the website. This is based on a data processing agreement (Art. 28 GDPR); the servers are located in Germany. The legal basis is our legitimate interest in secure and reliable operation (Art. 6(1)(f) GDPR).

The certification database runs on the subdomain datenbank.flustix.com. It is hosted by the same provider under the same conditions; when you open the database pages, data (such as company logos) is loaded from there, producing the same server log files as described above.

4. Server log files

When you access the website, the server automatically collects information that your browser transmits and that is technically necessary to display the website and to ensure its stability and security:

• IP address of the accessing device
• date and time of access
• page or file requested
• referring page (referrer)
• browser and operating system used

This data is stored only briefly and then deleted. It is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR.

5. Cookies and local storage

This website does not use tracking cookies for audience measurement and does not use a cookie banner. Cookies are stored in two cases only:

• “mtm_consent_removed” is set if you object to measurement via the opt-out function (see section 8). It stores your decision permanently.
• “flx_wp_frei” is set by our server once you have completed the form before downloading a whitepaper or a study (see section 10). It contains nothing but the value “1”, no personal data, and expires after one year. It ensures that you do not have to complete the form again for further documents, including when you later open a document directly via its address.

In addition, the website places a few technically necessary entries in your browser’s local storage. There are exactly three:

• “flx-hinweis-gesehen” records that you have acknowledged the privacy notice at the bottom of the screen, so that it does not reappear on every page view. This entry remains until you clear your browser data.
• “scrollTarget” remembers, when you click a menu item, which section of the target page you wanted to jump to.
• “blogUebersicht” remembers your selection in the blog overview, that is the search term, category and page number, so that you return to the same place after reading an article.

Your browser deletes the last two entries as soon as you close the tab.

The local storage entries remain on your device and are transmitted neither to us nor to third parties. The two cookies are sent by your browser to our own server with every request; they do not reach third parties. Neither the cookies nor the entries contain an identifier by which a person could be recognised, and they are not used to analyse your behaviour. Under Section 25(2) TDDDG no consent is required for them, because they are strictly necessary to provide the functions you have requested.

6. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in your browser's address bar.

7. Audience measurement with Matomo (cookieless)

To analyse and improve our website, we use the open-source software Matomo. We host Matomo ourselves. The data is processed exclusively on our own server in Germany (stats.flustix.com) and is not shared with third parties.

Matomo is configured in a data-minimising way:

• No tracking cookies are set and no persistent identifiers are stored on your device.
• Nor are any characteristics of your device read out, such as screen resolution, colour depth or installed browser extensions. Only the information your browser transmits anyway when a page is requested is evaluated.
• Your IP address is shortened before storage (the last 2 bytes are removed) and is not stored in full. The full IP address is used only briefly for approximate geolocation and is then discarded.
• No cross-site tracking takes place.
• The referrer URL is anonymised; only the domain of the referring website is stored.
• Campaign parameters contained in links, such as source, medium, campaign and content variant, may be evaluated for aggregated measurement of our marketing activities.
• Clicks on certain internal navigation anchors and external calls to action, such as appointment booking, quote request, database or LinkedIn links, may be recorded in Matomo as generic events. No full destination URLs, URL parameters or visible link texts are transmitted.
• The “Do Not Track” setting of your browser is respected where it is technically transmitted.

The data collected may include, for example, the pages accessed, the origin of the visit, campaign parameters, generic click events, the approximate region, and the browser and device type your browser reports itself. The purpose is statistical analysis of website usage in order to measure reach, evaluate campaigns in aggregated form and improve the website.

If you access our website via a campaign link, for example from LinkedIn, campaign parameters contained in the URL, such as source, medium, campaign and content variant, may be evaluated. We use these parameters exclusively for aggregated measurement of our marketing activities and not to identify individual persons.

As this measurement neither stores information on your device nor accesses information already stored there, no consent under Section 25 TDDDG (the German implementation of the ePrivacy Directive) is required. The legal basis for the subsequent processing is our legitimate interest in privacy-friendly, needs-based analysis of our website (Art. 6(1)(f) GDPR). The raw data collected is deleted after no more than 180 days.

8. Objection to audience measurement (opt-out)

You can object to being measured by Matomo at any time with effect for the future. Simply clear the box below.

Your objection is then stored on your device in a cookie named “mtm_consent_removed”. This cookie is the only one that can arise in connection with audience measurement at all. It is created solely by your objection and serves only to honour it on future visits. Such storage requires no consent under Section 25(2) TDDDG, because it is strictly necessary to carry out the wish you have expressly stated.

9. Contacting us

If you contact us by email or telephone, we process your details in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures or contract) or Art. 6(1)(f) GDPR (legitimate interest in responding to your enquiry).

Contact form: you can send us a message on our contact page. We collect the details you enter: first and last name, email address, company and your message, and optionally position and telephone number.

The form is not embedded from a third party. Merely opening the page transfers no data to third parties and sets no third-party cookies. When you submit the form, your details first go to our own server. From there we forward them to our customer relationship system HubSpot, where we store them to handle your enquiry, and additionally by email to our own mailbox.

We also send a confirmation of your enquiry to the email address you provide. It contains the documents and links belonging to your enquiry and is part of handling it, not advertising. You receive it once per submission; it does not sign you up to any newsletter.

HubSpot is operated by HubSpot, Inc., Two Canal Park, Cambridge, MA 02141, USA. We use the European instance of the service; data is stored on servers within the European Union, although access from the USA cannot be ruled out. The basis is a data processing agreement under Art. 28 GDPR, which forms part of HubSpot's terms of service and includes the EU Commission's standard contractual clauses for transfers to third countries. For details see HubSpot's privacy policy: https://legal.hubspot.com/privacy-policy

The legal basis for processing the form details is your consent under Art. 6(1)(a) GDPR, given when you submit the form, and Art. 6(1)(b) GDPR where your enquiry concerns a contract. You may withdraw your consent at any time with effect for the future, for example informally by email to contact@flustix.com. This does not affect the lawfulness of processing carried out before the withdrawal.

We delete your enquiry as soon as it is no longer required for the stated purpose, at the latest once the underlying matter has been concluded and no statutory retention obligations apply.

10. Downloading whitepapers and studies

Some documents, namely our whitepapers, studies and individual information papers, are provided in exchange for contact details. We ask for first and last name, email address and company; the telephone number is optional. The purpose is to provide the requested document and to be able to respond to your enquiry about it.

The legal basis is Art. 6(1)(b) GDPR, as the processing serves to fulfil your request and to initiate a possible contractual relationship, supplemented by Art. 6(1)(f) GDPR based on our legitimate interest in addressing prospective customers.

The details are not stored on our server. It receives them and forwards them directly to our customer management system HubSpot; details on this, including transfers to third countries, can be found in sections 11 and 12. We additionally receive an email notification so that no enquiry is lost.

So that you do not have to enter your details again for a further download, our server sets a cookie named “flx_wp_frei” after submission (see section 5). It contains no personal data, only a note that the form was completed. It expires after one year. You can delete it at any time by clearing your browser data. If you open one of these documents directly via its address without that cookie being present, our server redirects you to the Download Center and shows the form there.

In the form you can additionally and voluntarily consent to receiving email updates on certification and regulation. This consent is not a condition for the download and can be withdrawn at any time with effect for the future, for example by an informal message to contact@flustix.com.

11. Free claim check

You can submit environmental claims for review through our claim check form. We ask for the product concerned, the claims themselves, where they are used, as well as first and last name, email address and company; position, country, telephone number and a preferred date are optional. The purpose is to produce the test report you requested and to send it to you.

The legal basis is Art. 6(1)(b) GDPR, as the processing serves to fulfil your request and to initiate a possible contractual relationship, supplemented by Art. 6(1)(f) GDPR based on our legitimate interest in addressing prospective customers.

Uploaded documents: for each claim you may optionally attach supporting material, such as photos of packaging, test reports or datasheets. Image files and PDF up to 10 MB per file are permitted. These files are stored on our server in a directory that cannot be reached through any web address and are used solely to produce your test report. They are not passed on to third parties; in particular they are not transferred to our customer management system. They are deleted no later than 90 days after receipt. We will delete them sooner at your request; an email to contact@flustix.com is sufficient.

Please do not upload material containing personal data of third parties or trade secrets unless it is necessary for the review.

Your remaining details are transferred to our customer management system HubSpot as with our other forms; see section 9 for details. The uploaded files themselves are excluded from this.

The form is not embedded from a third party. Merely opening the page transfers no data to third parties and sets no third-party cookies.

12. QR codes

On printed materials, business cards and packaging we use short QR codes pointing to addresses on this website in the form flustix.com/qrcode/…. Opening such an address forwards you to the stored destination or delivers a contact card as a file.

In doing so we record two things: the time of the request and the family of the operating system used (such as “iOS” or “Android”). Nothing else. In particular we store no IP address, no location and no identifier, and we set neither a cookie nor an entry in your device’s storage for this purpose. This record cannot be attributed to any person, it is not combined with other data, and it is not passed on to third parties.

We use the figures solely to see whether a printed code is being used at all. The legal basis for the forwarding is our legitimate interest in a functioning service under Article 6(1)(f) GDPR.

Independently of this, the server logs the request like any other page view; section 4 applies to that.

13. External services and links

Our website links to external services: the appointment tool HubSpot Meetings for first calls, the form tool Typeform for certification enquiries, and our profiles on LinkedIn and Instagram.

These contents are not embedded in the website. Data is transferred to the respective providers only when you actively click the corresponding link and open their page. The privacy terms of the respective provider then apply. These providers may be based outside the EU.

14. Transfer to third countries

For the operation of this website (hosting, reach measurement, fonts) we use services and servers located in Germany.

The contact form is an exception: the details entered there are transmitted to HubSpot (see “Contacting us”). The provider is a company based in the USA. Data is stored on servers within the European Union, but access from the USA cannot be ruled out. For that case, the EU Commission's standard contractual clauses apply as a safeguard under Art. 46(2)(c) GDPR; in addition we base the transfer on your explicit consent under Art. 49(1)(a) GDPR, given when you submit the form. The USA does not offer a level of data protection equivalent to European law; in particular, access by US authorities cannot be excluded.

If you actively click one of the external links (see “External services and links”), the privacy terms of the respective provider apply, which may be based outside the EU.

15. Storage period

Unless a more specific storage period is stated in this privacy policy, your personal data remains with us until the purpose of the processing no longer applies. If you make a legitimate request for erasure or withdraw consent, your data will be deleted, provided there are no legally permissible grounds for further storage (e.g. retention periods under tax or commercial law); in that case, deletion takes place once those grounds no longer apply.

16. Your rights

With regard to your personal data, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent with effect for the future (Art. 7(3) GDPR)

To exercise your rights, a message to contact@flustix.com is sufficient.

17. Right to object

Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), such as audience measurement with Matomo, you have the right to object at any time on grounds relating to your particular situation.

18. Advertising e-mails

We hereby object to the use of the contact data published under our legal-notice obligation for sending unsolicited advertising and information materials. We expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example by spam e-mails.

19. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The authority responsible for us is:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin, Germany
https://www.datenschutz-berlin.de

20. Currency and amendment of this privacy policy

This privacy policy is currently valid. As our website develops, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy.