Privacy policy

This is a courtesy translation. The German version is legally binding.

1. Controller

The controller responsible for data processing on this website is:

Flownova AI & IT Services GmbH Lange Straße 27, 29664 Walsrode, Germany Email: info@flownova.de · Phone: +49 1516 8185728

2. Hosting and server log files

This website runs on a server we operate at Hetzner Online GmbH (Germany). Data processing takes place in a data center in Germany. We have a data processing agreement (Art. 28 GDPR) with Hetzner.

When you visit this website, the web server automatically processes technical access data (IP address, date and time, page requested, browser type). This data is used solely for the technical operation and security of the website (Art. 6 (1) (f) GDPR) and is not combined with other data sources.

3. Fonts and external content

This website loads fonts exclusively from its own server (no Google Fonts CDN). No content is loaded automatically from third-party servers. External content is only loaded after an explicit click or after your consent (see the “Cookies and consent”, “Microsoft Clarity” and “Online appointment booking” sections).

4. Web analytics (Umami)

We use a self-hosted, cookie-free analytics solution (Umami) on our own server in Germany. Umami does not build personal profiles and does not store IP addresses. This anonymous measurement is always on; no consent is required for it (Art. 6 (1) (f) GDPR).

Services that set cookies or transfer data to third parties (see “Microsoft Clarity”) are only loaded once you have agreed via our consent banner. We store your choice locally in your browser (localStorage under the key “gemwise_consent”) so that the banner respects your decision. This storage is technically necessary and does not build personal profiles.

You can change or withdraw your consent at any time with effect for the future via the “Cookie settings” link in the footer. If you withdraw consent, we no longer load the affected service and delete the cookies it has set. The legal basis for consent-based services is your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG).

6. Microsoft Clarity

After your consent, we use Microsoft Clarity, an analytics tool provided by Microsoft Corporation (One Microsoft Way, Redmond, WA, USA; represented in the EU by Microsoft Ireland Operations Limited). Clarity helps us understand how our pages are used, for example through anonymized session recordings and click and scroll patterns (heatmaps). Text you enter and personal content are masked by default. For this, Clarity sets cookies (including _clck and _clsk).

The legal basis is your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). As part of this use, data is transferred to Microsoft and also processed in the USA. The transfer is based on the European Commission’s Standard Contractual Clauses; Microsoft is additionally certified under the EU-US Data Privacy Framework. There is a risk that US authorities may access this data. For more information, see Microsoft’s privacy statement (privacy.microsoft.com). You can withdraw your consent at any time via “Cookie settings”.

7. Contacting us and forms

If you contact us by email or phone, we process the data you provide in order to handle your request (Art. 6 (1) (b) GDPR). The same applies to the forms on this website (demo request and self-check): we process the data entered there (name, email address, optional phone number and message, and for the self-check also the result) to answer your request, to send you the result you requested, and to arrange a possible demo appointment.

These emails are sent through our transactional email provider Brevo (Sendinblue SAS, trading as Brevo, Paris, France, EU). We have a data processing agreement with Brevo. We also store the form data in our self-hosted CRM on our own server in Germany.

The data is deleted once the purpose of processing no longer applies and no statutory retention obligations apply.

8. Online appointment booking (Zeeg)

On the demo page we offer an appointment calendar provided by Zeeg (zeeg.me). The calendar is only loaded after an explicit click; before that, no data is sent to Zeeg.

When the calendar loads and when you book an appointment, Zeeg processes the data entered there (name, email address, chosen appointment) as well as technical access data. For details, see the privacy policy of Zeeg (zeeg.me). Legal basis: Art. 6 (1) (b) GDPR (arranging an appointment at your request).

9. Recipients and processors

We use the following service providers: Hetzner Online GmbH (hosting), Brevo (email delivery), Zeeg (only if you actively use the online appointment booking) and Microsoft (only if you actively consent to Microsoft Clarity). Personal data is transferred to a country outside the EU or EEA only if you actively consent to Microsoft Clarity (USA, see section 6); otherwise no third-country transfer takes place.

10. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing (Art. 21 GDPR). You can withdraw a given consent at any time with effect for the future (Art. 7 (3) GDPR), without affecting the lawfulness of the processing carried out until then. You also have the right to lodge a complaint with a data protection supervisory authority. For Lower Saxony this is the State Commissioner for Data Protection of Lower Saxony.

11. Version

This privacy policy is dated July 2026. We update it when the website or the processing changes.