Privacy notice

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Werbeeinheit UG (haftungsbeschränkt)
Christian-Gau-Straße 17
50933 Cologne
Germany
Phone: +49 (0) 221 423 55 010
Email: team@dataflowfacts.com

Represented by the managing director Peyman Javanbakhsh. Further details can be found in the legal notice.

2. Data protection officer

If you have questions about the processing of your personal data, you can reach our data protection officer at team@dataflowfacts.com (subject line “Data protection”) or by post at the address given above, with the addition “Data protection officer”.

3. Accessing this website (server log files)

When you access this website, the web server automatically processes technically necessary connection data: the IP address of the requesting device, date and time, the page accessed, the amount of data transferred, browser type and version, and the operating system. This data is stored in server log files and is not combined with other data sources.

Purpose and legal basis: Ensuring stable and secure operation of the website, detecting and defending against attacks. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR.
Storage period: Log files are automatically deleted after 7 days unless they are needed for longer to investigate a security incident.
Hosting: This website is hosted by ALL-INKL.COM, Neue Medien Münnich, Inh. René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The servers are located in Germany. We have a data processing agreement (DPA) with the provider pursuant to Art. 28 GDPR. The provider processes the data exclusively on our instructions.

4. Cookies, consent and audience measurement

Consent (cookie banner): On your first visit we ask whether we may use Google Analytics (statistics category) and Google Ads (marketing category). Without your consent, none of these tools is loaded; no cookies are set and no data is transferred to Google. We store your choice for twelve months in your browser's local storage (entry “opa-consent-v1”) so that we do not have to ask again on every visit; this storage is technically necessary (Section 25(2) no. 2 TDDDG). You can change or withdraw your consent at any time with effect for the future via “Cookie settings” in the footer of every page. The legal basis for using these tools is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

Google Tag Manager: To manage these tools we use Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Tag Manager is loaded only after your consent. It sets no cookies of its own and does not analyse data; it loads the tools you have approved. When it loads, your IP address is transmitted to Google.

Google Analytics 4 (statistics): With your consent we use Google Analytics 4 to understand how this website is used: pages viewed, time on site, features used such as the configurator or the hardware check, approximate region, device and browser, and the campaign through which you reached us. Google Analytics sets cookies (in particular “_ga” and “_ga_…” with a lifetime of up to two years) and assigns a random identifier to your browser. Google Analytics 4 does not store IP addresses; they are used only for coarse location. We retain the analytics data for 14 months. A data processing agreement under Art. 28 GDPR is in place with Google. Google may transfer data to the USA; Google LLC is certified under the EU-US Data Privacy Framework, and the EU standard contractual clauses apply in addition. Further information: policies.google.com/privacy and support.google.com/analytics/answer/6004245.

Google Ads (marketing): With your consent we use Google Ads conversion tracking and remarketing to measure whether our ads on Google lead to enquiries and to show visitors of this website relevant ads later. For this purpose cookies such as “_gcl_au” (lifetime three months) are set, and information about your visit, in particular submitted enquiries and started configurations, is transmitted to Google and linked to your ad click. Form contents are not transmitted. The provider is again Google Ireland Limited; the above applies to transfers to the USA. You can also disable personalised advertising at adssettings.google.com.

Google Consent Mode: We use Google Consent Mode. As long as you have not consented, all consent signals are set to “denied”. Since we do not load any Google scripts in that case, no anonymised signals are sent to Google either.

Local storage in the configurator: The package configurator stores your configuration exclusively locally in your browser (local storage) so that it is retained on your next visit. This data does not leave your device until you submit an enquiry and is not transmitted to us. You can delete it at any time via your browser settings. The legal basis for this purely local, technically necessary storage is Section 25(2) no. 2 TDDDG. Fonts and all other content of the website are served from our own server.

5. Enquiries via forms

If you send us an enquiry via the contact form, the package configurator, the free configurator or the hardware check, we process the details you enter: company, name, email address, optionally phone number and message, as well as the configuration you have put together or your details about your existing hardware.

Purpose: Responding to your enquiry, preparing a quotation and the communication with you that this requires.
Legal basis: Art. 6(1)(b) GDPR (taking pre-contractual steps at your request) and Art. 6(1)(f) GDPR (legitimate interest in the proper handling of enquiries).
Storage period: We store your enquiry for as long as it is being processed, and for a further 12 months afterwards so that we can answer follow-up questions. If a contract is concluded, the retention periods under commercial and tax law of 6 and 10 years respectively apply.
Recipients: Your details are processed exclusively by employees of Werbeeinheit UG (haftungsbeschränkt). No disclosure to third parties takes place. For sending emails, we use the mail servers of our hosting provider ALL-INKL.COM (see item 3).
Mandatory details: Company, name and email address are required so that we can answer your enquiry. All other details are voluntary.

6. Telephone and email communication

If you contact us by email or telephone, we process the data arising from this (contact details, content of the enquiry) to handle your request on the basis of Art. 6(1)(b) or (f) GDPR. The storage period corresponds to item 5.

7. Your rights

You have the following rights with respect to us regarding the personal data concerning you:

• Right of access (Art. 15 GDPR),
• Right to rectification (Art. 16 GDPR),
• Right to erasure (Art. 17 GDPR),
• Right to restriction of processing (Art. 18 GDPR),
• Right to data portability (Art. 20 GDPR),
• Right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR).

To exercise your rights, an informal message to team@dataflowfacts.com is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2 to 4, 40213 Düsseldorf, www.ldi.nrw.de.

8. Data security

This website is delivered exclusively via an encrypted connection (TLS). Form data is transmitted in encrypted form.

9. Data protection in our AI systems

This notice relates exclusively to this website. How our AI systems handle your company's data is described on the Security & data sovereignty page. For the optional remote service, we conclude a data processing agreement with you pursuant to Art. 28 GDPR. We provide a technical and organisational description for your data protection officer on request.

10. Version and changes

This privacy notice applies from 6 September 2026. We will update it if the website or the legal situation changes; the current version can always be found on this page.

This is a courtesy translation. The German version is the legally binding one.