1. Controller
The controller responsible for data processing on this website within the meaning of the EU General Data Protection Regulation (GDPR) is:
Flowistic GmbH
Kostheimer Str. 14
60326 Frankfurt am Main, Germany
Represented by: Fayssal El Mofatiche
Commercial register: HRB 131160, Registergericht Frankfurt am Main
E-mail: fayssal.elmofatiche@flowistic.ai
Phone: +49 152 01603946
2. Overview
This website is an informational site about our services. We process personal data only as described below. We do not use analytics or marketing tracking, we do not set advertising cookies, and fonts and scripts are served from our own infrastructure.
3. Hosting and server logs
This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA ("Netlify"). When you visit the site, Netlify automatically processes technical connection data (IP address, date and time of the request, requested resource, browser type, operating system, referrer URL) in server logs. This processing is necessary to deliver the website and to ensure its stability and security.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and reliable provision of the website). Netlify may process data in the United States; transfers are safeguarded by the EU–US Data Privacy Framework and/or EU Standard Contractual Clauses. See Netlify's privacy policy.
4. Contact form
If you use our contact form, we process the data you enter: first and last name, e-mail address, company, subject, and your message. We use this data solely to handle your enquiry and any follow-up correspondence.
Submissions are transmitted to and stored in HubSpot, a customer relationship management service operated by HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA. HubSpot acts as our processor; transfers to the USA are safeguarded by the EU–US Data Privacy Framework and/or EU Standard Contractual Clauses. See HubSpot's privacy policy.
Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract, at your request) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). We retain contact enquiries for as long as needed to process them and any statutory retention periods that apply.
5. Google reCAPTCHA
To protect the contact form against automated abuse, we use Google reCAPTCHA, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA analyses characteristics of your visit (such as IP address, time spent on the page, and mouse movements) to distinguish humans from bots. This analysis starts when the contact page loads and runs in the background.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protecting the form against spam and abuse). Data may be transferred to Google LLC in the USA; transfers are safeguarded by the EU–US Data Privacy Framework. See Google's privacy policy.
6. Contact by e-mail
If you contact us directly by e-mail, we process your e-mail address and the contents of your message to handle your enquiry. Legal basis: Art. 6(1)(b) and (f) GDPR.
7. Cookies and local storage
We do not set tracking or marketing cookies. The website stores a single
value in your browser's local storage (appTheme) to remember
your light/dark mode preference. This value never leaves your device and
contains no personal data. Google reCAPTCHA (section 5) may set technically
required cookies on the contact page.
8. Your rights
Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise these rights, contact us at the address in section 1.
You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.
9. Changes to this policy
We will update this privacy policy when the data processing on this website changes. Last updated: 11 June 2026.