The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on data protection can be found in our privacy policy listed below this text.
Data processing on this website is carried out by the website operator. You can find their contact details in the “Note on the responsible body” section of this privacy policy.
Some of the data is collected when you provide it to us. This may include, for example, data that you send us via email or when you subscribe to our newsletter.
Other data is collected automatically by our IT systems or our hosting provider when you visit the website. This primarily consists of technical data (e.g., internet browser, operating system, IP address, or the time the page was accessed). This data is collected automatically as soon as you access this website.
Some of the data is collected to ensure that the website is provided securely and without technical errors. We process additional data to the extent necessary to communicate with you or to provide the services you have requested.
You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request that this data be corrected or deleted. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. You also have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time about this and if you have any further questions about data protection.
We host the content of our website with the following provider:
The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter “Webflow”). When you visit our website, Webflow collects various log files, including your IP addresses.
Webflow is a tool for creating and hosting websites. Webflow stores cookies or other tracking technologies that are necessary for displaying the site, providing certain website functions, and ensuring security (essential cookies).
For details, please refer to Webflow’s Privacy Policy: https://webflow.com/legal/eu-privacy-policy
The use of Webflow is based on Article 6(1)(f) of the GDPR. We have a legitimate interest in providing our website as reliably and securely as possible.
Data transfers to the U.S. are based on the appropriate safeguards for international data transfers provided by Webflow. For more information, please see Webflow’s privacy policy: https://webflow.com/legal/eu-privacy-policy
We have entered into a data processing agreement (DPA) for the use of the aforementioned service. This is a contract required under data protection law that ensures Webflow processes the personal data of our website visitors only in accordance with our instructions and in compliance with applicable data protection regulations.
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may have security gaps. It is not possible to completely protect data from access by third parties.
The body responsible for data processing on this website is:
flow-med GmbH
Weinbergweg 10
73773 Aichwald
Germany
phone: +4971150463500
email: info@flow-med.com
The responsible body is the natural or legal person who alone or together with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).
Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you make a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have any other legally permissible reasons for storing your personal data (e.g. tax or commercial retention periods); in the latter case, the deletion will take place after these reasons no longer apply.
If you have consented to the data processing, we process your personal data on the basis of Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, provided that special categories of data as defined in Article 9(1) of the GDPR are being processed. In the event of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Article 49(1)(a) of the GDPR.
If you have consented to the storage of information on your device or to access to information on your device, this is additionally carried out on the basis of Section 25(1) of the TDDDG. Consent may be revoked at any time.
If your data is necessary for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Article 6(1)(b) of the GDPR. Furthermore, we process your data, to the extent necessary to comply with a legal obligation, on the basis of Article 6(1)(c) of the GDPR. Data processing may also be based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR. The specific legal bases applicable in each individual case are described in the following sections of this Privacy Policy.
Among other things, we use services provided by companies based in the U.S. This may result in the transfer of personal data to the U.S.
If the respective provider is certified under the EU-U.S. Data Privacy Framework (DPF), the data transfer may take place on the basis of the European Commission’s adequacy decision applicable in this regard. In addition, depending on the provider, other appropriate safeguards—in particular the European Commission’s Standard Contractual Clauses—may be used to protect international data transfers.
For more information on the specific services used and the safeguards employed for data transfers, please refer to the relevant sections of this Privacy Policy.
As part of our business activities, we work with various external bodies. In some cases, this also requires the transfer of personal data to these external bodies. We only transfer personal data to external bodies if this is necessary as part of the performance of a contract, if we are legally obliged to do so (e.g. transfer of data to tax authorities), if we have a legitimate interest in the transfer in accordance with Art. 6 para. 1 lit. f DSGVO or if another legal basis allows the transfer of data. When using contract processors, we only share personal data of our customers on the basis of a valid contract for order processing. In the event of joint processing, a joint processing contract is concluded.
Many data processing operations are only possible with your express consent. You can revoke any consent you have already given at any time. The legality of the data processing carried out up to the time of revocation remains unaffected by the revocation.
IF DATA PROCESSING IS BASED ON ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU FILE AN OBJECTION, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN PROVE COMPELLING LEGITIMATE REASONS FOR PROCESSING WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION IN ACCORDANCE WITH ARTICLE 21 (1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS ASSOCIATED WITH SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL THEN NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ARTICLE 21 (2) GDPR).
In the event of violations of the GDPR, the person concerned has the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, their place of work or the place of the alleged infringement. The right of appeal is without prejudice to other administrative or judicial remedies.
You have the right to have data that we process automatically based on your consent or in fulfilment of a contract handed over to you or to a third party in a standard, machine-readable format. If you request the direct transfer of data to another person responsible, this will only be done if it is technically feasible.
Within the framework of the applicable legal provisions, you have the right to obtain free information about your stored personal data, its origin and recipient and the purpose of data processing and, if applicable, the right to correct or delete this data at any time. You can contact us at any time about this and if you have any further questions about personal data.
You have the right to request that the processing of your personal data be restricted. For this purpose, you can contact us at any time. The right to restrict processing exists in the following cases:
If you have restricted the processing of your personal data, this data — apart from storage — may only be processed with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the browser’s address bar begins with “https://.”
Thanks to SSL or TLS encryption, data transmitted between your browser and our website cannot be easily read by third parties.
Our website uses only technically necessary cookies or comparable technologies that are required for the secure and technically error-free operation of the website.
These technologies may be used, in particular, by our hosting and infrastructure service provider Webflow or the technical infrastructure employed by Webflow. They serve, for example, to ensure security, prevent unauthorized access, and ensure the reliable operation of the website.
To the extent that the storage of information on your device or access to it is absolutely necessary, this is done in accordance with Section 25(2) of the German Telemedia Act (TDDDG). The associated processing of personal data is carried out, where applicable, in accordance with Article 6(1)(f) of the General Data Protection Regulation (GDPR). Our legitimate interest lies in the secure and technically error-free provision of our website.
We currently do not use cookies for analytics, tracking, or advertising purposes.
You can configure your browser to block cookies or to delete them at the end of your session. If you completely disable technically necessary cookies, the functionality of the website may be limited.
If you contact us by e-mail or telephone, your request, including all resulting personal data (name, request), will be stored and processed by us for the purpose of processing your request. We will not share this data without your consent.
This data is processed on the basis of Art. 6 para. 1 lit. b GDPR, insofar as your request is related to the fulfilment of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; the consent can be withdrawn at any time.
The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions — in particular statutory retention periods — remain unaffected.
If you would like to receive the newsletter offered on the website, we need an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. Further data is not collected or only collected on a voluntary basis. To process the newsletters, we use newsletter service providers, which are described below.
This website uses Mailchimp's services to send newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.
Mailchimp is a service with which, among other things, the sending of newsletters can be organized. If you enter data for the purpose of subscribing to the newsletter (e.g. email address), it will be stored on Mailchimp's servers in the USA. We have deactivated Mailchimp's success measurement so that Mailchimp will not evaluate your behavior when you open our newsletters.
If you do not want your data to be transferred to Mailchimp, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message.
Data processing is based on your consent (Art. 6 para. 1 lit. a DSGVO). You can withdraw this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
The data you have stored with us for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data that we have stored for other purposes remains unaffected.
Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://mailchimp.com/eu-us-data-transfer-statement/ and https://mailchimp.com/legal/data-processing-addendum/#Annex_C_-_Standard_Contractual_Clauses.
After you have unsubscribed from the newsletter distribution list, your e-mail address may be stored in a blacklist by us or the newsletter service provider, insofar as this is necessary to prevent future mailings. The data from the blacklist is only used for this purpose and is not combined with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). Storage on the blacklist is not limited in time. You can object to storage if your interests outweigh our legitimate interest.
For more information, see Mailchimp's privacy policy at: https://mailchimp.com/legal/terms/.
We have concluded an order processing contract (AVV) to use the service mentioned above. This is a contract required by data protection law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.