1. Privacy at a Glance

Your Data at a Glance:

What we collect: Technical data (IP, browser), contact forms, cookies (only with your consent).
→ more

Purpose: Website operation, customer communication (WhatsApp/email), anonymous analytics (Google Analytics).
→ more

How long: Cookies max. 12 months, contact forms 30 days, newsletter until unsubscription.
→ more

Your rights: Access, erasure, objection, withdrawal – simply write to privacy@flexcision.de.
→ more

Data transfer: USA (Google/Cloudflare: SCCs + DPF), China (encrypted + DPIA).
→ more

General Notes

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

Data Collection on This Website

Data collection on this website is carried out by the website operator. Their contact details can be found in the section “Notice on the Responsible Body” in this privacy policy.

How Do We Collect Your Data?

Your data is collected partly by you providing it to us, e.g., when you use our contact form. Other data is collected automatically by our IT systems when you visit the website (e.g., browser, operating system, time of page access).

2. Hosting

Hosting with Mittwald

The pages are hosted by Mittwald CM Service GmbH & Co. KG (Königsweg 1, 32327 Espelkamp).

Cloudflare CDN

We use the Content Delivery Network service of Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). Cloudflare provides DDoS attack protection, delivers content through a global network, and forwards access data in log files. Details: cloudflare.com/privacy.

3. General Notes and Mandatory Information

Data Protection Officer

Our Data Protection Officer can be reached at: privacy@flexcision.de

SSL/TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content.

Right to Data Portability

You have the right to have data that we process automatically on the basis of your consent handed over to you or to a third party in a standard, machine-readable format.

3.1 Data Retention Periods

We retain your personal data for the following periods, unless a longer statutory retention period is required:

• Cookies: Non-essential cookies are stored for a maximum of 12 months (or until you withdraw your consent).
• Contact form data: Deleted within 30 days after your request has been processed.
• Server logs: Automatically deleted after a maximum of 90 days (following security analysis).
• Newsletter data: Until you unsubscribe from the newsletter.

3.2 Your Rights

Under the GDPR, you have the following rights:

• Right of access: You may request confirmation of whether we process your data and receive a copy.
• Right to rectification: You may request correction of inaccurate or incomplete data.
• Right to erasure: In certain circumstances (e.g., withdrawal of consent, data no longer needed), you may request deletion.
• Right to restriction of processing: In certain circumstances (e.g., dispute over data accuracy), you may request restriction.
• Right to data portability: You may request your data in a structured format and transfer it to another service provider.
• Right to object: You may object to processing based on legitimate interests (e.g., direct marketing).
• Right to withdraw consent: You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise your rights, please send an email to: privacy@flexcision.de. We will respond to your request within 30 days.

Identity verification: For security purposes, we may ask you to provide a copy of your identity document (with non-relevant data blacked out) to confirm your identity. This is voluntary and serves solely to prevent abuse.

3.3 Cross-Border Data Transfers

EU-USA: We have concluded EU Standard Contractual Clauses (SCCs) with service providers such as Google and Cloudflare, and reference the EU-US Data Privacy Framework (DPF) to ensure data protection.

EU-China: Our company is headquartered in China. We have implemented the following measures to ensure data security:

• A Data Processing Agreement has been concluded with the Chinese subsidiary, clearly defining data protection obligations.
• Data of EU users is anonymised or encrypted.
• Data Protection Impact Assessments (DPIAs) are conducted on a regular basis.

3.4 Data Breach Notification

• Notify the competent supervisory authority within 72 hours.
• Promptly inform you by email or website announcement if the breach is likely to result in a high risk to your rights and freedoms.

4. Consent Management

We use a Consent Management Platform (CMP) to obtain and manage your consent for the use of cookies and tracking technologies. You can withdraw or adjust your consent at any time via the cookie banner at the bottom of the screen.

5. Data Collection on Our Website

Contact Form

If you send us enquiries via the contact form, your details will be stored for the purpose of processing your enquiry.

Communication via WhatsApp

We offer the option of contacting us via WhatsApp (Meta Platforms Ireland Ltd, Grand Canal Dock, Dublin 4, Ireland). Messages are end-to-end encrypted; metadata (phone number, timestamp) may be processed by Meta.

Data Security Notice:

We use the WhatsApp Business API (not the private version) to enhance data security. To avoid access to your address book, we recommend using WhatsApp only on a device without private contacts.

6. Cookies

Our websites partially use so-called cookies. Cookies do not cause damage to your computer. They serve to make our offer more user-friendly, effective, and secure.

7. Plugins and Tools

7.1 Google Tag Manager

We use Google Tag Manager (GTM) to manage tracking and marketing tags. GTM itself does not store personal data but enables the integration of tools such as Google Analytics and Google Ads.

7.2 Google Analytics

We use Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) for anonymous analysis of user behaviour. IP addresses are anonymised. Legal basis: consent (Art. 6(1)(a) GDPR).

IP Anonymisation:

We have enabled IP anonymisation, so your IP address is truncated by Google before storage (e.g., from 192.168.1.1 to 192.168.1.0). This takes place within the EU/EAA.

7.3 Google Ads and Conversion Tracking

We use Google Ads and Conversion Tracking to measure the effectiveness of our advertising campaigns. A cookie is stored on your device. Legal basis: consent (Art. 6(1)(a) GDPR).

7.4 Automated Analysis and Personalisation

We use Google Analytics and Google Tag Manager to analyse user behaviour on our website.

Creation of user profiles:

Based on the pages you visit, clicks, and dwell time, anonymous profiles are created to improve the usability of the website.

Personalised content:

If you have consented to the use of cookies, we may display personalised content or recommendations (e.g., based on your previous visits).

Your rights:

You have the right to object to automated analysis (Art. 21 GDPR).

Opt-out options:

• Disable Google Analytics (browser plugin)
• Google Ads Settings (turn off personalised advertising)

Legal basis:

• Consent (Art. 6(1)(a) GDPR) for personalised content/advertising.
• Legitimate interest (Art. 6(1)(f) GDPR) for anonymous analysis for website optimisation.

8. Google Maps

We use Google Maps to embed a map. When called up, data is transmitted to Google. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

9. Google Fonts (Local)

We use Google Fonts hosted locally on our server. No connection to Google servers is established.