Privacy Policy - Flow Dynamics AI e.U.

Last updated: March 27, 2025

1. Controller and Contact Information

Controller as defined by GDPR:
Flow Dynamics AI e.U.
Christian Landsteiner
Kanalstraße 62/7/3
1220 Wien
Austria

Email: contact@flowdynamics.ai

2. Collection and Processing of Personal Data

2.1 Visiting our Website

Every time you access our website, information is automatically transmitted by your browser to our servers. This includes:

• IP address

• Date and time of the request

• Browser type and version

• Operating system

• Referrer URL (previously visited page)

• Amount of data transferred

This data is automatically stored in our server log files for a period of 30 days. The processing is based on Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in ensuring the functionality and security of our website, detecting potential intrusions, and analyzing performance issues.

Server location and storage is in Germany.

2.2 Contact

When you contact us via email or contact form, the data you provide (your email address, possibly your name and phone number) will be stored to answer your inquiry and for possible follow-up questions. This data is stored for 5 years from the date of your request. The processing is based on Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest).

3. Cookies and Analytics

3.1 Cookies

Our website uses cookies. Cookies are small text files that are stored on your device. They do not cause any harm and do not contain viruses. We distinguish between:

Technically necessary cookies: These are required for the operation of the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest).

Analysis and marketing cookies: These are used for analyzing user behavior and for marketing purposes. The legal basis is Art. 6(1)(a) GDPR (your consent).

You can set your browser to inform you about the placement of cookies, to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to activate the automatic deletion of cookies when closing the browser.

3.2 Cookie Banner

When you first visit our website, a cookie banner appears through which you can give your consent to the use of non-essential cookies. You can revoke your consent at any time.

3.3 Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited ("Google"). Google Analytics uses cookies that are stored on your computer and allow an analysis of your use of the website.

The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. We have activated IP anonymization, so that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission.

The processing is based on Art. 6(1)(a) GDPR (your consent). You can revoke your consent at any time.

4. Social Media Plugins

Our website uses social media plugins from [list, e.g., Facebook, Twitter, LinkedIn]. These can be recognized by the respective logo.

We use these plugins with the so-called two-click solution. This means that when you simply visit our website, no personal data is initially passed on to the providers of the plugins. You can activate a plugin by clicking on it, thereby giving your consent to the data transfer.

The processing is based on Art. 6(1)(a) GDPR (your consent).

5. Newsletter

If you subscribe to our newsletter, we use the data you provide exclusively for sending the newsletter. Your data will be stored until you unsubscribe from our newsletter. You can unsubscribe at any time via the unsubscribe link in the newsletter or by contacting us.

The processing is based on Art. 6(1)(a) GDPR (your consent).

6. AI-generated Content

Parts of this website may have been created using artificial intelligence. In accordance with legal requirements, we label such content accordingly.

7. Data Transfer to Third Parties

Your data will only be passed on to third parties if:

• You have given your explicit consent (Art. 6(1)(a) GDPR)

• The transfer is necessary for the performance of a contract with you (Art. 6(1)(b) GDPR)

• There is a legal obligation for the transfer (Art. 6(1)(c) GDPR)

• The transfer is necessary for the establishment, exercise or defense of legal claims (Art. 6(1)(f) GDPR)

7.1 Processors

We use the following processors:

• Website hosting Hosting provider:
  Hostinger, UAB
  Jonavos g. 60C
  Vilnius, 44192
  Lithuania

• Email service provider:
  Google Ireland Limited
  Gordon House, Barrow Street
  Dublin 4, D04 E5W5
  Ireland

• CRM provider:
  Airtable, Inc.
  799 Market Street, 8th Floor
  San Francisco, CA 94103
  United States

• Voice AI agent provider:
  Retell AI Inc.
  Saratoga, CA
  United States

• Scheduling Provider:
  cal.com, Inc.
  San Francisco, CA
  United States
  
  

• Email service provider
  Google Ireland Limited

  Gordon House, Barrow Street

  Dublin 4, D04 E5W5

  Ireland

• Google Tags: Google LLC

  1600 Amphitheatre Parkway

  Mountain View, CA 94043

  United States

  
  

  Map Services: Google Maps

  Google Ireland Limited

  Gordon House, Barrow Street

  Dublin 4, D04 E5W5

  Ireland

• Zoom Video Communications, Inc.

  Zoom Video Communications B.V. (EU-Niederlassung)

  Herengracht 420

  1017BZ Amsterdam

  Niederlande

For processors located outside the EU/EEA, we ensure an adequate level of data protection through appropriate safeguards, such as Standard Contractual Clauses or participation in the EU-US Data Privacy Framework.

We have concluded a data processing agreement with all processors in accordance with Art. 28 GDPR.

8. Storage Duration

We store your personal data only for as long as necessary to achieve the purpose of processing or as required by legal retention obligations.

• Server log files: 30 days

• Contact requests: 5 years from the date of the request

• Newsletter data: until unsubscription

9. Your Rights as a Data Subject

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR): You have the right to obtain information about the personal data we process about you.

• Right to rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate or incomplete data.

• Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data.

• Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing of your personal data.

• Right to data portability (Art. 20 GDPR): You have the right to receive the data you have provided in a structured, commonly used and machine-readable format.

• Right to object (Art. 21 GDPR): You have the right to object at any time to the processing of your personal data.

• Right to withdraw consent (Art. 7(3) GDPR): You have the right to withdraw your consent at any time.

To exercise these rights, please contact us using the contact details provided in Section 1.

10. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.

Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at

11. Data Security

We implement technical and organizational security measures in accordance with Art. 32 GDPR to protect your personal data against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. Our security measures are continuously improved in line with technological developments.

12. International Data Transfers

For processors located outside the European Economic Area (EEA), such as Airtable, Inc. and Retell AI Inc., we ensure that appropriate safeguards are in place for the transfer of personal data. This is achieved through Standard Contractual Clauses (SCCs) approved by the European Commission or through certification mechanisms such as the EU-US Data Privacy Framework.

13. Changes to this Privacy Policy

We reserve the right to change this privacy policy at any time in compliance with applicable data protection regulations. The current version of the privacy policy is always available on our website.