Back

Privacy & Data Protection Statement

At Webfluss, we value your privacy and are committed to protecting your personal information. This Privacy & Data Protection Statement outlines the personal data we collect, why we collect it, how we use your information, and the measures we take to safeguard your privacy. Throughout this document, "Webfluss," "we," "us," and "our" refer to our organization.

Purposes for Processing Your Data

We process your personal data for a variety of purposes. Below is a detailed explanation of why we process certain types of personal data, the legal basis for doing so, and how long we retain your information.

Website Visit

During your visit to our website, we may process the following personal data:

  • IP address
  • Browser type and operating system
  • Usage information

This personal data is kept only as long as you visit the website. The legal basis for processing this personal data is our legitimate interest in maintaining a properly functioning website and providing an optimal user experience.

Creating a Profile Page

When you create a profile page on our platform, we will collect the following personal data:

  • Name
  • Email address
  • Any additional information you voluntarily provide in your profile

This information is collected to create and manage your account, and we retain it for the duration of your use of our services, unless otherwise required by law.

Contact

We offer various ways to contact us, including by email. When responding to your inquiries, we process the following personal data:

  • Name
  • Email address
  • Any additional information provided in your message

We use this information solely to respond to your requests effectively. This data will be retained until we confirm your satisfaction with our response.

Newsletter

To keep you informed about our latest news and services, we offer a newsletter. For sending newsletters, we use Mailcoach, and we will process your email address. This information is retained as long as you are subscribed to the newsletter.

Hosting & Data Security

Hosting

Our application is hosted on Hetzner servers in Germany. The hosting environment complies with GDPR, and we ensure that data security standards are met, including physical and network security measures. We use Ploi to manage our servers.

Security Measures

We implement various technical and organizational measures to ensure the safety of your personal data. This includes:

  • Using TLS (Transport Layer Security) to protect the transmission of personal data.
  • Ensuring access to personal data is limited to authorized personnel on a need-to-know basis.
  • Regular security audits and compliance checks to ensure data safety.
  • Utilizing Cloudflare's reverse proxy to protect against DDoS attacks.

Cookies and Analytics

Necessary / Functional Cookies

We use the following cookies to enhance your experience on our website:

  • laravel_session : Used to manage login sessions. (Retention: 2 hours)
  • remember_web : Used for remembering user login status. (Retention: 5 years)
  • XSRF-TOKEN : Used for CSRF protection to ensure secure form submissions. (Retention: 2 hours)

These cookies are necessary for the proper functioning of the website and do not require user consent.

Analytics

We use Umami's privacy-first analytics to monitor website usage and performance without tracking individual users. This helps us improve the website experience while safeguarding your privacy.

Third-Party Services

We engage third-party service providers to deliver our services. These providers are authorized to use your personal data solely for the purposes specified in this privacy statement and must comply with our instructions:

  • Ploi : Used for managing server deployments.
  • Cloudflare : Utilized as a reverse proxy to protect against DDoS attacks.

Data Transfers

If your personal data is transferred outside the European Economic Area (EEA), we will ensure appropriate safeguards are in place to comply with GDPR requirements, such as standard contractual clauses or other approved mechanisms.

Your Rights

We respect your rights under the GDPR, which may include:

  • The Right to Access : You have the right to request access to the personal data we hold about you.
  • The Right to Correct : You have the right to correct any inaccurate personal data.
  • The Right to Erasure : You have the right to request deletion of your personal data under certain circumstances.
  • The Right to Data Portability : You can request a copy of your personal data in a machine-readable format.
  • The Right to Restriction of Processing : You have the right to request restrictions on how we process your personal data.
  • The Right to Object : You can object to the processing of your data, including for direct marketing purposes.

To exercise these rights or for questions about how we process your personal data, please contact us using the details provided below.

Contact Information

If you have any questions or concerns about how we process your personal data, please contact us at:

Changes to This Privacy Statement

We may update this Privacy & Data Protection Statement from time to time to reflect changes in our practices, legal requirements, or operational needs. Any changes made to this statement will be posted on this website. It is recommended that you review this statement periodically to stay informed about how we are protecting your personal data. Updated: October 01, 2024.