Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Flavizz GmbH
Josef-Frankl-Str. 11a
80995 Munich
Germany

Email: info@flavizz.com

Represented by: Lars Kupetz, Managing Director

2. Hosting

This website is hosted by IONOS SE. We use IONOS on the basis of Art. 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and efficient provision of our website.

Where IONOS processes personal data on our behalf, processing takes place on the basis of Art. 28 GDPR. A data processing agreement is in place.

Server Log Files

When you visit this website, certain technical data is automatically collected and stored in server log files. This may include:

• IP address
• date and time of access
• time zone
• request line
• referrer URL
• user agent
• transferred data volume
• status code

This data is processed for the technical delivery of the website, system stability and security. The legal basis is Art. 6(1)(f) GDPR. Log data is regularly deleted automatically.

3. Cookies and Consent

We use cookies and similar technologies on this website.

Cookies that are technically necessary for the operation of the website are used on the basis of Art. 6(1)(f) GDPR. Our legitimate interest is the secure and functional operation of the website.

Cookies and similar technologies for comfort, analytics or marketing purposes are only used with your consent. The legal basis is Art. 6(1)(a) GDPR.

You can give, refuse or withdraw your consent at any time via the consent banner or cookie settings. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

4. Contact by Email or Form

If you contact us by email or via a contact form, we process the information you provide in order to respond to your request.

Depending on the nature of your request, the legal basis is Art. 6(1)(b) GDPR, where the processing is necessary for pre-contractual measures or contract-related communication, or Art. 6(1)(f) GDPR, based on our legitimate interest in communicating with you and processing your request.

Your data will be deleted once your request has been completed, unless statutory retention obligations apply.

5. Newsletter and Project Updates

If you subscribe to our newsletter or project updates, we use your email address exclusively to send you the requested information.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. Subscription takes place using a double opt-in process. This means that you will receive an email asking you to confirm your subscription. We record the subscription and confirmation in order to document your consent.

You can withdraw your consent at any time by using the unsubscribe link in the respective email.

If we use an external email service provider, this provider will process your data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. If data is transferred to a third country, this will only take place where the legal requirements are met, for example on the basis of Standard Contractual Clauses or another recognized transfer mechanism.

6. Web Analytics

Google Analytics 4

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics helps us understand how visitors use our website so that we can improve our content, structure and user experience.

Google Analytics 4 is only used with your consent. The legal basis is Art. 6(1)(a) GDPR. You can withdraw or change your consent at any time via the consent banner or cookie settings.

Google Analytics 4 uses cookies and similar technologies. The information generated may be transferred to and processed by Google servers. This may also involve transfers to the United States. Where required, such transfers are based on appropriate safeguards, such as Standard Contractual Clauses, or other legally recognized transfer mechanisms.

According to Google, IP addresses are not logged or stored in Google Analytics 4. Nevertheless, Google Analytics is only activated on this website after consent has been given.

We have concluded a data processing agreement with Google.

7. Social Media Links

Our website contains links to our social media profiles.

These are simple links. When you visit our website, no personal data is automatically transferred to the respective social media platforms through these links.

If you click on a social media link, you will be redirected to the respective platform. The privacy policies of the respective providers apply there.

8. Security

We use TLS/SSL encryption to protect data transmitted through this website.

We also take appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration or disclosure.

9. Storage Period

We process and store personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations.

Once the purpose no longer applies and no statutory retention obligations exist, the data will be deleted or anonymized.

10. Your Rights

Under the GDPR, you have the following rights:

• right of access pursuant to Art. 15 GDPR
• right to rectification pursuant to Art. 16 GDPR
• right to erasure pursuant to Art. 17 GDPR
• right to restriction of processing pursuant to Art. 18 GDPR
• right to data portability pursuant to Art. 20 GDPR
• right to object pursuant to Art. 21 GDPR
• right to withdraw consent at any time pursuant to Art. 7(3) GDPR

You also have the right to lodge a complaint with a data protection supervisory authority.

The competent supervisory authority in Bavaria is:

Bavarian State Office for Data Protection Supervision
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

11. Legal Bases

Depending on the individual processing activity, we process personal data on the following legal bases:

• Art. 6(1)(a) GDPR — consent
• Art. 6(1)(b) GDPR — contract or pre-contractual measures
• Art. 6(1)(c) GDPR — legal obligation
• Art. 6(1)(f) GDPR — legitimate interests

12. Processors and Third Parties

Where we use service providers, for example for hosting, email services or analytics, they process personal data on our behalf on the basis of data processing agreements pursuant to Art. 28 GDPR.

Data transfers to countries outside the European Union or the European Economic Area only take place where the legal requirements are met, for example on the basis of an adequacy decision, Standard Contractual Clauses or another legally recognized transfer mechanism.

13. Changes to this Privacy Policy

We may update this Privacy Policy if the legal situation, our website or the services we use change.

Last updated: 12 May 2026