Privacy Policy

Controller

The controller responsible for data processing on Flowwire (flowwire.de) is CovaSyn GmbH, Naunhofer Straße 67, 04299 Leipzig, Deutschland, represented by Dr. Oliver Kraft, Dr. Immo Serbian.

Contact for all data protection matters: kontakt@flowwire.de. No data protection officer has been appointed because this is not legally required.

Hosting and server log files

This website is hosted by Vercel Inc. (USA). When you visit it, the host processes technically necessary data: IP address, date and time, the page requested, referrer, browser and operating system. This is required to deliver the website and keep it secure (Art. 6(1)(f) GDPR). The data is stored only as long as necessary for these purposes.

A data processing agreement is in place with Vercel. Transfers to the USA rely on the adequacy decision for the EU-US Data Privacy Framework or, alternatively, on Standard Contractual Clauses.

Database

We store enquiries, orders and the related details in a Supabase database (data center in Frankfurt am Main, Germany). A data processing agreement is in place with the provider.

Contact by email

If you write to us at kontakt@flowwire.de, we process your message and your sender data to answer your enquiry (Art. 6(1)(b) or (f) GDPR). Our mailbox is hosted by a provider in Germany (ALL-INKL.COM, Neue Medien Münnich). We delete correspondence as soon as it is no longer needed and no retention obligation applies.

Enquiry form and product information

If you enter your email address (and optionally your company) on the site, we store these details together with marketing parameters (UTM) and the referrer in order to process your enquiry (Art. 6(1)(b) and (f) GDPR). We send product information by email only if you have ticked the corresponding box (Art. 6(1)(a) GDPR). You can withdraw this consent at any time with effect for the future, for example by email to kontakt@flowwire.de.

Orders and contract processing

If you place an order, we process the details from the checkout and the order form (for example name, company, address, email address, VAT ID, booked services) in order to perform the contract (Art. 6(1)(b) GDPR). We keep invoicing and payment data because of commercial and tax-law retention periods (Art. 6(1)(c) GDPR, currently up to ten years).

Orders are processed by a self-operated automation (n8n) on a server of Hetzner Online GmbH in Germany. We receive internal order notifications via Slack (Slack Technologies, USA; transfer based on Standard Contractual Clauses or the Data Privacy Framework). We send order confirmations by email from our mailbox in Germany.

Payment processing

Payments are processed by Stripe Payments Europe Ltd. (Ireland), a subsidiary of Stripe, Inc. (USA). You enter your payment details directly with Stripe; we only receive the payment status, name, email address and billing details (Art. 6(1)(b) GDPR). Stripe partly processes data as an independent controller, for example for fraud prevention and to meet legal obligations. For details, see Stripe’s privacy policy.

Cookies and tracking

We do not use tracking or marketing cookies on this website and do not load analytics or advertising services. We serve images and fonts from our own hosting.

Retention period

We store personal data only as long as necessary for the respective purpose or as long as a statutory retention period applies. We delete enquiries that do not lead to a contract as soon as they are dealt with and no retention obligation applies.

Your rights

You have the following rights. Please contact kontakt@flowwire.de to exercise them:

• Access to your stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Withdrawal of consent you have given, with effect for the future (Art. 7(3) GDPR)
• Lodging a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the Saxon Data Protection and Transparency Commissioner (Sächsische Datenschutz- und Transparenzbeauftragte)

Right to object

Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). You may object to direct marketing at any time without giving reasons. An informal message to kontakt@flowwire.de is sufficient.

Obligation to provide data, automated decisions

The details marked as mandatory in the forms are required for the enquiry and for concluding a contract; without them we cannot provide the service. No automated decision-making with legal effect within the meaning of Art. 22 GDPR takes place.

Last updated

This policy was last updated on 2026-10-30. We adjust it when services or the legal situation change.