Privacy Policy

01Controller

We have not appointed a Data Protection Officer, as we are not legally required to. For any data-protection matter, please contact us at the address or email above.

02Hosting

Our website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located within the European Union. The host processes data only on our behalf, as our processor under a data processing agreement pursuant to Art. 28 GDPR.

Legal basis: our legitimate interest in a secure and reliable presentation of our website (Art. 6 (1) (f) GDPR).

03Server log files

When you access the website, your browser automatically transmits information that we (through our host) store in server log files:

• Anonymised or shortened IP address
• Date and time of the request
• The page or file requested
• Referrer URL (the previously visited page)
• Browser type and version, and operating system

Purpose: to operate the site, ensure its security and stability, and prevent abuse. Legal basis: our legitimate interest (Art. 6 (1) (f) GDPR). These logs are kept only as long as necessary and are then deleted or anonymised. We do not combine this data with other sources or use it to identify you.

04Encryption (TLS/SSL)

This website uses TLS/SSL encryption for every connection, recognisable by the “https://” prefix and the padlock in your browser. This protects the data you transmit from being read by third parties.

05Cookies

We use only technically necessary cookies — a session cookie and an anti-CSRF token — which keep the website working and secure. We do not use tracking, analytics, advertising, or profiling cookies, and we do not embed third-party trackers.

Because these cookies are strictly necessary to provide the service you requested, no consent banner is required (§ 25 (2) no. 2 TTDSG).

06Contact form and email

If you use our contact form or write to us by email, we process the data you provide:

• Your name
• Your email address
• Your organisation (optional)
• The content of your message

Purpose: to respond to your enquiry and to send you a confirmation that we received it. Legal basis: steps taken at your request prior to entering into a contract (Art. 6 (1) (b) GDPR) and our legitimate interest in responding to enquiries (Art. 6 (1) (f) GDPR).

Our outgoing emails (the confirmation to you and the notification to us) are delivered through IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, which acts as our processor under Art. 28 GDPR; its servers are located within the EU.

We keep your enquiry only as long as needed to handle it and for a reasonable follow-up period, after which it is deleted — unless statutory retention obligations require otherwise.

07Fonts

All fonts are hosted on our own server. Your browser does not connect to Google or any other third party to load them, and no font-related data is transmitted to third parties.

08Recipients and processors

We pass personal data only to carefully selected processors who support the operation of this website, each bound by a data processing agreement:

• Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany — website hosting
• IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany — delivery of transactional emails

We do not transfer your personal data to countries outside the EU/EEA, and we do not sell or rent it to anyone.

09Automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

10Your rights

Under the GDPR you have the right to:

• access your personal data (Art. 15)
• have inaccurate data rectified (Art. 16)
• have your data erased (Art. 17)
• restrict processing (Art. 18)
• data portability (Art. 20)
• object to processing based on legitimate interest (Art. 21)
• withdraw consent at any time, with effect for the future (Art. 7 (3))

To exercise any of these rights, contact us at justina.chodara@fleximind.coach.

11Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. Our lead authority is the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus (1 Iasonos Street, 1082 Nicosia, www.dataprotection.gov.cy). If you are based in Germany, you may also contact the data protection authority of your federal state.

12Changes to this policy

We may update this policy to reflect changes to our website or to legal requirements. The current version published here always applies and carries the date shown above.