Imprint

01Controller

Lukasz Zyrek, Finchflow, In den Alboingärten 17, 12103 Berlin, Germany
Email: lukasz@finchflow.ai

No data protection officer has been appointed.

02Hosting and server logs

The website is hosted on a server operated by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. When you visit it, the server automatically processes technical data: IP address, date and time, page requested, referrer, browser and operating system.

• >Purpose: delivering the website, stability, IT security
• >Legal basis: Art. 6(1)(f) GDPR
• >Retention: IP addresses are automatically anonymized after 7 days. The remaining log data, without IP addresses, can no longer be linked to anyone and is kept for statistics and troubleshooting.
• >A data processing agreement pursuant to Art. 28 GDPR is in place with netcup.

03Cookies and consent

Without your consent, the website stores nothing on your device and reads nothing from it, except your decision in the cookie banner. Your consent in the banner covers the audience measurement (section 04) and loading the Google Calendar booking on the contact page (section 07).

• >Storing your decision: in your browser’s local storage under “ff_consent”, content: zugestimmt (accepted) or abgelehnt (declined) and the time, retention 12 months. Legal basis: § 25(2) no. 2 TDDDG, Art. 6(1)(c) GDPR (proof of consent).
• >Withdrawal: at any time via “Privacy settings” in the footer, with effect for the future.

04Audience measurement (only with consent)

If you consent, a self-developed statistics script measures how the website is used. The data is stored exclusively on my own server at netcup in Germany. No third party, no disclosure, no third country.

• >Data collected: pages visited, referrer and campaign parameters (UTM), time, time on page, scroll depth, clicks on buttons and links, device type, operating system, browser, screen size, browser language, country and region (derived from the IP address)
• >IP address: used only briefly to derive country and region and not stored. The lookup runs locally on the server using the “IP to City Lite” database by DB-IP.com (CC BY 4.0 license), without any request to third parties.
• >Recognition: a random, pseudonymous visitor ID in your browser’s local storage under “ff_vid”, lifetime 12 months. It only serves to distinguish new from returning visits and is not combined with other data about you.
• >Purpose: improving the website and services
• >Legal basis: § 25(1) TDDDG, Art. 6(1)(a) GDPR
• >Retention: 25 months, after which the data is aggregated into anonymous statistics and the individual records are deleted

05Fonts

The fonts (Satoshi, Geist Mono and EB Garamond for the logo) are hosted on my own server. No connection is made to Google Fonts or any other font provider.

06Contact by email

If you write to me, I process your details (name, email address, content) to answer your inquiry. My mailbox runs on Google Workspace (Google Ireland Limited).

• >Legal basis: Art. 6(1)(b) GDPR (inquiry about an engagement), otherwise point (f)
• >Third country: transfer to the USA is possible, safeguarded by the EU-US Data Privacy Framework, under which Google LLC is certified
• >Retention: until the inquiry has been dealt with; in case of an engagement, in line with statutory commercial and tax retention periods

07Booking via Google Calendar (only with consent)

On the contact page you can book an appointment directly via Google Calendar (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The booking page only loads once you’ve consented in the cookie banner or clicked “Load calendar”. Before that, the website makes no connection to Google. Once the booking has loaded, Google technically receives your IP address and information about your browser and may use cookies or similar technologies on your device. Google processes the data according to its own privacy policy.

• >Data collected when the booking loads: IP address, browser and device information, time
• >Data collected when you book: name, email address, selected slot and any optional details you enter in the booking form
• >Purpose: scheduling appointments directly on the website and holding the appointment
• >Legal basis: § 25(1) TDDDG, Art. 6(1)(a) GDPR (consent via banner or click), for a booking additionally Art. 6(1)(b) GDPR (inquiry about an engagement)
• >Withdrawal: via “Privacy settings” in the footer, with effect for the future
• >Third country: transfer to the USA is possible, safeguarded by the EU-US Data Privacy Framework, under which Google LLC is certified
• >Retention: until the appointment and the inquiry have been dealt with; in case of an engagement, in line with statutory commercial and tax retention periods

08Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You can withdraw your consent at any time. To do so, write to lukasz@finchflow.ai.

You can also lodge a complaint with a data protection supervisory authority, e.g. the Berlin Commissioner for Data Protection and Freedom of Information.

09Changes

Last updated: November 2026. I update this policy when the website or the services used change.