Thank you for visiting our website and for your interest in our app and our company. In the following privacy policy, we inform you about our processing of your personal data and your rights as a Data subject.
Our offers, including this website, are not intended for children.
For the purposes of easier readability, we use the masculine form for personal designations in this privacy policy where appropriate. However, it goes without saying that all genders (m/f/d) are equally included and meant.
Responsible person and data protection officer
Person responsible
Flyweight GmbH, represented by the managing directors: Matthias Frisch, Marc-Andre Hoffmann and Christian Jürgen Cook, Jungbuschstraße 28, 68159 Mannheim.
Processing of your data
Website visitors
Below we explain how we process your personal data when you visit our website.
- Visit the website without input
When you visit our website without making any further entries, the browser used on your device sends information for technical reasons.
Data categories: Technical data (IP address, device type and model, operating system, browser type and version, time zone and language setting, access date and time and the referrer URL - the website from which you came).
Purpose: We process the aforementioned data categories in order to provide the content of the websites accessed and for the security of our IT systems. This data is not used for any other purpose.
Origin of the data: This data is collected directly from you.
Legal basis: The processing is based on our legitimate interest in accordance with Article 6 para. 1 lit f. GDPR. Our legitimate interest in the processing lies in the provision of the website and ensuring the security of our IT systems used for this purpose.
Storage period: The data is only stored temporarily for the duration of the session. They are deleted after the end of the respective session.
Recipient category: Security provider
Location of the recipients: USA
Guarantees for transfers to third countries: Privacy Framework
Contact us
You can contact us at any time using the contact forms provided on our website.
Data categories: Customer data (first name, surname); contact data (telephone number and e-mail address); communication data (content of your message).
Purpose: To receive and respond to your contact.
Source of the data: We receive this data directly from you via the contact medium you have selected.
Legal basis: If pre-contractual measures are initiated by the message, e.g. a request for products or services or this was sent in connection with an existing contract, the data in question is processed in accordance with Art. 6 para. 1 lit. b GDPR.
Storage period: If no further cooperation results from the contact, we will only store your data until your inquiry has been answered or the correspondence with you has been completed. If further cooperation results from the initial contact, the corresponding storage periods of the listed processing apply. As a rule, your data will be deleted after expiry of the limitation period, starting at the end of the year in which the contractual relationship was terminated.
Recipient category: Software provider, cloud storage provider
Location of recipients: EU and non-EU
Guarantees for transfers to third countries: EU Standard Contractual Clauses (SCC) and Privacy Framework
Use of web analysis tools
We use web analytics tools to gain insights into the use of our website so that we can measure and improve the performance, content or functionality of our website.
We use the analysis service provider, Google Inc. 1600 Amphitheatre Pkwy, Mountain View, CA 94043, United States, which offers the analysis tool Google analytics.
These cookies are only used if you have previously given your consent to their use. Further information on the use of cookies can be found in the relevant section below.
Data categories: Technical data (IP address, device type and model, operating system, browser type and version, time zone and language setting, access date and time and the referrer URL - website from which you came).
Purpose: To measure the interaction with our website and the success of our online offering and to improve our web offering.
Source of the data: This data is collected directly from you through the use of cookies.
Legal basis: The processing takes place on the basis of the consent obtained from you via our cookie consent tool in accordance with Art. 6 para. 1 lit. a. GDPR.
Storage period: The data is only stored temporarily for the duration of the session. It is deleted immediately after the previously anonymized data has been transmitted.
Recipient category: Software provider
Location of recipients: EU and non-EU
Guarantees for transfers to third countries: EU standard contractual clauses (SCC)
Consent management
We use a cookie consent tool on our website.
Data categories: Date and time of the visit, browser information, information on consent, information on the end device, IP address of the requesting end device.
Purpose: The purpose of data processing is to offer visitors to our website the opportunity to consent to the use of cookies. The documentation of such consent is required in accordance with the accountability obligation under Art. 5 para. 2 GDPR and is necessary to ensure the revocation of consent and to control the setting of cookies.
Source of the data: This data is collected directly from you.
Legal basis: The processing of the above data is based on Art. 6 para. 1 sentence 1 lit. c GDPR in conjunction with. § 25 para. 1 TDDDG.
Storage period: We delete your personal data when it is no longer required to achieve the purpose for which it was processed. This is usually the case after three years, starting at the end of the year in which the data was collected.
Recipient category: Software provider
Seat of the recipients: EU
Guarantees for transfers to third countries: EU Standard Contractual Clauses (SCC) and Privacy Framework
Training and use of the app as provider of the chatbot
Processed data categories: The data categories result from the content of the website. In most cases, this will be contact data.
Purpose of processing: Creating the database with the necessary information for the chatbot and processing the data from the database to create the answers to the end customers' inquiries using the chatbot.
Source of the data: We collect this data directly from you.
Legal basis: We process the data to fulfill the contract in accordance with Article 6 (1) (b) GDPR.
Storage period: We store this data for the term of the contract and beyond until the expiry of statutory retention periods, which may be 6 to 10 years.
Recipient category: Software providers, cloud storage providers, payment service providers
Location of recipients: EU and non-EU
Guarantees for transfers to third countries: EU Standard Contractual Clauses (SCC), Privacy Framework
Use of the app as a visitor to our customers' website
Processed data categories: The data categories result from your requests when you provide personal data within the question.
Purpose of processing: Processing of your data to create answers to the requests from you as an end customer using the chatbot.
Source of the data: We collect this data directly from you.
Legal basis: We process the data to fulfill the contract in accordance with Article 6 (1) (b) GDPR.
Storage period: We store this data for the term of the contract and beyond until the expiry of statutory retention periods, which may be 6 to 10 years.
Recipient category: Software providers, cloud storage providers, payment service providers
Location of recipients: EU and non-EU
Guarantees for transfers to third countries: EU Standard Contractual Clauses (SCC), Privacy Framework
Assertion and/or defense against legal claims
If necessary, we also process personal data to assert and/or defend against legal claims.
Processed data categories: All relevant personal data stored by us about you that is necessary for the assertion and/or defense against legal claims and may be processed for this purpose within the framework of legal requirements, i.e. is not subject to any prohibitions on processing.
Purpose of processing: Assertion and/or defense against legal claims.
Source of the data: We collect this data directly from you.
Legal basis: We process this data on the basis of the so-called legitimate interest pursuant to Article 6 para. 1 lit f. GDPR. Our legitimate interest is the assertion and/or defense against legal claims.
Storage period: We store this data for as long as it is necessary for the assertion and/or defense against legal claims. As a rule, this is the case until the end of the three-year limitation period, starting at the end of the year in which you asked us to delete your personal data.
Recipient category: Software providers, cloud storage providers, law firms, authorities, courts
Location of recipients: EU and non-EU
Guarantees for transfers to third countries: EU Standard Contractual Clauses (SCC) and Privacy Framework
Cookies
We use so-called cookies on our website to ensure the functions of our website, to gain knowledge about the use of our website, to be able to show you personalized advertising and to enable the success of our advertising measures. Further information on the cookies used and their categorization can be found in this section under "List of cookies used". We only use cookies that are not technically necessary if you have given us your consent in accordance with Article 6(1)(a) GDPR via our cookie consent tool.
1. General information on cookies
A cookie is a small data package (text file) that your browser stores on your device at the instruction of a website you visit in order to "remember" information about you, such as your language settings or login information. These cookies are set by us and are known as first-party cookies. We also use third-party cookies, which come from a different domain to the website you are visiting. We use these cookies to support our advertising and marketing efforts.
2. Management of the cookies used
You can manage your selection of cookies and thus the consent you have given at any time via the cookie settings. You can access these settings at any time from any subpage of our website by clicking on the green cookie symbol at the bottom left of the website.
3. List of cookies used
You can find a list of the cookies we use in our cookie consent tool.
Receiver
As part of the operation of the website and the services offered on the website, we use service providers who act as data processors. These service providers include software providers, cloud providers and technical support companies that are necessary for the fulfillment of our business purposes and help us to improve the quality of our services and offer innovative solutions.
When working with these service providers, we bind them to compliance with data protection by means of a data processing agreement and do not authorise them to process data for their own purposes.
In addition, personal data may be passed on to independent controllers such as tax consultants, law firms, courts or authorities, insofar as this is permitted or we are legally obliged to do so in order to meet legal requirements, ensure compliance and to assert or defend against legal claims.
Data security
We have implemented appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used or accessed without authorization, altered or disclosed.
In addition, we restrict access to your personal data to those employees, agents, contractors and other third parties who need it for business reasons and are legally authorized to use it.
We have put in place procedures to deal with any suspected personal data breach and will notify you and the relevant supervisory authority of a breach where we are legally required to do so.
Your rights
Right to information
You have the right to request information at any time about how and what personal data we process about you. If you make such a request, you will also receive a copy of the personal data we have stored about you. If these copies contain confidential information or personal data of other data subjects, we will black them out accordingly or alternatively inform you which personal data are contained on these copies and for what purposes.
Right to rectification
If the personal data we have stored about you is incorrect or incomplete, you have the right to demand immediate correction and/or completion at any time.
Right to erasure or restriction of processing
You have the right to request that we delete your personal data at any time. We will comply with this request immediately, unless we are subject to legal obligations that prohibit deletion at this time. This may be the case, for example, if we are obliged to store your data for a longer period of time for tax law reasons. If this applies to you, we will inform you of this upon your request for deletion, restrict processing for purposes other than storage and delete the data immediately after expiry of the statutory retention periods, without the need for any further request from you.
In addition to the right to erasure, you also have the right to request that we restrict the processing of your personal data if:
- You dispute that the personal data we have stored about you is correct until we have had the opportunity to check the accuracy of the data;
- Our processing of your personal data is unlawful, but you oppose the erasure and alternatively request the restriction of processing;
- We no longer need your personal data, but you need it to assert, exercise or defend legal claims, or
- you object to the processing in accordance with your right under Article 21 GDPR and as long as it has not yet been determined whether our interests outweigh yours.
Right to object to the processing
You have the right to object under the conditions of Article 21 GDPR. You have the possibility to object to the processing based on Article 6 para. 1 lit. f. GDPR at any time for reasons arising from your particular situation. This also applies accordingly to profiling based on these provisions. The information as to whether processing is based on Article 6 para. 1 lit. f. GDPR can be found in the above descriptions of the processing operations.
Right to withdraw consent
If processing is based on your consent, you can withdraw this consent at any time with effect for the future. This will not affect the lawfulness of the processing for the period prior to your withdrawal. Please note that if you withdraw your consent, we will no longer be able to offer you certain services, such as sending you our newsletter.
Right to data transfer
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, insofar as this is technically feasible. In addition, you have the right to request that we transmit this data to another controller without hindrance from us.
Automated decision-making in individual cases, including profiling
According to Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. However, we do not currently use such methods
Right to lodge a complaint with the supervisory authority
Independently of and in addition to the rights listed, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of personal data concerning you is in breach of the GDPR.
The following supervisory authority is responsible for us:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Lautenschlagerstraße 20, 70173 Stuttgart
Phone: 0711 6155410
Fax: 0711/61 55 41 - 15
E-mail: poststelle@lfdi.bwl.de
Website: https://www.baden-wuerttemberg.datenschutz.de/
However, we ask you to give us the opportunity to discuss your concerns with you before making a complaint in order to find an uncomplicated and satisfactory solution for you. You can contact our data protection team at any time by emailing data-privacy@flyweight.io or by contacting our external data protection officer using the contact details provided at the beginning of this policy.
Status of and changes to this privacy policy
This privacy policy was last updated on: 09.07.2024
Due to changing business requirements, legal or regulatory requirements, as well as technical developments, it may be necessary to adapt this privacy policy. We will inform you of any significant changes to the privacy policy. You can access the latest version of the privacy policy at any time on this website.