Privacy Policy

We take the protection of your personal data seriously. This policy explains what data we process when you use this website, on what legal basis, and what rights you have. We only process data that is actually needed to operate this site and to respond to enquiries.

Data controller

The controller responsible for data processing on this website is:

flow IT e. U.
Owner: Marko Prskalo MSc
Hirschengasse 17/11, 1060 Wien, Austria
Email: hello@flow-it.io

Server log files

This website is hosted by Vercel Inc. When you visit the site, the hosting provider automatically collects and stores information in server log files that your browser transmits. This may include the requested URL, browser type and version, operating system, referrer URL, the time of the request, and an IP address. This data is used to ensure a functional, secure, and stable service and is not merged with other data sources.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and reliable operation of the website).

Contact form and email

If you contact us via the contact form or by email, we process the data you provide — your name, email address, an optional phone number, and the content of your message — solely in order to respond to your enquiry and handle the related correspondence. We do not use this data for any other purpose and do not pass it on without your consent.

Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

Analytics

We use Google Analytics (provided by Google Ireland Ltd.) and Microsoft Clarity (provided by Microsoft Corporation) to understand how the website is used and to improve it. These services use cookies and similar technologies to collect usage data such as pages viewed, interactions, approximate location, and device and browser information.

These analytics tools are loaded only after you have given your explicit consent via the cookie banner. If you do not consent, no analytics scripts are loaded and no analytics data is collected. You can withdraw your consent at any time with effect for the future.

Legal basis: Art. 6(1)(a) GDPR (consent).

Cookies and consent

We distinguish between strictly necessary cookies and analytics cookies. Necessary cookies are required for the basic operation of the site (including storing your cookie choice) and do not require consent. Analytics cookies are only set after you choose “Accept All” in the cookie banner.

Legal basis: Art. 6(1)(f) GDPR for necessary cookies; Art. 6(1)(a) GDPR (consent) for analytics cookies.

Recipients and processors

Personal data may be processed by the following service providers acting on our behalf or as part of providing this website:

  • Vercel Inc. — website hosting and server logs
  • Google Ireland Ltd. — Google Analytics (only after consent)
  • Microsoft Corporation — Microsoft Clarity (only after consent)

Where data is transferred to processors outside the EU/EEA, such transfers are based on the applicable safeguards under Chapter V of the GDPR (such as Standard Contractual Clauses).

Data retention

We retain personal data only for as long as necessary for the purposes described above or as required by statutory retention obligations. Contact enquiries are kept for as long as needed to handle your request and any resulting correspondence. Server log data is retained for a limited period for security and operational purposes. Analytics data is retained according to the configured retention periods of the respective service.

Your rights

Under the GDPR you have the right to:

  • access your personal data (Art. 15 GDPR);
  • rectification of inaccurate data (Art. 16 GDPR);
  • erasure of your data (Art. 17 GDPR);
  • restriction of processing (Art. 18 GDPR);
  • object to processing (Art. 21 GDPR);
  • data portability (Art. 20 GDPR); and
  • withdraw consent at any time with effect for the future.

To exercise any of these rights, please contact us at hello@flow-it.io.

You also have the right to lodge a complaint with a supervisory authority. The competent authority in Austria is the Austrian Data Protection Authority (Datenschutzbehörde), www.dsb.gv.at.

No obligation to provide data

You are under no obligation to provide personal data. Browsing this website does not require you to consent to analytics. However, if you choose not to provide the data requested in the contact form, we may be unable to respond to your enquiry.