Legal

Privacy policy

1. Controller

The controller responsible for data processing on this website is:

rightflow GmbH
Julius-Hatry-Straße 1
68163 Mannheim
Germany
Email: info@rightflow.de

2. Data protection officer

Our data protection officer is heyData GmbH:

heyData GmbH
Bertolt-Brecht-Platz 3
10117 Berlin
www.heydata.eu
Email: datenschutz@heydata.eu

3. General information on data processing

We process personal data of our users only to the extent necessary to provide a functional website and our content and services. Processing is based on Art. 6 GDPR. We state the specific legal basis in the sections below.

4. Hosting and server log files

This website is hosted on Cloudflare (Cloudflare Workers). When you visit our website, information that your browser transmits is processed automatically (IP address, date/time, browser type, referrer URL). This is necessary to deliver the website to you. This data is stored for security and stability purposes and deleted after a maximum of 30 days.

The legal basis is our legitimate interest in operating the website securely and reliably (Art. 6 (1) (f) GDPR).

5. Cookies and consent

On your first visit, a cookie banner asks which categories you allow:

Essential
Required for the website to function and always active. This includes storing your choice in the cookie banner in your browser’s local storage.
Analytics
Helps us understand how the website is used. Only with your consent.
Marketing
Used to measure the performance of campaigns. Only with your consent.

Before you consent, we do not load any analytics or marketing services and do not set any tracking cookies. The consent settings for Google services (Google Consent Mode v2) are set to “denied” by default.

The legal basis for essential storage is § 25 (2) TDDDG; for analytics and marketing it is your consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR). You can change your choice at any time via “Cookie settings” in the footer and thereby withdraw your consent with effect for the future.

6. Analytics and marketing services

Depending on your choice in the cookie banner, we use the following services:

With consent to analytics
Google Tag Manager and Google Analytics 4, to evaluate how the website is used.
With consent to marketing
Google Tag Manager, Google Ads conversion tracking, LinkedIn Insight Tag and HubSpot for tracking and the chat on the website.

Without your consent, these services are not loaded.

7. Appointment booking and forms (HubSpot)

The appointment calendar on the contact page runs on HubSpot. It is only loaded if you have consented to marketing or choose to display it with a click. If you open the calendar in a new tab, you access HubSpot’s page directly. Only then is data transferred to HubSpot.

The waitlist for Professional is a form on this website. It loads no HubSpot scripts and sets no cookies. Only when you submit it do we send your details to HubSpot, to inform you at launch.

We use the details you enter there to process your request or appointment (Art. 6 (1) (b) GDPR).

8. Contact

If you contact us by email, your details are stored in order to process your request. We do not pass this data on without your consent.

9. Your rights under the GDPR

You have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may also lodge a complaint with a supervisory authority. The supervisory authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg)
Lautenschlagerstraße 20, 70173 Stuttgart

10. Data protection contact

For data protection questions, contact hello@rightflow.de or our data protection officer directly (section 2).

Imprint →