1. Data Controller
We, Freshflow GmbH, Unter den Linden 24, 10117 Berlin, Germany — hello@freshflow.ai — are the controllers within the meaning of Art. 4 (7) GDPR of the processing of your personal data on the Website.
2. Processing
2.1 Website (general)
Each time you visit the Website, even if you are merely informing yourself, we process the following data that your browser automatically transmits to our server:
- IP address
- Date and time of the browser request
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (specific webpage requested)
- Access status / HTTP status code
- Amount of data transferred respectively
- Referer website
- Information about your web browser
- The operating system of your end device and its user interface
- Language and version of your web browser
We require this data because, otherwise, we would, for technical reasons, be unable to display the Website to you. We also use that data to ensure the stability and security of the Website. The legal basis is Art. 6 (1) lit. f GDPR (‘legitimate interest’).
2.2 Contact
If you approach us by email or via our contact form, data that you provide will be stored so that we can take care of your request and, if appropriate, respond to you. This data includes your email address and your name, but also any other contact information you provide us with, as well as your request. The legal basis is our legitimate interest to communicate with you and to provide customer support in accordance with Art. 6 (1) lit. f GDPR.
2.3 Analytics & Marketing
We use cookies and similar technologies for analytics and marketing only after you have given your consent via our cookie banner (Art. 6 (1) (a) GDPR); you can withdraw your consent at any time via “Manage cookies” in the footer. With your analytics consent we use Google Analytics 4 (Google), Microsoft Clarity (Microsoft) and HubSpot (CRM and contact tracking) to measure and improve how the Website is used, including aggregated statistics and session analysis. With your marketing consent we use the Meta Pixel (Meta) and the LinkedIn Insight Tag to measure campaign performance and reach relevant audiences. Some of these providers process data in the United States; such transfers take place on the basis of your consent and are additionally safeguarded by appropriate measures (e.g. the EU-US Data Privacy Framework and/or Standard Contractual Clauses). Details on the individual cookies and their storage durations are available in our cookie banner settings.
2.4 Career
In the ‘Careers’ section on the Website you can browse our open roles and apply by email to jobs@freshflow.ai. We process the personal data you share as part of your application solely for the purpose of the relevant recruitment process. The legal basis is Art. 6 (1) (b) GDPR (steps taken prior to entering into an employment contract).
3. Data Subject Rights
To the extent provided by law under the GDPR, you have the following rights with respect to personal data relating to you:
- The right of access
- The right to rectification
- The right to erasure
- The right to restriction of processing
- The right to object to the processing
- The right to withdraw consent
- The right to data portability
You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.
4. Data Retention
We process your personal data only as long as it is necessary for the fulfilment of our contractual obligations to you, for the protection of our legitimate interests or those of third parties. Excluded from this principle is such data that we must store due to legal obligations — for example, retention obligations under commercial and tax law. These retention periods are, as of now, up to ten years.