Privacy notice
for this website

Controller

Contact form

When you send an enquiry, we process your name, email address, request and any optional details, such as company, system version or a callback request with a phone number. Your enquiry is stored in our protected administration area. We also receive the full enquiry by email at our business address info@addonflow.com, including the contact details and message you provide. Our business email account is hosted with IONOS. This copy allows us to handle enquiries while away from the office. We send an automatic acknowledgement with a reference number to the email address you provide. It does not include the full text of your enquiry.

We use these details to handle and respond to your enquiry. Depending on its content, the legal basis is pre-contractual steps under GDPR Article 6(1)(b), or our legitimate interest in responding to incoming requests under Article 6(1)(f). This does not subscribe you to a newsletter.

Retention

We retain enquiry data as needed to handle the request and any resulting business relationship. We then delete it unless legal retention obligations or legitimate reasons require further storage.

Hosting and technical security

This website and enquiry records are hosted with Uberspace (Jonas Pasche, Kaiserstraße 15, 55116 Mainz, Germany). Delivering the website and protecting it against misuse involves processing necessary connection data, particularly IP address, time and requested page. The legal basis is our legitimate interest in secure website operation under GDPR Article 6(1)(f). The contact form and login use technically necessary security cookies. Short-lived identifiers that are not stored in plain text limit repeated form requests. Administration requires two-factor authentication. Contact form messages are not sent to an AI provider.

Visitor analytics

We run Matomo on our own Uberspace hosting in Germany. Analytics loads only after your consent (GDPR Article 6(1)(a)). It records pages visited, timestamps, technical device and browser information, selected click events and, where available, the source of a visit. Referrer information is limited to the originating domain. Campaign tags utm_source, utm_medium and utm_campaign may be recorded; other URL parameters and fragments are not sent. IP addresses are truncated before storage. We do not set analytics cookies or send form entries, names, email addresses or phone numbers as analytics events. Your choice is stored in your browser’s local storage for up to 180 days. You can change it and withdraw consent for future processing using “Analytics settings” in the footer at any time. Do Not Track signals are respected. Individual visit records are automatically deleted after 180 days and aggregated reports after 24 months. We receive aggregated daily reports through our business IONOS email account. These contain no IP addresses or form entries. Analytics data is not shared with Google or an AI provider.

YouTube

Product videos load only after you click play. This establishes a connection to YouTube / Google, as explained on the video panel before loading.

Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests and withdraw consent for future processing. Contact info@addonflow.com with your request. You may also complain to a data protection supervisory authority.

AI in your own organisation

Explore the example approach to an agreed AI rollout →

Admin assessment and user account

For your admin assessment account, we store your contact details, language, email verification, assessment attempts, answers, results and certificates. We use this information to manage your account and conduct assessments (GDPR Article 6(1)(b)).

Emails about our products and services require your separate consent (Article 6(1)(a)). You can withdraw this consent in your account at any time.

Account and assessment data is retained until your account is deleted. To request deletion, email info@addonflow.com. Certificates are valid for one year and remain available in your account. Public certificate verification shows only status and validity, without names or email addresses.

Confirmation emails are sent through IONOS. Email verification, request limits and an invisible control field protect registration against automated misuse.