Privacy Policy Flynk Made with by [ OFFLINE ](https://offline-ag.com) [ Flynk ](https://flynk.me/en) [ How we work ](#leistungen) [ Pricing ](#preise) [ Conversation ](#gespraech) [DE](https://flynk.me/de/privacy) · EN Book a call Chapter [ 01 How we work ](#leistungen) [ 02 Pricing ](#preise) [ 03 Conversation ](#gespraech) Book your first call Three clients per month · 15 minute call · No sales pitch [DE](https://flynk.me/de/privacy) · EN Privacy Policy ================ 1. Controller ------------- The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection laws is: **OFFLINE Webagency LLC** OFFLINE Webagency LLC, Betreiber 75 E 3rd St 82801 Sheridan USA Email: hello@flynk.me Phone: 2. Overview of Data Processing ------------------------------ The following overview summarises the types of data processed and the purposes of their processing: - Inventory data (e.g. names, addresses) - Contact data (e.g. email, phone numbers) - Content data (e.g. text input in forms) - Usage data (e.g. pages visited, access time) - Meta/communication data (e.g. IP addresses, browser information) 3. Legal Bases -------------- The following provides an overview of the legal bases of the GDPR on which we process personal data: - **Consent (Art. 6(1)(a) GDPR)** – The data subject has given consent to the processing of their personal data (e.g. contact form with privacy checkbox). - **Performance of a contract (Art. 6(1)(b) GDPR)** – Processing is necessary for the performance of a contract or for pre-contractual measures. - **Legitimate interests (Art. 6(1)(f) GDPR)** – Processing is necessary for the purposes of legitimate interests, provided that the interests or fundamental rights of the data subject do not override (e.g. website security, spam protection). 4. SSL/TLS Encryption --------------------- This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the browser's address bar changing from "http://" to "https://" and the lock icon in your browser bar. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties. 5. Server Log Files ------------------- The hosting provider of these pages automatically collects and stores information in server log files, which your browser automatically transmits to us. These are: - Browser type and version - Operating system used - Referrer URL - Hostname of the accessing computer - IP address - Time of server request **Legal basis:** Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in ensuring the error-free operation of the website and defending against attacks. **Retention period:** Log files are automatically deleted after 14 days. This data is not merged with other data sources. 6. Technically Necessary Cookies -------------------------------- This website uses only technically necessary cookies. These cookies are essential for the operation of the website and cannot be disabled. They are typically set in response to actions you take, such as submitting a form. Cookie Purpose Retention flynkme\_session Session management (session ID) End of session / 120 minutes XSRF-TOKEN Protection against cross-site request forgery attacks End of session / 120 minutes **Legal basis:** Art. 6(1)(f) GDPR (legitimate interest). The use of technically necessary cookies serves the legitimate interest of providing a technically reliable and secure website. **No tracking, marketing, or analytics cookies** are set. A cookie consent banner is therefore not required. 7. Contact Form --------------- When you contact us via the contact form on our website, the following data is collected: - Name - Email address - Subject (optional) - Message content - Timestamp of privacy policy consent - IP address (for abuse prevention) - Technical browser data (User-Agent) Your explicit consent to the processing of your data is required before submitting the contact form (privacy checkbox). Your data is transmitted to us by email for processing your enquiry and stored in our content management system. Additionally, you will receive an automatic confirmation email to the address you provided. **Legal basis:** Art. 6(1)(a) GDPR (consent). You may withdraw your consent at any time. The lawfulness of processing carried out prior to withdrawal remains unaffected. **Retention period:** Your data will be deleted once your enquiry has been fully processed, unless statutory retention obligations apply. 8. Bug Report ------------- Our website offers the ability to report technical errors. The following data is collected: - Error description - Email address (optional, for follow-up questions) - Current page URL - Browser type and version (User-Agent) - Screen size (viewport) - IP address Technical data (URL, browser, viewport) is automatically captured to facilitate error diagnosis. The bug report is transmitted by email to the responsible agency and optionally stored in our content management system. **Legal basis:** Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in ensuring the error-free operation of the website. **Retention period:** Bug reports are deleted after the error has been resolved, but no later than 6 months. 9. Email Delivery ----------------- For sending emails (e.g. confirmations after contact form submission) we use the service **Postmark** by ActiveCampaign, LLC (USA). Postmark processes the following data as a data processor within the meaning of Art. 28 GDPR: recipient email address, email content, and metadata (timestamps, delivery status). Postmark retains email content and metadata for 45 days, after which they are automatically deleted. Postmark's servers are located in the USA. Data transfer is based on EU Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR, which are integrated into Postmark's terms of service. More information: [postmarkapp.com/eu-privacy](https://postmarkapp.com/eu-privacy) 10. Content Management System ----------------------------- For managing content (e.g. blog posts) as well as storing contact enquiries and bug reports, we use a proprietary content management system (CMS). The CMS is operated on the same infrastructure as this website (see Hosting section). The following personal data is stored in the CMS: - Contact form submissions (name, email, message, consent timestamp) - Bug reports (error description, optional email, technical data) - IP address and User-Agent (for abuse prevention) Blog images are served by the CMS. When these images are retrieved, your IP address is transmitted to the CMS server. **Legal basis:** Art. 6(1)(a) GDPR (consent) for contact data, Art. 6(1)(f) GDPR (legitimate interest) for bug reports and image delivery. 11. Web Analytics: Plausible Analytics -------------------------------------- This website uses **Plausible Analytics**, a privacy-friendly web analytics service by Plausible Insights OÜ (Estonia, EU). Plausible collects **no personal data**, sets **no cookies**, and does not use fingerprinting. Only aggregated, anonymous usage statistics are collected (e.g. page views, referral sources, device type, country). Individual visitors are not identified or tracked across sessions. Plausible is fully GDPR compliant and does not require consent under the ePrivacy Directive, as no information is stored on or read from the user's device. **Legal basis:** Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in the anonymous, statistical evaluation of website usage to improve our offering. More information: [plausible.io/data-policy](https://plausible.io/data-policy) 12. Web Analytics: Metricool ---------------------------- This website uses **Metricool**, a web analytics and social media management service by Metricool S.L. (Spain, EU). Metricool operates cookieless and collects only anonymised usage statistics. No personal data is stored and no tracking across sessions is performed. **Legal basis:** Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in the statistical evaluation of website usage. More information: [metricool.com/privacy](https://metricool.com/privacy/) 13. Spam Protection ------------------- To protect our forms from automated spam submissions (bots), we use a server-side honeypot solution. This checks whether a hidden form field remains empty and whether a minimum amount of time has elapsed between page load and form submission. **No external services** (such as Google reCAPTCHA) are used and no additional personal data is collected. **Legal basis:** Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in protecting our website from spam and abuse. 14. Social Media Links ---------------------- Our website contains links to our profiles on social networks as well as share buttons for blog posts. These are simple hyperlinks – **no social media plugins or SDKs** are embedded. Only when you click on a link are you redirected to the respective platform. Only then can data be transmitted to the social network operator. Without your active click, no data transfer takes place. 15. Hosting ----------- This website is hosted by one of the following providers: - **Hetzner Online GmbH** Industriestr. 25, 91710 Gunzenhausen, Germany [hetzner.com/legal/privacy-policy](https://www.hetzner.com/legal/privacy-policy) - **DigitalOcean, LLC** 101 Avenue of the Americas, 10th Floor, New York, NY 10013, USA European data centres in Frankfurt am Main (Germany) and Amsterdam (Netherlands). Data processing based on EU Standard Contractual Clauses (SCCs). [digitalocean.com/legal/privacy-policy](https://www.digitalocean.com/legal/privacy-policy) The hosting provider processes personal data arising from the use of the website (in particular IP addresses, log files) as a data processor within the meaning of Art. 28 GDPR. **Legal basis:** Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in the reliable provision of our website. 16. Data Processors ------------------- We use the following data processors within the meaning of Art. 28 GDPR: Provider Purpose Server Location Hetzner Online GmbH / DigitalOcean, LLC Web hosting, server infrastructure Germany / EU (or USA with SCCs) ActiveCampaign, LLC (Postmark) Email delivery USA (with SCCs) 17. Data Transfer to Third Countries ------------------------------------ Transfer of personal data to third countries (outside the EU/EEA) only takes place within the scope of the processing activities described in this privacy policy: - **Postmark (USA):** Email delivery – secured by EU Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR. - **DigitalOcean (USA):** If used as hosting provider – European data centres preferred, secured by SCCs. In all cases, an adequate level of data protection is ensured through the aforementioned safeguards. 18. Retention Periods --------------------- Personal data is only stored for as long as is necessary for the respective purpose or as required by statutory retention obligations: Data Retention Period Server log files 14 days Session data 120 minutes or end of session Contact enquiries Until fully processed, max. 6 months Bug reports Until error is resolved, max. 6 months Emails at Postmark 45 days (automatic deletion by Postmark) 19. Your Rights as a Data Subject --------------------------------- You have the following rights with regard to your personal data: - **Right of access (Art. 15 GDPR)** – You may request information about your personal data processed by us. - **Right to rectification (Art. 16 GDPR)** – You may request the correction of inaccurate or the completion of incomplete data. - **Right to erasure (Art. 17 GDPR)** – You may request the deletion of your personal data, provided no statutory retention obligations apply. - **Right to restriction of processing (Art. 18 GDPR)** – You may request the restriction of processing of your data. - **Right to data portability (Art. 20 GDPR)** – You may request that we provide your data in a structured, commonly used, and machine-readable format. - **Right to object (Art. 21 GDPR)** – You may object at any time to the processing of your personal data where processing is based on Art. 6(1)(f) GDPR. To exercise your rights, please contact: **hello@flynk.me** 20. Withdrawal of Consent ------------------------- Where the processing of your personal data is based on consent (Art. 6(1)(a) GDPR), you have the right to withdraw this consent at any time. The lawfulness of processing carried out on the basis of consent prior to its withdrawal is not affected. You may send your withdrawal by email to **hello@flynk.me**. 21. Right to Lodge a Complaint with a Supervisory Authority ----------------------------------------------------------- Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes the GDPR (Art. 77 GDPR). A list of supervisory authorities in Germany can be found at: [bfdi.bund.de](https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html) 22. Changes to this Privacy Policy ---------------------------------- We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements or to reflect changes to our services. The new privacy policy will then apply to your subsequent visits. Last updated: 28/04/2026 [ FLYNK ](https://flynk.me/en) Digital presentation as foundation. Solved once. Run for good. Contact [ hello@flynk.me ](mailto:hello@flynk.me) Navigation [ Services ](#leistungen) [ Pricing ](#preise) [ About ](#mensch) © 2026 OFFLINE Webagency LLC [ Imprint ](https://flynk.me/en/imprint) [ Privacy Policy ](https://flynk.me/en/privacy) Made with by [ OFFLINE ](https://offline-ag.com) · Found a bug? Flynk Chapter · 03 Let's talk. ------------- 15 minutes. No sales pitch. Your name Hi . ------ Where can we reach you? Email Your website. --------------- We will look at it before the call. That way we don't start from zero. Website address I don't have a website yet. I have read the [privacy policy](https://flynk.me/en/privacy) and consent to being contacted. Back Cancel Next Request first call Sending… Confirmed · Request is in It is in. ----------- We will get back to you within 24 hours with a time slot. On the call we also work out which FLYNK partner agency suits you best. Close Contact Step of 2 Let's check your website. ------------------------- Performance, SEO, Google visibility. Results in under 60 seconds. Website URL Where should the results go? ---------------------------- You will get your marketing check by email. Email Name (optional) I have read the [privacy policy](https://flynk.me/en/privacy) and consent to my data being processed. Back Cancel Next Start analysis Analysis running. ----------------- We are analysing your website now. Results arrive by email, takes about 60 seconds. No sales pitch. Real data. Free. Close Report a bug -------------- Found something that doesn't work? Let us know and we'll fix it. What went wrong? \* Where did it happen? Your email Only used to follow up on this report. Include the current page URL By submitting, you agree to the processing of your data in accordance with our [privacy policy](https://flynk.me/en/privacy). Cancel Send report Report sent. -------------- Thanks for the heads up. We will look into it as soon as we can. Close