Privacy Policy

Last Updated: January 1, 2025

1. Introduction

Welcome to FLUICS GmbH (“we,” “us,” or “our”). This Privacy Policy explains how and why we collect, store, use, and share (“process”) personal information when you:

  • Visit our website at https://fluics.com, or any website of ours that links to this Privacy Policy
  • Download and use our mobile application(s), including FLUICS CONNECT and RAPID LABEL or interact with our services in other ways
  • Engage with us in other related ways (sales, marketing, events, etc.)

We are committed to protecting your personal information in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws. If you do not agree with any part of this policy, please discontinue use of our services.

2. Summary of Key Points

This summary provides key points from our Privacy Policy, but you can find more details about each topic below.

  • Personal Information We Collect
    • Identifiers: Such as name, username, and email addresses when you register or purchase items in our web shop.
    • Payment Details: If you purchase through our WooCommerce store, your payment is processed via third-party providers (e.g., PayPal, Stripe).
    • Usage Data: Like IP address, device and browser details, and crash logs if you use FLUICS CONNECT.
    • We do not intentionally collect sensitive or special category data.
  • Purposes of Processing
    • To facilitate account creation, orders, and authentication
    • To respond to inquiries and provide requested services
    • To analyze usage (e.g., Crashlytics) and improve our apps
    • To send marketing and promotional communications (if you consent)
  • Third-Party Involvement
    • Hosting via AWS and Google Cloud Services
    • WooCommerce for webshop functionality
    • HubSpot and Brevo for website forms, newsletters, and email campaigns
    • Google Analytics / Crashlytics for analytics and error tracking
  • User Rights
    • You may request to access, correct, or delete your data at any time.
    • You may object to processing or withdraw consent where applicable.
  • Data Retention
    • We keep your data only as long as needed for our stated purposes or as required by law.

For more detailed information, please continue reading below.

3. Controller and Contact Details

Controller
FLUICS GmbH
Fürstenstr. 15
80333 München
Germany

Contact Person: Dr. Claudio Rolli
Email: connect@fluics.com

If you have questions or comments about this Privacy Policy, or wish to exercise any of your data subject rights, you can reach us at the above address or email.

4. Your GDPR Rights

Under the GDPR, you have certain rights regarding your personal data:

  1. Access (Art. 15 GDPR) – Request information about whether we process your data and obtain a copy of any personal data we hold.
  2. Rectification (Art. 16 GDPR) – Ask us to correct inaccurate or incomplete information.
  3. Erasure (Art. 17 GDPR) – Request we delete your information unless there is a legal reason to retain it.
  4. Restriction (Art. 18 GDPR) – In certain circumstances, request we limit how we process your data.
  5. Data Portability (Art. 20 GDPR) – Receive your data in a structured, commonly used format and have it transferred to another controller.
  6. Object (Art. 21 GDPR) – Object to processing of your data based on our legitimate interests or for direct marketing.
  7. Lodge a Complaint (Art. 77 GDPR) – File a complaint with a supervisory authority in the EU if you believe we are violating data protection laws.

To exercise these rights, please contact us at connect@fluics.com.

5. Data Processing Activities

5.1 FLUICS Website

We generally do not collect personal data when you merely browse our website. However, we do offer:

  1. Web Shop (WooCommerce)
    • Data Collected: Name, billing/shipping address, email address, payment details (via third-party providers), and any other info needed to fulfill your order.
    • Purpose & Legal Basis: We process your information to manage orders, handle payments and refunds, and maintain records. Our legal basis is performance of a contract (Art. 6(1)(b) GDPR). Where we seek to prevent fraud or address customer inquiries, we rely on legitimate interests (Art. 6(1)(f) GDPR).
    • Sharing & Retention: Data is shared only as necessary with payment processors (e.g., PayPal, Stripe) or shipping providers. We retain order-related data as long as needed for legal, accounting, or operational requirements.
  2. HubSpot
    • Data Collected: Information you voluntarily provide in contact forms, including name, email address, and any form-field data.
    • Purpose & Legal Basis: Responding to inquiries, sending newsletters (if opted in), and managing marketing campaigns. We rely on your consent (Art. 6(1)(a) GDPR) for newsletters and either legitimate interest (Art. 6(1)(f) GDPR) or performance of a contract (Art. 6(1)(b) GDPR) for general inquiries.
    • Retention: We retain this data as long as necessary for our communication or until you withdraw consent. You can unsubscribe or opt out at any time.
  3. Brevo (formerly Sendinblue)
    • Data Collected: Email addresses and contact preferences when you sign up for or engage with our email communications.
    • Purpose & Legal Basis: Sending announcements, marketing messages, and important updates. We rely on consent (Art. 6(1)(a) GDPR) for marketing emails or legitimate interest (Art. 6(1)(f) GDPR) for critical service updates.
    • Retention: We store your email address until you unsubscribe or as required by law.
  4. Cookies
    • We use both session cookies (deleted when you close your browser) and possibly third-party cookies (for analytics or advertising).
    • Purpose & Legal Basis: If cookies are needed to process or initiate a contract (e.g., shopping cart), the basis is Art. 6(1)(b) GDPR. Otherwise, we rely on Art. 6(1)(f) GDPR (legitimate interest in improving functionality) or consent where required.
    • Control: You can manage cookies via our consent banner or your browser settings. Disabling cookies may limit certain site functions.

5.2 FLUICS CONNECT

  • Data Collected:
    • Email Address (for account creation, login, and service notifications)
    • Name/Username (can be pseudonymous)
  • Purpose & Legal Basis:
    • Performance of a Contract (Art. 6(1)(b) GDPR) to provide the app’s core features (account setup, workspace collaboration)
    • Legitimate Interest (Art. 6(1)(f) GDPR) for analytics, crash reporting, and to maintain a secure service
  • Retention: We keep your data as long as your account is active or as required by law. You may request deletion or anonymization at any time.

5.3 FLUICS RAPID LABEL

  • No Personal Data Processed: The product does not require or store user personal data for its core functionality.
  • Technical Data: In rare cases (e.g., error logs), only non-identifiable information may be collected to maintain and improve the service.

6. Infrastructure and Third-Party Providers

6.1 AWS and Google Cloud Services

  • Purpose: We rely on Amazon Web Services (AWS) and Google Cloud for hosting and storage.
  • Legal Basis: Our legitimate interest (Art. 6(1)(f) GDPR) in secure, reliable infrastructure or performance of a contract (Art. 6(1)(b) GDPR) where hosting is essential to providing services.
  • Data Protection: We have data processing agreements and/or Standard Contractual Clauses in place to ensure GDPR-level protection.

6.2 Analytics and Crash Reporting

  • Google Analytics / Crashlytics:
    • We use these tools to diagnose app crashes (FLUICS CONNECT) and better understand usage patterns.
    • Data: May include pseudonymous device IDs, IP addresses, crash logs, and usage metrics.
    • Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR) in ensuring product stability and improving user experience.
    • Opt-Out: You can typically adjust privacy/analytics settings in your mobile OS or browser.

7. Business Transfers

In the event of a merger, acquisition, financing, or sale of all or a portion of our assets, we may transfer or share user data as part of that transaction, subject to standard confidentiality arrangements. You will be notified by email and/or a prominent notice on our website if a transfer significantly affects your personal data.

8. Third-Party Websites and Links

Our Services may link to or integrate with external websites and services (e.g., payment gateways, knowledge bases). We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies separately.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, or unlawful processing. This includes SSL/TLS encryption in transit, secure data centers, and restricted internal access. However, no electronic transmission or storage system is 100% secure, so we cannot guarantee absolute security.

10. Data Retention

We retain personal data only as long as necessary to fulfill the purposes described in this Privacy Policy or to comply with legal requirements. For example:

  • Order Data: Retained to fulfill legal/tax obligations (e.g., typically up to 10 years in some jurisdictions).
  • Account Data (FLUICS CONNECT): Stored until you delete your account or it becomes inactive and we no longer have a legitimate need to keep it.

Once data is no longer required, we securely delete or anonymize it.

11. Minors’ Data

We do not knowingly collect or market to children under the age of 16 (or relevant local age of consent). If you learn that a child has provided us with personal data, please contact us at connect@fluics.com so we can delete it.

12. Do-Not-Track (“DNT”) and U.S. State Disclosures

Most web browsers and some mobile operating systems include a Do-Not-Track feature. There is no current industry or legal standard for recognizing DNT signals, so we do not respond to them at this time.

If you are a resident of certain U.S. states (e.g., California), you may have additional privacy rights. We primarily operate under GDPR but will endeavor to honor any applicable state-specific privacy laws to the extent required.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. When we update, we will revise the “Last Updated” date above. If we make material changes, we will notify you by email or by posting a prominent notice on our website/app.

14. Contact Us

If you have questions or concerns about this Privacy Policy, or if you wish to exercise your rights, please contact us at:

FLUICS GmbH
Fürstenstr. 15, 80333 München, Germany
Email: connect@fluics.com

We will respond to your inquiry in accordance with applicable data protection laws.

References