1. Data Protection at a Glance

General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. Detailed information on the subject of data protection can be found in our Privacy Policy set out below this text.

This Privacy Policy explains the processing of personal data when you visit our website and when you use the application “FlexBio SEO Readonly” provided by us. Sections 10 to 12 relate exclusively to this application. Detailed information on the respective processing operations can be found in the following sections.

Data collection on this website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. The operator’s contact details can be found in the legal notice (Impressum) of this website.

How do we collect your data?
On the one hand, your data is collected when you provide it to us. This may, for example, be data that you enter in a contact form.
Other data is collected automatically or after your consent by our IT systems when you visit the website. This is primarily technical data (e.g. web browser, operating system, or time of the page request). This data is collected automatically as soon as you enter this website.

What do we use your data for?
Part of the data is collected to ensure that the website is provided without errors. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipients, and purpose of your stored personal data. You also have the right to request the rectification or erasure of this data. If you have given consent to data processing, you may withdraw this consent at any time with effect for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
You may contact us at any time at the address given in the legal notice regarding this and any other questions on the subject of data protection.

Analysis tools and third-party tools
When you visit this website, your browsing behavior may be statistically analyzed. This is done primarily with so-called analysis programs.
Detailed information on these analysis programs can be found in the following Privacy Policy.

2. Hosting and Content Delivery Networks (CDN)

External hosting
This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact requests, metadata and communication data, contract data, contact details, names, website access data, and other data generated via a website.

The host is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR).

Our host will process your data only to the extent necessary to fulfill its service obligations and will follow our instructions with regard to this data.

We use the following host:

alto.de New Media GmbH
Alter Stadtweg 1
DE – 37574 Einbeck

Conclusion of a data processing agreement
To ensure processing in compliance with data protection law, we have concluded a data processing agreement with our host.

3. General Information and Mandatory Information

Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this Privacy Policy.
When you visit our website or use the application “FlexBio SEO Readonly”, personal data may be processed. Personal data is data by which you can be personally identified. This Privacy Policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

Please note that data transmission over the internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information on the controller

The controller responsible for data processing on this website is:

Registered office:
FlexBio Technologie GmbH
Otto-Hahn-Straße 7a
37574 Einbeck
Germany

Represented by:
Mr. M. Eng. Waldemar Ganagin
Mr. M. Sc. Paul Bauer

Commercial register: Amtsgericht Göttingen (Local Court of Göttingen), HRB 204389
VAT ID: DE 296319882
Phone: +49 5561-980 90 10
E-mail: info@flexbio.de
and datenschutz@flexbio.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

Storage period
Unless a more specific storage period has been stated within this Privacy Policy, your personal data will remain with us until the purpose of the data processing no longer applies. If you assert a justified request for erasure or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing your personal data (e.g. retention periods under tax or commercial law); in this case, deletion will take place once these grounds no longer apply.

Note on data transfer to the USA
Among other things, tools from companies based in the USA are integrated into our website. When these tools are active, your personal data may be transferred to the US servers of the respective companies. We would like to point out that the USA is not a safe third country within the meaning of EU data protection law. US companies are obliged to hand over personal data to security authorities without you, as the data subject, being able to take legal action against this. It therefore cannot be ruled out that US authorities (e.g. intelligence services) process, analyze, and permanently store your data located on US servers for surveillance purposes. We have no influence on these processing activities.

Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You may withdraw consent you have already given at any time. The lawfulness of the data processing carried out until the withdrawal remains unaffected by the withdrawal.

Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)
If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this Privacy Policy. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims (objection pursuant to Art. 21(1) GDPR).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority
In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with the competent supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of this data to another controller, this will only be done to the extent technically feasible.

SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in the browser line.
When SSL or TLS encryption is activated, the data you transmit cannot be read by third parties.

Access, erasure, and rectification
Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the data processing, and, where applicable, a right to rectification or erasure of this data. You may contact us at any time at the address given in the legal notice regarding this and any other questions on the subject of personal data.

Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. You may contact us at any time at the address given in the legal notice for this purpose. The right to restriction of processing exists in the following cases:

• If you contest the accuracy of your personal data stored by us, we need time to verify this. For the duration of this verification, you have the right to request the restriction of processing.
• If the processing is unlawful but you request restriction instead of erasure.
• If we no longer need your data, but you need it for the establishment, exercise, or defense of legal claims.
• If you have lodged an objection pursuant to Art. 21(1) GDPR and it has not yet been determined whose interests prevail; in this case, your data may be processed only on a restricted basis.

If the processing of your data has been restricted, such data – apart from its storage – may only be processed with your consent, for the establishment, exercise, or defense of legal claims, for the protection of the rights of others, or for reasons of important public interest of the EU or of a Member State.

Objection to advertising e-mails
We hereby object to the use of the contact details published in accordance with the legal notice obligation for sending advertising and information material that has not been expressly requested. The operators expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, e.g. through spam e-mails.

4. Data Collection on This Website

Cookies
Our web pages use so-called “cookies”. Cookies are small text files and do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are deleted automatically at the end of your visit. Persistent cookies remain stored until you delete them or your browser removes them automatically.

In some cases, cookies from third-party companies (third-party cookies) may also be stored when you access our site. These enable us or you to use certain services (e.g. payment services).

Cookies serve various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. shopping cart, videos). Other cookies are used to analyze user behavior or for advertising.

Cookies that are required to carry out the electronic communication process (necessary cookies), to provide functions you have requested (functional cookies), or to optimize the website (e.g. web analytics) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis applies. The website operator has a legitimate interest in storing these cookies to ensure smooth and optimized operation. Where consent has been requested, storage takes place exclusively on the basis of Art. 6(1)(a) GDPR; consent may be withdrawn.

You can configure your browser so that you are informed when cookies are set, allow cookies only in individual cases, exclude their acceptance in certain cases or in general, or have cookies deleted automatically when the browser is closed. In this case, the functionality of the website may be limited.

Where third-party cookies or analysis cookies are used, we will inform you of this in this Privacy Policy and, where necessary, obtain your consent.

5. Contact Form

If you send us inquiries via the contact form, the information you provide in the form, including the contact details you provide, will be stored in order to process your inquiry and in case of follow-up questions. We will not pass on this data without your consent.

Processing is based on Art. 6(1)(b) GDPR if your inquiry is related to a contract or is necessary for the implementation of pre-contractual measures. In all other cases, it is based on our legitimate interest (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where requested.

The form data will remain with us until you request its deletion, withdraw your consent, or the purpose no longer applies. Statutory retention periods remain unaffected.

Inquiries by e-mail, telephone, or fax
If you contact us by e-mail, telephone, or fax, your inquiry, including personal data (name, content, contact details if applicable), will be stored in order to process your request. This data will not be passed on without your consent.

Processing is based on Art. 6(1)(b) GDPR if your inquiry is related to a contract or concerns pre-contractual measures. In other cases, it is based on our legitimate interest (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where requested. The data will remain with us until you request deletion or withdraw consent, or the purpose no longer applies. Statutory retention periods remain in effect.

6. Social Media

Facebook (Meta Platforms Ireland Limited) plugins (Like & Share button)
Plugins of the social network Facebook are integrated into this website. The provider is Meta Platforms Ireland Limited. According to Meta Platforms Ireland Limited, collected data is also transferred to the USA and other third countries.

The plugins can be recognized by the Facebook logo or the “Like button”. When you visit the site, a direct connection is established between your browser and the Facebook server. Facebook thereby receives your IP address and learns that you have visited the website. If you are logged in to Facebook and click the “Like button”, Facebook may assign this to your account. We have no influence on the content or use of the data by Facebook. Further information: Facebook privacy page.

If you do not want Facebook to assign your visit to your account, please log out of Facebook.

The use of the Facebook plugins is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in being visible on social media. If consent has been obtained, processing takes place exclusively in accordance with Art. 6(1)(a) GDPR; this consent may be withdrawn at any time.

Data transfer to the USA is based on the EU Standard Contractual Clauses.

LinkedIn plugin
Our website uses functions of LinkedIn. Provider: LinkedIn Corporation, USA.
When you access pages with LinkedIn functions, a connection to LinkedIn servers is established, through which LinkedIn learns your IP address. If you are logged in and click the “Recommend button”, LinkedIn may assign your website visits to your account. We have no influence on the data or its use by LinkedIn. Further information: LinkedIn privacy policy.

XING plugin
Our website uses functions of XING. Provider: XING AG, Germany.
On pages with XING functions, a connection to XING servers is established. To our knowledge, no IP addresses are stored and no usage behavior is analyzed in this process.
Use is based on Art. 6(1)(f) GDPR (legitimate interest).
Further information: XING privacy policy & Share button.

7. Analysis Tools and Advertising

TYPO3 statistics
This website uses TYPO3’s own statistical modules or extensions to analyze visitor access. Providers/modules may, for example, be TYPO3 extensions such as we_google_analytics or dp_cookieconsent, which control the loading of scripts after consent.

These modules use technologies for user recognition (e.g. cookies or device fingerprinting). Log files and access data (referrer, IP address, browser, origin, actions) are recorded. The IP address is anonymized before storage, where possible.

The use of these analysis tools is based on Art. 6(1)(f) GDPR, as the operator has a legitimate interest in anonymized analysis to optimize the website. If consent to the use of cookies has been requested, processing takes place exclusively in accordance with Art. 6(1)(a) GDPR; consent may be withdrawn at any time.

Google Analytics
This website uses Google Analytics. Google uses cookies that enable an analysis of your use of the website.
The information generated by the cookie about your use is usually transferred to a Google server in the USA and stored there.
IP anonymization is activated: your IP address is truncated within the EU/EEA. Only in exceptional cases is the full IP address transferred and truncated there.
On behalf of the operator, Google analyzes this data, compiles reports, and provides further services relating to website use. The transmitted IP address is not merged with other Google data.
You can deactivate cookies in your browser – this may limit the functionality of the website. A browser plugin for deactivating Google Analytics is available.
Further information: Google Analytics terms of use and privacy policies.

Google Ads / Conversion tracking
This website uses Google Ads and conversion tracking cookies. When you click on an ad, a cookie is set that is valid for 30 days and does not store any personal data. If you visit certain pages while the cookie is still valid, we and Google know that you clicked on the ad. Each Ads customer receives its own cookie, which is not tracked across advertisers.
If you do not wish to participate in tracking, you can deactivate the conversion cookie in your browser.
Conversion cookies are stored on the basis of Art. 6(1)(f) GDPR (legitimate interest in marketing analysis).
Further information can be found in Google’s privacy policy.

8. Newsletter

Newsletter data
If you wish to subscribe to our newsletter, we need your e-mail address and confirmation that you are its owner and agree to receive the newsletter. Further data is collected only on a voluntary basis. We use this data exclusively for sending the newsletter and do not pass it on.

The newsletter data is processed on the basis of your consent (Art. 6(1)(a) GDPR).
You may withdraw your consent to the storage and use at any time, e.g. via an unsubscribe link in the newsletter. The lawfulness of data processing already carried out remains unaffected.
Your data will be stored until you unsubscribe and then deleted, unless it is used for other purposes.
After you unsubscribe, your e-mail address may be added to a blacklist to prevent future newsletters. This data is used only for this purpose and is not linked to other data. Storage in the blacklist is unlimited in time. You may object to this if your interests prevail.

9. Plugins and Tools

YouTube
This website embeds YouTube videos. Provider: Google Ireland Limited.
When you access a page with YouTube content, a connection to YouTube servers is established and information on which page was visited is transmitted. YouTube may use cookies or other technologies (e.g. device fingerprinting).
If you are logged in, YouTube may assign your browsing behavior to your profile. To prevent this, log out of your YouTube account.
YouTube is used in the legitimate interest pursuant to Art. 6(1)(f) GDPR with a view to an appealing presentation. If consent has been requested, processing is based on Art. 6(1)(a) GDPR; withdrawal is possible.
Further information: YouTube privacy policy.

Google Maps
This site uses Google Maps (provider: Google Ireland Limited).
For its use, your IP address is stored and usually transferred to Google servers in the USA. We have no influence on this data transfer.
It is used in the legitimate interest (Art. 6(1)(f) GDPR) of presenting our locations. If consent has been requested, processing takes place in accordance with Art. 6(1)(a) GDPR.
Transfers to the USA are based on the EU Standard Contractual Clauses.
Further information: Google privacy policy.

Google reCAPTCHA
We use reCAPTCHA to distinguish between humans and machines when data is entered (e.g. in the contact form). reCAPTCHA analyzes behavioral patterns (e.g. mouse movements, time spent on the page). The collected data is transferred to Google.
The analyses take place in the background; website visitors are not notified.
Storage and analysis are based on Art. 6(1)(f) GDPR (protection against misuse and spam). If consent has been requested, processing takes place in accordance with Art. 6(1)(a) GDPR.
Further information: Google privacy policy and terms of service.

10. FlexBio SEO Readonly

FlexBio SEO Readonly is a local Windows application from FlexBio Technologie GmbH for read-only analysis of the company’s own Search Console property sc-domain:flexbio.de. It is available only to persons authorized by FlexBio who have access to this property themselves and who consent to the Google authorization. The program verifies access and retrieves the domain-wide web search metrics for completed months: clicks, impressions, click-through rate, and average position. It makes no changes to the website or to any settings in Google Search Console.

Information on the processing of Google user data is provided under Privacy Policy for FlexBio SEO Readonly; the rules for use are set out under Terms of Use for FlexBio SEO Readonly. These sections apply to the app, not to general visits to the website.

11. Privacy Policy for FlexBio SEO Readonly

The controller is FlexBio Technologie GmbH, Otto-Hahn-Straße 7a, 37574 Einbeck, Germany; info@flexbio.de. Data protection inquiries may be sent to datenschutz@flexbio.de. The general information in Sections 1 to 9 of this Privacy Policy applies in addition, insofar as it expressly also relates to the app.

Purpose and access. The application is used for the internal analysis of the visibility of flexbio.de in Google web search. An authorized person grants the Search Console read-only scope webmasters.readonly in their Google Account. On Google’s side, this scope is not limited to flexbio.de. The application first reads the list of Search Console properties accessible to the account and their permission levels in order to determine access to sc-domain:flexbio.de. It does not store this property list. It does not request performance data for any other properties. For sc-domain:flexbio.de, it retrieves, for each completed month, one domain-wide web search aggregate without any breakdown by search query, individual page, or user. No write access to Search Console or the website is requested.

Insofar as personal data is processed in this context, the legal basis is Art. 6(1)(f) GDPR (legitimate interests). The legitimate interest of FlexBio Technologie GmbH is to analyze and improve the discoverability of its own website on the basis of limited, domain-wide search metrics.

Storage. The application stores locally one monthly file containing the source, property, reporting month and start/end dates, search type (web), aggregation type, data state, retrieval time, as well as clicks, impressions, click-through rate, and average position. If no data is available, the value no_data is recorded instead of the metrics. Individual search queries, page URLs, contact requests, and raw Google API responses are not stored in monthly files by this connector. The refresh token required for continued sign-in and the client ID are kept outside the project folder in the local Windows user environment; the token is encrypted for this user with Windows DPAPI. It is transmitted to Google for subsequent retrievals and is not written to the monthly file.

Recipients and analysis. The monthly files may be read by local processes and AI agents. Depending on the FlexBio agent used, the stored domain-wide Search Console monthly metrics may be transmitted via direct connections to Anthropic (Claude) or OpenAI (ChatGPT) for internal SEO analysis. Retrieval from Google itself does not involve an AI model. FlexBio uses the values for internal SEO analyses and reports, not for personalized advertising or the sale of data.

Retention and revocation. The monthly files generated by the connector are retained for 24 full months after the end of the respective reporting month and are then deleted automatically. This period does not govern the retention of separate analyses, reports, memory entries, or backups. The local token, protected and bound to the user, is stored only for as long as it is required for the connection; when local disconnection is explicitly selected, Google’s OAuth authorization for the entire Cloud project is revoked first, and the token is then removed. Disconnection does not immediately delete existing monthly files; they are removed automatically after the period stated above. You can also revoke the application’s access in your Google Account. Revocation prevents further authorized retrievals but does not automatically delete the local token or monthly files already stored. To have local data removed earlier, please contact datenschutz@flexbio.de.

Your rights of access, rectification, erasure, restriction of processing, and to lodge a complaint with a data protection supervisory authority are explained in Section 3 of this Privacy Policy.

12. Terms of Use for FlexBio SEO Readonly

FlexBio SEO Readonly is a local connector of FlexBio Technologie GmbH for the internal analysis of the Search Console property sc-domain:flexbio.de. It is intended for persons authorized by FlexBio who hold their own permission for this property. The program verifies this permission after consent has been given in the Google Account. A Google Account without access to the FlexBio property cannot use the connection to analyze this property.

The application retrieves, on a read-only basis, monthly web search values exclusively for the FlexBio property and makes them available for internal SEO reports. It does not edit website content or Google settings. Search Console data may be processed by the local processes described in Section 11 of this Privacy Policy and used in internal SEO analyses and reports.

The Google authorization can be revoked in the Google Account. This prevents future authorized retrievals. Revocation in the Google Account does not automatically delete the local token or monthly files already stored. The local interface additionally offers an explicitly confirmed disconnection procedure involving Google revocation followed by removal of the token. The files generated by the connector are retained until they are deleted automatically 24 months after the end of the reporting month; this period does not automatically apply to separate reports or backups. For earlier removal and questions about the application: info@flexbio.de; for data protection questions: datenschutz@flexbio.de.

These Terms of Use apply solely to the Search Console connector and do not replace the General Terms and Conditions for plants and services. This connector does not grant any write permissions for the website or Search Console.