Privacy Policy
The short version
No ad networks, no third-party analytics, no selling your data. This site counts visits itself — cookieless and anonymous, without IP addresses or profiles. Beyond that, it stores only what you actively send through the form, and uses it for exactly one purpose: answering you.
Data controller
The data controller within the meaning of the EU General Data Protection Regulation (GDPR / RGPD) is the site operator named in the imprint.
Ben Flagmeyer, Calle Mar Cantábrico 18, Puerta 31, 38612 El Médano, Santa Cruz de Tenerife, Spain. Email: contact@fluxonda.com.
Contact form
When you use the contact form, the following data is processed: your name, your email address, your message, and — if you choose to provide them — your phone number, the topic of your inquiry and a budget range.
Purpose: responding to your inquiry and preparing a potential offer. Legal basis: Art. 6(1)(b) GDPR — processing necessary for steps prior to entering into a contract, taken at your request.
Your data is deleted once your inquiry has been fully handled and no legal retention obligations apply. If a project results from your inquiry, the data becomes part of the contractual records and is retained according to statutory retention periods.
IP address & abuse prevention
When you submit the contact form, your IP address is processed transiently to prevent spam and abuse (by limiting how many submissions can be sent from the same source — so-called rate limiting).
Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in protecting the site from automated abuse and overload.
The IP address is not permanently stored and is not linked to your inquiry. It is held only briefly in memory and automatically discarded after a short period (about one hour).
Audience measurement (cookieless, no third parties)
To understand how many people visit the site and which features are used, this website counts events such as page views, starting the inquiry flow, or clicks on the chat and WhatsApp buttons. This happens without cookies, without third-party providers and without storing IP addresses or device information — the numbers cannot be linked to any person.
To avoid counting a visit twice, your browser keeps a random session identifier in sessionStorage. It contains no personal data and is deleted automatically when you close the tab. The anonymous counting data is deleted automatically after 13 months at the latest.
Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in privacy-friendly audience measurement.
Campaign source of inquiries
If you arrive via an ad or a shared link, your browser remembers the source for the duration of the session (e.g. UTM parameters, click IDs such as gclid/fbclid, the referring site and the landing page). Only if you actually submit an inquiry is this source stored together with your inquiry — so we know which advertising brings inquiries.
Legal basis: Art. 6(1)(f) GDPR (measuring the effectiveness of our advertising). This information is deleted together with your inquiry.
Where your data is stored
Contact form submissions are stored in a MongoDB database hosted on the Railway platform.
Where processing by the hosting provider takes place outside the EU, the transfer is based on appropriate safeguards under Art. 44 ff. GDPR, in particular the EU Standard Contractual Clauses.
Email delivery
Confirmation and reply emails are sent via the email service Resend (Resend, Inc.), which acts as a processor. Resend receives your email address and the content of the emails sent to you for the sole purpose of delivering them.
Resend, Inc. is based in the USA. The transfer is based on a data processing agreement and appropriate safeguards (EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework).
Cookies
This website does not use tracking or marketing cookies, and no third-party analytics services are embedded.
Only functional cookies and similar storage techniques are used: to remember your chosen language, and for the cookieless audience measurement described above (a random session identifier in sessionStorage that is deleted when you close the tab). No personal profiles are created.
WhatsApp contact
If you choose to contact the operator via the WhatsApp button, your use of WhatsApp is governed by the privacy policy of WhatsApp Ireland Ltd. / Meta Platforms. No data is transmitted to WhatsApp by simply visiting this website — only when you actively open the chat link.
Your rights
Under the GDPR you have the right to access your personal data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21).
To exercise any of these rights, a simple email to the address in the imprint is enough — no forms, no hurdles.
You also have the right to lodge a complaint with a supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD), www.aepd.es.