Privacy Policy (Datenschutzerklärung)

Privacy Policy | Flashbooks

1. Controller (Verantwortlicher)

Flashbooks GmbH
trading as: Flashbooks
Sebastian-Fischer-Weg 6
83071 Stephanskirchen
Email: info@flashbooks.org

2. General information on data processing

We process personal data only insofar as this is necessary to provide this website, to answer enquiries and to create and deliver your Flashbooks. The legal bases are Art. 6(1)(b) of the General Data Protection Regulation (GDPR, DSGVO) (contract and pre-contractual measures), Art. 6(1)(c) GDPR (legal obligations), Art. 6(1)(f) GDPR (legitimate interest) and, where we ask for it, Art. 6(1)(a) GDPR (consent).

3. Hosting and server log files

This website is hosted by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany. When the website is accessed, the following data are collected automatically: IP address, date and time, URL accessed, referrer, browser and operating system. The processing is carried out to ensure stable and secure operation (Art. 6(1)(f) GDPR (DSGVO)). A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider. Log files are deleted after 14 days at the latest.

4. Enquiry form

If you contact us via the “Request a team book” form, we process your first name, surname, email address, telephone number, club / team and, if provided, your role in the club and your message. We use the data to answer your enquiry and to make you an offer (Art. 6(1)(b) GDPR).

The enquiry is transmitted to us by email and passed on for internal processing to the automation service Make (Celonis SE or Make.com, processing in the EU region). To protect against misuse, the server briefly stores a technically necessary session cookie when the form is submitted, which is deleted at the end of the session (Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG)).

We delete the enquiry data as soon as they are no longer required for processing the enquiry and no statutory retention obligations preclude deletion.

5. Online questionnaire (Fillout)

To start your Flashbook and for the personal questionnaires, we use the form service Fillout (Fillout, Inc., USA). On the “Start without obligation” page, the questionnaire is loaded from Fillout's servers; in the process, your IP address is transmitted to Fillout. We process the information provided in the questionnaire in order to create your Flashbook (Art. 6(1)(b) GDPR). Further information: https://www.fillout.com/privacy

6. Orders and payment

To process an order, we process name, address, email, telephone number and payment information. Payments are processed via external payment service providers (e.g. Stripe, PayPal, Klarna). Their privacy policies apply.

7. Images and design

The images you send us for your Flashbook are stored and processed on the design platform Canva (Canva Pty Ltd, Australia). Further information on the storage and processing of image data by Canva can be found in Canva's privacy policy.

8. Communication via WhatsApp

We use WhatsApp Business (Meta Platforms Ireland Limited) as a communication channel. Its use is voluntary. WhatsApp's privacy policy applies: https://www.whatsapp.com/legal/privacy-policy-eea

9. Fonts and videos

The fonts and videos on this website are loaded directly from our server. No connection is made to Google or any other third-party providers.

10. Cookies, consent and Meta Pixel

Only the session cookie described in section 4, set when the form is submitted, is technically necessary. We store your decision in the cookie notice locally in your browser (local storage, key “fb-consent”) so that the notice does not appear again on every visit. This storage is technically necessary and contains no personal data.

Only if you choose “Accept all” in the cookie notice do we load the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). The Meta Pixel measures whether visitors reached this website through our advertising on Facebook or Instagram and which pages they view (for example book details, questionnaire, submitting a request). In doing so, your browser connects to Meta and your IP address, browser information, the page viewed and, where applicable, Meta cookies are transmitted. Meta may link this data to your Facebook or Instagram account and use it for its own purposes. The data may be transferred to the USA; Meta is certified under the EU-US Data Privacy Framework. We use the data to measure the effect of our advertising and to improve our ads. The legal basis is your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). For the joint processing when this data is collected, we are joint controllers with Meta (Art. 26 GDPR); the agreement is available at facebook.com/legal/controller_addendum.

You can withdraw your consent at any time with effect for the future: click “Cookie settings” in the footer and choose “Only necessary”. Further information on data protection at Meta is available at facebook.com/privacy/policy; you can change your ad settings at facebook.com/adpreferences.

11. Rights of data subjects

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You may withdraw any consent you have given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority, for example the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach.

12. Amendments

This privacy policy may be amended as required.

Last updated: October 2026