Privacy Policy

1. General information and mandatory disclosures

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. Use of our website is generally possible without providing personal data. Insofar as personal data is collected on our pages, this is generally done on a voluntary basis. Where external services are needed to operate the site, data is processed only to the extent required; details are provided below.

Please note that data transmission over the internet (e.g. via email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible. All data transmissions on this website are encrypted via HTTPS (SSL/TLS).

2. Data controller

Khalid Khan Ahmadzai
Flexon Umzüge
Leibnizstraße 4
04109 Leipzig, Germany

Phone: 0176 8719 1494
Email: Info@flexon24.de

3. Data collection on this website

3.1 Hosting and technical infrastructure

This website is provided via the platform of Lovable (Lovable Labs Incorporated) and delivered through a content delivery network. When you access the website, the servers involved process technical connection data transmitted by your browser. This may include your IP address, the date and time of access, the page requested, the browser and operating system used, and the referrer URL. This processing is technically necessary to deliver the website and to keep it secure and stable. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure and reliable operation). Server logs are kept only as long as required for these purposes; the exact retention periods of the technical providers are not fully known to us.

For the database, file storage and server-side functions (e.g. receiving enquiries) we use Supabase (Supabase Inc.). To send us notification emails about incoming enquiries we use the email service Resend (Resend, Inc.). The domain flexon24.de is registered with IONOS (1&1 IONOS SE); IONOS does not host the website itself. These providers receive data only to the extent necessary for the respective purpose.

To protect against abusive or automated requests, we limit the number of requests to our public endpoints for the contact form, the quote enquiry and the AI chat. For this our application stores only a pseudonymous, hashed counting key, not your plain IP address. Independently of this, IP addresses are technically processed in the network and server infrastructure of the providers involved and may appear in their logs. The legal basis is Art. 6 (1) (f) GDPR.

3.2 Cookies

This website uses necessary local storage, for example to remember your decision about statistics cookies; that decision is kept locally in your browser for 180 days. Analytics cookies (Google Analytics) are only set after you have given consent (see section 4). We do not use marketing cookies. When embedded content is loaded or contact and chat features are used, data may be sent to the technical service providers involved.

3.3 Contact form and quote enquiry

Contact form: If you send us an enquiry via the general contact form, your details (name, email address, phone number and message) are first validated by a server-side function and stored in our database (Supabase). Only then is the notification email to us (Resend) attempted – so an email failure does not cause your enquiry to be lost.

Quote enquiry at /angebot: The guided enquiry assistant lets you provide details about your move, kitchen assembly or clearance (e.g. date, addresses or postcode and town, property and volume details, requested additional services, notes on cost coverage) as well as your contact details (name, phone number, email address, preferred contact method). Optionally you can attach up to six photos or documents. Selected files initially remain exclusively in your browser and are only transferred to non-public file storage (Supabase) when you finally submit your enquiry. Your details are first stored in our database (Supabase); the notification email to us (Resend) is then attempted and contains signed download links to the files. These links are valid for 7 days; public access to the files is not provided. Enquiries accidentally sent twice (e.g. by submitting again) are recognised as a retry through a technical comparison and are not created again.

The processing serves to handle your enquiry and to prepare a non-binding quote. The legal basis for the data required for this is Art. 6 (1) (b) GDPR (pre-contractual steps taken at your request). For a general message that is not aimed at a contract, replying may rest on our legitimate interest in business correspondence (Art. 6 (1) (f) GDPR). The privacy-policy checkbox is an acknowledgement, not the consent basis for this necessary processing. Submitting an enquiry does not create a contract. We keep the data as long as necessary to handle your enquiry, for any resulting contract, or to meet statutory retention obligations. You may request deletion at any time.

3.4 AI Assistant

Our AI assistant helps you to prepare a non-binding enquiry. The information you enter in the chat as well as any photos you upload are processed exclusively to handle your enquiry and prepare a quote. To generate replies, your chat input is sent via a server-side function (Supabase) to an AI language model provided through the Lovable platform (Lovable Labs Incorporated); currently a Google model (Gemini) is used. Please do not enter data in the chat that is not needed for your enquiry. Transmission and processing already take place as soon as you send a chat message – that is, before and independently of any final quote enquiry. Processing is based on your consent (Art. 6 (1) (a) GDPR), which you give before your first chat message using the "Consent & start chat" button. We store this consent locally in your browser; the ongoing chat history is kept session-wise in your browser so that it is not lost when you change pages. You do not have to use the assistant: you can use the ordinary contact form or the quote enquiry instead at any time. The contents are not used for advertising or profiling purposes.

Files you attach in the chat are transferred to the non-public file storage (Supabase) as soon as you choose the file – unlike the quote enquiry at /angebot, where selected files remain exclusively in your browser until the final submission. When you submit your enquiry via the assistant, it is first stored in our database (Supabase); only then are the details evaluated automatically and delivered to us by email (Resend).

For quality assurance, error detection and improvement of the assistant, chat conversations are logged. We store only messages that you deliberately send, the assistant's replies, the language used, the page visited, the device type (mobile, tablet, desktop), the time, and technical error messages. Text that you do not send remains in your browser's input field and is neither transmitted to us nor stored in our database. The legal basis is our legitimate interest in an error-free and comprehensible quotation process (Art. 6 (1) (f) GDPR). The logs are stored in our database (Supabase); notices of technical faults are sent to us by email (Resend). Data is retained only as long as required for these purposes or by applicable obligations. You may object to this logging or request deletion of your chat data at any time (Art. 21 GDPR) – simply send an email to info@flexon24.de.

3.5 File and photo uploads

Within the AI assistant and the quote enquiry you may upload photos or documents. These files are placed in a non-public file storage (Supabase) and are stored and evaluated exclusively for the purpose of preparing a quote and processing your order. Files that do not become part of a submitted enquiry (e.g. after cancellation or a technical error) are removed again as promptly as possible. You may request deletion of uploaded files at any time.

3.6 Google Maps

A Google Maps map can be displayed on the contact page. The map only loads once you actively click "Load map"; beforehand a notice informs you that content will be requested from Google and data will be transferred to Google. Only with this click may your browser transmit technical data, particularly your IP address, to Google. Please refer to Google's privacy information for further details.

4. Analytics and tracking

We use Google Analytics 4 (Google Ireland Limited/Google LLC) with the measurement ID G-YZQFQWJ5E7. Google Analytics is only loaded after you have chosen "Allow statistics" in the cookie notice. The legal basis is your consent (Art. 6 (1) (a) GDPR) and, for storing and accessing information on your device, § 25 (1) TDDDG. You can refuse statistics and change or withdraw your decision at any time via "Cookie settings" in the website footer. Withdrawal applies for the future; processing that took place before withdrawal remains lawful. On withdrawal our website clears the existing _ga cookies.

Our configuration: advertising-related storage (ad_storage,ad_user_data, ad_personalization) is denied, and Google signals and ad personalisation are disabled. We send the page path, page title and language plus selected actions: page views, clicks on phone and WhatsApp links, starting a quote enquiry, and successfully submitted contact or quote enquiries. Our code does not send form contents, names, phone numbers, email addresses or uploaded files as analytics parameters. In addition, Google Analytics may process the standard technical browser, device and approximate-location information inherent in GA4. According to Google, individual IP addresses of visitors from the EU are not logged or stored.

The cookies _ga and _ga_<ID> are configured by us to expire after 60 days and refresh with further activity. Your consent decision is kept locally in your browser for 180 days. On Google's side, the retention settings of the Analytics property apply in addition; data is kept there only as long as needed for the analysis or until the configured retention period expires. Google may also process data outside the EU.

5. Disclosure of data to third parties

Personal data is disclosed only where necessary to process your enquiry, provide an agreed service, operate the website technically, or meet a legal obligation. The technical service providers we currently use are: Lovable Labs Incorporated (website delivery and AI gateway), Supabase, Inc. (database, file storage, server-side functions), Resend (Plus Five Five, Inc., email delivery to us) and Google – for Google Analytics only after your consent, for Google Maps only after you click "Load map", and for the AI model along the route described above. Processing in third countries can occur. Where required, these transfers rely on transfer safeguards such as the EU Standard Contractual Clauses under the applicable provider terms. Details can be found in the respective providers' privacy information.

6. SSL / TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser address bar changes from "http://" to "https://".

7. Your rights as a data subject

You have the right at any time to:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent (Art. 7 (3) GDPR)

You can withdraw consent at any time; this does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, please contact: Info@flexon24.de

8. Right to lodge a complaint

Saxon Commissioner for Data Protection and Transparency (Sächsische Datenschutz- und Transparenzbeauftragte)
Visitor address: Maternistraße 17, 01067 Dresden, Germany
Phone: +49 351 85471-101
Email: post@sdtb.sachsen.de