Legal

Privacy policy

We treat your data with the same care with which we understand data sovereignty in our products — sparingly, transparently and without tracking.

This is a courtesy translation. The German version is legally binding.

1. Controller

Reflagged GmbH
Reinhold-Frank-Str. 63
76133 Karlsruhe
Email: hallo@rfl.gd

2. Principle: data minimisation without tracking

This website deliberately does without analytics, tracking and marketing tools. No cookies are set for analytics or advertising purposes and no third-party services are loaded at runtime (no external font, map, video or analytics services). Fonts and all design assets are served locally from our server.

3. Hosting and server log files

When you access the website, the hosting provider processes technically necessary data that your browser transmits automatically (server log files): the page accessed, date and time, the amount of data transferred, browser type and operating system, the referrer URL and the IP address. The legal basis is our legitimate interest in secure and stable operation (Art. 6 (1) (f) GDPR). This data is not merged with other data sources and is deleted after a short period.

The hosting provider and processor is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen. The servers are located exclusively in German data centres in Falkenstein or Nuremberg. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.

4. Encryption (SSL/TLS)

For security reasons this site uses TLS encryption. You can recognise an encrypted connection by the “https://" in your browser’s address bar.

5. Local storage in the browser

For your convenience we store your choice of appearance (light/dark) and language locally in your browser (local storage). This information remains on your device, contains no personal reference and is not transmitted to us or to third parties. You can delete it at any time via your browser settings.

6. Getting in touch

If you contact us by email, we process the details you provide in order to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR (initiation/performance of a contract) or (f) GDPR (legitimate interest in responding). We store this data only for as long as is necessary to process it and then delete it, unless statutory retention obligations apply.

7. Spam protection in the contact form (Google reCAPTCHA)

To protect our contact form against automated misuse (spam) we use reCAPTCHA by Google Ireland Ltd. Implemented in a privacy-friendly way: reCAPTCHA is only loaded once you actively interact with the contact form (as soon as you start typing). During a normal page visit no Google scripts are loaded and no corresponding cookies are set. Only with your interaction can reCAPTCHA process data such as your IP address and device and browser information, possibly on Google servers (including outside the EU). The legal basis is our legitimate interest in spam protection (Art. 6 (1) (f) GDPR). Google’s privacy terms apply: policies.google.com/privacy.

If you fill in the contact form by voice input (dictation), your recording is processed via your browser’s speech recognition — depending on the browser also on the browser vendor’s servers, possibly outside Germany. We point this out before first use; use is voluntary and limited to 60 seconds per recording.

8. Your rights

Under the GDPR you have the following rights:

To exercise them, an informal message to hallo@rfl.gd.

9. Right to lodge a complaint with a supervisory authority

Without prejudice to other remedies, you have the right to lodge a complaint with a supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW), baden-wuerttemberg.datenschutz.de.

10. Currency and changes

We adapt this privacy policy as soon as changes to the website or to legal requirements make it necessary. The version published here at any given time applies.

Back to home