Privacy Policy
Information on the processing of personal data pursuant to Art. 13 GDPR
1. Who is responsible
The controller for data processing on this website is:
Thomas Schlecht
c/o IP-Management #9732, Ludwig-Erhard-Straße 18, 20459 Hamburg, Germany
Email: hello@getbasaltflow.com
2. What we collect and why
Contact form
When you use the contact form we process the email address and message you enter. We use this only to answer your inquiry and handle any steps leading to a possible contract.
Legal basis: Art. 6 (1) (b) GDPR (steps prior to entering a contract) and Art. 6 (1) (f) GDPR (our legitimate interest in responding to inquiries).
Server log files
When you visit the site, the hosting provider automatically records technical data such as your IP address, the date and time of the request, the page requested, and your browser and operating system. This keeps the site secure and stable.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a secure, functioning website).
Demo inputs
The demos on this site let you enter text and, in some cases, upload files. To produce a result, that input is sent to Google's Gemini API and processed there. We do not use it for anything other than returning the result you asked for.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in showing a working demo).
3. Recipients and processors
We keep third parties to the minimum needed to run the site. The following processors may receive personal data:
- Google (Gemini API). Provided by Google Ireland Ltd. / Google LLC. Processes the input you enter into the demos to generate a response. Data may be transferred to the United States. Acts as a processor under Art. 28 GDPR.
- Hosting: Vultr (The Constant Company, LLC). Hosts the website on a server located in the EU (Madrid, Spain) and processes the server log files described above. The provider is US-based, so data may be transferred to the United States.
- Email delivery: Resend (Plus Five Five, Inc.). Delivers the messages sent through the contact form. Data may be transferred to the United States.
4. Transfers to the United States
Some of the processors above are based in or transfer data to the USA. These transfers are safeguarded by the EU-US Data Privacy Framework and/or the EU Standard Contractual Clauses under Art. 46 GDPR. You can ask us for a copy of the safeguards in place.
5. How long we keep it
- Contact data is kept as long as needed to handle your inquiry, plus any statutory retention periods, then deleted.
- Log data is kept for a short period for security, then deleted or anonymised.
- Demo inputs are not stored by us beyond returning your result. Google processes them under its own terms.
6. Cookies and tracking
This site uses no non-essential cookies and no analytics or advertising trackers. There is nothing to consent to, so there is no cookie banner. If that changes, this policy will be updated and consent requested first.
7. Your rights
Under the GDPR you have the right to:
- access your data (Art. 15),
- have it corrected (Art. 16),
- have it deleted (Art. 17),
- restrict its processing (Art. 18),
- data portability (Art. 20),
- object to processing based on legitimate interest (Art. 21),
- and to withdraw any consent at any time, with effect for the future.
To exercise any of these, email [EMAIL].
8. Right to complain
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example at your habitual residence, your place of work, or the place of the alleged infringement. An overview of the German supervisory authorities is available at bfdi.bund.de.
9. Data security
This site is served over an encrypted TLS/SSL connection, shown by the https and the lock icon in your browser, to protect the data you send while it is in transit.
10. Providing your data
You are not legally required to give us any data. If you contact us, we need at least an email address to reply. Without it, we cannot answer your inquiry.