Privacy Policy

This is a translation for convenience; the German version is legally binding. Effective from October 8, 2026.

Introduction and scope

This privacy policy explains which personal data Flowbotics GmbH (“Flowbotics”) processes when you visit the website flowbotics.ai and when it provides its services to business customers, for what purpose, and what rights you have.

Flowbotics complies with the Swiss Federal Act on Data Protection (FADP). Where applicable in individual cases, the requirements of the EU General Data Protection Regulation (GDPR) are also taken into account.

Controller

The controller responsible for the data processing is:

Flowbotics GmbH
Frohbergstrasse 42
8833 Samstagern
Switzerland

Email for data protection matters: contact@flowbotics.ai

Data processing when you visit the website

a) Hosting and server log files

The website is hosted by Hostinger (Hostinger International Ltd., Cyprus) and delivered through its content delivery network. Each time the website is accessed, technical information is collected automatically: IP address, date and time, page or file accessed, referrer URL, browser and operating system, and status codes.

This information is used exclusively for the secure and stable operation of the website, for defending against attacks and misuse, and for error analysis. It is not combined with other data.

b) Contact form and email

If you use the contact form, your information (name, email address and, if provided, company, sprint of interest, number of M365 users, reason for the inquiry and message) as well as the page from which you sent the inquiry are processed. The same applies to inquiries by email. The purpose is to respond to your inquiry and to prepare a quote.

The form is processed by the website’s own web server and delivered to Flowbotics by email. The Mailjet service (Mailjet SAS, France), which processes the content in the EU, is used for sending. To protect against misuse, your IP address is stored on the server only as a hash value and for no longer than one hour. Alternatively, you can reach Flowbotics directly at contact@flowbotics.ai.

c) Cookies and local storage

The website sets no cookies and does not store any data in your browser.

d) Fonts

All fonts are loaded from the website’s own web server. No requests are made to third parties such as Google Fonts.

e) Web analytics

Cloudflare Web Analytics (Cloudflare, Inc., USA) is used for the statistical analysis of visitor numbers. The service does not set cookies, does not store any data in the browser and does not create user profiles. Aggregated information such as pages accessed, referrer, browser, device type, country and load times is collected. The IP address is used only for transmission and is not stored for identification purposes.

f) Links to other websites

The website contains simple links, for example to LinkedIn, Microsoft Learn or the LEXOJ web app. No plug-ins are embedded; data is only transmitted when you click a link. The linked services are subject to the privacy policies of the respective providers; for LEXOJ, the privacy policy published in the app applies.

Data processing in connection with the services

a) Contract and communication data

Flowbotics processes data of customers and their contact persons (e.g. name, business contact details, role, content of communications) in order to initiate, conclude and perform contracts and to carry out projects and support.

b) Processing on behalf of customers

The services, in particular the configuration and operation of Microsoft 365, Entra ID, Intune, Exchange Online and SharePoint, require access to the customers’ systems and cloud environments. In doing so, Flowbotics acts as a processor; the customer remains the controller for the data of its employees, customers and business partners.

  • Purpose: exclusively the agreed service (e.g. security configuration, migration, implementation).
  • Scope: only the data required for the engagement. Content is only viewed if this is necessary for troubleshooting or has been expressly requested.
  • Contract: Upon request or where required, a data processing agreement (DPA) is concluded, which in particular governs the obligation to act on instructions and the technical and organizational measures.

c) Sub-processors

Flowbotics currently does not use any sub-processors to provide its services. If this changes, the affected customers will be informed in advance.

Recipients and disclosure abroad

Personal data is only disclosed to third parties if this is necessary to process an inquiry or to perform a contract, if you have given your consent, if there is a legal obligation, or if there is an overriding legitimate interest. Data is not disclosed for advertising purposes.

The following service providers process data on behalf of Flowbotics:

  • Hosting, email and content delivery network: Hostinger International Ltd., Cyprus
  • Email delivery for the contact form: Mailjet SAS, France
  • Web analytics: Cloudflare, Inc., USA

According to the assessment of the Swiss Federal Council, Cyprus and France provide an adequate level of data protection. For recipients in the USA, disclosure is based on a certification under the Swiss-U.S. Data Privacy Framework or on the European Commission’s standard contractual clauses recognized by the Federal Data Protection and Information Commissioner (FDPIC).

Retention period

Personal data is only retained for as long as necessary for the respective purpose or as required by law:

  • Hash values for protecting the form against misuse: no longer than one hour.
  • Server log files: for the short period provided for by the hosting provider.
  • Inquiries that do not lead to an engagement: until the inquiry has been fully answered, then for no longer than two years for any follow-up questions.
  • Contract and accounting records: for the statutory retention period of ten years (Art. 958f CO).

Data security

Flowbotics takes appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse and alteration. The website is accessible exclusively via an encrypted connection (TLS).

No automated individual decision-making and no profiling take place.

Your rights

Within the scope of applicable law, you have in particular the right to:

  • Access to the data processed about you.
  • Rectification of inaccurate data.
  • Erasure, unless a statutory retention obligation precludes this.
  • Objection to certain processing and withdrawal of any consent given.
  • Delivery or transfer of your data, where provided for.

Please send requests to contact@flowbotics.ai. Proof may be requested to verify your identity.

You also have the right to contact the competent supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC).

Changes

Flowbotics may amend this privacy policy at any time, for example in the event of new service providers or changed legal requirements. The version published on this page applies.