Privacy policy

1. Controller

Controller within the meaning of the General Data Protection Regulation (GDPR) for processing of personal data on flagmeier.engineering is:

Cevelar Technologies UG (haftungsbeschränkt)
Kolonnenstraße 8
10827 Berlin
Germany
Commercial register: HRB 291511, Amtsgericht Charlottenburg
Email: [email protected]
Phone: +49 176 2330 7802

A data protection officer has not been appointed as this is not legally required. Please send privacy requests to the contact details above.

2. Hosting and provision of the website

This website is operated on servers of a professional hosting provider. The technical provider and processor for hosting is STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany (Registergericht Berlin-Charlottenburg, HRB 270570 B), website: www.strato.de.

STRATO provides infrastructure (web space, computing capacity, databases as per the package) and, when you access this website, automatically processes data in server log files, including:

• IP address of the requesting device
• Date and time of the request
• Requested resource (URL), HTTP method
• Amount of data transferred, status of retrieval
• Browser type and version, operating system (if transmitted)
• Referrer URL (previously visited page, if transmitted)

The purpose is secure, stable and error-free operation of the website, system security (e.g. abuse prevention) and technical analysis in case of faults. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a secure and functional online presence). Where STRATO acts as a processor, a data processing agreement pursuant to Art. 28 GDPR is in place.

Processing usually takes place in data centres within Germany / the European Union. Details on processing and retention at the host are set out in STRATO’s privacy policy: www.strato.de/datenschutz.

3. Contact form and email delivery

When you use the contact form we process the data you enter: name, email address, subject, message and optionally your organisation. We use this to handle and respond to your enquiry.

Emails from the form and the confirmation email to you are sent via Resend, Inc., based in the USA. Personal data may therefore be transferred to a third country (USA). Resend uses the EU Commission’s standard contractual clauses (SCC) and, where required, additional safeguards (Art. 44 ff. GDPR). Information: resend.com/legal.

Legal basis: Art. 6 (1) (b) GDPR where your enquiry relates to initiating or performing a contract, and additionally Art. 6 (1) (f) GDPR (legitimate interest in handling general contact requests). By submitting the form you confirm that you have read the terms and this privacy policy; storing this confirmation serves as evidence (Art. 6 (1) (c) or (f) GDPR).

Contact enquiries are deleted once the purpose no longer applies and no statutory retention periods apply — in practice typically after the correspondence is concluded, at the latest after expiry of tax or commercial retention periods where applicable.

4. CRM and campaign attribution

To handle enquiries and attribute campaign sources (UTM parameters) we may store contact data in our self-hosted CRM (Twenty) on the same hosting infrastructure or match it against an existing record. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in traceable customer communication) or Art. 6 (1) (b) GDPR for pre-contractual enquiries.

5. Appointment booking (Google Calendar)

If you book a call via the booking link, you are redirected to a Google service (Google Ireland Limited / Google LLC). Google is an independent controller for processing on that service. Data may be transferred to third countries. Further information: policies.google.com/privacy. Legal basis for the redirect: Art. 6 (1) (b) or (f) GDPR.

6. Microsoft Clarity (web analytics, opt-out)

To analyse use of this website, services of Microsoft Clarity (Microsoft Corporation, USA) are loaded by default unless you actively disable web analytics in the cookie notice. Clarity may evaluate interactions, clicks, scroll behaviour and technical metadata to improve the website. Data may be transferred to the USA.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in statistical analysis and improvement of the online offering). You may object at any time with future effect by disabling web analytics in the cookie notice; your refusal is stored in your browser’s local storage.

Further information: Microsoft privacy statement.

7. Cookies, local storage and the cookie notice

Technically necessary processes may require cookies or your browser’s local storage where essential for displaying the site. We store your choice regarding web analytics (Microsoft Clarity) in local storage on your device. The legal basis for Clarity is set out in section 6; storing your choice in local storage is based on Art. 6 (1) (f) GDPR.

8. SSL/TLS encryption

This website uses an encrypted connection (HTTPS / TLS) to protect your data in transit. You can see whether the connection is active from the lock icon in your browser’s address bar.

9. No automated decision-making

We do not use solely automated processing that produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR).

10. Your rights

Where the statutory requirements are met, you have in particular:

• Right of access to your data (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR)
• Right to object to processing (Art. 21 GDPR), where applicable
• Right to data portability (Art. 20 GDPR)
• Right to withdraw consent with future effect (Art. 7 (3) GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority for our registered office in Berlin is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin (datenschutz-berlin.de). You may also contact the authority at your place of residence.

11. Obligation to provide data

You may generally use this website for information without actively providing personal data to us (except access data automatically generated by hosting). The fields marked on the contact form are required so we can handle your request.

12. Changes to this privacy policy

We update this policy when legal requirements, technical developments or our services change. The version published on this page at the time of your visit applies.

Last updated: 14 September 2026