Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR / DSGVO) is:

Henry van de Vorming
c/o AutorenServices.de
Birkenallee 24
36037 Fulda, Germany
E-mail: hello@arrimundo.com

2. Overview: what data we process and why

We keep data collection to the minimum needed to operate FlexBlocked. In short: our host records standard server logs, we measure traffic with a privacy-friendly, cookieless analytics tool, and we only ever hold personal contact details when you choose to email us or subscribe to a newsletter. We do not sell personal data and we do not use tracking cookies. The legal bases below refer to Art. 6 GDPR.

3. Hosting (Netlify)

This website is hosted by Netlify (Netlify, Inc.). When you visit the site, the host automatically collects and stores standard server log files that your browser transmits: the anonymised/abbreviated IP address, date and time of the request, the page requested, the referrer URL, and your browser and operating-system type. This data is technically required to deliver the site, ensure stability and security, and is processed on the basis of our legitimate interest in a secure and reliable service (Art. 6 (1) (f) GDPR). Netlify processes this data as our processor under a data-processing agreement, with EU data-processing terms and appropriate safeguards for any transfer (see Section 9).

4. Analytics (Plausible, cookieless)

We use Plausible Analytics (Plausible Insights OÜ, hosted in the EU) to understand aggregate, anonymous site usage. Plausible is cookieless: it sets no cookies, does not store any personal data on your device, does not collect personally identifiable information, and never tracks you across websites or over time. It produces only aggregated statistics (e.g. page views, referrers, country at country level). The script is loaded in a web worker via Partytown to keep it off the main thread. Because no personal data is processed and no cookies are set, this requires no consent banner; the legal basis is our legitimate interest in measuring and improving our content (Art. 6 (1) (f) GDPR).

5. Cookies and local storage

We do not use tracking cookies and therefore show no cookie consent banner. Apart from the functional cookies and storage that our live-chat tool sets when you open a chat (see Section 10), the only thing we store on your device is a theme preference (light/dark mode) saved in your browser's localStorage. This is a purely local technical setting — it is not a cookie, contains no personal data, is never transmitted to us or any third party, and is not used for tracking. You can clear it at any time through your browser settings.

6. Newsletter and contact

If you contact us via our contact form, we process the details you provide (such as your name, e-mail address and the content of your message) solely to handle your enquiry and any follow-up questions. The legal basis is our legitimate interest in answering you and/or the performance of pre-contractual or contractual steps (Art. 6 (1) (b) and (f) GDPR). Contact form submissions are processed by Netlify Forms (our hosting provider) as a processor (Art. 28 GDPR).

If you subscribe to a newsletter, we use your e-mail address only to send you the content you asked for, on the basis of your consent (Art. 6 (1) (a) GDPR). Form submissions are processed by Netlify Forms (our hosting provider) as a processor (Art. 28 GDPR). To deliver the newsletter we use an email service provider (to be named on activation) as a processor (Art. 28 GDPR); your e-mail address is transferred to that provider solely for dispatch purposes and will not be used for any other purpose. You can withdraw consent and unsubscribe at any time via the link in every newsletter or by e-mailing us; withdrawal does not affect the lawfulness of processing carried out beforehand.

7. Affiliate links

Some links on FlexBlocked are affiliate links, marked with rel="sponsored". If you click such a link and continue on a partner's website, that partner may set its own cookies and process your data on its own site as an independent controller — for example to attribute a referral. We do not control and are not responsible for the data processing that happens on partner sites. Please consult the respective partner's privacy policy for details. We never pass your personal details to partners; they receive only the referral click.

8. Data retention

Server log data is retained only briefly for security and diagnostics per the host's standard retention and then deleted or anonymised. E-mail correspondence is kept only as long as necessary to handle your request and to comply with any statutory retention obligations, after which it is deleted. Newsletter data is retained until you unsubscribe. Analytics data is aggregated and contains no personal data.

9. International transfers

We aim to keep processing within the EU/EEA. Where a provider (e.g. Netlify) may process data outside the EU/EEA, such transfers are safeguarded by appropriate measures under Art. 44 ff. GDPR — in particular the EU Standard Contractual Clauses and, where applicable, certification under the EU–U.S. Data Privacy Framework.

10. Live chat and support (Crisp)

So that you can reach us directly with a question, we offer a live chat provided by Crisp IM SAS (2 boulevard de Launay, 44100 Nantes, France). Crisp is an EU (French) provider and runs its core service inside the EU, so there is no third-country transfer in normal use.

The chat widget sets first-party cookies and localStorage entries (for example a crisp-client session identifier) that are needed to keep your chat session working. If you start a conversation, Crisp processes your messages together with technical data (session and visitor identifier, browser information) and any contact details you choose to provide (such as your name and e-mail address), acting as our processor solely to handle your enquiry.

The live chat is a necessary, functional support tool — not an advertising or tracking service. It is therefore not placed behind the cookie banner and loads without consent. The legal basis is our legitimate interest in offering a direct support and communication channel (Art. 6 (1) (f) GDPR); where you actively contact us through the chat, we additionally rely on Art. 6 (1) (b) GDPR (steps taken at your request). For more detail, see Crisp's privacy policy.

11. Your rights

Under the GDPR you have the right, in respect of your personal data, to:

• access (Art. 15) — confirmation and a copy of your data;
• rectification (Art. 16) — correction of inaccurate data;
• erasure (Art. 17) — deletion where conditions are met;
• restriction of processing (Art. 18);
• data portability (Art. 20);
• object to processing based on legitimate interests (Art. 21);
• withdraw consent at any time, with future effect (Art. 7 (3)).

To exercise any of these rights, simply e-mail hello@arrimundo.com. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), for example the data-protection authority of your country or German federal state of residence.