Privacy Policy

This English version is a convenience translation. In case of discrepancies, the German version prevails.

1. Controller

The controller within the meaning of Art. 4(7) of the General Data Protection Regulation (GDPR) is:

NexusFlow UG (haftungsbeschränkt)
Mühlenstraße 8a
14167 Berlin

Represented by the managing director: Carsten Koch

Data protection contact: legal@nxsflow.com

We are not required to appoint a data protection officer. Please address data protection enquiries directly to the managing director.

2. Scope

This privacy policy covers:

• our websites nxsflow.com, manufakt.io and nexflow.it,
• the nxsflow account and our central sign-in service id.nxsflow.com (section 6),
• the software offered there — our desktop and web applications, including the nexflow.it web app at app.nexflow.it, and, in the future, applications for mobile devices,
• the channels through which you download that software and through which it updates itself.

Where individual products or websites process data differently, the relevant section says so for the product concerned.

3. When you visit our websites

When you open one of our websites or web applications, your browser transmits access data for technical reasons. Of this, an access log records at most what we need for secure operation and for the question of how often our pages and products are used:

• the time of access
• the type of request
• the address requested
• the additional details passed along with that address
• whether the request succeeded
• the type of content delivered
• the identifier of the program that made the request (browser or bot)
• your IP address
• the page you came from
• the amount of data transferred and the duration of the request
• the location that received the request (section 10)
• technical details of the delivery and of the encrypted connection

The access logs are not combined with other data sources and are deleted automatically after 90 days at the latest. Purpose and legal basis are set out in section 8.

On none of our websites do we store, during a mere visit, any identifier by which a person or a device could be recognised again: no cookie, no entry in your browser's storage, no other identifier. What is stored in your browser when you sign in and in the nexflow.it web app is set out in section 9.

4. When you download or update our software

Section 3 applies to downloading our software and checking for updates: an access log contains at most the details listed there and is deleted after 90 days at the latest.

Installation identifier: the nexus-flow command-line tools and the manufakt.io desktop application themselves — not through a browser — ask us whether a newer version exists. In doing so they transmit an installation identifier, the update channel and technical details such as platform and installed version. The identifier is generated randomly by the software at the first check, not assigned by us; it is stored on your device and read from there at every check. We use it for two purposes. For both, storing and reading the identifier on your device is strictly necessary (Section 25(2) no. 2 TDDDG):

• Security: to secure our update service, we must be able to attribute requests unambiguously to an installation, especially during the beta.
• Counting installations: we use it to count how many distinct installations of these products check for updates, in order to assess how our products are developing.

On our side the identifier is recorded without your IP address and deleted after 30 days. We do not link it to any website visit, to any account or to any person. You can replace the identifier with a new random identifier at any time; after that your installation can no longer be linked to the old identifier. The legal basis under the GDPR and our legitimate interest are set out in section 8.

5. Contact form and waiting list

On manufakt.io and on nexflow.it we offer a form through which you can leave us your email address — for example to be notified when a product becomes available, or to tell us that you are interested in taking part in a trial programme.

Data processed: the email address you enter, the time of submission and, if you leave a message, its content; for the manufakt.io waiting list, also the details listed below under “The manufakt.io waiting list”. We do not store your IP address with your entry — neither in clear text nor as a hash value. Like every request, however, submitting the form may appear in the access log described in section 3.

Purpose: answering your enquiry, notifying you about a product's availability and, where you ask for it, considering your participation in a trial programme.

Legal basis: Art. 6(1)(b) GDPR (taking steps at your request prior to entering into a contract).

Retention: until your enquiry has been dealt with, at most 24 months after receipt. You may request deletion at any time; an informal email to the address above is sufficient.

The nexflow.it waiting list

After you sign up for the nexflow.it waiting list, we send you an email confirming receipt and telling you how to have your entry deleted again. It consists of text only, with no link and no image. Replies to this email go to hello@nxsflow.com. The legal basis and retention period are those stated above.

The manufakt.io waiting list

manufakt.io is in a private trial. The software cannot be downloaded freely; we decide for each entry individually who receives it. What is said above applies to the waiting list, with the following additions.

Confirmation email: Immediately after you sign up, we send you an email confirming receipt. It contains no link and no image. We do not record whether you open it, and we store nothing about sending it. To recognise duplicate entries, we additionally keep your address in a normalised spelling. If you enter the same address again, neither a second entry nor a second email is created.

Language and version of the notices: with your entry we also store the language of the page on which you signed up, so that our emails reach you in that language, and a note of which version of the notices at the end of our emails belongs to your entry. This note is not consent and does not replace any; the legal basis remains the one stated below.

Access and personal download link: If we give you access, you receive a further email with a download link assigned to you alone. A download via this link can therefore be attributed to you. The link is generated randomly and cannot be guessed. It works exactly once and expires after 7 days at the latest. If it expires before you could use it, we send you a new one on request; the details of the new link then replace those of the old one. We store with your entry:

• when we gave you access,
• which version of the software and which update channel the access covers,
• a check value of the link, not the link itself, and until when the link is valid,
• whether and when the link was used.

We store no further details of your download with your entry. Like every request, opening the link may appear in the access log described in section 3. The downloaded software is the same for every recipient and contains no information about you.

Who sees your entry: only authorised people within our company, after signing in with their nxsflow account (section 6).

Legal basis: The confirmation and the access are part of your request to take part in the trial: Art. 6(1)(b) GDPR.

Retention: Your entry, including the access details, and the address kept to recognise duplicates are deleted automatically 24 months after receipt. At your request we delete them sooner; an informal email is sufficient.

Contact by email

If you write us an email — to the data protection address above, as a reply to one of our emails or to another of our addresses at nxsflow.com, nexflow.it or manufakt.io — we process the complete email, that is the sender address, recipients, subject, content and attachments, as well as the technical details in the email header, including details of the mail servers through which it was delivered. This also includes reports from other mail providers to dmarc@nxsflow.com and dmarc@nexflow.it about which emails in our name they have received; they contain the addresses of the servers that sent those emails.

Purpose: reading and answering your email or forwarding it to the responsible person in our company; for the reports, detecting whether someone is forging emails in our name.

Evaluation with our own software: we evaluate some of the emails sent to us with our own software. It classifies the emails, prepares replies, learns rules for classifying future emails and carries out actions, for example sorting an email out. In doing so we use an AI model that runs with our hosting provider (section 10). To classify an email, we give the model its sender, its subject, the time of receipt, the results of the checks made on delivery (for example for unsolicited advertising, malware or a forged sender), its text and the name and type of its attachments. The model does not receive the other recipients, the other details in the header or the content of the attachments. For an email that these checks identify as suspicious or that is held back, it receives only the sender, the subject and the check results. To learn a rule, it receives only the classification proposed and the one we chose, the reasoning behind the proposal and the sender's domain. Your email does not leave our hosting provider's environment in the process, and the providers of the model do not receive it. A reply prepared by the software is sent only after we have approved it. The software makes no decision that has legal effect on you. Where an email concerns other people, for example because it was forwarded or names other people in its text, the same applies to their details.

Legal basis: where your email concerns a contract with us or its preparation, Art. 6(1)(b) GDPR; otherwise Art. 6(1)(f) GDPR, our interest in answering messages addressed to us, in handling them promptly with the help of our own software and in protecting our sender addresses against misuse.

Retention: we delete your email once your matter has been dealt with, unless statutory retention obligations stand in the way, for example under commercial or tax law. Where such an obligation exists, we keep the email until it ends; the legal basis for this is Art. 6(1)(c) GDPR. We delete the reports to the dmarc addresses once we have evaluated them.

What our software stores in the process: for an evaluated email, the software stores a proposal: how it classifies the email and why, where applicable a draft reply with recipient, subject and text, and a question to us. It does not store the email itself a second time. It also records the rules it learns for classifying future emails. We keep these rules as general and as free of personal data as possible, for example “we sort out emails from this domain”. We delete proposals, draft replies and rules at the latest 90 days after they were last used. If you request the deletion of your details, we delete them here as well within 30 days. Deleted proposals and draft replies can still be restored from the backup for up to 35 days after their deletion and are permanently deleted after that. The software's logs contain neither addresses nor content of emails and are deleted after 30 days.

Who receives emails to our addresses on our behalf and where they are stored is set out in section 10.

When one of our emails does not reach you

If an email we send from an address at nexflow.it or manufakt.io comes back as undeliverable, or you report it to your mail provider as unwanted, our mail sending service adds your email address, together with the reason and the time, to a suppression list and sends no further emails to that address.

Purpose: not to send emails to addresses that do not exist or whose owners do not want to receive them from us, and thereby to secure the deliverability of our emails.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is that our emails reach their recipients and that our sender addresses are not regarded as a source of unwanted email.

Retention: an address remains on the suppression list until we remove it. We do so if you ask us to; an informal email to legal@nxsflow.com is sufficient. After that you can receive our emails again.

6. Your nxsflow account

For some of our products we offer an nxsflow account. It is one account for every product that uses it: you sign in centrally at id.nxsflow.com, and we tell the product concerned who you are. Having an account is voluntary. Without one you cannot use the areas that require signing in; no disadvantage arises for the rest of your use of our websites and products.

Unlike a mere sign-in, the account persists after you sign out, until you have it deleted (see "Deletion" below).

How you sign in

• With Google: Google transmits to us your email address, whether Google has verified that address, the name you have stored there, and an identifier of your Google account. We request nothing more from Google. Signing in also creates a process at Google itself, over which we have no influence; Google's own privacy policy applies to it. If you enter an email address on our sign-in page that belongs to a Google account, we pass it on to Google so that Google can suggest the right account.
• With email address and password: we store your email address and, if you provide it, your name. Your password is stored only in a form from which it cannot be recovered. To confirm your address and to reset your password, we send you emails containing a code. If you set up a second factor (one-time codes from an authenticator app), we store the secret it requires. For accounts with administrative rights this second factor is mandatory.

If further ways of signing in are added, we will extend this section before we offer them.

Accounts created by us: an account with email address and password can also be created for you by us. In that case we enter your email address and, where applicable, your name; these details then come from us, not from your own registration. When you first sign in, you set a password of your own.

What is stored with your account

• your email address and its verification status and, where applicable, your name,
• a randomly assigned account identifier,
• when signing in with Google, the identifier of your Google account; when signing in with a password, the sign-in data described above,
• group memberships, where you have been granted administrative rights in one of our products or we have enabled you for a product,
• the data of your current sign-ins: when and by which method you signed in, and which applications you have allowed access.

We store neither your IP address nor an identifier of your browser or device with your account.

Who learns of it

When you sign in to one of our products, we transmit to it your account identifier, the sign-in method and, where the product requests them, your email address and its verification status, your name and your group memberships.

Enabling for a product: some products are open only to accounts we have enabled for them; this currently applies to the nexflow.it web app. We grant this by assigning your account to a group. On every sign-in the product automatically checks whether your account belongs to that group and lets you in only if it does. No assessment of you as a person is involved; all that counts is the assignment we have made.

You can also connect third-party applications to your account, for example an AI assistant that accesses one of our products on your behalf. Such an application receives data only after you have expressly consented, and then only your account identifier, your email address and its verification status and your name, never your group memberships. What the application does with them is governed by its provider; that provider's privacy policy applies.

Retention periods

• Account: it persists until you have it deleted. There is no automatic deletion after inactivity.
• Account data held by the sign-in service: the sign-in service keeps a copy of your account data (identifier, email address, name, groups) in order to transmit it to the products. It is renewed with every sign-in and deleted automatically if you have not used the account for 400 days. The account itself is not affected.
• Staying signed in: your sign-in at the sign-in service ends when you sign out, at the latest 30 days after your last visit there. So that a product can keep you signed in without signing in again, it receives a refresh token. It is valid for 30 days and is replaced by a new one each time it is used. For this purpose the nexflow.it web app keeps one entry per sign-in containing the refresh token and the account data transmitted (identifier, email address, name, groups, sign-in method). It is deleted when you sign out of the web app in that browser or when your account is deleted (see "Deletion" below); there is no other time limit. If you do not sign out, for example because your sign-in expires or the cookie is lost from your browser, the entry remains, including the refresh token and account data. If a renewal of the sign-in fails, it is marked as expired but not deleted.
• A sign-in in progress: the intermediate state is kept for at most 10 minutes and then deleted automatically.
• Logs: the sign-in service logs errors and administrative actions, for troubleshooting and to detect abuse. For administrative actions they contain the account identifier of the acting and of the affected person. The logs are deleted after 30 days.
• Backups: deleted entries of the sign-in service can still be restored from its backup for up to 35 days after their deletion and are permanently deleted after that.

Deletion

You can request the deletion of your account at any time: by email to legal@nxsflow.com or, once available, in your account settings.

We block your account immediately, end all sign-ins and revoke the access of all connected applications. Within 30 days our products delete their data relating to your account; after that we delete the account itself. Until then you cannot register again with the same email address. Afterwards we keep a record of the deletion for 30 days that contains, besides your account identifier, only technical details of the operation such as timestamps and check values, no email address.

Deletion also covers the data you have created with this account in our products, at nexflow.it the content of the web app including the history of changes (section 7) and the entries of your sign-ins there and, where you use them, editorial calendars and posts, images and a connected LinkedIn access. Deleted entries can still be restored from our backups for up to 35 days after their deletion and are permanently deleted after that. We delete a connected LinkedIn access on our side; you can revoke it with LinkedIn immediately in your LinkedIn settings, otherwise it expires there by itself. Posts already published on LinkedIn remain there until you delete them on LinkedIn.

Purposes and legal bases

Purpose: maintaining your account, signing you in to our products, and determining whether you may access an area.

Legal basis: Art. 6(1)(b) GDPR (performance of the usage agreement you enter into by creating the account). The logs and the second factor for administrative accounts serve protection against unauthorised access: Art. 6(1)(f) GDPR. Our legitimate interest is to protect accounts — especially those with administrative rights — against being taken over by unauthorised persons, and to be able to find and fix faults in the sign-in service. Disclosure to a third-party application is based on your consent, Art. 6(1)(a) GDPR. You can withdraw it at any time with effect for the future; an informal email to legal@nxsflow.com is sufficient. The lawfulness of the disclosure made until then is not affected.

Administration area of nxsflow.com

Independently of the nxsflow account, nxsflow.com has an administration area of its own. It is open only to people from our company, who sign in with Google. Google transmits to us the same details as described above. We store them for the duration of the signed-in session and evaluate only the email address and its verification status. The logs of this area are deleted after 30 days.

7. When you use our software

What we receive of your content depends on the product.

Desktop applications

Our desktop applications process your content locally on your device as a matter of principle. We receive none of it — apart from the details described in section 4 for downloads and update checks.

Differences arise for synchronisation between several devices:

nexus-flow provides a synchronisation mechanism that you set up yourself. If you choose a PostgreSQL database with a provider of your choosing, your data resides with that provider. We do not operate that database, have no access to it and are not the controller for it under data protection law; the privacy policy of the provider you selected applies. Choosing the provider and securing access to it are your responsibility.

manufakt.io uses nexus-flow under the hood but offers its own synchronisation, operated by us. If you use it, we store the synchronised content with us, solely in order to synchronise it between your devices. The legal basis is Art. 6(1)(b) GDPR (performance of the usage agreement). In addition, what is set out below under “Your content in the web app and in the synchronisation” applies to this content, and section 10 applies to where processing takes place and who receives the data. So that the synchronisation knows which devices are connected, each device registers with a device identifier and its device name. The device identifier is generated randomly on the device when first needed, stored there and read at every synchronisation; this is strictly necessary for the synchronisation you want to use (Section 25(2) no. 2 TDDDG). We store the device identifier and device name together with the time the device was last seen, and delete these details 30 days after that. A device name often contains your name. The legal basis is Art. 6(1)(b) GDPR. The logs of the synchronisation contain the identifier of the synchronised data set and technical details of the operation, no account identifier, and are deleted after 30 days.

The nexflow.it web app

The web app at app.nexflow.it stores everything you create in it with us; there is no storage solely on your device. Only those whose nxsflow account we have enabled for it have access (section 6).

Data processed:

• your content: areas of life, notes with title, labels, links and text, goals, projects, actions and people you create,
• the history of every change: what was changed, your account identifier as its author and the time,
• an identifier of your data set that is formed from your account identifier,
• the data of your sign-in (section 6).

Changes are transmitted over a persistent connection between your browser and our service as soon as you make them.

Purpose: solely to provide you with the functions of the web app. We do not analyse your content, do not use it for training and do not pass it into any call to an AI model.

Legal basis: Art. 6(1)(b) GDPR (performance of the usage agreement); for special categories and for other people's data see below, “Your content in the web app and in the synchronisation”.

Recipients: no one other than our hosting provider (section 10).

Retention: your content and the history of changes are stored without a fixed period for as long as your account exists; for deletion see section 6. Excepted from this are details removed after a withdrawal of your consent or after an objection by a recorded person: they are also removed from the history within 30 days (see below).

Logs: the web app logs errors and technical operations with the identifier of your data set, without your content and without your IP address. The logs are deleted after one year. The legal basis is Art. 6(1)(f) GDPR; our interest is to find faults in the web app and to detect misuse. We need one year because some faults and patterns of misuse occur only rarely and become recognisable only over a longer period.

Your content in the web app and in the synchronisation

What is set out here applies to the content of the nexflow.it web app and to the content you synchronise through the manufakt.io synchronisation operated by us.

Our role: for this content we are the controller within the meaning of the GDPR. Both offerings are currently aimed at private individuals. Businesses that need a data processing agreement, please contact legal@nxsflow.com.

Legal basis for your own content: Art. 6(1)(b) GDPR (performance of the usage agreement); for special categories, the next paragraph applies.

Special categories of personal data: your content may contain details that belong to the special categories of personal data, for example about your health or your religion. For such details about yourself, the legal basis is your explicit consent (Art. 9(2)(a) GDPR), solely for the purpose of storing and displaying them for you. The nexflow.it web app asks for this consent with a separate box that is not pre-ticked. Consent is voluntary: you can also use the web app without it; in that case we ask you not to enter any such details. The manufakt.io synchronisation does not ask for such consent; do not synchronise any such details through it. You can withdraw your consent at any time with effect for the future, as easily as you gave it: in the web app or by an informal email to legal@nxsflow.com. The lawfulness of the processing until the withdrawal is not affected. After a withdrawal you remove such details from your content yourself; within 30 days they are then also removed from the history of changes of the web app (see above). Your account and your other content remain.

Other people's data: in your content you can record other people; in the web app, for example, by creating people, mentioning them in notes and recording that you are waiting for someone. About these people we then process what you enter, for example their name, mentions and relationships, and what you write about them. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to be able to offer the web app and the synchronisation as tools with which users organise their plans and notes, including the people they deal with. We protect the interests of the people concerned by making these details accessible only to the user who entered them, not analysing them and passing them on to no one other than our hosting provider. Do not enter details about other people that belong to the special categories, for example about a relative's health: your consent covers only details about yourself.

Information for people recorded in this content (Art. 14 GDPR): if a user has created or mentioned you in the nexflow.it web app, or recorded you in content they synchronise through the manufakt.io synchronisation, we process the details they enter about you, for example your name, mentions and relationships, and what they write about you. The data comes from that user, not from you. Purpose, legal basis and our legitimate interest are set out in the previous paragraph. Apart from us, the only recipient is our hosting provider (section 10). The details are stored without a fixed period, at most for as long as that user's account exists (section 6). If your objection succeeds, your details are removed from this content and, within 30 days, also from the history of changes. We could notify you individually only by analysing our users' content, which we do not do; we therefore make this information publicly available here (Art. 14(5)(b) GDPR). You have the rights set out in section 12, including the right to object to the processing and the right to lodge a complaint with a supervisory authority.

8. Purposes and legal bases

The logs described in sections 3 and 4 serve undisturbed and secure operation (error analysis, abuse detection) and reach measurement: how often our pages are opened, how often our software is downloaded and checked for updates, and how many distinct installations are discernible in the process. The installation identifier (section 4) additionally serves to secure our update service. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to detect and remedy faults and attacks on our websites, downloads and updates, to be able to attribute requests to the update service unambiguously, and to know how often our offerings are used in order to shape them accordingly and assess how they are developing. We need the IP address in the access log in order to attribute attacks and misuse to a source and fend them off. Because such incidents are often noticed only after a delay, we keep the access log for up to 90 days so that they can still be investigated afterwards.

The protection against excessive requests (section 10) is likewise based on Art. 6(1)(f) GDPR. Our legitimate interest is to keep our websites and services available to everyone and to fend off attacks and mass automated requests.

The legal bases for the contact form, emails to us, the nxsflow account, synchronisation operated by us and the nexflow.it web app are stated in the respective sections.

9. Cookies, browser storage and storage on your device

For an ordinary visit to our websites we set no cookies and place nothing in your browser's storage. The logging described in section 3 works without them.

We set cookies and entries in your browser's storage in three cases only, and all of them are strictly necessary for the service you have expressly requested to work (Section 25(2) no. 2 TDDDG):

• When signing in to your nxsflow account (section 6) at id.nxsflow.com: short-lived cookies secure a sign-in in progress, including the path to Google and back, and expire after 10 minutes at the latest. A session cookie refers to your sign-in at the sign-in service. It ends when you sign out, at the latest 30 days after your last visit there. When you sign in with Google, the sign-in service of our hosting provider (section 10), through which we connect to Google, also sets short-lived cookies. These cookies arise only once you begin to sign in. If you choose a language there through the language menu, we record that choice for one year in a cookie named nxs_lang. It contains only the language.
• When signing in to the administration area of nxsflow.com (section 6): a short-lived cookie securing the path to Google and back, which expires once signing in completes, and a session cookie referring to your signed-in session. The session ends when you sign out; independently of that, the cookie expires in the browser after 30 days at the latest.
• In the nexflow.it web app (section 7) at app.nexflow.it: a cookie securing a sign-in in progress, which expires after 10 minutes, and a session cookie referring to your sign-in to the web app, which expires after 30 days at the latest. While you sign in, the web app places check values of the sign-in and the page you return to afterwards in your browser's session storage; these entries are used for at most 15 minutes and end at the latest when the window is closed. In your browser's local storage the web app keeps identifiers of newly created entries until the corresponding note has taken them over.

Outside the browser, our programs place identifiers on your device only where sections 4 and 7 describe it: the installation identifier for update checks and the device identifier of the synchronisation.

10. Hosting and data sharing

Our websites and the services we operate run on Amazon Web Services (AWS). AWS processes the data described here on our behalf as a processor.

Where the data is stored: in AWS data centres in Germany — the access logs as well as the data submitted through the contact form, emails to our addresses at nexflow.it and manufakt.io, which a central mail intake receives on our behalf (section 5), the data of your nxsflow account, the content of any synchronisation operated by us, the content of the nexflow.it web app and what our software for evaluating emails stores (section 5). Where we evaluate emails with our own software (section 5), the AI model used for this runs in AWS data centres in the EU, not necessarily in Germany; AWS operates it for us, and the providers of the model do not receive the emails. The emails for confirming your address and resetting your password (section 6) and the emails of the manufakt.io and nexflow.it waiting lists (section 5) are likewise sent by AWS from there; the suppression list of our mail sending service is kept there too (section 5).

How pages, downloads, the sign-in service and the nexflow.it web app reach you: we deliver through a worldwide content delivery network operated by AWS. Your request is therefore not received in Germany but at the location technically closest to you; if you reach us from outside the EU, that is a location outside the EU. For the duration of the request your IP address is necessarily processed there — without it no response could be delivered to you. It is not stored there; what enters the access log is set out in section 3. The only thing cached at those locations is our own content. Depending on your location, your request may therefore also be processed outside the EU.

Emails to addresses at nxsflow.com: these are received and stored for us by Google Ireland Limited (Google Workspace) as a processor. This includes everything you write to our data protection address, replies to the emails of the nexflow.it and manufakt.io waiting lists and the reports to dmarc@nxsflow.com (section 5). Google processes these emails in the countries in which Google or its subprocessors maintain facilities, including outside the EU, in particular in the USA. Service providers that support Google with support cases receive access to this content only if we grant it in a support case.

Transfers to third countries: transfers to the USA, with AWS as with Google, are based on the European Commission's adequacy decision on the EU-US Data Privacy Framework (Art. 45 GDPR); AWS is certified under it through Amazon.com, Inc., Google through Google LLC, which acts as a subprocessor of Google Ireland Limited. For transfers to other countries without an adequacy decision — and to the USA, should the Data Privacy Framework cease to apply — the European Commission's standard contractual clauses of 2021 apply, as agreed in our data processing agreements with AWS and Google (Art. 46(2)(c) GDPR). You can obtain a copy of these safeguards on request to legal@nxsflow.com.

Protection against excessive requests: the sign-in service (section 6), the websites manufakt.io and nexflow.it and the nexflow.it web app are additionally protected against attacks. This protection compares the IP address of each request with a list maintained by AWS of addresses known to be sources of attacks, and counts requests per IP address. If a request comes from an address on that list, or an IP address sends more requests than the set limit allows, the protection automatically rejects the request; once the number of requests is below the limit again, they are accepted again. No assessment of you as a person is involved. No requests and no IP addresses are stored in the process, only aggregate counts without any personal reference.

Beyond AWS and Google as processors, no disclosure to third parties takes place, except where we are legally obliged to do so, to Google when you sign in with Google, and to applications you have allowed to access your account (both section 6). What applies to a database you selected yourself is set out in section 7.

11. Retention

The access logs (sections 3 and 4) are deleted automatically after 90 days at the latest. The installation identifiers (section 4), the logs relating to the nxsflow account (section 6) and the logs relating to the manufakt.io synchronisation (section 7) are deleted after 30 days, the logs of the nexflow.it web app after one year (section 7). What our software for evaluating emails stores is deleted at the latest 90 days after it was last used, its logs after 30 days (section 5). For the other processing operations, the periods are stated in the respective sections.

12. Your rights

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR): at any time with effect for the future, for example for special categories in the nexflow.it web app (section 7) and for third-party applications (section 6)

To exercise your rights, please contact: legal@nxsflow.com

Your right to object

You have the right to object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest (Art. 6(1)(f) GDPR, Art. 21 GDPR). This covers the logs of our websites, downloads and services (sections 3, 4, 6 and 7), the installation identifier, for security as well as for counting installations (section 4), the second factor for administrative accounts (section 6), the processing of other people's data in the nexflow.it web app and in the manufakt.io synchronisation (section 7) — the people concerned there have this right too —, the protection against excessive requests (section 10), the handling of emails to us, including their evaluation with our own software, where they do not concern a contract, and the suppression list of our mail sending service (both section 5). If you object, we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. An informal email to legal@nxsflow.com is sufficient.

Complaint

You have the right to lodge a complaint with the competent supervisory authority:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219
10969 Berlin
https://www.datenschutz-berlin.de

13. Changes to this privacy policy

We reserve the right to adapt this privacy policy to changes in the law or changes to our offering. The current version is always available on this page.