Privacy Policy (Datenschutzerklärung)

This English version is provided for convenience. Only the German version is legally binding.

1. Controller (Verantwortlicher)

Flashbooks GmbH
trading as: Flashbooks
Sebastian-Fischer-Weg 6
83071 Stephanskirchen
Represented by: Tim Schreffl
Email: info@flashbooks.org

2. General information on data processing

We process personal data only insofar as this is necessary to provide this website, to answer enquiries and to create and deliver your Flashbooks. The legal bases are Art. 6(1)(b) of the General Data Protection Regulation (GDPR, DSGVO) (contract and pre-contractual measures), Art. 6(1)(c) GDPR (legal obligations), Art. 6(1)(f) GDPR (legitimate interest) and, where we ask for it, Art. 6(1)(a) GDPR (consent).

3. Hosting and server log files

This website is hosted by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany. When the website is accessed, the following data are collected automatically: IP address, date and time, URL accessed, referrer, browser and operating system. The processing is carried out to ensure stable and secure operation (Art. 6(1)(f) GDPR (DSGVO)). A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider. Log files are deleted after 14 days at the latest.

4. Enquiry form

If you contact us via the “Request a team book” form, we process your first name, surname, email address, telephone number, club / team and, if provided, your role in the club and your message. We use the data to answer your enquiry and to make you an offer (Art. 6(1)(b) GDPR).

The enquiry is transmitted to us by email and passed on for internal processing to the automation service Make (Celonis SE or Make.com, processing in the EU region). To protect against misuse, the server briefly stores a technically necessary session cookie when the form is submitted, which is deleted at the end of the session (Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG)).

We delete the enquiry data as soon as they are no longer required for processing the enquiry and no statutory retention obligations preclude deletion.

5. Online questionnaire (Fillout)

To start your Flashbook and for the personal questionnaires, we use the form service Fillout (Fillout, Inc., USA). On the “Start without obligation” page, the questionnaire is loaded from Fillout's servers; in the process, your IP address is transmitted to Fillout. We process the information provided in the questionnaire in order to create your Flashbook (Art. 6(1)(b) GDPR). Further information: https://www.fillout.com/privacy

6. Orders and payment

To process an order, we process name, address, email, telephone number and payment information. Payments are processed via external payment service providers (e.g. Stripe, PayPal, Klarna). Their privacy policies apply.

7. Images and design

The images you send us for your Flashbook are stored and processed on the design platform Canva (Canva Pty Ltd, Australia). Further information on the storage and processing of image data by Canva can be found in Canva's privacy policy.

8. Communication via WhatsApp

We use WhatsApp Business (Meta Platforms Ireland Limited) as a communication channel. Its use is voluntary. WhatsApp's privacy policy applies: https://www.whatsapp.com/legal/privacy-policy-eea

9. Fonts and videos

The fonts and videos on this website are loaded directly from our server. No connection is made to Google or any other third-party providers.

10. Cookies and tracking

This website does not set any analytics or marketing cookies and does not use any tracking. The only exception is the technically necessary session cookie described in section 4, which is set when the form is submitted.

11. Rights of data subjects

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You may withdraw any consent you have given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority, for example the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach.

12. Amendments

This privacy policy may be amended as required.

Last updated: October 2026