Data Protection Declaration according to Art. 13 GDPR
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Reflyne UG (limited liability) – in formation
Represented by:
Calvin Muthreja
Contact:
Email: info@reflyne.com
The protection of your personal data has the highest priority for us. We process personal data exclusively in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
Personal data is all information relating to an identified or identifiable natural person, such as name, email address, telephone number, or IP address.
We collect, store, and use your data only to the extent necessary to provide our website, improve our services, or respond to inquiries.
Our website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. As part of the hosting, Vercel processes technical data on our behalf that is necessary for the secure and stable operation of the website:
• IP address of the accessing device
• Date and time of the server request
• Browser type and version
• Operating system of the device
• Referrer URL (previously visited page)
Data processing is based on Art. 6 Para. 1 lit. f GDPR (legitimate interest) to ensure secure, stable, and efficient website operation. A data processing agreement in accordance with Art. 28 GDPR has been concluded with Vercel to ensure the protection of your data. Data transfers to the USA are based on the EU Commission's Standard Contractual Clauses (SCCs).
When you access our website, our system automatically collects information transmitted by your browser. These so-called server log files contain:
• IP address
• Date and time of access
• Name of the retrieved file or page
• Amount of data transferred
• Browser type and browser version
• Operating system
• Referrer URL
• Provider
This data cannot be attributed to specific persons and serves exclusively:
• To ensure smooth connection establishment
• To ensure system security
• For technical analysis in case of errors
Processing is based on Art. 6 Para. 1 lit. f GDPR. The log files are usually automatically deleted after 30 days.
If you contact us via the contact form or by email, we process your information (name, email address, message, phone number if applicable) exclusively to process your inquiry.
Legal basis:
• Art. 6 Para. 1 lit. b GDPR – for the implementation of pre-contractual measures or contract initiation
• Art. 6 Para. 1 lit. f GDPR – legitimate interest in processing customer inquiries
Your data will be deleted after processing is complete, unless there are legal retention obligations.
Our website may use cookies or similar technologies to improve the user experience, enable statistical evaluations, or ensure security-relevant functions.
Cookies are small text files that are stored on your device. They contain information that can make the user or device recognizable upon a subsequent visit.
You can set your browser to block or delete cookies at any time. However, disabling cookies may limit the functionality of the website.
Legal basis:
• Art. 6 Para. 1 lit. f GDPR – legitimate interest in a functional website
• Art. 6 Para. 1 lit. a GDPR – if consent is required (e.g., for analysis or tracking cookies)
To improve our services, we reserve the right to use analytics tools such as Plausible, PostHog, or Vercel Analytics in the future. These services collect anonymous usage statistics (e.g., page views, dwell time, click paths) without storing personal data or using cookies.
Processing is based on our legitimate interest pursuant to Art. 6 Para. 1 lit. f GDPR to better understand the use of our website and make it user-friendly.
You have the right at any time to:
• Information about your stored personal data (Art. 15 GDPR)
• Rectification of incorrect or incomplete data (Art. 16 GDPR)
• Erasure ("right to be forgotten", Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Objection to processing (Art. 21 GDPR)
• Data portability (Art. 20 GDPR)
To exercise these rights or for other data protection matters, please contact:
info@reflyne.com
If you believe that the processing of your data violates applicable data protection law, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority in North Rhine-Westphalia is:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Web: https://www.ldi.nrw.de
We employ current technical and organizational security measures (TOMs) to protect your data from manipulation, loss, unauthorized access, alteration, or destruction. These include:
• SSL/TLS encryption
• Access restrictions and authentication
• Firewalls and monitoring systems
• Regular security and system audits
Our security measures are continuously improved and adapted to the current state of technology.
We only disclose personal data to third parties if:
• This is necessary for the fulfillment of the contract
• There is a legal obligation, or
• You have expressly consented
All external service providers (e.g., hosting, email, cloud services) are contractually obligated in accordance with Art. 28 GDPR to process your data exclusively on our behalf and under strict data protection requirements.
We reserve the right to adapt this privacy policy if changes to our website, our services, or legal provisions require it. The current version is always available at www.reflyne.com/privacy.
As of: October 2025