Privacy Policy — Flow Loops Operational Workspace
Last updated: 01 May 2026
1. Data controller
The controller of your personal data is:
Holon Puzzle – Tomasz Karczewski
Block C-15, Südstraße 31, 47475 Kamp-Lintfort, Germany
VAT ID: application in progress
Email: kontakt@holonflow.app
Website: holonflow.app
2. Purposes and legal bases for processing
Contact (form / email)
If you contact us, we process your data (name, email address, message content) solely to respond to your enquiry.
Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract or handling your request).
Server logs (technical data)
The server automatically records technical data (IP address, date, time, browser type) as necessary to ensure security and stability of the website.
Legal basis: Art. 6(1)(f) GDPR (legitimate interests of the controller).
Cookies and similar technologies
The site uses only cookies that are strictly necessary for operation (e.g. WordPress session cookies, storage of your consent choice).
Legal basis: Section 25(2) No. 2 TTDPA (German Telecommunications Telemedia Data Protection Act) in conjunction with Art. 6(1)(f) GDPR.
We do not use advertising, tracking or analytics cookies without your consent.
Affiliate links
The site may contain affiliate links (e.g. to taniaksiazka.pl).
Following such a link does not change the price you pay; the operator may receive a commission that supports the service.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest — funding the service).
Embedded media and technical libraries
YouTube: Videos are embedded in privacy-enhanced mode and load only after you click “Play” (two-click solution). This involves transfer of your IP address to Google LLC (USA) on the basis of Art. 6(1)(a) GDPR. Transfers are safeguarded by EU Commission-approved standard contractual clauses (SCCs).
Google’s privacy policy: https://policies.google.com/privacy
JavaScript libraries (CDN): The site may load assets from third-party CDNs (cdnjs.cloudflare.com, cdn.jsdelivr.net) for presentation features. Loading these resources may involve technical transfer of your IP address to those operators on the basis of Art. 6(1)(f) GDPR (legitimate interests).
3. Recipients
Technical data (logs) are processed by Hostinger International Ltd. (hosting provider, servers in the EU) under a data processing agreement. We do not sell your data to third parties.
Data are not transferred to third countries outside the European Economic Area for ordinary browsing.
Data are not sold or shared for advertising purposes.
4. Storage periods
Correspondence: up to 30 days after the last message.
Server logs: up to 90 days.
5. Your rights and supervisory authority
You have the right to:
- access (Art. 15 GDPR),
- rectification (Art. 16 GDPR),
- erasure (“right to be forgotten”) (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- object to processing (Art. 21 GDPR).
Right to lodge a complaint (Art. 77 GDPR): If you believe processing infringes the GDPR, you may lodge a complaint with a supervisory authority. Given our establishment in Germany, the relevant authority is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestr. 2-4
40213 Düsseldorf
Germany
Email: poststelle@ldi.nrw.de
Website: https://www.ldi.nrw.de
You may also contact the supervisory authority in your country of residence (e.g. in Poland: President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw).
To exercise your rights, contact: kontakt@holonflow.app
6. Security
We implement technical and organisational measures including SSL/TLS encryption and regular backups.
7. Changes
We will inform you of material changes via a notice on the website.
The current version is always available at https://holonflow.app/polityka-prywatnosci/