Skip to main content
BoxFlow

Privacy Policy

Last updated: July 2026

This English translation is provided for convenience only. The German version is legally binding.

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Syntriq GmbH

c/o Rosenboom Systems

Frankfurter Str. 148

51147 Cologne

Germany

Phone: +49 2203 2900218

Email: hello@box-flow.de

Represented by the managing directors Patrick Rosenboom and Thies Jensen

A data protection officer has not been appointed, as there is no legal obligation to do so.

2. General information and mandatory disclosures

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. Personal data is any data by which you can be personally identified.

3. Your rights

You have the right at any time:

  • to request information about your personal data processed by us pursuant to Art. 15 GDPR,
  • to request the immediate rectification of inaccurate personal data or the completion of your personal data stored by us pursuant to Art. 16 GDPR,
  • to request the erasure of your personal data stored by us pursuant to Art. 17 GDPR, unless statutory retention obligations prevent this,
  • to request the restriction of the processing of your personal data pursuant to Art. 18 GDPR,
  • to receive your personal data in a structured, commonly used and machine-readable format pursuant to Art. 20 GDPR (data portability),
  • to withdraw consent once given at any time with effect for the future pursuant to Art. 7 (3) GDPR,
  • to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, the competent authority is the supervisory authority of the German federal state of your habitual residence or of our registered office.

In addition, pursuant to Art. 21 GDPR you have the right to object to the processing of your personal data insofar as it is based on Art. 6 (1) (f) GDPR (legitimate interest).

4. Hosting

This website is hosted by an external service provider. The personal data collected on this website is stored on the host's servers.

Hetzner Online GmbH

Industriestr. 25

91710 Gunzenhausen

Germany

Hosting is used on the basis of Art. 6 (1) (f) GDPR. We have a legitimate interest in presenting our website as reliably as possible. A data processing agreement (DPA) pursuant to Art. 28 GDPR has been concluded with the host.

5. Server log files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • browser type and browser version
  • operating system used
  • referrer URL
  • host name of the accessing computer
  • time of the server request
  • IP address

This data is not merged with other data sources. It is collected on the basis of Art. 6 (1) (f) GDPR to ensure the technically error-free operation of the website.

6. Cookies and consent (consent tool)

Our website uses cookies. Cookies are small text files that are stored on your device by your browser.

Cookies that are not technically necessary are only used with your prior consent (opt-in). For this purpose we use a self-developed cookie consent tool, which asks you on your first visit which categories of cookies you agree to. Non-essential cookies (e.g. analytics cookies such as Google Analytics) are only loaded and set after your active consent.

Where consent has been given, the legal basis for processing your personal data using cookies is Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TTDSG, or § 25 (2) TTDSG for technically necessary cookies. You can withdraw consent once given at any time with effect for the future, e.g. via the settings of our cookie consent tool or your browser.

7. Contact form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

This data is processed on the basis of Art. 6 (1) (b) GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this has been requested.

The data you enter in the contact form will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected.

8. Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Analytics uses cookies that enable an analysis of your use of our website. The information generated by the cookie about your use of this website is usually transferred to a Google server and stored there. This may also include transfers to the USA.

Google Analytics is used on this website exclusively on the basis of your consent (Art. 6 (1) (a) GDPR, § 25 (1) TTDSG). Consent is obtained via our cookie consent tool; without your consent, Google Analytics is not activated. You can withdraw your consent at any time.

Data transfers to the USA are based on the standard contractual clauses issued by the EU Commission and/or an applicable adequacy framework (e.g. the EU-US Data Privacy Framework), if and insofar as Google relies on it.

For more information on how Google Analytics handles user data, see Google's privacy policy: https://policies.google.com/privacy?hl=en

9. Google Fonts (locally hosted)

This website uses so-called Google Fonts for the uniform display of typefaces. The Google Fonts are installed locally on our server. No connection to Google servers is established and no data is transmitted to Google.

10. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the browser address line changing from “http://” to “https://” and by the lock symbol in your browser bar.

11. Changes to this privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to reflect changes to our services in the privacy policy. The new privacy policy will then apply to your next visit.

Back to homepage