Legal
Privacy Policy
Last updated: July 13, 2026
We appreciate your interest in our company. Protecting your personal data is important to us. Below we inform you comprehensively about how we handle your data when you use this website, in accordance with the EU General Data Protection Regulation (GDPR).
1. Data Controller
iFlow 4.0 Consulting GmbH (Florian Ehrbar Consulting)
Altrottstrasse 31, 69190 Walldorf, Germany
Represented by: Florian Ehrbar (Founder, Managing Director & CEO)
2. Contact Information
Email: info@florianehrbar.com
Phone / WhatsApp: +49 162 6081308
3. Categories of Personal Data
We process the following categories of personal data:
- Contact details (name, company, email address) you provide via our contact form
- The content of your message to us
- Technical data (IP address, browser type, operating system, referrer URL, date and time of access) automatically collected by our hosting provider on every page load
- Anonymized, cookieless usage statistics (see section 9)
4. Purpose of Processing
We process your data to respond to your inquiries, to provide and technically secure this website, and to understand and improve website usage in anonymized form.
5. Legal Basis (GDPR Article 6)
- Art. 6(1)(b) GDPR– processing necessary for the performance of a contract or to take pre-contractual steps (e.g. handling your contact form inquiry)
- Art. 6(1)(f) GDPR– processing based on legitimate interests (e.g. technical operation and security of the website, anonymized traffic measurement)
- Art. 6(1)(a) GDPR– consent, where required for specific processing activities (e.g. optional cookie categories)
6. Cookies
Cookies are small text files stored on your device. This website uses a cookie consent banner that lets you manage your preferences. You can change your choice at any time via “Cookie Settings” in the website footer.
Essential Cookies
These cookies are required for the technical operation of the website (e.g. storing your theme preference and cookie consent choice) and cannot be disabled. Legal basis: Art. 6(1)(f) GDPR.
Analytics Cookies
This website uses Vercel Web Analytics, which is cookieless by default and does not store persistent identifiers across users (see section 9). This section applies only if a cookie-based analytics service is enabled in the future. That category is only active with your consent.
Marketing Cookies
This category is not currently active. No marketing or advertising cookies are presently used on this website. This section applies only if such a service is enabled in the future.
7. Consent Management
On your first visit, you are asked via a banner to consent to the use of non-essential cookies. Your choice is stored locally in your browser (local storage) and can be withdrawn or changed at any time via the “Cookie Settings” link in the footer.
8. Contact Forms and Email Communication
When you contact us via the contact form or by email, we process the data you provide (name, company, email address, message content) to handle your inquiry. Legal basis: Art. 6(1)(b) or (f) GDPR.
Form submissions are relayed for internal notification purposes via a webhook to our Slack workspace. Provider: Slack Technologies, LLC / Slack Technologies Limited (processor). Your data is not used for marketing purposes and is not shared with third parties beyond handling your inquiry.
9. Server Log Files and Hosting
Our hosting provider automatically collects and stores information in server log files that your browser transmits automatically (IP address, date and time of request, browser type, operating system, referrer URL). This data serves the technical security and stability of the website and is not combined with other data sources. Legal basis: Art. 6(1)(f) GDPR.
10. Security Measures & SSL Encryption
For security reasons and to protect the transmission of personal data, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the “https://” prefix in your browser’s address bar.
11. Third-Party Processors
Vercel Web Analytics
We use Vercel Web Analytics for anonymized, cookieless traffic measurement. The service does not build user profiles or use persistent identifiers. Provider: Vercel Inc., USA. Legal basis: our legitimate interest in optimizing our website (Art. 6(1)(f) GDPR).
Hosting Provider
This website is hosted via Vercel Inc. The provider processes data on our behalf to deliver the website.
Google Analytics
This section applies only if this service is enabled. Not currently in use.
Google Tag Manager
This section applies only if this service is enabled. Not currently in use.
Google Ads
This section applies only if this service is enabled. Not currently in use.
Meta Pixel
This section applies only if this service is enabled. Not currently in use.
LinkedIn Insight Tag
This section applies only if this service is enabled. Not currently in use.
Microsoft Clarity
This section applies only if this service is enabled. Not currently in use.
Embedded YouTube Videos
This section applies only if this service is enabled. Not currently in use.
Google Maps
This section applies only if this service is enabled. Not currently in use.
12. International Data Transfers
Some of the service providers we use (e.g. Vercel Inc., Slack Technologies) are based in the United States. Where data is transferred to third countries, we ensure an adequate level of data protection, in particular through the European Commission’s Standard Contractual Clauses (Art. 46 GDPR) or comparable safeguards provided by the respective provider.
13. Data Retention
We retain personal data only for as long as necessary for the respective purpose, or as required by statutory retention obligations. Contact inquiries are deleted once they have been fully resolved and no statutory retention obligations apply.
14. Your Rights as a Data Subject
- Right to Access (Art. 15 GDPR)
- Right to Rectification (Art. 16 GDPR)
- Right to Erasure (Art. 17 GDPR)
- Right to Restrict Processing (Art. 18 GDPR)
- Right to Object (Art. 21 GDPR)
- Right to Data Portability (Art. 20 GDPR)
- Right to Withdraw Consent (Art. 7(3) GDPR)
- Right to Lodge a Complaint with a supervisory authority (Art. 77 GDPR)
To exercise these rights, please contact us at info@florianehrbar.com.
15. Automated Decision-Making
We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
16. Changes to this Privacy Policy
We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements, or to reflect changes to our services in the privacy policy. The new privacy policy will apply on your next visit.