Privacy notice
Privacy
This privacy notice applies to the GlasFlow website. The website provides information and allows visitors to request a free introductory discussion, register as a supplier and book appointments.
Data controller
Jordin Schurer and Andreas Fröhlich
GlasFlow, a product in development
Tarnowitzer Str. 3
81929 Munich
Germany
Contact: [email protected]
Supplier registration and public listing approval
When you register as a supplier free of charge, we process your company name, website, company type, contact person’s name and role, business contact details, and information about products, applications, delivery areas, project sizes, response times and any optional technical details. We use this information to review the supplier profile, resolve questions and prepare for potential participation.
Following a successful review, a separate request for public listing approval can be submitted. We process the registration reference, company, approving person, business email address, supplied logo and documented permission to use the company name and logo on glasflow.ai. Approval does not automatically result in publication; we first check the association and presentation manually.
Form data is sent to GlasFlow via Cloudflare Pages Functions. We use Resend for internal notifications and acknowledgements of receipt. The data entered, and the logo file for listing approvals, are sent to Resend. Information about the provider and transfers to third countries is provided in the section on introductory enquiries and contact.
Visiting the website
When you visit the website, we process data technically necessary to deliver the site and operate it securely. This may include your IP address, the date and time of access, browser type, operating system and pages visited.
Introductory enquiry form, contact and appointment booking
The introductory enquiry form collects your company, first and last name, business email address, role or job title, trade, timing of your next glass enquiry, current working methods, main current challenge and, optionally, the number of suppliers you contact. We use this information solely to process your enquiry and arrange a personal introduction.
When submitted, the form data is transmitted over an encrypted connection to a server-side Cloudflare Pages function. An internal notification is then sent exclusively to GlasFlow. No automated confirmation or marketing email is sent to the person making the enquiry.
We use Resend, a service provided by Plus Five Five, Inc., based in the USA, to send internal notifications. The form data and technical delivery information are transmitted to Resend. Resend processes this data as a processor; for transfers to the USA, the provider provides safeguards including the EU Standard Contractual Clauses and the EU–US Data Privacy Framework. Further information is available in the Resend privacy policy and the Data Processing Addendum.
After submitting an enquiry, you may choose to open the calendar link. This takes you to an external Google service. Google’s privacy notices also apply when you open the link and book an appointment. Booking an appointment is not required to submit an enquiry.
Analytics, tracking and cookies
We record selected interactions directly through our website to understand its use in aggregate. These include perspective selection, interactions with navigation, sections, FAQs and contact buttons, form starts, form fields reached or completed, and predefined selections. For supplier registrations, these also include selected trades and product categories.
Free-text entries, company names, personal names, email addresses, telephone numbers, roles and websites are not stored as analytics data. We record only predefined event names and categories. We do not use session recordings, heatmaps, advertising profiles or features intended to identify individuals.
Our analytics do not set cookies. A random identifier is stored in session storage for the lifetime of the open browser tab, allowing consecutive form steps to be grouped together. This identifier contains no contact details and is discarded when the tab is closed. IP addresses and user agents are not stored in our analytics database.
Analytics data is stored in the website’s Cloudflare database, deleted after 180 days and displayed only in a protected internal dashboard. This analysis is based on our legitimate interest under Article 6(1)(f) GDPR in assessing our website’s reach and clarity. We respect browser “Do Not Track” signals.
You can also opt out of analytics for this browser at any time:
Anonymous website analytics are disabled for this browser.
Purposes and legal bases
We process data to provide the website, respond to introductory and contact enquiries, review supplier registrations and listing approvals, and arrange appointments. Contact through the introductory enquiry form is based on the explicit consent given there. Depending on the context, other processing may be based on pre-contractual communication, performance of a participation agreement or legitimate interests.
Your data protection rights
Under the GDPR, data subjects have rights including access, rectification, erasure, restriction of processing, objection and the right to lodge a complaint with a competent supervisory authority. For private-sector organisations in Bavaria, this is generally the Bavarian State Office for Data Protection Supervision (BayLDA).