Privacy

Trout UG (haftungsbeschränkt)
Forellenweg 8a
94428 Eichendorf
Germany
Email: contact@flits.so

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, acting as a processor. When you open a page, the host necessarily processes your IP address, the time, the address requested, the referring page and your browser's identification, to deliver the page and to protect the service against abuse. The host keeps these logs for a short time only. Vercel is certified under the EU-U.S. Data Privacy Framework, which covers the transfer to the USA. Legal basis: Art. 6(1)(f) GDPR — our interest in a secure, working website.

Previews and the usage data below are stored with Supabase, also as a processor.

We want to know whether the business looked at the preview we built for it. For each page view of a preview and its “claim” page we record: that it was viewed and when; visible time and scroll depth; clicks on contact buttons (which button only); device type and browser/OS family (e.g. “Safari/iOS”, not the full user agent); city and country derived by our host from your IP address — we do not store the IP address itself; the referring domain and whether the link came from our letter or QR code. A random id groups the events of a single page view; it lives only in memory and is never stored on your device. Automated fetches (link previews, mail scanners) are logged with the scanner's name so they can be excluded.

Legal basis: Art. 6(1)(f) GDPR. We keep this data until the preview is deleted, at most 6 months after it was created. You can object at any time by emailing contact@flits.so.

The business details in a preview come from publicly available sources (map listings, the existing website, public social media profiles). We use them to build the preview and offer it to the business by post (Art. 6(1)(f) GDPR). Previews are hidden from search engines and go offline automatically on the date given in our letter, or immediately if you object.

Links to WhatsApp, Google Maps, Instagram or booking services are ordinary links: those services receive data from you only once you click them.

TheSiteDesk builds a website for a business first and then shows it to them. To do that we use business contact details that are already published: chiefly OpenStreetMap, which is open data licensed under ODbL, and the business’s own website. We do not buy lists, and we do not guess or pattern-match email addresses.

For a company, business contact details are usually not personal data at all. For a sole trader they can be. Where they are, we rely on legitimate interests under Art. 6(1)(f) GDPR: offering a service directly relevant to a business that visibly lacks it. You can object at any time, and you do not have to give a reason.

Use the unsubscribe link in any message, or email unsubscribe@thesitedesk.com. We action it the same day.

We keep a suppression record afterwards. That is deliberate: it is the only way to guarantee we never contact you again, including if your details resurface in a later data refresh. It holds the minimum needed to recognise you and nothing else.

For a business we have contacted: name, address, phone, email, website and what we recorded about that website, plus a log of what we sent and when. If you do not become a customer we remove it once the campaign is closed out, except for the suppression record. For customers we keep what the contract and German tax law require, which for invoices is ten years.

Processors acting on our instructions: hosting (Vercel), email delivery, payments (Stripe), and postal print-and-mail providers. Some are outside the EU, in which case transfers rely on the European Commission’s Standard Contractual Clauses. Our emails carry no tracking pixels.

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), erased (Art. 17) or restricted (Art. 18), to data portability (Art. 20), and to object at any time to processing based on legitimate interests (Art. 21). A message to contact@flits.so is enough.

You may also lodge a complaint with a data protection supervisory authority, in particular in the member state where you live or work. For companies based in Bavaria this is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.