Privacy Statements

PRIVACY STATEMENT

Hereafter, we inform you about the collection of personal data (hereinafter referred to as "data") in connection with the use of our website. Personal data is all data that can be related to you personally, such as name, address, e-mail addresses or user behaviour.

Our privacy policy is structured as follows:

I. Information about us as the responsible party
II. Your rights
III. Information on data collection
IV. Visiting our social media channels

I. Information about us as the responsible party

Responsible party according to Art. 4 (7) DSGVO is

nanoFlowcell Management AG
represented by Nunzio La Vecchia
Böndlerstrasse 10
CH-8802 Kilchberg
Telephone: +41 (44) 586 26 63
E-Mail: ir@nanoflowcell.com

II. Your rights

1. You have the right:

  • in accordance with Art. 15 GDPR to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
  • in accordance with Art. 16 GDPR to immediately demand the correction of incorrect or completion of your personal data stored by us;
  • pursuant to Art. 17 GDPR to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation on grounds of public interest, or for the establishment, exercise or defense of legal claims;
  • to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
  • pursuant to Art. 20 GDPR to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
  • to revoke your consent at any time in accordance with Art. 7 (3) GDPR. This has the consequence that we may no longer continue the data processing based on this consent for the future, and
  • complain to a data protection supervisory authority about the processing of your personal data by us in accordance with Art. 77 GDPR.

2. Right of objection:

Insofar as we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case if the processing is in particular not necessary for the performance of a contract with you, as presented by us in the following part of the privacy policy. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data. In the event of your justified objection, we will review the merits of the case and either discontinue or adapt the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

3. Right of cancellation:

If you have given us consent to process your data, you may revoke this consent at any time. Such revocation affects the permissibility of processing your personal data after you have expressed it to us.

III. Information on the collection, processing and use of data

1. Collection of personal data when visiting our website

During the mere informative use of our website, we only collect the personal data that your browser transmits to our server. We use the services of the web hosting provider Webflow to provide our website securely and efficiently. An order processing contract has been concluded for this purpose. If you wish to view our website, the following data is collected, which is technically necessary for us to display our website to you and to ensure stability and security:

  • IP-addresse
  • Date and time of inquiry
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (concrete page)
  • Access status/HTTP status code
  • Website from which the request comes
  • Browser
  • Operating system and its interface
  • Language and version of the browser software.

The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR. Unless there is a legal obligation to retain data, the data collected here will be deleted after 7 days..

2. Webflow.io

Webflow, Inc., a Delaware corporation (“Webflow,” “Company,” “us,” or “we”), provides www.webflow.com and the other websites under the webflow.com domain (collectively, the “Sites”), and our SaaS product, web design software, tools, and related services (together with the Sites, the “Service”) subject to your compliance with all the terms, conditions, and notices contained or referenced herein (the “Terms of Service” or the “Agreement”). We've tried hard to keep this Agreement as readable and straightforward as possible. We’ve also added a series of short explanations of the legal language in plain English (they all start with "Basically...") to aid in understanding, but that part isn’t legally binding. If you have suggestions that can help us improve it or any questions about this Agreement, please email us and let us know. This Agreement explains our obligations to you, and your obligations to us. Except as noted otherwise below, this Agreement is the entire Agreement between us. By using the Sites and the Service in any way, you are agreeing to comply with these Terms of Service, our Global Privacy Policy, EU & Swiss Privacy Policy, our Template Submission Guidelines, and any other legal notices or conditions or guidelines posted on the Sites.
If you have questions regarding this Agreement or about Webflow, please contact us by email at contact@webflow.com, or at: Webflow, Inc.
398 11th Street, 2nd Floor
San Francisco, CA 94103

We host our website with Webflow. The provider is Webflow, Inc, 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter: Webflow). When you visit our website, Webflow collects various log files including your IP addresses.
Webflow is a tool for creating and hosting websites. Webflow stores cookies or other recognition technologies that are necessary for the presentation of the page, to provide certain website functions and to ensure security (necessary cookies).
For details, see Webflow’s privacy policy: Global Privacy Policy, EU & Swiss Privacy Policy | Webflow 29.
The use of Webflow is based on Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in the most reliable presentation of our website. If a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: EU & Swiss Privacy Policy | Webflow 29.
Order processing. We have concluded an order processing agreement (AVV) with the provider named above. This is a contract required by data protection law, which ensures that this provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the DSGVO.

2. Use of cookies

Cookies are used when using our website. Cookies are small text files that are stored on your hard drive associated with the browser you are using and through which certain information flows to the entity that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer. We use the following cookies on our website:

a) We use technical cookies. These temporarily store the Internet access and are deleted when the browser is closed. This type of cookie does not store any information about the user. The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR.

b) Furthermore, we use cookies to understand how visitors interact with our website. For this purpose, the information obtained by the cookie used, about the use of our website, is transmitted to our server and stored so that the usage behavior can be evaluated. This information includes, for example, content viewed on the website, elements used, technical details (such as the browser used), the computer system used and details of the time of use. This process is also referred to as "tracking", i.e., tracking the potential interests of users. If we use such cookies, we will inform you again separately in our privacy policy for the tool used. We also only use such cookies after you have given us your consent to do so. The legal basis is Art. 6 para. p. 1 lit. a GDPR.

3. Cookie-Einwilligung mit Usercentrics

Diese Website nutzt die Cookie-Consent-Technologie von der Usercentrics, um Ihre Einwilligung zur Speicherung bestimmter Cookies auf Ihrem Endgerät einzuholen und diese datenschutzkonform zu dokumentieren. Hierfür nutzen wir den Dienst der Usercentrics GmbH, Rosental 4, 80331 München, Website: https://usercentrics.com/de/ (im Folgenden „Usercentrics“). Die Usercentrics GmbH wurde von uns sorgfältig ausgewählt, beauftragt, ist an unsere Weisungen gebunden und wird regelmäßig kontrolliert. Ein entsprechender Auftragsverarbeitungsvertrag wurde geschlossen.

Wenn Sie unsere Website aufrufen, werden in unserem Auftrag folgende personenbezogene Daten von der Usercentrics verarbeitet:

  • Ihre Einwilligung(en) bzw. der Widerruf Ihrer Einwilligung(en)
  • Ihre IP-Adresse
  • Informationen über Ihren Browser
  • Informationen über Ihr Endgerät
  • Zeitpunkt Ihres Besuchs auf der Website

Des Weiteren wird ein Cookie in Ihrem Browser gespeichert, um Ihnen die erteilten Einwilligungen bzw. deren Widerruf zuordnen zu können. Die Daten werden gelöscht bis Sie uns zur Löschung auffordern oder sie nicht mehr benötigt werden. Sofern Sie das Usercentrics-Cookie nicht selbst löschen, besitzt es eine Laufzeit von 60 Tagen. Der Widerrufsbeleg einer vormals erteilten Einwilligung wird für die gesetzliche Dauer von drei Jahren aufbewahrt.

Der Einsatz von Usercentrics erfolgt, um die gesetzlich vorgeschriebenen Einwilligungen für den Einsatz von Cookies einzuholen. Rechtsgrundlage hierfür ist Art. 6 Abs. 1 S. 1 lit. c DSGVO.

4. Contact inquiries

If you contact us via contact form or e-mail, the data you provide will be used to process your request. The specification of the data is necessary for processing and answering your request. Your data will be deleted if your inquiry has been answered conclusively and the deletion does not conflict with any statutory retention obligations, such as in the case of any subsequent contract processing. The legal basis for this processing is Art. 6 para. 1 lit. b GDPR.

4. Contact form

If you send us inquiries via the contact form, your data from the inquiry form including the contact data you provided there will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.
The processing of this data is based on Art. 6 (1) lit. b DSGVO, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 (1) (f) DSGVO) or on your consent (Art. 6 (1) (a) DSGVO) if this has been requested.
The data you entered in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions - in particular retention periods - remain unaffected.

5. Inquiry by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.
The processing of this data is based on Art. 6 para. 1 lit. b DSGVO, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests sent to us (Art. 6 (1) (f) DSGVO) or on your consent (Art. 6 (1) (a) DSGVO) if this has been requested.The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular legal retention periods - remain unaffected.

6. Newsletter

(1) With your consent you can subscribe to our newsletter. We will inform you about the topics made in the description of the newsletter. For this purpose, we use the email address provided by you in the consent. The legal basis is Art. 6 para. 1 p. 1 lit. a GDPR.

(2) You can revoke your consent to receive the newsletter and unsubscribe at any time. You can revoke your consent by clicking on the link provided in every newsletter e-mail or by sending a message to nanoFlowcell Management AG, Böndlerstrasse 10, CH-8802 Kilchberg, e-mail: ir@nanoflowcell.com.

(3) For sending the newsletter, we give your data to the service provider we use, Mailjet SAS (Global HQ), office and postal address Paris: 13-13 bis, rue de l'Aubrac, 75012 Paris, France. An order processing contract is in place.

(4) We would like to point out that we evaluate your user behavior when sending the newsletter. With the help of Mailjet, it is possible for us to analyze our newsletter campaigns. For example, we can see whether a newsletter message was opened and which links, if any, were clicked. In this way, we can determine, among other things, which links were clicked more often.

Mailjet also allows us to subdivide ("cluster") newsletter recipients based on various categories. In doing so, newsletter recipients can be subdivided according to age, gender or place of residence, for example. In this way, the newsletters can be better adapted to the respective target groups.

For detailed information about Mailjet's features, please refer to the following link: https://www.mailjet.de/funktion/.

For more information about Mailjet's privacy policy, please visit: https://www.mailjet.de/sicherheit-datenschutz/.

(5) The data you provide for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data that has been stored by us for other purposes remains unaffected by this.

6. Einsatz von Cloudflare

Wir nutzen das Content Delivery Network (CDN) von Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 München Deutschland (Cloudflare). Ein CDN ist ein Netzwerk aus [weltweit] verteilten Servern, das in der Lage ist, optimiert Inhalte an den Websitenutzer auszuliefern um die Sicherheit und die Auslieferungsgeschwindigkeit unserer Website zu erhöhen. Dies entspricht unserem berechtigten Interesse. Rechtsgrundlage ist Art. 6 Abs. 1 lit. f DSGVO. Für diesen Zweck können personenbezogene Daten in Server-Logfiles von Cloudflare verarbeitet werden. Cloudflare ist Empfänger Ihrer personenbezogenen Daten und als Auftragsverarbeiter für uns tätig.

7. Use of Fathom

We want to process as little personal information as possible when you use our website. That's why we've chosen Fathom Analytics for our website analytics, which doesn't use cookies and complies with the GDPR, ePrivacy (including PECR), COPPA and CCPA. Using this privacy-friendly website analytics software, your IP address is only briefly processed, and we (running this website) have no way of identifying you. As per the CCPA, your personal information is de-identified. You can read more about this on Fathom Analytics website.

The purpose of us using this software is to understand our website traffic in the most privacy-friendly way possible so that we can continually improve our website and business. The lawful basis as per the GDPR is "f); where our legitimate interests are to improve our website and business continually." As per the explanation, no personal data is stored over time.

8. Embedded Vimeo Elements

We integrate elements from Vimeo on our website to display videos. When you visit pages that display these elements, data may be transferred from your browser to Vimeo and stored there. We, however, have no access to this data. The following link will take you to the pages of Vimeo where it is explained how they handle your data:
Vimeo Privacy Policy

9. Twitter

We have integrated Twitter functions on our pages. These functions are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103 U.S.A. If you have given us your consent for data transmission to Twitter, a connection is established between your browser and the servers of Twitter through the use of cookies. If you have a Twitter account, this data can be linked to it. If you do not wish this data to be associated with your Twitter account, please log out of Twitter before visiting our site. Interactions, in particular the clicking of a "Re-Tweet" button, are also passed on to Twitter.  For the use on our website of the functions of Twitter, we obtain your consent. The legal basis is Art. 6 para. 1 lit. a GDPR.

For more information about which data is processed by Twitter and for what purposes, please see: https://twitter.com/de/privacy and point IV 1a) of this privacy policy.

10. LinkedIn

Our website use the services of the social network LinkedIn by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn").  If you have given us your consent for data transmission to LinkedIn, a connection is established between your browser and the servers of LinkedIn through the use of cookies. LinkedIn thereby collects, for example, information about the operating system, the browser, the website you previously visited (referrer URL), which websites the user visited, which offers the user clicked on, and the date and time of your visit to our website. If you have a LinkedIn account, this data can be linked to it. If you do not wish this data to be associated with your LinkedIn account, please log out of LinkedIn before visiting our site.

You can prevent the storage of cookies by setting your browser software accordingly; you can also object to the use of your data directly at LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

The legal basis for the processing is Art. 6 para. 1 lit. a GDPR.

For more information about which data is processed by LinkedIn and for what purposes, see: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy and https://www.linkedin.com/help/linkedin/ask/PPQ?lang=de and point IV 1b) of this privacy policy.

11. YouTube-Videos

(1) We have integrated YouTube videos on our website. The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

(2) Each time one of the individual pages of the website is clicked, on which a YouTube component (YouTube video) has been integrated, the Internet browser on the information technology system of the data subject is automatically caused by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube can be found at https://www.youtube.com/yt/about/de/. Within the scope of this technical procedure, YouTube and Google receive knowledge of which specific sub-page of our website is visited by the data subject. If the data subject is logged into YouTube at the same time, YouTube recognizes which specific sub-page of the website the data subject is visiting when a sub-page containing a YouTube video is called up. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject. YouTube and Google always receive information via the YouTube component that the data subject is calling up our website if the data subject is simultaneously logged into YouTube at the time of calling up our website; this takes place regardless of whether the data subject clicks on a YouTube video or not.

(3) If the data subject does not want this information to be transmitted to YouTube and Google, this transmission can be prevented by logging out of their YouTube account before calling up our website. The privacy policy published by YouTube, which can be accessed at https://www.google.de/intl/de/policies/privacy/, provides information about the collection, processing and use of personal data by YouTube and Google.

(4) For the use of YouTube we need your consent. The legal basis is Art.6 para. 1 lit. a GDPR.

IV. Visit our social media channels

We are represented with corporate pages on the following social media platforms:

  • Twitter
  • LinkedIn
  • YouTube

Through this, we would like to offer you further opportunities for information about our company and for exchange. Insofar as you visit a profile on a social media platform or interact with it, personal data may be processed. Personal data also includes information associated with a social media profile used, as well as messages and statements made using the profile. In addition, during your visit to a social media profile, certain information is often automatically collected, which may also constitute personal data.

1. Visiting Social-Media

a) Twitter

We use the short messaging service offered by Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103 U.S.A. Solely responsible for the data processing of persons living outside the United States is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland. The short messaging service allows us to keep you informed about our products and offers.

You use the Twitter short message service offered by us and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. sharing, rating). Information about which data is processed by Twitter and for what purposes can be found at: https://twitter.com/de/privacy

We have no influence on the type and scope of the data processed by Twitter, the type of processing and use or the transfer of this data to third parties. On the one hand, Twitter processes your voluntarily entered data (e.g. name and username, email address, telephone number), but on the other hand, Twitter also evaluates the content you share to determine which topics you are interested in, stores and processes confidential messages that you send directly to other users, and can determine your location using GPS data, wireless network information, or your IP address in order to send you advertising or other content.

You have the option of restricting the processing of your data in the general settings of your Twitter account and under "Privacy and security". In addition, you can restrict Twitter's access to contact and calendar data, photos, location data, etc. on mobile devices (smartphones, tablet computers) in the settings options there. However, this depends on the operating system used. You can find more information on this at: https://support.twitter.com/articles/105576# and https://help.twitter.com/de/search?q=datenschutz

b) LinkedIn

When visiting our LinkedIn site, if you are located within the EU or the EEA as well as Switzerland, LinkedIn Ireland Unlimited Company (Ireland/EU - "LinkedIn") Attn: Legal Dept. (Privacy Policy and User Agreement), Wilton Plaza, Wilton Place, Dublin 2 is generally the sole controller of your personal data. If you are located outside of the above-mentioned space, LinkedIn Corporation, Attn: Legal Dept. (Privacy Policy and User Agreement), 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA is the sole controller of your personal data.

When you visit, follow, or engage with our LinkedIn company page, LinkedIn processes personal data to provide us with anonymized statistics and insights. This provides us with insights into the types of actions that people take on our page (so-called page insights). For this purpose, LinkedIn processes in particular such data that you have already provided to LinkedIn via the information in your profile (e.g. data on your professional position, country, industry, seniority, company size and employment status). In addition, LinkedIn will process information about how you interact with our LinkedIn company page, such as whether you are a follower of our LinkedIn company page. With the page insights, LinkedIn does not provide us with any personal data about you. We only have access to the aggregated Page Insights. It is also not possible for us to draw conclusions about individual members via the information provided. This processing of personal data in the context of the Page Insights is carried out by LinkedIn and us as joint controllers. The processing serves our legitimate interest in evaluating the types of actions taken on our LinkedIn company page and improving our company page based on these insights.

When visiting our LinkedIn site, if you are located within the EU or the EEA as well as Switzerland, LinkedIn Ireland Unlimited Company (Ireland/EU - "LinkedIn") Attn: Legal Dept. (Privacy Policy and User Agreement), Wilton Plaza, Wilton Place, Dublin 2 is generally the sole controller of your personal data. If you are located outside of the above-mentioned space, LinkedIn Corporation, Attn: Legal Dept. (Privacy Policy and User Agreement), 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA is the sole controller of your personal data.

We have entered into a joint controller agreement with LinkedIn, which sets out the allocation of data protection obligations between us and LinkedIn. The agreement is available at: https://legal.linkedin.com/pages-joint-controller-addendum

With regard to this data processing, you have the possibility to assert your data subject rights (see "Your rights") also against LinkedIn. Further information on this can be found in LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy and https://www.linkedin.com/help/linkedin/ask/PPQ?lang=de.

Please note that according to the LinkedIn Privacy Policy, personal data is also processed by LinkedIn in the U.S. or other countries.

c) YouTube

Google Ireland Limited, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA is the sole responsible party for the processing of personal data when you visit our YouTube channel. We use our YouTube channel to inform you about our offers and features on our website.

For further information on the processing of personal data, please refer to the privacy policy provided by YouTube on the collection and storage of your personal data and the manner and purpose of use by the platform. Available at: https://policies.google.com/privacy?hl=de&gl=de

You have the option to make settings in your Google account that restrict or stop the processing of your data. You can find out more about this at: https://myaccount.google.com/intro?hl=de and under the heading "Manage, check and update data" at: https://policies.google.com/privacy?hl=de&gl=de

2. Processing of the data you provide to us via our social media pages

We process information that you have provided to us via our company page on the respective social media platform. Such information can be, for example, the username used, contact details or a message to us. We regularly process this personal data only if we have previously expressly requested you to provide us with this data. These processing operations by us are carried out as the sole responsible party. We process this data on the basis of our legitimate interest in contacting inquiring persons. The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR.