1. Data Controller

The data controller is:

• Company: FLOWLITY SAS
• SIRET: 847 801 701 00065
• Address: 32 Grande Rue, 60300 Avilly-Saint-Léonard, France
• Email: hello@flowlity.com

FLOWLITY has not appointed a Data Protection Officer (DPO) within the meaning of Article 37 of the GDPR, as its size and activities do not make such an appointment mandatory. For any questions regarding the protection of your personal data, please contact FLOWLITY at: hello@flowlity.com.

2. Personal Data Collected

FLOWLITY collects personal data in the following circumstances:

2.1 Website forms

When you use forms available on the Website (demo request, contact, content download, event or webinar registration, contests), the following data may be collected:

• First and last name
• Professional email address
• Phone number (optional)
• Company name and job title
• Industry sector
• Any message or information freely entered in form fields

2.2 Website browsing

When you visit the Website, browsing data is automatically collected via trackers (cookies), subject to your consent:

• IP address and approximate location data
• Pages visited, time spent, traffic source
• Browser type and device used

3. Purposes and Legal Bases for Processing

FLOWLITY processes your data for the following purposes:

3.1 Handling inbound requests (legal basis: pre-contractual measures)

Processing your demo requests, enquiries or requests for information about our supply chain planning solutions. Data collected via forms is transmitted to our sales team via HubSpot CRM.

3.2 Marketing communications (legal basis: consent or legitimate B2B interest)

Sending value-added content (newsletters, event invitations, webinars, white papers) to people who have expressed interest in our solutions. You may unsubscribe at any time via the link included in every email.

3.3 Audience measurement and site improvement (legal basis: consent)

Analysing Website usage via Google Analytics 4 and HubSpot to improve our content and browsing experience, subject to your consent via our cookie management tool (Axeptio).

3.4 Targeted advertising (legal basis: consent)

Serving personalised advertisements via LinkedIn Insight Tag, Google Advertising Products and YouTube, subject to your consent via Axeptio.

3.5 Legal obligations (legal basis: legal obligation)

Retaining data in accordance with our accounting, tax and legal obligations.

4. Data Retention Periods

Your data is retained for the period strictly necessary for the purposes for which it was collected:

• Prospect data: 3 years from the last interaction
• Client data: duration of the contractual relationship + 5 years
• Browsing data (analytics cookies): maximum 13 months
• Advertising campaign data: maximum 13 months
• Accounting records and invoices: 10 years

5. Recipients and Sub-processors

FLOWLITY does not sell your personal data to third parties. Your data may be shared with the following sub-processors:

5.1 Hosting and infrastructure

• Webflow, Inc. — United States — EU Standard Contractual Clauses

5.2 CRM and marketing

• HubSpot, Inc. — United States — EU Standard Contractual Clauses

5.3 Audience measurement

• Google LLC (Google Analytics 4) — United States — EU Standard Contractual Clauses

5.4 Advertising and remarketing

• Google LLC (Google Advertising Products, YouTube) — United States
• LinkedIn Ireland Unlimited Company — Ireland

5.5 Cookie consent management

• Axeptio / Inendi SAS — France

All sub-processors comply with GDPR and appropriate safeguards are in place.

6. Your Rights

In accordance with the GDPR, you have the following rights:

• Right of access (Article 15)
• Right to rectification (Article 16)
• Right to erasure (Article 17)
• Right to restriction (Article 18)
• Right to data portability (Article 20)
• Right to object (Article 21)
• Right to withdraw consent at any time

To exercise your rights: hello@flowlity.com

FLOWLITY will respond within one (1) month.

You may also file a complaint with the CNIL: www.cnil.fr.

7. Cookie Policy

Our Website uses cookies and trackers. Consent is collected via Axeptio.

7.1 Strictly necessary cookies

Essential for site functionality (session, CSRF, language).

7.2 Analytics cookies

• Google Analytics 4
• HubSpot

7.3 Advertising cookies

• Google Advertising Products
• YouTube
• LinkedIn Insight Tag

You can update your preferences anytime via the “Manage cookies” link.

8. Data Security

FLOWLITY implements appropriate measures to protect your data, including:

• HTTPS/TLS encryption
• Access controls
• Secure sub-processor selection

9. Changes to this Policy

FLOWLITY may update this policy at any time. Please review it regularly.

10. Contact

For any request:

FLOWLITY SAS
32 Grande Rue, 60300 Avilly-Saint-Léonard, France
Email: hello@flowlity.com

CNIL: www.cnil.fr

‍