Privacy notice

What personal data this website processes, for which purposes and on what legal basis.

1. Controller and data protection officer

The controller responsible for processing personal data on this website is:

Fluint Health GmbH
Gesundheitscampus-Süd 17
44801 Bochum
Email: info@fluint.de

External data protection officer:

Prof. Dr. Thomas Jäschke
datatree AG
Märkische Straße 212 bis 218
44141 Dortmund
Email: dsb@datatree.ag
Telephone: +49 231 54380398

2. Data subject rights

Data subjects have the following rights against Fluint Health GmbH regarding their personal data:

Right of access (Article 15 GDPR)
Right to rectification (Article 16 GDPR) and erasure (Article 17 GDPR)
Right to restriction of processing (Article 18 GDPR)
Right to data portability (Article 20 GDPR)
Right to object to processing (Article 21 GDPR), particularly processing based on Article 6(1)(f) GDPR
Right to withdraw consent at any time with effect for the future (Article 7(3) GDPR)

To exercise these rights, simply email info@fluint.de or the data protection officer. You also have the right to lodge a complaint with a supervisory authority (see Section 11).

3. Hosting and server log files

This static website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, in data centres within the European Union. A data processing agreement under Article 28 GDPR is in place with IONOS.

When you access the website, your browser transmits the following technically necessary data, which is stored in server log files: IP address, date and time of access, page or file requested, volume of data transferred, referrer URL, browser type and operating system.

Processing is based on Article 6(1)(f) GDPR. Our legitimate interest is to provide a secure, reliable website and prevent attacks. According to IONOS, visitor data is stored for eight weeks and IP addresses are anonymised when collected. This data is not combined with other data sources.

We use IONOS WebAnalytics to analyse website usage statistically. It evaluates anonymised access data collected during hosting, such as pages visited, referrers, device and browser information and access times. Analysis takes place on the server, without cookies or tracking pixels on this website. Its purpose is to improve our website; the legal basis is Article 6(1)(f) GDPR. According to IONOS, visitor data is stored for eight weeks and is not transferred to third countries outside the EU.

4. Cookies and local storage

This website does not set cookies or embed analytics or advertising trackers in the browser. Server-side analysis by IONOS WebAnalytics is described in Section 3. No HubSpot tracking code is embedded. No information is stored on or read from your device for our separate contact management in HubSpot; details of that processing are provided in Section 10.

For navigation, we store a timestamp (fluint-menu-hover-until) in your browser’s sessionStorage. It prevents a menu from reopening immediately on hover after you click it. The delay lasts 1.5 seconds; the entry remains until the session in that tab ends and is not transmitted to our server. Storage serves only the requested navigation function (Section 25(2)(2) TDDDG). Where personal data is involved, the legal basis is Article 6(1)(f) GDPR.

5. Web fonts

For a consistent appearance, this website uses the Onest, Roboto and Raleway typefaces. Font files are stored on and served from our own web server. Loading fonts does not establish connections to third-party servers, including Google Fonts, and no data is transmitted to third parties.

The fonts are licensed under the SIL Open Font License (Onest, Raleway) or Apache License 2.0 (Roboto). The licence texts accompany the font files.

6. Product preview (demo widget)

Fluint displays product previews and sample views on the homepage and the lunéa, Atlas and Grouper product pages. These are part of the website and are served exclusively from our own server. No third-party content is embedded, no external services are contacted, and preview inputs are neither transmitted nor stored. Interactive previews run entirely in your browser.

7. Partner logos and external links

Logos of partners, supporters and standards displayed on this website—including Katholisches Klinikum Bochum, MedEcon Ruhr, Meerkat Holding, Quhr (Smart Health Hub Ruhr), Stiftung kreuznacher diakonie, dianovi, XQT, Koordinierungsstelle Digital Ruhr, Gesundheitscampus Bochum, Cologne Intelligence, Think About IT, HL7 FHIR, IHE and DICOM—are stored as image files on our own server. Displaying these logos does not connect to the respective organisations’ servers.

Some logos link to the respective organisations’ websites. You leave this website only when you follow such a link. The respective provider is solely responsible for data processing on the destination website.

8. Contact form

Use the contact form on the homepage, in the Contact section, to request a demo, arrange a workshop or send Fluint a message. It collects your name, hospital or organisation, role or function (optional), email address, topic selection and message. You also confirm that you have read this privacy notice. This confirmation is not consent to advertising.

The data is transmitted over an encrypted connection (TLS) to a script on the IONOS web server, which generates an email to Fluint’s mailbox. The form script does not store form content in a database on the web server. Details may be transferred to our HubSpot CRM for further handling and contact management (see Section 10). To protect against automated submissions, we use an invisible form field (honeypot) and rate limiting. For this purpose, the IP address is held on the server only as a pseudonymised hash, not in plain text. It is generally deleted after one hour, at the latest when the next request arrives after that hour has elapsed.

The legal basis is Article 6(1)(b) GDPR where the enquiry concerns a contract with the data subject or related pre-contractual measures. For other enquiries, particularly those from a company’s contact persons, the legal basis is Article 6(1)(f) GDPR; our legitimate interest is handling business enquiries. Abuse prevention is also based on Article 6(1)(f) GDPR. Enquiries are retained for as long as necessary to handle them and then deleted unless statutory retention requirements apply or a business relationship results from the enquiry.

9. Contact by email

When you contact Fluint by email, we process the information provided—email address, name and message content—to handle your request. The legal basis is Article 6(1)(b) or (f) GDPR, as explained in Section 8. Information may also be stored in HubSpot for handling and contact management. The purposes and retention criteria are described in Section 10 .

10. Contact management in HubSpot CRM

We use HubSpot CRM to handle enquiries and manage business contacts. Where necessary for these purposes, we may bring together information from contact forms, emails and further business communication. This includes names, business contact details, organisations, roles, and the content and history of communications.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the orderly handling of enquiries, documenting communication and maintaining existing business relationships. We take account of the interests and rights of data subjects. Where processing is necessary for a contract with the data subject or pre-contractual measures taken at their request, Article 6(1)(b) GDPR applies.

HubSpot processes CRM data on our behalf under a data processing agreement pursuant to Article 28 GDPR. Hosting in the European Union has been agreed for our account. This does not entirely exclude processing outside the EU, for example by support teams or subprocessors. For such transfers, the HubSpot Data Processing Agreement provides in particular for the EU–US Data Privacy Framework, where applicable, and EU Standard Contractual Clauses. Information on recipients and processing locations is available in the list of subprocessors. You can request a copy of the safeguards applicable to a transfer using the contact details above.

We retain contact details and communication content only for as long as necessary to handle the request or maintain the business relationship. Once the purpose no longer applies, data is deleted unless statutory retention requirements or evidence needed to establish, exercise or defend legal claims prevent this. Data subject to retention is processed only for the relevant retention purpose.

You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. Simply send a message to info@fluint.de. We will stop processing unless compelling legitimate grounds or grounds relating to legal claims justify continuing.

The use described here is solely for handling enquiries and managing contacts. It does not add you to a newsletter or marketing email list. HubSpot website tracking is not used on this website.

11. Competent supervisory authority

State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia
PO Box 20 04 44
40102 Düsseldorf
Telephone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Web: www.ldi.nrw.de

12. Job applications

If you apply to Fluint by email, we process your contact details, CV and other application documents to assess your suitability for the role and manage the recruitment process. The legal basis is Section 26(1) of the German Federal Data Protection Act (BDSG). Providing this information is voluntary; without the details needed for selection, we cannot assess your application.

Applications are handled exclusively in the email mailbox and are not transferred to another system. Access is limited to the people responsible for recruitment; the email provider processes the data to provide the mailbox service. We delete the documents no later than six months after the recruitment process ends, unless longer retention is necessary to establish, exercise or defend legal claims. Article 6(1)(f) GDPR applies to retention for this purpose. If you are hired, the information required for employment is transferred to personnel administration. Inclusion in a talent pool requires separate consent.

13. Changes to this notice

Fluint updates this privacy notice when the website or legal requirements change. The version published here applies.

Last updated: 26 October 2026