Scope and data controller

This notice under Article 13 of Regulation (EU) 2016/679 (GDPR) covers the Floware marketing website and contact requests. The controller is Comply S.r.l., VAT no. 10161470967, Via Prealpi 13C, Giussano (MB), Italy. Customer applications and the FlowareHub portal have separate privacy notices.

Browsing and security data

Hosting infrastructure processes technical data such as IP address, requested URLs, date and time, browser, operating system and request outcomes. We use it to provide the website, diagnose errors and prevent abuse. The legal basis is our legitimate interest in security and reliable operation (Article 6(1)(f) GDPR).

Contact requests

The form collects your name, work email, company, process description, language, submission date and identifier, and the version of the notice acknowledged. We use this data to respond and assess the requested service. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR); where you act for a company, it is our legitimate interest in managing professional relationships (Article 6(1)(f)).

Providing data and communications

Required fields are necessary to submit the form; you can alternatively email us. Do not include health data, identity documents, passwords or confidential information about other people. Acknowledging this notice is not marketing consent. Contact requests do not subscribe you to newsletters and are not used for promotional campaigns.

Spam protection

When the form is enabled, Cloudflare Turnstile processes browser and connection signals, including IP address, User-Agent, TLS fingerprint and site origin, to distinguish people from bots. Processing on our behalf is based on our legitimate interest in protecting the form against abuse. Cloudflare also acts as an independent controller to improve Turnstile’s bot detection under its own notice. Floware does not send the contents of form fields to the spam verification service.

Recipients and service providers

Authorized Comply personnel and necessary service providers may process data: Vercel for hosting and server functions, Convex for request storage and scheduled tasks, Resend for email notifications, Microsoft for company email and Cloudflare for Turnstile. Notifications include submitted form data and are received by the company mailbox listed below, whose provider processes messages on our behalf. Providers acting as processors are subject to Article 28 GDPR agreements. Data is not disclosed publicly or published on GitHub.

Transfers outside the European Economic Area

International providers may process or access data outside the EEA, including in the United States, even when European database or server regions are selected. Depending on the provider and processing, transfers rely on European Commission adequacy decisions or standard contractual clauses and any required supplementary measures. Contact us for information about recipients and applicable safeguards or to request a copy.

Retention

Database requests are retained for 12 months from submission and then deleted by a daily procedure. Copies in email inboxes follow the same period, with periodic review. If a contractual relationship starts, necessary data is handled under that relationship and applicable legal retention duties. Data necessary for a dispute may be retained for its duration. Technical logs and backups follow the retention cycles of enabled services, limited to security and recovery needs; they are not used for marketing.

Your rights and complaints

You may request access, rectification, erasure, restriction and portability where applicable (Articles 15–20 GDPR). You may object to processing based on legitimate interests on grounds relating to your particular situation (Article 21). We normally respond within one month, subject to extensions under Article 12 GDPR. You may complain to the Italian Garante per la protezione dei dati personali or the competent authority where you live or work.

Automated decisions

We do not carry out commercial profiling or automated decisions producing legal or similarly significant effects. Spam checks may block a submission; you can contact us directly by email if you cannot use the form.

Contact

For service enquiries or to exercise your data rights, email floware@okrlink.com. You may also write to the controller at the address in the privacy notice.

Further information

Version dated 10 October 2026.

Privacy