Privacy Notice

Last updated: May 2026

Flowlee S.r.l., with registered office at Corso Venezia 45, 20121 Milan (MI), VAT no. 14458540961, PEC flowlee@legalmail.it (hereinafter “Flowlee” or the “Controller”), as the data controller for personal data processing, provides this notice pursuant to Articles 13 and 14 of EU Regulation 2016/679 (“GDPR”) to users who visit the website www.flowlee.com and use the services, contact forms and features made available through the website itself.

For any privacy-related request or request concerning the processing of personal data, you may contact the Controller at: info@flowlee.com.

1. Types of data collected

Flowlee may collect and process the following categories of personal data:

  • identification and contact data, such as first name, surname, company, job title, email address and telephone number;

  • data voluntarily provided through contact forms, demo requests, newsletter sign-ups or other communications sent to Flowlee;

  • technical and browsing data, such as IP address, browser used, operating system, time spent on the website, pages visited and interactions carried out;

  • data collected through analytics and tracking tools;

  • professional data obtained from publicly accessible sources, such as LinkedIn, company websites, public registers or professional directories, in the context of B2B commercial outreach activities.

2. Purposes of processing

Personal data are processed for the following purposes:

a) Management of user requests

To respond to information requests, demo bookings, commercial contacts or support requests.

Legal basis: performance of pre-contractual and contractual measures pursuant to Article 6(1)(b) GDPR.

b) Operational management and website security

To ensure the proper functioning of the website, prevent unauthorised access, and monitor performance and security.

Legal basis: the Controller’s legitimate interest pursuant to Article 6(1)(f) GDPR.

c) Marketing activities and newsletter

Subject to the user’s consent, Flowlee may send informational communications, updates, promotional content, newsletters, event invitations or commercial communications relating to its products and services.

Legal basis: the data subject’s consent pursuant to Article 6(1)(a) GDPR.

d) B2B direct marketing and cold email activities

Flowlee may carry out commercial outreach activities towards professionals, managers or company contacts using professional data obtained from publicly accessible sources, such as professional social networks, company websites or public registers, in order to offer services consistent with the role held.

These activities are carried out in compliance with the Controller’s legitimate interest and the applicable provisions on B2B marketing.

Legal basis: legitimate interest pursuant to Article 6(1)(f) GDPR.

The user may object to such communications at any time by contacting Flowlee or using the opt-out mechanisms included in the communications received.

e) Statistical analysis and service improvement

Flowlee uses traffic and user behaviour analysis tools, including Google Analytics, to understand website usage and improve the experience, content and performance.

Legal basis: consent where required by the applicable cookie legislation and/or the Controller’s legitimate interest.

3. Methods of processing

Personal data are processed using IT and telematic tools in strict relation to the purposes indicated and by adopting appropriate security measures to ensure the confidentiality, integrity and availability of the data.

4. Provision of data

Providing data for contact or demo requests is optional, but failure to provide such data may prevent Flowlee from responding or delivering the requested services.

5. Data recipients

Personal data may be processed by:

  • authorised Flowlee personnel;

  • technology, hosting, CRM, analytics, email delivery and operational support service providers;

  • consultants and professionals appointed by the Controller.

The data will not be disclosed publicly.

6. Transfers of data outside the EU

Some of the technology providers used by Flowlee may involve transfers of data to countries outside the EEA, including the United States.

In such cases, Flowlee adopts the measures предусмотрed by the GDPR to ensure an adequate level of protection of personal data, including Standard Contractual Clauses approved by the European Commission or any applicable adequacy decisions.

7. Retention period

Personal data will be retained for as long as strictly necessary for the purposes for which they were collected and in any case:

  • for contractual and administrative purposes: for as long as required by the applicable legal obligations;

  • for marketing purposes: until consent is withdrawn or the right to object is exercised;

  • for B2B marketing activities based on legitimate interest: for a proportionate period and, in any event, until the data subject objects.

8. Data subject rights

Users may exercise at any time the rights provided for in Articles 15 et seq. of the GDPR, including:

  • access to personal data;

  • rectification or updating of the data;

  • erasure of the data;

  • restriction of processing;

  • objection to processing;

  • data portability;

  • withdrawal of consent given;

  • complaint to the Italian Data Protection Authority.

Requests may be sent to:
info@flowlee.com

9. Cookies and tracking technologies

The website uses technical cookies, analytics cookies and other tracking tools. For more information, you may consult the dedicated Cookie Policy.

10. Changes to this notice

Flowlee reserves the right to update or modify this Privacy Notice at any time. Any changes will be published on this page.