Privacy notice

What personal data this website processes, for which purposes and on what legal basis.

1. Controller and data protection officer

The controller responsible for processing personal data on this website is:

Fluint Health GmbH
Gesundheitscampus-Süd 17
44801 Bochum
Email: info@fluint.de

External data protection officer:

Prof. Dr. Thomas Jäschke
datatree AG
Märkische Straße 212 bis 218
44141 Dortmund
Email: dsb@datatree.ag
Telephone: +49 231 54380398

2. Data subject rights

Data subjects have the following rights against Fluint Health GmbH regarding their personal data:

Right of access (Article 15 GDPR)
Right to rectification (Article 16 GDPR) and erasure (Article 17 GDPR)
Right to restriction of processing (Article 18 GDPR)
Right to data portability (Article 20 GDPR)
Right to object to processing (Article 21 GDPR), particularly processing based on Article 6(1)(f) GDPR
Right to withdraw consent at any time with effect for the future (Article 7(3) GDPR)

To exercise these rights, simply email info@fluint.de or the data protection officer. You also have the right to lodge a complaint with a supervisory authority (see Section 11).

3. Hosting and server log files

This static website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, in data centres within the European Union. A data processing agreement under Article 28 GDPR is in place with IONOS.

When you access the website, your browser transmits the following technically necessary data, which is stored in server log files: IP address, date and time of access, page or file requested, volume of data transferred, referrer URL, browser type and operating system.

Processing is based on Article 6(1)(f) GDPR. The legitimate interest is the secure, uninterrupted provision of the website and protection against attacks. Log files are deleted after 14 days unless required to investigate a security incident. They are not combined with other data sources.

We use IONOS WebAnalytics for statistical analysis and technical optimisation of our website. Analysis is based on automatically generated server log files, without cookies or tracking pixels on this website. The data includes the page or file requested, referrer, browser type and version, operating system, device type and access time. According to IONOS, the IP address is anonymised immediately after transmission and subsequently processed without reference to an individual; the anonymised IP address is used to determine the location of access. The legal basis for processing personal data is Article 6(1)(f) GDPR. Our legitimate interest is to evaluate and improve our website statistically. Further information is available from IONOS in its WebAnalytics data processing information.

4. Cookies and local storage

This website does not set cookies or embed analytics or advertising trackers in the browser. Server-side analysis by IONOS WebAnalytics is described in Section 3. No HubSpot tracking code is embedded. Our separate contact management in HubSpot does not store information on or read information from your device; details of this processing are provided in Section 10.

5. Web fonts

For a consistent appearance, this website uses the Onest, Roboto and Raleway typefaces. Font files are stored on and served from our own web server. Loading fonts does not establish connections to third-party servers, including Google Fonts, and no data is transmitted to third parties.

The fonts are licensed under the SIL Open Font License (Onest, Raleway) or Apache License 2.0 (Roboto). The licence texts accompany the font files.

6. Product preview (demo widget)

Fluint displays product previews and sample views on the homepage and the lunéa, Atlas and Grouper product pages. These are part of the website and are served exclusively from our own server. No third-party content is embedded, no external services are contacted, and preview inputs are neither transmitted nor stored. Interactive previews run entirely in your browser.

7. Partner logos and external links

Logos of partners, supporters and standards displayed on this website—including Katholisches Klinikum Bochum, MedEcon Ruhr, Meerkat Holding, Quhr (Smart Health Hub Ruhr), Stiftung kreuznacher diakonie, dianovi, XQT, Koordinierungsstelle Digital Ruhr, Gesundheitscampus Bochum, Cologne Intelligence, Think About IT, HL7 FHIR, IHE and DICOM—are stored as image files on our own server. Displaying these logos does not connect to the respective organisations’ servers.

Some logos link to the respective organisations’ websites. You leave this website only when you follow such a link. The respective provider is solely responsible for data processing on the destination website.

8. Contact form

Use the contact form on the homepage, in the Contact section, to request a demo, arrange a workshop or send Fluint a message. It collects your name, hospital or organisation, role or function (optional), email address, topic selection and message. You also confirm that you have read this privacy notice. This confirmation is not consent to advertising.

The data is transmitted over an encrypted connection (TLS) to a script on the IONOS web server, which generates an email to Fluint’s mailbox. The form script does not store form content in a database on the web server. Details may be transferred to our HubSpot CRM for further handling and contact management (see Section 10). To protect against automated submissions, we use an invisible form field (honeypot) and rate limiting. For this purpose, the IP address is held on the server only as a pseudonymised hash, not in plain text. It is generally deleted after one hour, at the latest when the next request arrives after that hour has elapsed.

The legal basis is Article 6(1)(b) GDPR where the enquiry concerns a contract with the data subject or related pre-contractual measures. For other enquiries, particularly those from a company’s contact persons, the legal basis is Article 6(1)(f) GDPR; our legitimate interest is handling business enquiries. Abuse prevention is also based on Article 6(1)(f) GDPR. Enquiries are retained for as long as necessary to handle them and then deleted unless statutory retention requirements apply or a business relationship results from the enquiry.

9. Contact by email

When you contact Fluint by email, we process the information provided—email address, name and message content—to handle your request. The legal basis is Article 6(1)(b) or (f) GDPR, as explained in Section 8. Information may also be stored in HubSpot for handling and contact management. The purposes and retention criteria are described in Section 10 .

10. Contact management in HubSpot CRM

We use HubSpot CRM to handle enquiries and manage business contacts. Where necessary for these purposes, we may bring together information from contact forms, emails and further business communication. This includes names, business contact details, organisations, roles, and the content and history of communications.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the orderly handling of enquiries, documenting communication and maintaining existing business relationships. We take account of the interests and rights of data subjects. Where processing is necessary for a contract with the data subject or pre-contractual measures taken at their request, Article 6(1)(b) GDPR applies.

HubSpot processes CRM data on our behalf under a data processing agreement pursuant to Article 28 GDPR. Hosting in the European Union has been agreed for our account. This does not entirely exclude processing outside the EU, for example by support teams or subprocessors. For such transfers, the HubSpot Data Processing Agreement provides in particular for the EU–US Data Privacy Framework, where applicable, and EU Standard Contractual Clauses. Information on recipients and processing locations is available in the list of subprocessors. You can request a copy of the safeguards applicable to a transfer using the contact details above.

We retain contact details and communication content only for as long as necessary to handle the request or maintain the business relationship. Once the purpose no longer applies, data is deleted unless statutory retention requirements or evidence needed to establish, exercise or defend legal claims prevent this. Data subject to retention is processed only for the relevant retention purpose.

You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. Simply send a message to info@fluint.de. We will stop processing unless compelling legitimate grounds or grounds relating to legal claims justify continuing.

The use described here is solely for handling enquiries and managing contacts. It does not add you to a newsletter or marketing email list. HubSpot website tracking is not used on this website.

11. Competent supervisory authority

State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia
PO Box 20 04 44
40102 Düsseldorf
Telephone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Web: www.ldi.nrw.de

12. Changes to this notice

Fluint updates this privacy notice when the website or legal requirements change. The version published here applies.

Last updated: 24 October 2026