Privacy policy

As of October 2026

This policy explains which personal data Dispatch Flow processes when you visit this website, book a call, or when I contact your business. Dispatch Flow is a one-person business based in Germany, so the EU General Data Protection Regulation (GDPR) applies.

1. Who is responsible

Felix Grimm
Dispatch Flow
Hauptstraße 5
87659 Hopferau
Germany
Email: [email protected]

2. Visiting this website

This website is hosted by HighLevel Inc. (LeadConnector), USA. When you open a page, the hosting provider automatically processes technical data your browser sends: IP address, date and time, the page requested, browser type and operating system. This is needed to deliver the page and keep it secure (Art. 6 (1) (f) GDPR: legitimate interest in a working, secure website).

HighLevel processes this data on my behalf under a data processing agreement. HighLevel is certified under the EU-U.S. Data Privacy Framework, so the transfer to the USA is based on the European Commission's adequacy decision (Art. 45 GDPR); the agreement also includes Standard Contractual Clauses.

This website uses no advertising cookies and no third-party analytics tools. The hosting provider may set cookies that are technically necessary to run the page and the booking calendar.

3. Booking a call

When you book a call, I receive the details you enter: your name, email address, phone number, the time you picked and anything you write in the form. The booking runs on the HighLevel calendar and your details are stored in my HighLevel account.

I use them to confirm the appointment, call you at the time you picked and talk about my service. Legal basis: steps prior to entering into a contract at your request (Art. 6 (1) (b) GDPR) and my legitimate interest in answering business inquiries (Art. 6 (1) (f) GDPR).

You get a confirmation by email. I do not use your phone number for marketing texts.

4. Email

If you email me, I process your message and contact details to answer you (Art. 6 (1) (b) and (f) GDPR). My email runs on Google Workspace (Google). Google is certified under the EU-U.S. Data Privacy Framework.

5. Business contact data from public sources

To offer my service to roofing companies, I collect business contact details that companies publish themselves, mainly on their own websites: company name, the owner's or contact person's name, business address, business phone number, business email and website. I may also note publicly visible facts about the business, such as how it presents itself online.

I use this data to contact the business by email, social media message or phone about my service. I never send marketing text messages to businesses I have not worked with. Legal basis: my legitimate interest in offering my service to businesses (Art. 6 (1) (f) GDPR). You can object at any time (see section 8). I then stop contacting you and delete your data, except for a note that you objected, so that I don't contact you again.

6. Calls and recordings

I only record a call if you agree at the start of the call. If you say no, the call is not recorded. Recordings and notes from a call are used only to prepare our cooperation and to improve how I run calls.

7. How long I keep data

Data from bookings, calls and messages that do not lead to working together is deleted after 12 months at the latest. If we work together, I keep data for as long as needed for the cooperation, and business records for as long as German commercial and tax law requires (usually 6 or 10 years).

8. Your rights

You have the right to access your data (Art. 15 GDPR), to correct it (Art. 16), to have it deleted (Art. 17), to restrict its processing (Art. 18), to receive it in a portable format (Art. 20), and to object to processing based on legitimate interests (Art. 21), including direct marketing. A short email to [email protected] is enough.

You also have the right to complain to a data protection supervisory authority. The authority responsible for me is the Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

9. No automated decisions

I do not make decisions about you based solely on automated processing.