Privacy Policy

At Firoozeh Flow, we treat the protection of your personal data as a fundamental part of our commitment to professional excellence. This policy describes how we collect, use, and protect your personal information when you visit our website, in adherence to European data protection standards (GDPR).

General Information and Data Controller

In this Privacy Policy, the terms "we", "us", and "our" refer to Firoozeh Flow.. The party responsible for the processing of data on this website (the "Controller") is:

Firoozeh Flow (Zachary Levi Tanghetti & Marzie Asaadi)

Uhandstr. 107A

10717 Berlin

Germany

Email: hello@firoozehflow.com

We treat your personal data as confidential and in accordance with the statutory data protection regulations, specifically the General Data Protection Regulation (GDPR).

External Service Providers and Data Processing

To operate our website and provide our services, we use specialized external service providers. In accordance with Art. 28 GDPR, we have entered into Data Processing Agreements (Auftragsverarbeitungsvertrag) with these partners to ensure your data is processed strictly according to our instructions and EU security standards.

In some cases, data may be processed in countries outside the European Union ("Third Countries"). We only do this if a level of protection comparable to the EU is guaranteed:

Website Hosting (Wix.com): Our website is built and hosted via Wix. Data may be processed on servers in Israel. The European Commission has issued an Adequacy Decision for Israel, confirming its data protection standards are equivalent to those of the EU.
Appointment Booking (Microsoft Bookings): We use Microsoft to manage scheduling. Microsoft is certified under the EU-U.S. Data Privacy Framework, which establishes a legal basis for data transfers to the USA based on EU-equivalent standards.

What Type of Information Do We Collect?

We receive, collect, and store information you enter on our website or provide us in any other way:

Personal Information: Personally identifiable information (including name and email) provided via Wix Forms and Microsoft Bookings.
Technical Information: Internet protocol (IP) address, login details, e-mail address, browser type/version, and connection information.
Session Data: We may use software tools to measure session information, including page response times, length of visits, and page interaction.

Why Do We Collect Such Information?

We collect this information for the following purposes:

To provide and operate our services and customer support.
To contact visitors with service-related notices (e.g., responding to inquiries or booking confirmations).
To create aggregated statistical data to improve our website experience.
To comply with applicable laws and regulations (Legal Basis: Art. 6(1)(b) and (f) GDPR).

Data Storage Duration

We follow the principle of data minimization:

Inquiries: Data from our contact form is stored to process your request. If no contract is concluded, this data is deleted within 6 months after the final communication.
Contractual Data: If a business relationship is established, we adhere to German statutory retention periods (6 to 10 years for commercial and tax documentation).
Bookings: Data for scheduling is stored until the appointment is completed or cancelled, unless required for further contractual purposes.

No Third-Party Data Sharing or Sale

Firoozeh Flow does not sell, rent, or share your personal data with third parties for marketing or commercial purposes. All data is used exclusively for technical operation or to fulfill the service requests you have initiated.

Cookies and Other Tracking Tools

Our website uses cookies for security, identity verification, and performance analysis.

Essential Cookies: Required for technical functions (Art. 6(1)(f) GDPR).
Functional Cookies: Used for preferences and appointment sessions (Art. 6(1)(a) GDPR - Consent). For a detailed and up-to-date list of cookies used by our provider, please see the official Wix Cookie List. You can manage your preferences at any time via our Cookie Banner.

Your Rights and Supervisory Authority

In accordance with the GDPR, you have the right to access (Art. 15), rectify (Art. 16), or erase (Art. 17) your data, as well as the right to data portability (Art. 20). If you have given us consent to process your data (e.g., via the cookie banner), you have the right to withdraw this consent (Art. 7(3) GDPR) at any time with effect for the future.

Furthermore, pursuant to Art. 77 GDPR, you have a statutory right to contact a competent supervisory authority. The authority responsible for our location is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstr. 219, 10969 Berlin (Email: mailbox@datenschutz-berlin.de).

SSL and TLS Encryption

This site uses SSL or TLS encryption to protect the transmission of confidential content. You can recognize this by the "https://" and the lock icon in your browser address bar.