Privacy Policy

This privacy policy applies to the website flowbotic.ro and the services provided by:

As data controller, we are responsible for how we collect and process your personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian legislation.

We collect personal data in the following situations:

• Contact form — name, email address, phone number, message
• Site visits — anonymized browsing data via Google Analytics (partial IP address, browser, device, pages visited)
• WhatsApp bot service (for our business clients) — WhatsApp phone number, messages sent to the bot, appointment date and time

We do not directly collect sensitive data (medical, financial, ethnic, etc.) through the site.

• Responding to requests — legal basis: performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR)
• Site improvement — legal basis: legitimate interest (Art. 6(1)(f) GDPR)
• Analytics — legal basis: consent (Art. 6(1)(a) GDPR)
• WhatsApp bot services — legal basis: performance of the contract with the business client (Art. 6(1)(b) GDPR)

We do not use your data for marketing purposes without your explicit consent.

The site uses Google Analytics 4 to understand how our website is used. The data collected is anonymized and aggregated.

Google Analytics uses cookies to distinguish users. Data is transferred to Google's servers in the USA, based on Standard Contractual Clauses approved by the European Commission.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

FlowBotic provides WhatsApp automation services for businesses (clinics, medical offices, etc.). In this context:

• End-user data (patients/clients) is processed on behalf of the business client (the data controller), not FlowBotic
• FlowBotic acts as a data processor pursuant to Art. 28 GDPR
• Data is stored on secure servers in the EU (Hetzner, Germany)
• We do not share data with third parties beyond the necessary technical providers (Meta/WhatsApp, Google)

If you are an end user of a FlowBotic bot (e.g., a patient at a clinic), please contact the relevant clinic directly to exercise your GDPR rights.

Under GDPR, you have the following rights:

• Right of access — to receive a copy of the personal data we hold about you
• Right to rectification — to correct inaccurate or incomplete data
• Right to erasure — to request deletion of your data ("right to be forgotten")
• Right to restriction of processing — to limit how we use your data
• Right to data portability — to receive your data in a structured, commonly used format
• Right to object — to object to processing based on legitimate interest
• Right to withdraw consent — at any time, without affecting the lawfulness of prior processing

To exercise these rights, contact us at contact@flowbotic.ro. We respond within a maximum of 30 days.

• Contact form data — maximum 2 years from last interaction
• Analytics data — 14 months (Google Analytics 4 default setting)
• WhatsApp bot data — as per contract with the business client, typically maximum 3 years or until contract termination

Upon expiry of the retention period, data is permanently deleted or irreversibly anonymized.

We take appropriate technical and organizational measures to protect your data:

• HTTPS/TLS encrypted communications across all domains
• Servers hosted in ISO 27001-certified data centers (Hetzner, Germany)
• Restricted data access based on "need to know" principle
• Continuous system monitoring

In the event of a security incident posing a high risk to your rights, we will notify the competent authorities within 72 hours and inform you directly.

Our site uses the following types of cookies:

• Essential cookies — necessary for the site to function, no consent required
• Analytics cookies — Google Analytics (_ga, _gid, _gat) — require your consent

You can manage cookies from your browser settings. Disabling analytics cookies does not affect site functionality.

For any questions about this policy or to exercise your rights, contact us:

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with:

• ANSPDCP (Romanian National Supervisory Authority for Personal Data Processing)
  www.dataprotection.ro | anspdcp@dataprotection.ro | +40 318 059 211