Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is:

Phone (Germany): +49 177 461 40 14
Phone (France): +33 6 59 14 91 25
Email: contact@familion-group.com

2. Provision and hosting of the website

This website is provided via the Lovable platform. The platform provider is Lovable Labs Sweden AB, Regeringsgatan 25, 111 53 Stockholm, Sweden.

When the website is accessed, technically necessary connection and log data are processed. This may include, in particular, the IP address, date and time of access, the page accessed, the volume of data transferred, browser, operating system, referrer URL, and status and error data.

The processing serves to provide the website securely and reliably, detect attacks and misuse, and resolve technical errors. To the extent that we determine the purposes and means of processing through the provision of this website, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and functional operation of the website.

In connection with the provision of the website, Lovable receives technically necessary connection and log data and processes them in accordance with its own Privacy Policy. Lovable states that it processes personal data, among other purposes, to provide, operate, secure, maintain and improve its platform. To the extent that Lovable independently determines the purposes and means of processing, Lovable acts as an independent controller in respect of that processing.

Lovable may use additional infrastructure and hosting providers. According to Lovable, personal data may also be processed in countries outside the European Economic Area, including the United States. Lovable states that it uses legally recognised transfer mechanisms for restricted international transfers, in particular the European Commission’s Standard Contractual Clauses.

Further information about data processing by Lovable and the exercise of rights against Lovable is available at:
https://lovable.dev/privacy

Lovable can be contacted at privacy@lovable.dev.

3. Contacting us

If you contact us by email or using the contact section of this website, we process the information you provide. This may include, in particular, your name, email address, any organisation you choose to specify, and the content of your message.

The information entered into the form is initially processed exclusively locally in your browser. When you click the button, a pre-filled email draft is created in your email application. Information is only transmitted to Familion when you send the email yourself. Familion does not use an external form provider for this form and does not store the form entries on the website.

After the email has been sent, we use the information provided exclusively to review and respond to your enquiry and to conduct any subsequent communication.

Where your enquiry relates to the preparation of an engagement or another contractual relationship with you personally, the processing is based on Article 6(1)(b) GDPR. Where the communication takes place in the context of other business contacts, for example if you write to us as a contact person of a company, the processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in the appropriate handling of communications addressed to us.

We use Microsoft 365 with the Exchange Online service to receive and handle incoming emails. Emails sent to us are processed and stored there so that we can read, answer and manage them. The legal basis is Article 6(1)(b) GDPR or Article 6(1)(f) GDPR in accordance with the distinction set out above.

Contacting us is voluntary; you are under no obligation to write to us. Providing the name of your organisation is likewise optional. Without sufficient contact details and information about your request, however, we may be unable to reply at all or able to reply only in part. Please do not submit confidential transaction, investment or family information through the contact section. Ordinary email communication is not continuously protected by end-to-end encryption.

4. Retention period

We retain personal data only for as long as is necessary for the relevant processing purpose.

Contact enquiries that do not result in a business relationship are generally deleted once the enquiry has been fully dealt with and there are no legitimate reasons for further retention.

Where a business relationship is established, data may be retained as part of our engagement and business records in accordance with statutory retention periods. Data may also be retained for longer where this is necessary for the establishment, exercise or defence of legal claims.

Technical log data is deleted once it is no longer required for the operation and security of the website, subject to any conflicting statutory obligations.

5. Cookies, analytics and external content

This website does not use analytics, marketing or profiling services and does not use cookies or comparable storage technologies that require consent.

If you select a language manually, the entry ‘familion-language’ is stored in your browser’s session storage. It contains only the selected language (‘de’, ‘en’ or ‘fr’) and no identifiers or usage data. Its sole purpose is to continue showing you the language version you expressly selected when you reload the page or navigate within the same browser tab. The entry is limited to the session of the open tab and is deleted by the browser as soon as you close that tab. You can delete it at any time through your browser data settings.

This storage of information on your terminal equipment is permitted without consent under Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG), because it is necessary in order to provide the language version of this website that you have expressly requested. This storage on your terminal equipment must be distinguished from any subsequent processing of personal data; where such processing occurs in an individual case, we base it on our legitimate interest in providing the selected language version pursuant to Article 6(1)(f) GDPR.

To protect against automated access, the cookie ‘__cf_bm’ is set via the Cloudflare security infrastructure used for this website. It serves to detect and mitigate bot traffic and therefore the security of this website; it is not used to analyse user behaviour. The cookie expires after 30 minutes of continuous inactivity. Further information is available in Cloudflare’s cookie documentation: https://developers.cloudflare.com/fundamentals/reference/policies-compliances/cloudflare-cookies/

The fonts, images and videos used on the website are provided locally or via the website’s hosting infrastructure. No font files are loaded from Google Fonts or other external font providers.

The website contains a simple link to LinkedIn. A connection to LinkedIn is only established when you follow that link. The relevant LinkedIn provider is responsible for the processing of data on its website.

6. Recipients and international data transfers

Recipients of personal data may include the hosting, infrastructure and email providers used by us. They are given access only to the extent required to provide their respective services.

In connection with the provision of this website, Lovable Labs Sweden AB in particular receives the technically necessary connection and log data described in Section 2. To the extent that Lovable independently determines the purposes and means of processing, Lovable processes these data under its own responsibility as an independent controller. Lovable may itself use additional service providers. Further information is provided in Section 2 and in Lovable’s Privacy Policy linked there.

Where international transfers initiated by us are made to recipients outside the European Economic Area, they take place only where the requirements of Articles 44 et seq. GDPR are met, in particular on the basis of an adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses. Transfers carried out by Lovable under its own responsibility are governed by the transfer mechanisms described by Lovable in its Privacy Policy.

7. Your rights

Subject to the applicable statutory requirements, you have the right to:

• access your personal data;
• rectify inaccurate or incomplete data;
• request the deletion of your data;
• restrict the processing of your data;
• data portability;
• object to processing based on Article 6(1)(f) GDPR.

Right to object under Article 21 GDPR

You have the right to object at any time to the processing of your personal data that is based on Article 6(1)(f) GDPR. Following an objection, we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. A message to contact@familion-group.com is sufficient to object.

You also have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

To exercise your rights, please contact contact@familion-group.com.

8. Automated decision-making

No automated decision-making, including profiling, takes place.

9. Updates to this Privacy Policy

We update this Privacy Policy if the website, the providers used or the applicable legal requirements change. The version published on this website at the relevant time applies.