Privacy Policy - SlotFlow
Last updated: March 13, 2026
This policy explains how SlotFlow processes personal data when you use slotflow.net, the SlotFlow business portal, public booking pages, and booking management pages.
1. Controller
Mohamed Bousselmi
Zaubzer Str. 43
81677 Munich, Germany
Email: info@slotflow.net
2. Data we process
- Account and workspace data entered by business users
- Booking and appointment data needed for scheduling operations
- Calendar integration data for Google Calendar or Microsoft Calendar, where connected
- Billing and invoice metadata where Stripe billing is used
- Technical and security data required to operate and protect the service
- Email communication data for confirmations, rescheduling, cancellations, support, and account security
- Optional address verification data where a business user actively uses Google Maps-based address checks
3. Legal bases
- Art. 6(1)(b) GDPR: service delivery and contract performance
- Art. 6(1)(c) GDPR: legal obligations
- Art. 6(1)(f) GDPR: security, fraud prevention, and system integrity
- Section 25(2) TDDDG for strictly necessary device storage and access needed to provide the requested digital service
4. Recipients and service providers
SlotFlow uses service providers only where required for the selected product functions. This can include Google services for Google Calendar and optional address verification, Microsoft services for Outlook calendar integration, Stripe for billing and invoices, AWS services such as S3 or SES where enabled, and hosting or infrastructure providers.
Where providers process data outside the EEA, SlotFlow relies on appropriate safeguards where legally required, such as adequacy decisions or Standard Contractual Clauses.
5. Cookies, browser storage, and consent
Strictly necessary storage is used for core functionality (for example, language preference and consent status).
Optional analytics (Google Analytics 4) is activated only after explicit consent. Without consent, analytics cookies are not set.
The legal basis for optional analytics is Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be changed or withdrawn at any time via “Cookie settings”.
Details: Cookie Policy
6. Retention
Data is retained only as long as needed for service operation, legal obligations, security, accounting, and dispute handling. Invoice and accounting data may be retained for up to 10 years where German law requires this.
7. Your rights
You may request access, rectification, erasure, restriction, portability, and objection as provided by GDPR / DSGVO.
Contact: info@slotflow.net
8. Supervisory authority
Bayerisches Landesamt fuer Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany