Privacy Policy for the Florio Website

§ 1 Information on collection and processing of personal data and provider identification

(1) Data protection is an important concern of Florio GmbH. Therefore, the processing of our customers’ data is carried out exclusively in accordance with the applicable data protection regulations (e.g. DSGVO, BDSG-neu).

(2) In the following we inform about the collection of personal data when using this website. Personal data is all information relating to an identifiable or identified person, e.g. name, addresses, telephone number, user behaviour.

(3) We do not process any personal data when using the website, except for those that are technically automatically collected by the website (see § 4).

(4) Responsible according to Article 4 Section 7 DSGVO is Florio GmbH, Wilhelm-Wagenfeld-Str. 22, 80807 Munich, Germany.

§ 2 Your rights and how to exercise them

(1) Upon request, we will inform you in writing, in accordance with applicable law, whether and which personal data we store. You have the right to have any incorrect data rectified and, taking into account the purposes of the processing, to have incomplete personal data completed.

(2) You also have the right to request the restriction of processing of your data, provided that the statutory prerequisites apply. Furthermore, you have the right to receive the data provided by you in a structured, commonly used and machine-readable format. You may also object to any processing of your personal data by us.

(3) If the processing of your data is based on your consent, you have the right to withdraw your consent at any time. The withdrawal of your consent will not affect the lawfulness of processing your data based on consent before this consent was withdrawn.

(4) Furthermore, subject to the statutory provisions, you have the right, if there are justified grounds, to request the erasure of your data. We will store your information only for the period necessary to fulfil the purposes outlined in this Privacy Policy or the period to which you have consented separately. After expiry of the corresponding storage period, in particular when the usage relationship with you has ended, we will delete your data in line with our general erasure procedures, unless statutory retention obligations (in particular due to commercial and tax law provisions) preclude this or a prolonged storage is necessary in the specific individual case for the purposes of our legitimate interests (interest in fulfilling our legal obligations and the necessity of processing data for the establishment, exercise or defence of legal claims). In addition, we will delete this data if the processing was unlawful for reasons unknown to us or if you have objected to the processing and there are no overriding legitimate interests for the processing. Your data will also be deleted if we are legally obliged to do so. Our company has also implemented technical measures to inform all recipients of your data of your request for deletion or correction. This only applies in the event that we have disclosed or made public this data. All links, copies and replications of your personal data shall be deleted.

(5) You can contact our data protection officer at any time using the contact details below:

Florio GmbH
Wilhelm-Wagenfeld-Str. 22
80807 München  

(6) Notwithstanding any other remedies, you are also entitled anytime to file a complaint with a supervisory authority, for example in your country of origin.

The supervisory authority responsible for our company is:

Landesamt für Datenschutzaufsicht, Promenade 27 (Schloss), 91522 Ansbach, Germany Web:

(7) All requests for information, requests for disclosure, requests for deletion or objections to data processing should be sent by e-mail to or to the address mentioned in § 1 (3).

§ 3 Data security

We take reasonable steps to protect your data from loss, misuse, unauthorised access, disclosure, alteration or destruction by taking security precautions that provide for industry-standard protection.

§ 4 Protocol data

(1) When using the website, we do not collect any personal data, with the exception of the data which your browser automatically transmits to our company’s web server for technical reasons (hereinafter referred to as “protocol data”) and which our company records in log files to enable you to visit the website.

These are:

• IP address;

• URL of the referring website;

• Date and time of access;

• File accessed;

• Domain name of the Internet Access Provider;

• Content of the request (concrete page);

• Access status/HTTP status code;

• Amount of data transferred in each case;

• Website sending the request;

• Browser type and version;

• Operating system and its interface;

• Language and version of the browser software.

(2) This is exclusively information which does not allow any conclusions to be drawn about the natural person. Protocol data is technically necessary in order to correctly display website content requested by you and is mandatory when using internet offers. The log data is evaluated purely for statistical purposes in order to optimise our company’s internet presence and the technology behind it, and is subsequently deleted.

(3) The protocol data is stored separately from other data that is collected by our company in the course of use.

§ 5 Cookies

(1) Like many other websites, our company also uses so-called “cookies”. Cookies are small text files that are transferred to your hard drive from a website server. Through this our company automatically receives certain data such as IP address, browser used, operating system via your computer and your connection to the internet. For additional information on our use of cookies please refer to our Cookie Policy.

(2) The website of our company can also be visited without cookies. Internet browsers are generally set to accept cookies. You can deactivate the use of cookies at any time via the settings of your browser. If cookies are deactivated, it is possible that individual functions of our company’s website may no longer function.

§ 6 Purpose of data processing

(1) The above-mentioned personal data (see § 1 (3)) will be processed by us, if you provide them, for the following purposes:

• To improve our level of service

• To comply with local laws, for example to establish, exercise or defend legal claims

• For our own administrative and quality assurance purposes

• For other purposes that may be detailed on the website or mobile application or otherwise agreed between us

(2) The processing of personal data is necessary for the sole purpose of achieving the above-mentioned purposes. We will not use your personal data for marketing purposes unless you have explicitly agreed. The legal basis for data processing is – unless explicitly stated otherwise – Article 6 (1) (b) and (f) of the Basic Data Protection Regulation (Datenschutzgrundverordnung, DSGVO) or your explicitly given consent according to Article 6 (1) (a) of the Basic Data Protection Regulation.

(3) If the above data is to be processed for a purpose other than the original purpose of collection, you will be informed of this prior to further processing. In this way you have the opportunity to object to the processing of your data for another purpose.

§ 7 Sharing of data

(1) All data that you send us will be treated confidentially. We will neither sell your personal data to third parties nor market it in any other way.

(2) As a matter of principle, your data will not be made available to third parties for use, unless you have given your consent or we are legally entitled and/or obliged to pass on this data.

(3) We transmit personal data to courts, tax authorities, supervisory authorities as far as legally permissible and necessary in order to comply with applicable law or to establish, exercise or defend legal claims. We will take all measures to ensure appropriate and reasonable safeguards to protect your personal data.

§ 8 Storage period

Insofar as no explicit storage period is specified at the time of collection (e.g. as part of a declaration of consent), the personal data will be deleted as soon as they are no longer required to fulfil the purpose of storage, unless statutory storage obligations (e.g. commercial and tax law storage obligations) prevent deletion.

§ 9 Use of Google Analytics

(1) Our website uses Google Analytics. You must give your consent by means of opt-in and agree to the use of Google Analytics. You may object to the collection and storage of data by Google Analytics at any time with effect for the future. The revocation must be sent to

(2) Our company uses the Google Analytics service to collect usage data and to create usage profiles. The information on the use of our company’s website is transmitted to servers of Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, in the USA, evaluated and exclusively passed on to our company as cumulative data expressing trends in general website use. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.

(3) Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

(4) Further information on Google Analytics and data protection can be found here: