Conviction

Privacy Policy for the Use of Our Website

1. Controller for Data Processing (hereinafter “we”)

Mr. Phillip Paul
Kolonnenstr. 8
10827 Berlin
Germany
E-mail: support@tryconviction.com
Phone: +49 30 43974929

Further details about us can be found in our Legal Notice.

This Privacy Policy is also available in German (Datenschutzerklärung).

The use of our website is generally possible without you having to provide personal data. Providing personal data is voluntary.

Personal data means any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the identity of that natural person.

The purpose of processing data is the operation of this website with information about our service offerings and contact options. Personal data is only collected on our website when this is

  • necessary for the use of the website (legal basis: Art. 6(1)(a) and/or Art. 6(1)(b) of the General Data Protection Regulation (GDPR)),
  • necessary to safeguard our interest in improving user experience and maintaining the security of use (legal basis: Art. 6(1)(f) GDPR),
  • necessary for the use of the services offered on the website as well as for pre-contractual measures, in particular for form submissions (legal basis: Art. 6(1)(a) and/or Art. 6(1)(b) GDPR), or
  • necessary for entering into a contract and for performing the contract (legal basis: Art. 6(1)(a) and (b) GDPR).

Further details on the processing of data can be found below under the corresponding headings:

3. Access Data / Server Log Files

When you visit our website, the servers automatically store the information that your browser sends, known as server log files . The information includes:

  • Name of the webpage accessed,
  • File,
  • Date and time of access,
  • Notification of successful access,
  • Browser type and version,
  • User’s operating system,
  • Referrer URL,
  • IP address (anonymized),
  • Provider.

No combination of this data with other data sources takes place. The information is used pursuant to Art. 6(1)(f) GDPR exclusively for the analysis and maintenance of the technical operation of the servers and the network.

4. Contact via E-Mail

If you send us inquiries by e-mail, your information provided there, including the contact details you provide, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions, pursuant to Art. 6(1)(b) GDPR. We never disclose this data without your consent.

5. Waitlist

On our website, you have the option to sign up for the waitlist. If you wish to sign up, we require a valid e-mail address from you. It will be used exclusively for sending the requested information. For sending the e-mails, we use the external e-mail service provider Resend. The provider is Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. The data necessary for delivery (e.g., e-mail address, message content) is processed in this context. Further information on data processing by Resend can be found at: https://resend.com/legal/privacy-policy. Resend is certified under the EU-U.S. Data Privacy Framework. We have entered into a Data Processing Agreement (DPA) with Resend. Further information on data processing by Resend can be found at: https://resend.com/legal/privacy-policy.

The processing of the entered data is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time by e-mail to: support@tryconviction.com. The lawfulness of the data processing operations already carried out remains unaffected by the withdrawal.

6. PostHog

We use the web analytics service PostHog from the provider PostHog Inc., 2261 Market Street, #4008, San Francisco, CA 94114, USA, on our website. PostHog enables us to analyze user behavior on our website. In particular, information is collected about how visitors interact with our website (e.g., pages visited, click behavior, time spent, technical information about the device and browser used). Depending on the configuration, PostHog may use cookies or similar technologies to recognize users and enable analyses.

The data is processed in order to evaluate user behavior and to improve our web offerings technically and in terms of content.

The legal basis for use is Art. 6(1)(f) GDPR, as we have a legitimate interest in the analysis of our website; or, if you have granted consent to the use of cookies on the basis of a notice we have provided on the website (“cookie banner”), the lawfulness of use is governed by Art. 6(1)(a) GDPR, Section 25(1) TDDDG. Further information on data protection at PostHog can be found at: https://posthog.com/privacy.

7. Recipients of Personal Data

Notwithstanding the above sections, personal data is disclosed by us only to the following categories of recipients:

To our employees and to the hosting provider of our website. The hosting provider is Vercel Inc., located at 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel Inc. is certified under the EU-U.S. Data Privacy Framework. We have entered into a Data Processing Agreement (DPA) with our hosting provider.

Beyond this, your personal data will not be disclosed to third parties without your express consent, unless we are legally obligated to do so within the meaning of Art. 6(1)(c) GDPR, or the data disclosure is mandatory pursuant to Art. 6(1)(b) GDPR for the performance of a contractual relationship.

We note that data transmission on the internet (e.g., in communication by e-mail) can have security vulnerabilities. Complete protection of data against access by third parties is not possible.

8. Duration of Storage

We delete your personal data immediately after the purpose has been achieved. Accordingly, we store your data from your e-mails until your inquiry has been fully processed and completed. Thereafter, the information is generally deleted. Otherwise, a review is carried out annually to determine whether the data you have stored can be deleted. Session cookies are automatically deleted by us after your website visit. Access data and server log files are deleted after one week. Please note that for certain data, statutory retention obligations under commercial and tax law apply, of at least six (Section 257 of the German Commercial Code, HGB) or ten (Section 147 of the German Fiscal Code, AO) years.

9. Rights of the Data Subjects

You are not legally obligated to provide your personal data. However, the provision may be necessary for entering into a contract or for functions of the website. If data is not provided, a contract or a function on the website may, in certain cases, not be offered.

There is no automated decision-making on the website; profiling does not take place. The rights of data subjects arise in particular from Articles 15 to 23 and Article 77 GDPR, as well as from Sections 32 to 37 of the German Federal Data Protection Act (BDSG-neu).

With regard to your personal data, you have the right, vis-à-vis us, to:

  • Access , Art. 15 GDPR
  • Rectification , Art. 16 GDPR
  • Erasure , Art. 17 GDPR
  • Restriction of Processing , Art. 18 GDPR
  • Data Portability , Art. 20 GDPR.

If you have given consent to the processing of personal data, you have the right of

  • Withdrawal , Art. 7 GDPR

with effect for the future.

You furthermore have the right to lodge an

  • Objection , Art. 21 GDPR

to the processing of your personal data.

  1. You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you that is carried out pursuant to Art. 6(1)(f) GDPR (data processing based on a balancing of interests). If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

  2. In individual cases, we process personal data for the purpose of direct marketing. If this is the case for you, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection can be made informally and should, if possible, be directed to us, see above under 1. If you are of the opinion that the processing of personal data concerning you violates data protection law, you always have the

  • Right to Lodge a Complaint with the competent supervisory authority, cf. Art. 77 GDPR. Without prejudice to any other administrative or judicial remedy, you have this right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work, or place of the alleged infringement, if you are of the opinion that the processing of personal data concerning you violates the GDPR. The contact details of the data protection officers in the German federal states, the supervisory authorities for the non-public sector, broadcasting, the churches, in Europe, and in the rest of the world, as well as of the Virtual Data Protection Office, can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

The supervisory authority competent for us is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin.

Last updated: