Privacy Notice ConvertRun

‘Personal Data’ refers to any information that relates to an identified or identifiable natural person, such as your name or email address. When you visit our website or communicate with us, we may process Personal Data related to you (‘Your Personal Data’) in exchange for our services. In such cases, Convertrun is the controller of Your Personal Data.

When you upload or provide files and information that may contain personal data related to you or others, and process such files and information using our services (‘User Files’), you remain fully responsible for such personal data contained in the User Files.

Below, we provide information about our processing of Your Personal Data, your rights regarding Your Personal Data, and the measures we take to maintain the privacy and security of Your Personal Data.

If you provide us with the personal data of other people (such as family members or work colleagues) or provide us User Files containing personal data related to others, please ensure they are aware of this Privacy Notice. Only provide us with their data if you are authorized to do so and such data is accurate.

Our website, desktop app, mobile apps, and communications may contain links to other websites. If you follow a link to any of those websites, please note that any personal information you submit will be processed according to their privacy notices, and Convertrun is not responsible for those websites. Please review their privacy notices before submitting any personal information.

This Privacy Notice is drafted in accordance with applicable privacy laws. Depending on your location, this might include the revised Turkey Federal Data Protection Act (‘FADP’), the California Consumer Privacy Act, or the EU General Data Protection Regulation (‘GDPR’).

Please note that this information may be reviewed and updated occasionally. We recommend regularly checking this privacy policy for any changes.

FAQs:

1. What personal data does Convertrun collect through its website and for what purposes?

In brief: We collect Your Personal Data as required to provide our services to you and/or improve our services, regardless of whether you are a free or paying user.

2. How does Convertrun protect Your Personal Data?

In brief: Ensuring the safety and security of our services and Your Personal Data is a priority for us.

3. How does Convertrun use Your Personal Data?

In brief: We use Your Personal Data to provide you with high-quality services. Your privacy is our priority, and we do not use Your Personal Data for any unlawful purposes.

4. Disclosure of Your Personal Data

In Summary: We share some of your personal data to provide our services effectively. Rest assured, we do not sell your personal data or share it with spammers.

Convertrun may disclose your personal data to the following types of recipients as necessary:

• External Service Providers: We engage third-party services for hosting, software, app development, email services, payment processing, and more. These providers help us deliver our services efficiently and maintain high service quality. Data transfers are governed by data processing agreements in accordance with GDPR (Art. 6 (1) f) and FADP (Art. 9).
• Business Transactions: Should we undergo a merger, acquisition, or sale, your data may be transferred to potential business partners. This is done to support our company's growth (Art. 6 (1) f GDPR).
• Legal Compliance: We may disclose your data to law enforcement, public authorities, or courts to comply with legal obligations or in response to legal processes (Art. 6 (1) c GDPR).
• Legal Obligations and Protection: Your data may also be shared with other entities as required by law or to protect our rights and the safety of our customers and third parties (Art. 6 (1) c GDPR and Art. 6 (1) f GDPR).

Some of these providers may process your personal data outside the EU/EEA. For details on the protective measures used for data transfers to countries outside the EU/EEA, please refer to the relevant div below.

4.1 Essential Providers

Note: If you choose to pay via invoice generated directly by us through Stripe, the following divs (4.1.1 - 4.1.6) do not apply.

4.1.1 Adyen

To process credit card payments, we transfer your data to Adyen N.V. (Amsterdam, Netherlands). This transfer is necessary for payment processing under our contract (Art. 6 (1) b GDPR) and our legitimate interest to offer diverse payment options (Art. 6 (1) f GDPR).

4.1.2 GoCardless

For direct debit payments, your data is shared with GoCardless Ltd (London, UK). GoCardless operates under its own privacy policy. For details, visit GoCardless Privacy Policy.

4.1.3 Recurly

To manage subscriptions and billing, your data is sent to Recurly Inc. (San Francisco, USA). This is done to handle billing and subscription management effectively (Art. 6 (1) b GDPR and Art. 6 (1) f GDPR).

4.1.4 Paypal/Braintree

For payments through PayPal/Braintree, your data is processed by PayPal Pte. Ltd. and Braintree. Braintree acts as a data controller. For details, refer to Braintree Privacy Policy.

4.1.5 Google Pay

Your data for Google Pay transactions is managed by Google Ireland Limited. Google Pay operates under its own privacy policy, which can be found here.

4.1.6 Apple Pay

Apple Pay handles your data through Apple Distribution International Limited. For details, see Apple Pay’s privacy policy at Apple Pay Privacy Policy.

4.1.7 Stripe (B2B Customers Only)

For direct debit payments, we use Stripe (Dublin, Ireland). Stripe’s privacy policy can be accessed here.

4.1.8 Hotjar

Hotjar Ltd. (Malta) helps us collect user feedback through surveys and polls. The data processing is governed by our agreement with Hotjar. For more details, see div 7 below.

4.1.9 Typeform

Typeform (Barcelona, Spain) is used for collecting and analyzing feedback. For details on their data processing, visit Typeform Privacy Policy.

4.1.10 HubSpot

HubSpot (Dublin, Ireland) manages contact forms on our website. For more information, see div 7 below.

4.1.11 Google reCAPTCHA

We use Google LLC’s reCAPTCHA to prevent spam and automated submissions. Details about Google's data processing are available at Google Privacy Policy.

4.2 Analytics Providers

4.2.1 Kustomer

With your consent, feedback collected through Kustomer (Menlo Park, CA) helps us improve our services. See div 7 for more details.

4.2.2 Google Analytics

Google Analytics (Mountain View, CA) is used for analyzing website activity. For more information, refer to the data processing details in div 7.

4.2.3 Hotjar

We also use Hotjar for analyzing user behavior on our website. See div 7 for details on data transfers.

4.2.4 HubSpot Analytics

We use HubSpot Analytics, a service provided by HubSpot (HubSpot, Inc., Dublin (European HQ), Ground Floor, Two Dockland Central Guild Street, Dublin 1) to analyze how visitors use our website. HubSpot processes Your Personal Data, such as your IP address, your location, information on your device and browser, and information on the pages you visited including date and time of each visit. We use this information to improve our services, our website and its functionalities, and for targeted marketing.

For data collection, HubSpot places a cookie on your device (see div 8 below for further information). You can consent to the processing of Your Personal Data by HubSpot (Art. 6 (1) a GDPR) and/or prevent it/withdraw your consent at any given time through our cookie banner. To withdraw your consent, go to the cookie settings at the bottom of our website. HubSpot uses this data to provide us aggregated reports on the use of the pages of our website. Most of the cookies used for this purpose expire when a session is closed; however, one of them remains and expires within two years.

Please note that if you consent to data processing for HubSpot Analytics, HubSpot may associate information from your previous page visits with your contact record that has been created based on contact forms provided by HubSpot on our website (see div 4.5 above) with the help of the cookies that have been placed on your device. This will enable us to see information on past visits to our site within your contact record. Your consent is the legal basis for our use of HubSpot Analytics (Art. 6 (1) a GDPR).

The transfer of Your Personal Data to HubSpot is governed by our data processing agreement (in connection with Art. 28 GDPR). HubSpot may process personal data outside the EU/EEA. For more information on protective measures for securing data transfers to countries outside the EU/EEA, please see div 7 below.

4.2.5 Dealfront

We use Dealfront, a marketing service provided by Dealfront Group GmbH (Durlacher Allee 73, 76131 Karlsruhe, Germany) ("Dealfront") on our website. We use this service to improve our sales and marketing. Its purpose is to analyze user behavior and, based on the results, help us make decisions relating to product and marketing optimization.

To enable this service, Dealfront places a tracking cookie on your computer (for further information on cookies see div 8 below). You can consent to the processing of Your Personal Data by Dealfront (Art. 6 (1) a GDPR) and/or prevent it/withdraw your consent at any given time through our cookie banner. To withdraw your consent, go to the cookie settings at the bottom of our website. Dealfront will process Your Personal Data (which can include your IP address, online identifiers, device identifiers, and device information, e.g. browser type, version, device type, user behavior, e.g. pages visited, session duration, use of specific website functions, e-commerce activity) to evaluate your use of the website.

Dealfront will process personal data within the EU/EEA and in line with their privacy notice available at https://www.dealfront.com/privacy-notice/.

4.3 Personalization and Advertising-Related Providers

4.3.1 Google Ads

a) Conversion Tracking

We use Google Ads Conversion Tracking (offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, the United States of America) on our website. We use this service to determine how successful our advertisements through the Google marketing network are (so-called Google Ads) based on the display of the advertisements and clicks by users. This service makes our advertisements more interesting for you and improves our marketing campaigns.

To enable this service, Google places a conversion tracking cookie on your computer (for further information on cookies see div 8 below). You can consent to the processing of Your Personal Data by Google (Art. 6 (1) a GDPR) and/or prevent it/withdraw your consent at any given time through our cookie banner. To withdraw your consent, go to the cookie settings at the bottom of our website.

The cookie expires within 30 days after visiting our website. It enables Google to recognize your internet browser and captures the unique cookie ID, the number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), and opt-out information (ads that the user no longer wishes to be addressed with). If you visit our website before the cookie expires, we and Google can recognize you, for example, if you click on an ad for our services and are redirected to our website. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures are particularly effective. We do not receive any further data from the use of the advertising tools; in particular, we cannot identify users on the basis of this information.

b) Google Ads Remarketing

We also use the online marketing service Google Ads Remarketing offered by Google (see 4.5 for company details) on our website. We use this function to present you with advertisements on our website based on your interests in Google Ads on other websites within the Google marketing network. For this purpose, Google analyzes your interaction with our website, e.g. which offers you were interested in, in order to be able to display relevant advertisements on other sites even after you have finished visiting our website.

To enable this service, Google places a cookie on your computer (for further information on cookies see div 8 below). You can consent to the processing of Your Personal Data by Google (Art. 6 (1) a GDPR) and/or prevent it/withdraw your consent at any given time through our cookie banner. To withdraw your consent, go to the cookie settings at the bottom of our website.

This cookie expires 180 days after visiting our website. Google uses this cookie to analyze how you interact with Google Ads on our website and on other websites to present you relevant advertisements.

c) General Information on Google Ads

Google acts as a data controller for Google Ads and may process Your Personal Data for other purposes. We have no control over the data that Google collects or the extent of the data collected by Google. We also have no knowledge of the content of the data transmitted to Google. For details about Google’s data processing, please refer to: https://policies.google.com/privacy. Google may process personal data outside the EU/EEA. For more information on protective measures for securing data transfers to countries outside the EU/EEA, please see div 7 below.

4.3.2 LinkedIn (LinkedIn Insight Tag)

We use the LinkedIn Insight Tag (provided by LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland) on our website. We use this function to capture visits of LinkedIn users to our website in order to track conversions from LinkedIn (i.e. if users came to our website based on our LinkedIn advertisements or articles) to track retargeting of our website visitors to LinkedIn. For this purpose, LinkedIn collects Your Personal Data (IP address, URL referrer, device and browser characteristics, timestamp, and events, such as page views).

LinkedIn places a cookie to capture Your Personal Data (see div 8 below for further information). You can consent to the processing of Your Personal Data by LinkedIn (Art. 6 (1) a GDPR) or prevent it or withdraw your consent at any given time through our cookie banner. To withdraw your consent, go to the cookie settings at the bottom of our website.

The cookie expires within 90 days. LinkedIn uses this cookie to collect and analyze visitor interactions with our website, track conversions, and retarget LinkedIn users who have visited our website with ads. LinkedIn provides us with aggregated reports on the effectiveness of our LinkedIn ads and the interaction with our website.

The transfer of Your Personal Data to LinkedIn is governed by our data processing agreement (in connection with Art. 28 GDPR). LinkedIn may process personal data outside the EU/EEA. For more information on protective measures for securing data transfers to countries outside the EU/EEA, please see div 7 below.

4.2.4 HubSpot Analytics

We use HubSpot Analytics, a service provided by HubSpot (HubSpot, Inc., Dublin (European HQ), Ground Floor, Two Dockland Central Guild Street, Dublin 1) to analyze how visitors use our website. HubSpot processes your personal data, such as your IP address, location, device and browser information, and details about the pages you visited, including the date and time of each visit. We use this information to improve our services, website functionality, and targeted marketing.

For data collection, HubSpot places a cookie on your device (see div 8 for more details). You can consent to the processing of your personal data by HubSpot (Art. 6 (1) a GDPR) and/or withdraw your consent at any time via our cookie banner. To withdraw your consent, go to the cookie settings at the bottom of our website. HubSpot uses this data to provide us with aggregated reports on website usage. Most cookies used for this purpose expire when a session ends; however, one may persist and expire within two years.

Please note that if you consent to data processing for HubSpot Analytics, HubSpot may link information from previous page visits to your contact record created through HubSpot forms on our website (see div 4.5). This enables us to view past visit information within your contact record. Your consent is the legal basis for our use of HubSpot Analytics (Art. 6 (1) a GDPR).

The transfer of your personal data to HubSpot is governed by our data processing agreement (in connection with Art. 28 GDPR). HubSpot may process personal data outside the EU/EEA. For more details on protective measures for securing data transfers to countries outside the EU/EEA, please refer to div 7.

4.2.5 Dealfront

We use Dealfront, a marketing service provided by Dealfront Group GmbH (Durlacher Allee 73, 76131 Karlsruhe, Germany) to enhance our sales and marketing efforts. This service helps us analyze user behavior and make informed decisions about product and marketing optimization.

Dealfront places a tracking cookie on your device (see div 8 for further information). You can consent to the processing of your personal data by Dealfront (Art. 6 (1) a GDPR) and/or withdraw your consent at any time via our cookie banner. To withdraw consent, go to the cookie settings at the bottom of our website. Dealfront processes personal data, including IP addresses, online and device identifiers, device information (e.g., browser type, version), user behavior (e.g., pages visited, session duration, e-commerce activity) to evaluate website usage.

Dealfront processes personal data within the EU/EEA and in accordance with their privacy notice available at Dealfront Privacy Notice.

4.3 Personalization and Advertising-Related Providers