Conversion10x

Privacy Policy

1. Controller of Data Processing

The responsible entity pursuant to Art. 4(7) GDPR is:

Aaron Friedrichsen Löwen Holding GmbH
Im Winkel 1
24980 Hörup
Germany

Email: team@conversion10x.com
Website: www.conversion10x.com

2. General Information

We process personal data exclusively in compliance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other relevant privacy laws and regulations.

3. Hosting and Content Delivery Network (CDN)

Hosting (Kinsta)

Our website is hosted by Kinsta Inc., 8605 Santa Monica Blvd #92581, West Hollywood, CA 90069, USA. Kinsta processes personal data such as IP addresses and log files to ensure the functionality and security of our website.

CDN (Cloudflare)

We use Cloudflare, provided by Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA, for enhanced performance and security. Cloudflare may process and store your IP address for this purpose.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Data transfers to the USA are based on Standard Contractual Clauses according to Art. 46 GDPR.

4. SSL/TLS Encryption

For security reasons, this website uses SSL/TLS encryption. Encrypted connections can be identified by the “https://” prefix in your browser’s address bar.

5. Cookies and Consent Management

Our website uses cookies. Your consent is managed through a consent management tool (cookie banner).

Categories used:

  • Necessary: essential cookies (legal basis: Art. 6(1)(f) GDPR)
  • Functional: social media plugins, third-party features (Art. 6(1)(a) GDPR)
  • Analytical: user analytics, e.g., Google Analytics, Hotjar (Art. 6(1)(a) GDPR)
  • Performance: optimization of site performance (Art. 6(1)(a) GDPR)
  • Advertising: personalized advertising, e.g., Meta Pixel (Art. 6(1)(a) GDPR)


You may withdraw your consent at any time.

6. Web Analytics and Tracking

Google Analytics

We use Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) with IP anonymisation enabled. Data is processed based on your consent (Art. 6(1)(a) GDPR).

Meta Pixel (Facebook)

Our website uses Meta Pixel for marketing performance measurement (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland). Processing is based on your consent (Art. 6(1)(a) GDPR).

Hotjar

We use Hotjar (Hotjar Ltd., Malta) to analyse user experience qualitatively. Data processing is based on your consent (Art. 6(1)(a) GDPR).

7. Appointment Scheduling (Calendly)

For appointment bookings, we use Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA. Submitted data (name, email, phone number if applicable) is stored in our CRM system to manage your request. Legal basis: Art. 6(1)(b) and (f) GDPR.

8. Newsletter & Marketing Emails (Lemlist)

We distribute newsletters and marketing emails using Lemlist (Lemlist SAS, 128 rue La Boétie, 75008 Paris, France). Subscriptions require a double opt-in process. Legal basis: Art. 6(1)(a) GDPR.

9. Web Fonts and Icons

We exclusively use locally stored web fonts and icons, avoiding external server requests.

10. Social Media Links

We link to our social media profiles (e.g., LinkedIn, Instagram). Data is only transmitted upon actively clicking these links.

11. Data Retention and Deletion

We retain personal data only as long as required by law or necessary for the respective purpose. Data is promptly deleted after this period.

12. Your Rights Under GDPR

Under GDPR, you have the right to:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (“right to be forgotten”, Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Withdraw consent (Art. 7(3) GDPR)

13. Right to Lodge Complaints

Under Art. 77 GDPR, you may lodge complaints with the responsible data protection supervisory authority:

Independent State Centre for Data Protection Schleswig-Holstein
Holstenstraße 98, 24103 Kiel, Germany

14. International Data Transfers

Transfers of data to third countries (e.g., the USA) occur based on EU Standard Contractual Clauses (Art. 46 GDPR) or your explicit consent according to Art. 49(1)(a) GDPR.

15. Data Processing Agreements (Art. 28 GDPR)

We have signed Data Processing Agreements according to Art. 28 GDPR with all processors who handle personal data on our behalf.

16. Data Protection Officer

The appointment of a Data Protection Officer is not legally required for us.

17. Do-Not-Track (DNT)

Currently, we do not respond to browser-based Do-Not-Track signals.

18. Amendments to this Privacy Policy

We reserve the right to update this policy due to changes in applicable laws or adjustments to our business activities.