Data privacy statement conversario
conversario is a service by ferret go GmbH
Privacy Statement for the conversario website
Note: Data processing that takes place in the context of the use of the conversario software is legitimized by a contract for data processing on behalf and is not the subject of this data protection notice.
The provider (in the following also referred to as “we”) collects, uses and stores your personal data in accordance with the EU General Data Protection Regulation (GDPR), the German Data Protection Act (“Bundesdatenschutzgesetz”) and the German Telemedia Act (“Telemediengesetz”). Personal data means any information relating to an identified or identifiable natural person. Below we inform you about the type, extent and purpose of the collection and use of personal data.
1. Who is responsible for data processing and who can you contact?
The party responsible for data processing is:
ferret go GmbH
The internal responsible person for all issues related to data privacy is our data privacy coordinator:
Phone: +49 3338 358 00 69
Our data privacy officer is:
René Rautenberg ER Secure GmbH
In der Knackenau 4
Phone: 089 55294870
Fax: 089 552 9 4 87 9
2. Which data are being processed and what are the sources of these data?
We process personal data (Art. 4 Nr. 1 GDPR) which we receive in the course of conducting our business as provider of a cloud solution for social media management (name, addresses, email-adresses, further data to technologies or communication content).
3. For what purpose and on what legal basis are the data processed?
We process personal data in order to be able to provide our services as a social media management company and in order to receive and reply your requests. We process personal data in accordance with the following data protection-related provisions:
a) Processing personal data with your consent (Art. 6 para. 1 a GDPR):
We process data according to Art. 6 para 1 a GDPR in order to communicate with you and advert for our services.
b) Processing personal data to fulfil contractual obligations (Art. 6 para. 1 b GDPR):
If we enter into a contractual relation (including the initiation of contractual relation) the processing of personal data takes place for the provision of our services as cloud software provider to Art. 6 para. 1 b GDPR.
c) Processing personal data to fulfil legal requirements (Art. 6 para. 1 c GDPR):
In the event that our company is subject to a legal obligation which requires the processing of personal data, such as for example the fulfilment of tax obligations, the processing of personal data is made pursuant to Art. 6 para. 1 lit. c GDPR.
d) Processing personal data according to Art. 6 para. 1 d GDPR:
In exceptional cases the processing of personal data may be required in order to protect the vital interests of the data subject or another natural person. This could for example be the case were a visitor will be injured in our premises and in consequence his name, age, health insurance data or other vital information need to be transmitted to a doctor, hospital or other third party. In that event the processing will be made pursuant to Art. 6 para. 1 lit. d GDPR.
e) Processing personal data according to Art. 6 para. 1 d GDPR:
Finally, data processing activities can be conducted on the basis of Art. 6 para. 1 lit. f GDPR which covers data processing activities which are do not fall under any of the before mentioned legal provisions and which covers data processing which is necessary for the purposes of the legitimate interests pursued by us or a third party and provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
4. Legitimate interests of the controller that are being pursued by the controller or a third party
If the processing of personal data is based on Article 6 para. 1I lit. f GDPR our legitimate interest is the conduct of our business and the related communication with you (recital 47 GDPR).
For security reasons and in order to protect confidential information, such as requests submitted via our contact form, we use SSL-encryption. If an encrypted connection has been effected the address-line of your browser will show „https://“ instead of „http://“ and you might notice a locker symbol in your browser. If SSL is activated third parties cannot read data that you send to us.
6. Server Logfiles
browser type/ browser version
your operating system
referrer URL (or the website visited previously)
date and time of the server
request amount of transmitted data
your internet service provider
These data will be collected and processed only for the purpose of measuring the statistics of our website performance. These data will not be connected with data from other data sources.
"Google" is a group of companies and consists of Google Ireland Ltd. (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland as well as Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and other affiliated companies of Google LLC.
8.1 Google Ads
We use "Google Ads" (formerly Google AdWords) on our website, a service provided by Google Ireland Limited. Google Ads enables us to draw attention to our attractive offers with the help of advertising media on external websites. This enables us to determine how successful individual advertising measures are. These advertising media are delivered by Google via so-called "AdServers". For this purpose, we use so-called AdServer cookies, which can be used to measure certain parameters for measuring success, such as display of the ads or clicks by users. If you access our website via a Google ad, Google Ads will store a cookie on your PC. These cookies usually lose their validity after 30 days. They are not intended to identify you personally. The following information is usually stored as analysis values for this cookie: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), opt-out information (marking that the user no longer wishes to be addressed). These cookies allow Google to recognize your web browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked across Ads customers' websites. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising tools; in particular, we cannot identify users on the basis of this information. Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of Google Ads. According to our knowledge, Google receives the information that you have called up the relevant part of our website or clicked on an ad from us. If you have a user account with Google and are registered, Google can assign the visit to your user account. Even if you are not registered with Google or have not logged in, there is a possibility that Google learns your IP address and stores it.
We use Google Ads for marketing and optimization purposes, in particular to display ads that are relevant and interesting to you, to improve campaign performance reports and to achieve a fair calculation of advertising costs. This is also our legitimate interest in the processing of the above data by the third-party provider. The legal basis is Art. 6 para. 1 p. 1 lit. f) DSGVO.
You can prevent the installation of cookies by deleting existing cookies and deactivating a storage of cookies in the settings of your web browser. We point out that in this case you may not be able to use all features of our website in full. It is also possible to prevent the storage of cookies by setting your web browser to block cookies from the domain "www.googleadservices.com" (https://www.google.de/settings/ads). We would like to point out that this setting will be deleted when you delete your cookies. In addition, you can deactivate interest-based ads via the link http://optout.aboutads.info. We would like to point out that this setting will also be deleted when you delete your cookies.
Information of the third-party provider: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland.
Further information on data use by Google, on setting and objection options, and on data protection can be found on the following Google web pages:
Google website statistics: https://services.google.com/sitestats/de.html
8.2 Google Analytics
We have activated the functionality IP anonymization. In case of activation of the IP anonymization, Google will shorten the IP address for Member States of the European Union as well as for other parties to the Agreement on the European Economic Area before sending it to the USA. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA. On our behalf Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website provider.
Google will not associate your IP address with any other data held by Google.
Opposition to the data collection
You can prevent the collection of your data by Google Analytics by setting an opt-out cookie will be set which prevents the collection of your data on future visits to this website.
8.3 Google Tag Manager
Please note that American authorities, such as intelligence agencies, could potentially gain access to personal data that is inevitably exchanged with Google due to the Internet Protocol (TCP) when this service is integrated, due to American laws such as the Cloud Act.
Third-party provider information: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland.
Further information on data protection can be found on the following Google web pages:
FAQ Google Tag Manager: https://www.google.com/intl/de/tagmanager/faq.html
Google Tag Manager Terms of Service: https://www.google.com/intl/de/tagmanager/use-policy.html
8.4 Google reCAPTCHA
We use the service "Google reCAPTCHA" (hereinafter: "reCAPTCHA") offered by Google on our website. reCAPTCHA is intended to check whether the data input on the website (e.g. in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the visitor to the website based on various characteristics. This analysis begins automatically as soon as the user accesses the website. For the analysis, reCAPTCHA evaluates various information (e. g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The processing is based on Art. 6 para 1 p. 1 lit. f) DSGVO. We have a legitimate interest in protecting our web offers from abusive automated spying and from unsolicited e-mail advertising (SPAM). We have no knowledge of the storage period for reCAPTCHA and no possibility to influence it.
You have the possibility to object to the processing of your data at any time. Your right to object exists for reasons arising from your particular situation, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves the assertion and exercise of or defense against legal claims (Article 21 (1) DSGVO). A right to object exists in particular if the processing is not necessary for the performance of a contract with you, which is presented by us in each case in the preceding description of the functions. In such a case, the processing of the request may not be continued. In the event of your justified objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.
9. LinkedIn Insight Tag
LinkedIn members can control the use of their personal data for advertising purposes in their account settings.
10. conversario Tool
Registration is not required for viewing the conversario website.
In order to explore all of conversarios features you must register for a free trial testversion or a full account. For the registration process we need:
Your company address
Your business email address
Your telephone number
Your Data will be stored and processed according to the legal regulation of Art. 6 Abs. 1, lit b DSGVO- in compliance with our contractual obligations towards clients acquiring our services. Data is not disclosed to or shared with third parties. All requested information is solely used to provide our service to you.
11. Facebook Connect
In order to interact with clients Facebook pages, clients need to authorize access with minimal permissions via ‘Facebook Connect’. The inherent storage and processing of personal data aligned with the regulations according to Art. 6 Abs. 1, lit b DSGVO- in compliance with our contractual obligations towards clients acquiring our services. Conversario obtains access and authorisations as followed:
administration authorization of your site
comment authorisation in the name of your site
Authorisations are revocable at any given time threw deletion of ‘Facebook Connect’ (Page: https://www.facebook.com/settings?tab=applications) by the account administrator. Further information to agreement procedures, guidelines on consent and how to withdraw from such can be found in Facebook's data protection declaration: https://www.facebook.com/about/privacy/your-info-on-other
12. YouTube Applications
12.1. About conversario YouTube applications
This Privacy Notice describes how conversario processes any personal data that we receive through the conversario application(s) for YouTube.
Our obligation is to process your personal data at all times in accordance with our agreement(s), the YouTube terms, conditions and policies, and apply appropriate measures to secure your data.
By “personal data”, we mean any information which relates to an identified or identifiable individual.
By ‘conversario application(s) for YouTube’ (hereinafter the “app”), we mean any software applications developed by conversario, which facilitates the exchange of data between the conversario services and your YouTube account(s) by using the Youtube API services.
The use of the app requires a subscription for the conversario services. The app is aimed at commercial use, and is not for personal use for consumers. Unless otherwise agreed in writing between the parties, the conversario services are subject to the terms and conditions found at https://www.conversar.io/en/terms.
12.2. Descriptions of processing activities
12.2.1 – Delivery of services
Personal data is collected in order for conversario to:
provide you with the conversario services management, moderation and analytics for your user comments on social media network of YouTube
operate and ensure proper functionality of your conversario services
220.127.116.11 Category of personal data
We process the following categories of personal data from you:
Channel(s) information and content which originates from your channel(s), for example:
content/videos, hereunder: ID, title, link, description, category, created date, modified date, name of sender, ID of sender, comments, favorite count, view count, number of likes and dislikes
comments/posts, hereunder: message, created date, updated date, reply count, channel ID, Google+ User ID, author’s profile url, author’s profile image url. comments/post associated data such as name/username, unique user ID, meta-data such as comments/posts and contents date, time, sentiment and user ratings
We collect this information:
directly from your account(s)/channel(s) of YouTube
18.104.22.168 Basis for processing
We process personal data as described in this section based on the following basis:
In order for conversario to successfully deliver the services in accordance with the commercial agreement between the parties, conversario must receive and store the information listed above in 22.214.171.124
We will transfer your personal data to the following recipients:
conversario service backend - all fully operating in the EU/EEA under the legal restrictions of this data privacy notice https://www.conversar.io/en/privacy
subcontractors (sub-processors) fully operating in the EU/EEA and legally bound to EU/EEA privacy regulations
Hetzner Online GmbH I Industriestr. 25 91710 Gunzenhausen Deutschland I https://www.hetzner.de/rechtliches/datenschutz
your users (employees or contractors) on the conversario services, in order to provide the conversario services
We will store your personal data as long as is necessary for the mentioned purpose. Conversario must delete your personal data in connection with the termination of the commercial agreement between you and conversario.
Except as set forth above in 126.96.36.199, conversario will not disclose or share your personal data with third parties unless it is lawful, and to the extent permitted by law, notify you thereof. Conversario may disclose or share personal data if:
you instruct or consent to conversario doing so
conversario is required to do so by law, or as required by administrative or court order
conversario needs to defend, protect or exercise its legal rights, or defend against legal claims or demands
we may agree otherwise in relation to this matter in an agreement/addendum
12.4. Transfer to countries outside of the EU/EEA
Transfers to third countries outside of the EU/EEA will not occur.
As conversario solely processes data on your behalf, as a data processor, conversario requires you to inform individuals of your collection practise as entailed by the use of conversario Services. In addition to complying with the conditions for the app, you must comply with the YouTube terms of service found at https://www.youtube.com/t/terms when accessing your accounts through the app. For clarity, the same terms of service apply regardless of whether you access it through the YouTube interface or conversario services.
You understand that the YouTube and Google services which you may access through the conversario services, is subject to the http://www.google.com/policies/privacy.
In addition to your right to request removal of your personal data from the app and conversario services, you may also revoke the conversario’s authorization to access your data at the following link: https://security.google.com/settings/security/permissions
13. Contact Form
On our website we provide a contact form for you in order to provide you the possibility to contact us electronically. If you use our contact form we store and process the data entered in the form. These are the following data:
your company name
Alternatively you can contact us by email. In this case we store and process the data submitted by e-mail. We do not transfer personal data to third parties. Data will be used only in order to be able to reply to your request. Storing and processing your personal data in this context is based on Art. 6 para 1, lit f GDPR.
14. Facebook - Social Plugin
On our pages plugins of the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated. The processing is based on Art. 6 para. 1 f) GDPR. The Facebook plugins can be recognized by the Facebook logo or the “Like-Button” (“Like”) on our site. An overview of the Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/.
If you do not wish Facebook to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.
15. Period of Data Storage
We process and store personal data only for the period, which is required to meet the purpose of processing, or as long and to the extent as statutory laws require us to process and/or store such data.
If the purpose of processing does not apply anymore and the applicable statutory retention requirement expires, we will as a matter of routine erase data or restrict the processing of data in accordance with the applicable statutory laws.
16. Rights of Data Subject
The data subject has gem. Art. 15 GDPR the right to obtain free information on request about the personal data stored about him as well as the purpose of the data processing. The data subject has also gem. Articles 16, 17 and 18 GDPR the right to correct incorrect data and block and delete his personal data. Moreover the data subject has, subject to Art. 20 GDPR, the right to receive the personal data concerning him or her, which he or she has provided to us, in a structured, commonly used and machine-readable format, and the right to transmit those data to another controller without hindrance from our part. According to Art. 21 (1) GDPR, the data subject shall also have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Art. 6 (1) GDPR. We will comply with the aforementioned requests if and to the extent such compliance is required by the applicable statutory laws. Requests for access to and rectification or erasure of personal data or restriction of processing may be directed to the email or post address stated in our website’s imprint. Each data subject has the right to lodge a complaint with a supervisory authority of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes the GDPR.
17. Right to involve a public authority
As affected person you have the right to involve the responsible public authority. This would be:
Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg
Stahnsdorfer Damm 77
Phone: 033203 356-0
Fax: 033203 356-49