Privacy Policy
Last updated: August 2025

Introduction

We, Convious B.V., take the protection of your personal data very seriously. This Privacy Policy explains how  we collect, use, and protect your personal data when you use our websites (including convious.com, info.convious.com, blog.convious.com, support.convious.com, status.convious.com, portal.convious.com, control.convious.com, and careers.convious.com) or when our software is embedded into our customers’ websites.

 

Who we are:

  • Controller: For visitors of our own websites and job applicants, the controller is Convious B.V, Herengracht 440, 1017 BZ Amsterdam, TheNetherlands 
  • Processor: When our software is embedded on a partner's site, we process data strictly on behalf of that partner.
  • Data Protection Officer:  Proliance GmbH, Munich, Germany (reachable via privacy@convious.com)

 

What data we collect:

  • Automatically collected: IP address, device/browser details, referrer URL, log files, cookie identifiers.
  • Provided by you: name, email, company, billing/payment details (via checkout), or job application data (CV, LinkedIn profile,
    references).
  • From partners: customer ID, product purchase details, marketing preferences.

 

Why we use your data: 

We process data only where there is a valid legal basis:

  • To provide our services and fulfill contracts (Art. 6(1)(b) GDPR).
  • To ensure website security and prevent fraud (Art. 6(1)(f) GDPR).
  • To comply with legal obligations (Art. 6(1)(c) GDPR).
With your consent for cookies, analytics, and marketing (Art. 6(1)(a) GDPR).


Cookies and tracking:

We use cookies and similar technologies to ensure our services work, to analyze traffic, and to personalize experiences. Consent is collected via our cookie banner and applies across our active subdomains:

  • convious.com
  • info.convious.com
  • blog.convious.com
  • support.convious.com
  • status.convious.com
  • careers.convious.com
  • portal.convious.com
  • control.convious.com

Types of cookies used:

  • Strictly Necessary – essential for core site functions (checkout, login).
  • Functional – remember preferences and improve usability.
  • Analytics/Performance – help us improve our services (Google Analytics, Hotjar).
  • Marketing/Tracking – personalize offers and measure campaign effectiveness (HubSpot, social media pixels).

 

Examples:

  • Convious_cookie_id – functional webshop features (necessary, 24 months).
  • Convious_cookie_id – content/personalisation (optional, 24 months).
  • reduxPersist:session – remembers active session (necessary, session).
  • _ga – Google Analytics (analytics, 14 months).
  • Hotjar/HubSpot cookies – analytics/marketing (up to 12 months).

    You can always adjust your preferences in the cookie banner or via your
    browser settings.

 

Sub-processors:

We work with carefully selected sub-processors to provide hosting, analytics, payments, and support. You can find the current list here: sub-processors list.

 

Transfer outside the EEA

Where data is transferred outside the EEA, we rely on EU adequacy decisions or Standard Contractual Clauses to ensure protection.
 

 

How long we keep your data

  • Website logs: typically deleted after 14 months.
  • Purchase/payment data: retained in line with financial regulations (minimum 7 years); chargeback data may be kept for 120 days.
  • Applicant data: deleted after 12 months unless you consent to longer retention.

     


    Your rights:

    Under the GDPR, you have the right to access, rectify, delete, restrict, object, and port your data. You may withdraw consent at any time. Complaints may be lodged with your local supervisory authority.


    Security:

    We protect your data with encryption (in transit and at rest), strict access controls, audit logs, and monitoring. We regularly review security together with our independent German Data Protection Officer (Proliance GmbH).


    Changes:

    We may update this Privacy Policy. The latest version will always be available on our website.

 

Contact:

Privacy@convious.com