Privacy Policy for the Conversion-Boost Social Proof Tool
Last updated: February 2025
1. Data Controller for Tool Processing
Controller according to GDPR:
Web Solution Jog690 S.R.L.
Strada Ion Slavici, Nr. 13
Cam. Nr. 1, Scara B, Ap. 18
300539 Timișoara
Romania
Phone: +40 752 960 207
Email: [email protected]
Website: https://conversion-boost.info
2. What is the Conversion-Boost Tool?
Conversion-Boost is a comprehensive social proof and notification software that displays various types of notifications and popups on this website to build trust and increase conversions. The tool includes:
- Live Counter - Real-time visitor counter
- Conversion Notifications - Display of recent purchases/actions
- Email Collector Popups - Forms for lead generation
- Review Displays - Display of customer reviews
- Cookie Notifications - Cookie notices
- Countdown Timer - Time-based actions
- Informational Popups - Information messages
- Exit-Intent Popups - Offers when leaving the page
3. What Data is Collected and Processed?
3.1 Automatically Collected Technical Data
| Data Type | Purpose | Legal Basis |
|---|---|---|
| IP Address | Geo-location for country-specific display, fraud protection, visitor counting | Art. 6(1)(f) GDPR (legitimate interest) |
| Geo-Location (country, region, city) | Display of location-specific social proof messages ("15 people from Munich purchased") | Art. 6(1)(f) GDPR (legitimate interest) |
| User-Agent (browser, OS, device type) | Display optimization, unique visitor tracking | Art. 6(1)(f) GDPR |
| Screen Resolution | Responsive popup adjustment | Art. 6(1)(f) GDPR |
| Referrer URL | Traffic source analysis | Art. 6(1)(f) GDPR |
| Timestamp | Temporal assignment of actions, real-time counter | Art. 6(1)(f) GDPR |
| Session ID | Assignment of actions to a visit | Art. 6(1)(f) GDPR |
3.2 Behavioral Data
- Pages visited and page views
- Time spent on individual pages
- Scroll behavior and mouse movements
- Exit-intent triggers (detection of intent to leave the page)
- Clicks on popup elements and buttons
- Interactions with forms (completed, submitted, abandoned)
- Popup display frequency (to avoid spam)
Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner) or Art. 6(1)(f) GDPR (legitimate interest in conversion optimization)
3.3 Voluntarily Provided Data
If you fill out forms in popups (e.g., newsletter signup, download request), the following data is collected:
- Email address (required)
- Name, first name (optional, depending on form)
- Phone number (optional, depending on form)
- Other voluntary information depending on form
Legal basis: Art. 6(1)(a) GDPR (consent) or Art. 6(1)(b) GDPR (contract performance if you request a service)
4. Use of Cookies and Similar Technologies
4.1 Overview of Cookies Used
| Cookie Name | Type | Purpose | Retention Period |
|---|---|---|---|
| _66sp_session | Session Cookie | Tool functionality during your visit | Until browser closure |
| _66sp_tracking | Tracking Cookie | Recognition of visitor across multiple sessions | 30 days |
| _66sp_popup_shown | Functional | Avoidance of multiple popup displays | 7-30 days (configurable) |
| _66sp_geo | Functional | Caching of your location (country/region) | 24 hours |
4.2 LocalStorage
The tool stores the following data in your browser's LocalStorage:
- User preferences: "Do not show popup again", language, settings
- Popup statistics: Number of popups displayed to avoid spam
- Temporary form data: Caching of inputs (only until submission)
Retention period: Until manual deletion by you or by the tool (depending on configuration 7-90 days)
4.3 Cookie Consent
Tracking cookies and LocalStorage data are only set if you have consented via this website's cookie banner. Functionally necessary cookies can be set without consent.
5. Data Transfer and Storage on Our Servers
5.1 Transmitted Data
The following data is transmitted encrypted (HTTPS) to our servers with each interaction:
- All data mentioned under sections 3.1 and 3.2
- Time and type of interaction (popup displayed, clicked, closed)
- Displayed popup variant (for A/B testing)
- Success or rejection of conversion
- Entered form data (upon form submission)
5.2 Server Location and Hosting
Our servers are located in the European Union (Frankfurt, Germany).
Hosting Provider:
Cloudways Ltd.
Eco Tower, 32nd Floor
Plot C-3, Sector 67
SAS Nagar, Sahibzada Ajit Singh Nagar
Punjab 160062
India
Server location: The servers are physically located in the European Union (Frankfurt, Germany - AWS / DigitalOcean).
We have concluded a data processing agreement with our hosting provider according to Art. 28 GDPR. The provider processes data only according to our instructions and is contractually obligated to comply with GDPR.
No data transfer to third countries outside the EU – except for optional services mentioned under section 6.
5.3 Retention Periods
| Data Type | Retention Period on Our Servers |
|---|---|
| IP addresses (anonymized) | 90 days, then completely deleted |
| IP addresses (full, for geo-lookup) | 7 days, then shortened to anonymized form |
| Geo-location (country, region, city) | 12 months |
| Server logs (technical errors) | 30 days |
| Interaction data (clicks, views, conversions) | 12 months (anonymized aggregated statistics without personal reference can be stored longer) |
| Form data (email, name, etc.) | Immediately forwarded to website operator, deleted at our end within 7 days |
| Session data | 24 hours after end of session |
6. Geo-Location and IP Tracking
6.1 MaxMind GeoIP2 Database
To determine your location (country, region, city), we use the MaxMind GeoIP2 database.
How it works:
- Your IP address is captured when the page loads
- The IP address is matched against the MaxMind database (occurs on our server, not at MaxMind)
- Your approximate location is determined (country, region, city)
- This information is used to display location-specific social proof messages
- Your IP address is shortened to the last 2 octets after 7 days (e.g., 192.168.XXX.XXX)
MaxMind Inc.
14 Spring Street, 3rd Floor
Waltham, MA 02451
USA
MaxMind Privacy Policy: https://www.maxmind.com/en/privacy-policy
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in localized marketing messages)
7. Disclosure of Data to Third Parties
7.1 Website Operator (Main Recipient)
The operator of this website receives from us:
- Form data: All data you voluntarily enter in popups (email, name, etc.)
- Statistics: Anonymized data on popup performance, conversion rates, click behavior
- Dashboard access: The website operator can view reports and statistics in our system
7.2 Notification Handlers (Optional - only if activated by website operator)
If the website operator has activated notifications via external services, data may be transmitted to the following recipients:
| Service | Provider/Country | Transmitted Data | Purpose |
|---|---|---|---|
| Twilio (SMS/Call) | Twilio Inc., USA | Email, name, phone (if provided), conversion event | SMS/call notification to website operator |
| WhatsApp Business | Meta Platforms Inc., USA | Email, name, conversion event | WhatsApp message to website operator |
| Slack | Slack Technologies Inc., USA | Email, name, conversion event, timestamp | Slack message to website operator |
| Discord | Discord Inc., USA | Email, name, conversion event, timestamp | Discord message to website operator |
| Microsoft Teams | Microsoft Corporation, USA | Email, name, conversion event, timestamp | Teams message to website operator |
| Telegram | Telegram Messenger Inc., UAE | Email, name, conversion event, timestamp | Telegram message to website operator |
| Google Chat | Google LLC, USA | Email, name, conversion event, timestamp | Google Chat message to website operator |
| Email (SMTP) | Depending on provider | Email, name, conversion event, timestamp | Email notification to website operator |
| Webhooks (Custom) | Configured by website operator | All conversion data in JSON format | Integration with website operator's third-party systems |
7.3 Third Country Transfer
When using notification handlers, data is transferred to third countries (USA, UAE). This transfer is based on:
- EU Standard Contractual Clauses (SCCs) according to Art. 46(2)(c) GDPR
- Additional protective measures: Encrypted transmission (TLS), minimal data transfer
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest of website operator in real-time notifications)
You have the right to object to the transfer. Contact us at the email address provided above.
8. Legal Bases of Processing (Summary)
| Processing | Legal Basis | Legitimate Interest |
|---|---|---|
| Display of popups | Art. 6(1)(f) GDPR | Conversion optimization, user engagement |
| Tracking cookies | Art. 6(1)(a) GDPR | Consent via cookie banner |
| IP address/geo-tracking | Art. 6(1)(f) GDPR | Localized marketing messages, fraud protection |
| Form data processing | Art. 6(1)(a/b) GDPR | Consent or contract performance |
| Statistics creation | Art. 6(1)(f) GDPR | Analysis of tool performance |
| Notification handlers | Art. 6(1)(f) GDPR | Real-time notification of website operator |
9. Your Rights as a Data Subject
You have the following rights at any time:
9.1 Right of Access (Art. 15 GDPR)
You can request information about your personal data stored with us.
9.2 Right to Rectification (Art. 16 GDPR)
You can request the correction of inaccurate data or the completion of incomplete data.
9.3 Right to Erasure (Art. 17 GDPR)
You can request the deletion of your data, provided there are no legal retention obligations.
9.4 Right to Restriction of Processing (Art. 18 GDPR)
You can request the restriction of processing of your data.
9.5 Right to Data Portability (Art. 20 GDPR)
You can receive your data in a structured, commonly used and machine-readable format.
9.6 Right to Object (Art. 21 GDPR)
You can object at any time to the processing of your data on grounds relating to your particular situation.
9.7 Right to Withdraw Consent (Art. 7(3) GDPR)
Where processing is based on your consent, you can withdraw this consent at any time. The lawfulness of processing carried out until withdrawal remains unaffected.
How to exercise your rights:
Contact us at: [email protected]
10. Opt-Out Options
You can disable the tool in various ways:
10.1 Withdraw Cookie Consent
- Reopen the cookie banner (usually via a link in the footer of this website)
- Withdraw consent for marketing/statistics cookies
- The tool will be deactivated
10.2 Browser Settings
- Delete cookies and LocalStorage in your browser
- Block third-party cookies in browser settings
- Use incognito/private mode
10.3 Do Not Track (DNT)
Our tool respects your browser's "Do Not Track" signal. With DNT activated, no tracking cookies are set.
10.4 IP-based Exclusion
If you want your IP address to be permanently excluded from data collection, send us an email at [email protected] with your current IP address.
11. Data Security
We employ technical and organizational security measures:
- Encryption: All data transmissions via HTTPS (TLS 1.3)
- Access control: Only authorized employees have access to personal data
- Pseudonymization: IP addresses are shortened after 7 days
- Regular backups: Stored encrypted
- Firewall & Intrusion Detection: Protection against unauthorized access
- Regular updates: Software updates and security patches
12. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority about our processing of your data.
Competent supervisory authority in Romania:
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, București 010336
Website: https://www.dataprotection.ro
Email: [email protected]
You may also contact the supervisory authority in your country of residence.
13. Changes to This Privacy Policy
We reserve the right to adapt this privacy policy to reflect changes in legislation or changes to our tool. The current version can always be found at this URL.
Last updated: February 2025
14. Contact and Data Protection Officer
If you have questions about the processing of your personal data, your rights or this privacy policy, please contact:
Web Solution Jog690 S.R.L.
Strada Ion Slavici, Nr. 13, Cam. Nr. 1, Scara B, Ap. 18
300539 Timișoara, Romania
Phone: +40 752 960 207
Email: [email protected]
Website: https://conversion-boost.info
15. Technical Notes for Website Operators
This section is directed at website operators who embed the Conversion-Boost Tool:
15.1 Cookie Banner Integration (Borlabs Cookie)
The Conversion-Boost Tool must be correctly configured in your cookie banner (e.g., Borlabs Cookie):
| Field | Value |
|---|---|
| Service name | Conversion-Boost Social Proof Tool |
| Provider | Web Solution Jog690 S.R.L. |
| Purpose | Social proof notifications, lead generation, conversion optimization, visitor counting |
| Privacy Policy URL | https://conversion-boost.info/en/privacy-policy-tool |
| Cookie category | Marketing (recommended) or Statistics |
| Cookies | _66sp_session, _66sp_tracking, _66sp_popup_shown, _66sp_geo |
Opt-in code (upon consent):
Use the embed script provided to you by Web Solution Jog690 S.R.L. The exact implementation depends on your integration method. For questions, contact: [email protected]
Opt-out code (upon rejection/withdrawal):
The opt-out code deletes all cookies and LocalStorage data set by the tool. This code will be provided to you during tool implementation.
15.2 Data Processing Agreement (DPA)
Important for website operators: You need a Data Processing Agreement (DPA) with us according to Art. 28 GDPR, as we process personal data on your behalf.
You can request the DPA at: [email protected]
15.3 Notification Handlers Activated?
If you use notification handlers (Slack, Discord, Twilio, etc.), you must also mention this in your own privacy policy, as these services are separate controllers and receive data directly from us.
15.4 Recommended Mention in Your Privacy Policy
Add the following text to your privacy policy: