Privacy Policy

1. Data Controller

The data controller pursuant to Art. 4(7) GDPR is:

2. Collection and Processing of Personal Data

We take the protection of your personal data very seriously. We collect and process personal data solely in accordance with the provisions of the General Data Protection Regulation (GDPR).

2.1 What Data We Collect

We collect personal data through the following services:

2.2 Purposes of Processing

We process your personal data for the following purposes:

• Scheduling and managing appointments
• Managing the waitlist for early access to our services
• Responding to inquiries and communicating about our offering
• Analyzing website usage and improving usability (consent-based)

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Art. 6(1)(a) GDPR – Processing is based on your consent, where required.
• Art. 6(1)(b) GDPR – Processing is necessary for the performance of a contract or pre-contractual measures.
• Art. 6(1)(f) GDPR – Processing is based on our legitimate interest in efficient communication and business development, where applicable.

4. Disclosure of Data to Third Parties

Your personal data will only be shared with third parties if:

• You have given your explicit consent (Art. 6(1)(a) GDPR),
• There is a legal obligation to do so (Art. 6(1)(c) GDPR), or
• It is necessary for the performance of our services (Art. 6(1)(b) GDPR).

We use the following third-party services, which process data on our behalf in accordance with Art. 28 GDPR (data processing on behalf of the controller):

• Google Calendar, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
• MailerLite, provided by MailerLite Limited, 88 Harcourt Street, Dublin 2, Ireland
• PostHog, provided by PostHog, Inc., 2261 Market St., #4008, San Francisco, CA 94114, United States of America (use of PostHog Cloud EU with data processing exclusively in data centers within the European Union)

These service providers may transfer data to third countries (e.g., the USA). In accordance with Art. 46 GDPR, we have concluded Data Processing Agreements (DPAs) with these providers. Where personal data is transferred to third countries, these providers rely on Standard Contractual Clauses (SCCs) to ensure an adequate level of data protection.

5. Data Retention

We store your personal data only for as long as necessary to fulfill the purposes for which it was collected. You may request deletion of your data at any time (see Section 6).

6. Your Rights as a Data Subject

You have the following rights under the GDPR:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to object (Art. 21 GDPR)
• Right to data portability (Art. 20 GDPR, where applicable)
• Right to lodge a complaint with a supervisory authority. In Germany, this is the data protection authority of your federal state.

7. Contact for Data Protection Inquiries

If you have questions about the collection or processing of your personal data, or would like to exercise your rights under the GDPR, please contact us at:

info@confido.cc

8. Use of Cookies

Our website uses cookies for different purposes. You can manage or delete them via your browser settings and change your cookie preferences at any time through the link in the footer of our website.

8.1 Necessary Cookies

We use cookies that are necessary to ensure the proper functioning and security of our website. These cookies are set automatically and do not require your consent:

• ml_guid – used to identify users who submit forms or surveys via MailerLite.
• mailerlite:webform:shown – used to track whether a visitor has already seen a MailerLite pop-up form.
• __cfduid – a security-related cookie set by Cloudflare (a CDN and web security service used by MailerLite) to identify trusted web traffic.

8.2 Analytics Cookies

With your consent, we use analytics cookies to understand how visitors use our website and to improve its usability:

• _posthog – used by PostHog to distinguish users and track website usage for analytics, session recordings, and heatmaps.

Additional cookies or localStorage entries may be set by PostHog, e.g., to manage opt-out settings or feature flags.