Last updated: 06.04.2026
The controller responsible for the processing of personal data on this website is:
Funnelt.comIf applicable:
This Privacy Policy explains how we process personal data:
Depending on how you interact with us, we may process the following categories of personal data:
When you access our website, we process technical data and server log data to provide the site, ensure stability and security, prevent misuse, and troubleshoot errors.
Legal basis: Art. 6(1)(f) GDPR (legitimate interests in secure and reliable website operation). Legitimate interest can only be used where the organisation has checked that the individual's rights are not overridden.
If you contact us, request a demo, or ask for information about our services, we process the data you provide to respond to your request and handle pre-contractual or contractual communication.
Legal basis:
If you become a customer, we process account, contract, billing, and service-related data to provide the Funnelt service, manage your account, provide support, and administer the business relationship.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and, where required, Art. 6(1)(c) GDPR (legal obligations).
If you subscribe to a newsletter or agree to receive marketing communications, we process your contact details for that purpose.
Legal basis: Art. 6(1)(a) GDPR (consent), unless another lawful basis clearly applies under applicable law. You can withdraw consent at any time with future effect.
If we use analytics or non-essential cookies or similar technologies on our website, we will only do so in accordance with applicable law. Where consent is required, such technologies will only be activated after consent has been obtained.
Further details are provided in our [Cookie Notice / Consent Manager].
Legal basis:
When a customer embeds the Funnelt widget on its own website, the customer will usually determine why the lead data is collected and how it is used. In that setup, the customer is the controller and Funnelt acts as the processor on the customer's behalf. Processors must act under a contract with the controller.
In this context, Funnelt may process, on behalf of the customer:
We process this data only to provide the service, operate the widget, transmit captured leads, host the service, ensure security, and provide support, unless otherwise agreed in writing.
If Funnelt uses data collected through customer widgets for its own independent purposes, such as its own marketing, training unrelated models for its own benefit, or building its own lead database, then this policy and the role allocation must be revised. In that case, Funnelt may become an independent controller or joint controller for those activities. The controller/joint-controller distinction depends on who determines the purposes and means of the processing.
We may disclose personal data to recipients where necessary, including:
Where Funnelt acts as a processor for customers, any subprocessors are engaged in accordance with the applicable data processing agreement.
Subprocessors / service providers currently used:
If personal data is transferred to recipients outside the EEA, we will do so only where permitted by law. This may include transfers to countries for which an adequacy decision exists or transfers subject to appropriate safeguards, including the European Commission's Standard Contractual Clauses.
Information about applicable safeguards can be requested via the contact details above.
We store personal data only for as long as necessary for the relevant purpose, unless longer retention is required by law.
Typical retention periods:
You should replace these examples with your actual retention periods or your actual criteria for determining them. GDPR Article 13 requires that retention periods, or the criteria used to determine them, be disclosed.
Under applicable data protection law, you may have the right to:
As a rule, controllers must respond to data subject requests without undue delay and at the latest within one month.
If you want to exercise your rights, contact us at: [privacy@funnelt.com]
If personal data is processed by Funnelt solely on behalf of one of our customers, we may forward the request to the relevant customer where appropriate, because that customer is the controller for that processing.
Providing personal data is generally voluntary. However, some data is necessary for us to respond to inquiries, provide a demo, enter into a contract, or deliver the Funnelt service. If you do not provide the required data, we may be unable to process your request or provide the relevant service. GDPR Article 13 requires disclosure of whether providing data is necessary for a contract and the possible consequences of not providing it.
We do not use personal data for decisions based solely on automated processing that produce legal effects or similarly significant effects on individuals, unless explicitly stated otherwise in a separate notice.
If this changes, we will provide the information required by applicable law. GDPR Article 13 requires disclosure where such automated decision-making, including profiling, exists.
We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access.
We may update this Privacy Policy from time to time. The current version will always be available on this page and will indicate the date of the last update.
If you have questions about this Privacy Policy or our data processing practices, contact:
Funnelt.com