Conversion Lift by OptiMonk

Conversion Lift Privacy Policy

(For customers)

Conversion Lift customers are typically businesses, so the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) generally do not apply to the processing of corporate data. However, you may still provide us with data that qualifies as personal data (e.g. phone number), and in that case we comply with the Regulation when processing your data.

Every Conversion Lift employee undertakes to protect personal data obtained in the course of their work under a confidentiality agreement.

1. Data controller

OptiMonk International Zrt. Registered office: 4028 Debrecen, Kassai út 129., Hungary Balázs Tar, support@optimonk.com Tax number: 26335498-2-09

2. Cookies used on the website

(1) Cookies are small data files placed on the user's computer by the website visited. Cookies are files containing small character files that are placed on the user's device when the user visits a website. The purpose of cookies is to facilitate information and communication internet services. When the user visits such a website multiple times, the website can recognize the user's browser thanks to cookies. Cookies may store user settings (e.g. selected language) and other information. Among other things, cookies collect information about the visitor and their device, remember visitor settings, and may be used, for example, when using online shopping carts. In general, cookies make it easier to use the website, help the website provide a genuine online experience for users, and are used as an efficient source of information. They also enable the site operator to monitor the operation of the website, prevent abuse, and provide website services without interruption and with adequate quality.

(2) There are several types of cookies, but they can generally be divided into two categories. One is the category of temporary cookies, which the website places on the user's device only during a given session (e.g. during security authentication of an online banking transaction), and the other type is the permanent cookie (e.g. for a given website), which remains on the computer unless the user deletes it. Based on European Commission guidelines, cookies may only be placed on the user's device if the user agrees (except when cookies are essentially necessary for the use of the given services).

(3) For cookies that do not require user consent, information must be provided during the first visit to the website. It is not necessary to display the full text of cookie information on the website; it is sufficient for the website operators to briefly summarize the essence of the information and refer to the availability of the full information via a URL.

(4) For consent-based cookies, information may be linked to the first visit to the website if data processing related to cookie use begins when visiting the site. If cookie use is related to the use of a function expressly requested by the user, the information may appear in connection with the use of that function. In this case, it is not necessary to display the full text of cookie information; a brief summary of the essence of the information is sufficient, with a reference to the full information via a URL.

(5) Information contained in cookies is stored only for the strictly necessary period, which may in no case exceed 1 year. At the end of this period, users and/or subscribers must renew their consent to the installation of cookies.

(6) Users and/or subscribers are informed that they can prevent cookies from being saved on any hardware by changing their browser settings. Users and/or subscribers may fully or partially accept or reject cookies used by the website. However, rejecting cookies may prevent the normal operation of Conversion Lift services.

Information on the use of cookies

(1) In accordance with general practice, our Company also uses cookies on its website. Our Company's website records and processes the following data of the visitor and the device used for browsing during use of the website:

  • the IP address used by the visitor,
  • browser type,
  • characteristics of the operating system of the device used for browsing (set language),
  • time of visit,
  • the (sub)page, function, or services visited.

(2) Accepting and approving the use of cookies is not mandatory. You can reset your browser settings to reject all cookies or to warn you when a cookie is sent. Although most browsers accept cookies by default, these settings can be changed to prevent automatic acceptance and to offer a choice each time.

You can find more information about cookie settings for the most popular browsers at the following URLs:

  • Google Chrome: https://support.google.com/accounts/answer/61416?hl=en
  • Firefox: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop
  • Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09
  • Safari: https://support.apple.com/en-us/HT201265

3. Data processing on the website

Registration on the company website

Registration on the website is required to use the Conversion Lift service. A separate privacy notice related to the application is available at the link below.

Further possible purposes of data processing during registration on the website:

  • Registration for a trial period (creating the customer's own Conversion Lift account)
  • Contact via electronic means or phone.
  • Information about the Company's products and services.
  • Analysis of website use.

Scope of processed data: name of natural person, phone number, email address, online identifier.

Legal basis for processing: consent of the data subject (GDPR Article 6(1)(a)).

Recipients of personal data and categories of recipients: employees of the Company performing customer service and marketing tasks as data processors:

Conversion Lift accounts, Mailchimp (The Rocket Science Group, LLC), Hubspot, Zendesk (Zendesk Inc.), Intercom, Mixpanel, Outreach, Zoho software administrator interfaces.

Retention period of personal data: 5 years, or until withdrawal of consent (deletion request).

Data processing related to promotional materials and newsletter services

A natural person registering for promotional materials and newsletter services on the website gives consent to the processing of their personal data by checking the appropriate checkbox. The data subject may unsubscribe from the newsletter using the newsletter "unsubscribe" function, in writing, or at any time by email, which shall be interpreted as withdrawal of consent. In this case, all data of the subscriber must be deleted.

Scope of processed data: name and email address of the natural person.

Purpose of processing personal data:

  • Sending newsletters about the Company's products and services.
  • Sending advertising materials.
  • Information about the Company's products, services, terms, and discounts.

Legal basis for processing: consent of the data subject (GDPR Article 6(1)(a)).

Recipients of personal data and categories of recipients: employees of the Company performing customer service and marketing tasks as data processors:

Mailchimp (The Rocket Science Group, LLC), Hubspot, Zendesk (Zendesk Inc.), Zoho software administrator interfaces.

Retention period of personal data: until the customer unsubscribes from newsletter services, or until consent is withdrawn (deletion request).

Customer support

Customer support staff are responsible for helping customers of OptiMonk International Zrt. with the operation of the Conversion Lift service in the following ways:

  • By email sent to support@optimonk.com or to a private business email address of a customer support representative.
  • By phone.
  • By prior appointment.

Contact details of natural person representatives of legal entities

Our separate privacy notice on the processing of personal data of natural person contractual contacts is available at the link below.

4. Data processing for tax and accounting obligations

On the legal bases of fulfilling legal obligations (GDPR Article 6(1)(c)), the Company may process data of natural persons in a business relationship with the Company, whether as customers or suppliers, to fulfill statutory tax and accounting obligations (accounting, taxation). Data processed in this way include in particular under Act CXXVII of 2007 on value added tax Sections 169 and 202: name and address of the person or organization ordering the transaction, signature of the person certifying execution of the transaction on orders and, depending on the organization, signature of the auditor, signature of the recipient on inventory and cash documents, and signature of the payer on invoices; under Act CXVII of 1995 on personal income tax: business licence number, personal ID number of small producers and identical tax identification number.

Retention period of personal data: eight (8) years after termination of the legal relationship giving rise to processing.

Recipients of personal data: financial staff of the Company and the accounting data processor of Innonic Group Zrt.

Programs used by financial staff:

Számlázz.hu – invoicing program

Zoho – administrative system

BrainTree – credit card payment data

5. Data transfer, data processors

Contact and billing data provided by you are recorded in the following programs (we work with the following data processors):

MailChimp c/o The Rocket Science Group, LLC 675 Ponce de Leon Ave NE Suite 5000 Atlanta, GA 30308 MOSS No. EU 826 477 914 Service or role: newsletter system, delivery of service-related newsletters to subscribers

Hubspot 25 First Street, 2nd Floor Cambridge, MA 02141 United States Service or role: CRM system. Stores data of customers registered on conversionlift.ai and contact history.

Zoho Corp Federal ID 80-0722734 4141 Hacienda Drive Pleasanton California 94588 Service or role: ERP system. Storage of businesses and billing data, invoices

DigitalOcean, LLC 101 Avenue of the Americas, 10th Floor New York, NY 10013 (Only the Frankfurt data centre is used) Service or role: Server hosting provider

Zendesk Zendesk, Inc. 1019 Market St San Francisco, CA 94103 Phone: (888) 670-4887 Email: ar@zendesk.com Service or role: Management and storage of messages sent to support@optimonk.com or kapcsolat@optimonk.hu

CIB Bank Zrt. 1027 Budapest, Medve u. 4-14. Service or role: Banking partner of OptiMonk International Zrt. Scope of data storage: users' billing address, bank account number used when completing payment

Braintree United States 222 W Merchandise Mart Plaza Suite 800 Chicago, IL 60654 Service or role: card payment processor Scope of transferred data: card data, email address and full name of the user who subscribed to the Conversion Lift service. Data is stored and processed only for payment processing

Intercom 55 2nd Street 4th Floor San Francisco, CA 94105 Service or role: Communication support through users' Conversion Lift accounts (online chat provider) Scope of transferred data: provided during registration: first name, last name, phone number, email address

Logrocket 87 Summer St. Boston, MA 02110 Email address: support@logrocket.com Service or role: Analysis of Conversion Lift system usage

6. Your rights regarding the processing of your data

The Data Subject may submit a request in any manner (in writing, electronically, or even verbally) to the contact details of the data controller above.

The data controller shall inform the Data Subject of the decision taken on the request without undue delay, but within one month at the latest – which may be extended by a further two months if necessary.

Right of access

The Data Subject is entitled to receive feedback from the data controller as to whether processing of their personal data is in progress and, if so, is entitled to access the personal data and the following information:

  • the purposes of processing;
  • categories of personal data concerned;
  • recipients or categories of recipients to whom personal data have been or will be disclosed;
  • the envisaged period of storage of personal data, or if not possible, the criteria for determining that period;
  • the right to request rectification, erasure, or restriction of processing of personal data concerning them, and to object to such processing;
  • the right to lodge a complaint with a supervisory authority;
  • the source of the data;
  • the fact of automated decision-making.

The data subject is entitled to receive a copy of the data concerning them free of charge under GDPR Article 15(3) – in accordance with the procedure set out in Article 12.

Right to rectification

The Data Subject may request rectification or completion of personal data processed by the data controller.

Right to erasure ("right to be forgotten")

The Data Subject may request erasure of personal data processed by the Data Controller if any of the following grounds apply:

  • personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
  • the data subject objects to processing and there is no overriding legitimate ground for processing, or the data subject objects to processing under Article 21(2);
  • personal data were processed unlawfully;
  • personal data must be erased to comply with a legal obligation under Union or Member State law applicable to the data controller.

Right to restriction of processing

At the request of the Data Subject, the Data Controller shall restrict processing if any of the following conditions is met:

  • the data subject contests the accuracy of personal data, in which case restriction applies for the period enabling verification of accuracy;
  • processing is unlawful and the data subject opposes erasure and requests restriction of use instead;
  • the Data Controller no longer needs the personal data for processing purposes, but the data subject needs them for the establishment, exercise, or defence of legal claims; or
  • the data subject has objected to processing based on public interest or legitimate interest; in this case restriction applies until it is established whether the data controller's legitimate grounds override those of the data subject.

If processing is restricted on the above grounds, such personal data may, with the exception of storage, be processed only with the data subject's consent, or for the establishment, exercise, or defence of legal claims, or for the protection of the rights of another natural or legal person, or for important public interest of the Union or a Member State.

Right to object

The Data Subject may object to the processing of their personal data if processing is necessary solely for compliance with a legal obligation applicable to the Data Controller or for the purposes of legitimate interests pursued by the Data Controller or a third party.

Right to data portability

Under the conditions set out in the Regulation, the data subject has the right to receive personal data concerning them in a structured, commonly used, and machine-readable format that they have provided to the data controller, and the right to transmit those data to another data controller without hindrance from the data controller to which the personal data were provided.

Automated individual decision-making, including profiling

The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

Right to lodge a complaint with a supervisory authority

The Data Subject may lodge a complaint directly with the National Authority for Data Protection and Freedom of Information.

Address: 1055 Budapest, Falk Miksa utca 9-11.

Postal address: 1363 Budapest, P.O. Box 9.

Phone: +36-1-391-1400

Email: ugyfelszolgalat@naih.hu

Website: www.naih.hu

Right to effective judicial remedy against the data controller or data processor

If their rights are infringed, the Data Subject may turn to a court. The action falls within the jurisdiction of the tribunal. The action may also be brought before the tribunal of the data subject's place of residence or stay, at the data subject's choice.

If you wish to exercise any of the above rights, please notify us by email at balazs.tar@optimonk.com or support@optimonk.com.

Effective: 15 June 2026.