F FunnelExpert
Home Start Free
DE Start Free
Back to Home

Privacy Policy

Last updated: March 2026

1. Privacy at a Glance

This privacy policy informs you about how we collect, process, and protect your personal data when you use our platform FunnelExpert (funnelexpert.io) and the websites generated through it.

Personal data is any data that can be used to personally identify you. This includes, for example, your name, email address, IP address, or browsing behavior on our website.

2. Responsible Party

The party responsible for data processing on this website:

Digital Mind Agency Ltd.
Evagora Pallikaridi 38
8010 Paphos, Cyprus

Registration Number: HE 428155
VAT: CY10428155X
Director: Oliver Albrecht

Phone: +357 96 562105
Email: contact@funnelexpert.io

3. Data Collection on This Website

3.1 Server Log Files

Our hosting provider automatically collects and stores information in server log files that your browser transmits. These include:

  • Browser type and version
  • Operating system
  • Referrer URL
  • IP address (anonymized)
  • Time of server request

This data is not combined with other data sources. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).

3.2 Contact and Registration Forms

When you register for FunnelExpert or contact us via email, the data you provide (name, email address, phone number if applicable) is stored to process your request or set up your account. Legal basis: Art. 6(1)(b) GDPR (contract performance).

3.3 Booking Forms

When bookings are made through FunnelExpert-generated customer websites, guest data (name, email, phone, travel dates) is collected. This data is used exclusively for booking processing and payment handling. Legal basis: Art. 6(1)(b) GDPR.

4. Cookie Consent System

Our platform uses a custom cookie consent system. On your first visit, you will be asked which cookie categories you want to allow. Your selection is stored in the fe_consent cookie.

For the Google services we use Google Consent Mode v2: by default all storage signals (analytics_storage, ad_storage, ad_user_data, ad_personalization) are set to "denied" and are only set to "granted" after your consent. Before you choose, no analytics or marketing scripts are loaded.

Cookie categories:

Category Purpose Can be disabled?
Essential Login session, consent storage, CSRF protection No
Analytics Google Analytics 4, Microsoft Clarity Yes
Marketing Meta Pixel, Facebook CAPI Yes

You can change your cookie preferences at any time via the "Cookie Settings" link in the footer. Legal basis: Art. 6(1)(a) GDPR (consent).

5. Hosting

Our website is hosted by:

Dawico Deutschland GmbH
Kurt-Zieger-Weg 2, 14532 Stahnsdorf, Germany
Managing Director: Jan Ziebarth
HRB 40190 (District Court Potsdam)
VAT ID: DE290500838
Website: dawico.one

Servers are located in Germany. Dawico processes your data on our behalf. We have concluded a Data Processing Agreement (DPA) pursuant to Art. 28 GDPR. Legal basis: Art. 6(1)(f) GDPR.

6. Content Delivery Network (CDN)

For delivering media files (images, videos) we use:

Bunny.net (BunnyWay d.o.o.)
Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia
Website: bunny.net

Bunny.net may technically process your IP address and browser information for content delivery. Data processing takes place within the EU. Legal basis: Art. 6(1)(f) GDPR (fast and secure delivery of media content).

7. Analytics Services

7.1 Google Analytics 4 (GA4)

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

GA4 uses cookies and collects information about your use of our website (e.g., pages visited, time spent, device type). IP anonymization is enabled by default. Data may be transferred to the USA. Google is certified under the EU-US Data Privacy Framework.

GA4 is only activated if you have consented to the "Analytics" category. Legal basis: Art. 6(1)(a) GDPR.

7.2 Google Tag Manager

We use Google Tag Manager to manage tracking tags. The Tag Manager itself does not set cookies and does not collect personal data. It only triggers other tags, which may collect data. These are controlled by the cookie consent system.

8. Marketing

8.1 Meta Pixel (Facebook Pixel)

We use the Meta Pixel by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. The pixel collects information about your browsing behavior on our website to show you relevant advertisements on Facebook and Instagram.

Data may be transferred to the USA. Meta is certified under the EU-US Data Privacy Framework.

8.2 Facebook Conversions API (CAPI)

In addition to the Meta Pixel, we use the server-side Conversions API. This sends conversion data directly from our server to Meta, independent of cookies. Data processed: event type, timestamp, hashed email address (if available), IP address.

Both services are only activated if you have consented to the "Marketing" category. Legal basis: Art. 6(1)(a) GDPR.

9. Session Recording

9.1 Microsoft Clarity

We use Microsoft Clarity (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland; US sub-processing under SCC + EU-US Data Privacy Framework). Clarity creates anonymized heatmaps and session replays to identify UX issues. Sensitive input fields (passwords, payment data) are automatically masked.

This service is only activated if you have consented to the "Analytics" category. Legal basis: Art. 6(1)(a) GDPR.

10. AI Services

FunnelExpert uses various AI services to generate and improve website content:

10.1 Anthropic (Claude)

Anthropic, PBC, 548 Market St, San Francisco, CA 94104, USA
Website: anthropic.com

Usage: Generation of website texts, SEO content, blog articles, and chat responses during onboarding. Data processed: Information you enter during onboarding (property name, location, description, amenities). No personal contact or payment data is transmitted to Anthropic.

10.2 Perplexity AI

Perplexity AI, Inc., San Francisco, CA, USA
Website: perplexity.ai

Usage: Research about publicly available information regarding your property (location, surroundings, points of interest). Data processed: Property name and location only, no personal data.

10.3 Google Gemini

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Website: ai.google

Usage: Image analysis (alt text generation) and video generation for hero sections. Data processed: Property photos uploaded by the user. No personal data is transmitted.

Legal basis for all AI services: Art. 6(1)(b) GDPR (contract performance, as AI processing is an essential part of the service) and Art. 6(1)(f) GDPR (legitimate interest in providing high-quality content).

11. Payment Processing

For payment processing we use:

Stripe, Inc.
354 Oyster Point Blvd, South San Francisco, CA 94080, USA
EU entity: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland
Website: stripe.com

During a payment transaction, your payment data (credit card number, expiration date, CVC) is transmitted directly to Stripe for processing. We do not store complete credit card data on our servers. Stripe is PCI DSS Level 1 certified and certified under the EU-US Data Privacy Framework.

Data processed: Name, email, payment information, billing address, transaction data. Legal basis: Art. 6(1)(b) GDPR (contract performance).

12. Booking Integration

For booking calendar synchronization we use:

Smoobu GmbH
Kopernikusstr. 35, 10243 Berlin, Germany
Website: smoobu.com

Smoobu synchronizes booking data (availability, prices, booking periods) between various booking platforms and the website created on FunnelExpert. Processing takes place in Germany.

Data processed: Occupancy periods, prices, guest names (if shared by the customer). Legal basis: Art. 6(1)(b) GDPR.

13. Newsletter and Emails

13.1 Transactional Emails

We send transactional emails (registration confirmation, password reset, booking confirmations) through our platform SMTP server. These emails are necessary for the operation of our service. Legal basis: Art. 6(1)(b) GDPR.

13.2 Newsletter

If you subscribe to our newsletter, we use your email address to regularly send you information about our products and services. You can unsubscribe at any time via the unsubscribe link in each email. Legal basis: Art. 6(1)(a) GDPR (consent).

14. Platform Tracking

14.1 Cookieless Usage Tracking

FunnelExpert deploys cookieless usage tracking on all generated customer websites. This collects anonymized page views only (page URL, timestamp). No cookies are set and no personal data is collected. Legal basis: Art. 6(1)(f) GDPR.

14.2 Tier-based Tracking

Customers on the Expert plan can additionally integrate their own tracking services (GA4, Meta Pixel, Microsoft Clarity) on their generated websites. These services are controlled by the respective customer's cookie consent system and only activated after the website visitor has given consent.

15. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of Access (Art. 15 GDPR): You have the right to obtain information about your personal data stored with us.
  • Right to Rectification (Art. 16 GDPR): You can request the correction of inaccurate data or the completion of incomplete data.
  • Right to Erasure (Art. 17 GDPR): You can request the deletion of your personal data, provided no statutory retention obligations apply.
  • Right to Restriction (Art. 18 GDPR): You can request the restriction of processing of your data.
  • Right to Data Portability (Art. 20 GDPR): You have the right to receive your data in a structured, machine-readable format. FunnelExpert provides a data export function in your account for this purpose.
  • Right to Object (Art. 21 GDPR): You can object to the processing of your data at any time where processing is based on Art. 6(1)(f) GDPR.
  • Withdrawal of Consent: Where processing is based on your consent, you may withdraw it at any time with effect for the future.

To exercise your rights, please contact us by email: contact@funnelexpert.io

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Office of the Commissioner for Personal Data Protection, Cyprus.

16. Data Retention

We store your personal data only as long as necessary for the respective purposes:

  • Account data: For the duration of your account. After account deletion, all personal data is deleted within 30 days.
  • Booking data: 10 years (statutory retention period for tax-relevant documents).
  • Server logs: 30 days.
  • Cookie consent data: 12 months, after which consent is requested again.
  • Payment data at Stripe: According to Stripe's retention policies and statutory requirements.

17. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA), particularly in the United States. For these transfers, we rely on the following safeguards:

  • EU Standard Contractual Clauses (SCCs): We have entered into SCCs pursuant to Art. 46(2)(c) GDPR with all relevant providers (Anthropic/Claude, Perplexity AI, Stripe, Google, Meta).
  • Supplementary measures: Encryption in transit (TLS 1.2+), data minimization, pseudonymization where possible.
  • EU-US Data Privacy Framework: Where providers are certified under the EU-US DPF, an adequacy decision by the European Commission applies per Art. 45 GDPR.

18. Data Breach Notification

In the event of a personal data breach, we will notify the competent supervisory authority within 72 hours in accordance with Art. 33 GDPR, provided the breach is likely to result in a risk to your rights and freedoms.

If the breach poses a high risk to you personally, we will inform you without undue delay pursuant to Art. 34 GDPR. Please report any security concerns to: contact@funnelexpert.io

19. Automated Decision-Making

Our AI services (Claude, Gemini, Perplexity) generate website content, text, and images based on your input. This does not constitute automated decision-making within the meaning of Art. 22 GDPR, as no decisions with legal effect or similarly significant impact are made concerning you.

Analytical evaluations (e.g., visitor statistics, Revenue Intelligence) are performed on an anonymized or aggregated basis and serve solely to optimize your website.

20. Data Processors

We have entered into Data Processing Agreements (DPAs) pursuant to Art. 28 GDPR with the following service providers:

  • Dawico Deutschland GmbH (Hosting, servers in Germany)
  • Bunny.net (CDN, image optimization, video hosting)
  • Stripe Inc. (Payment processing)
  • Google Ireland Ltd. (Analytics, OAuth, Gemini AI)
  • Meta Platforms Ireland Ltd. (Meta Pixel, Conversions API)
  • Anthropic PBC (Claude AI, content generation)
  • Perplexity AI Inc. (Research, market analysis)
  • Smoobu GmbH (Booking synchronization, vacation rental)
  • Microsoft Ireland Operations Limited (Microsoft Clarity: session recording, heatmaps)

21. Changes to This Privacy Policy

We reserve the right to update this privacy policy to reflect changes in legal requirements or changes to our services. The current version is always available on this page. For significant changes, we will notify you by email or through a notice on our platform.

Product

Home Start Free

Legal

Privacy Policy Terms Imprint

Contact

contact@funnelexpert.io

© 2026 Digital Mind Agency Ltd. All rights reserved.