Privacy policy

1. Controller

The controller for the processing described here is sveru Marketing, LLC, c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, USA, represented by Sven Rueprich.

For privacy questions, access requests and deletion requests, write to office@weblift.pro.

2. In short

• We do not set cookies on our public pages and we do not embed any analytics or advertising services.
• We process the data you type into a form and the publicly available content of the website whose address you give us.
• We do not sell data. It is only passed on to the service providers listed below that we need in order to operate.

3. Data you send us

When you fill in our form, we process what you enter:

• the address of your existing website
• your email address
• optional: name, company, phone number and your message
• the campaign identifier of the link that brought you here (the src parameter)
• the time of submission

4. What we use this data for

We use your details to build your free preview, to send you the link to it and to answer your questions. If an order follows, we use the same data for processing, invoicing and running the website.

The legal basis is Article 6(1)(b) GDPR (steps prior to a contract and performance of the contract). For approaching companies we also rely on Article 6(1)(f) GDPR (legitimate interest in direct marketing).

5. Automated analysis of the website you name

We retrieve the website whose address you give us in the same way any visitor could. We store its texts, images, structure, colours, fonts and the contact and legal details published there in our database in order to build the preview.

If your website contains personal data such as the names of contact persons or photos of staff, we process it for this purpose only and carry it over to the new site only where it belongs there.

6. Use of artificial intelligence

For the structure and the texts of the new website we use the programming interface of Anthropic (Claude). Content from your existing website is transmitted to Anthropic PBC in the USA.

Under the terms of that programming interface, transmitted content is not used to train the models. The transfer to the USA is based on the standard contractual clauses of the European Commission.

7. Server logs and abuse protection

When you open our pages, technical access data is created: IP address, time, the address requested, browser and device information and the amount of data transferred. This serves secure operation and is deleted after 30 days at the latest. The legal basis is Article 6(1)(f) GDPR.

When a form is submitted, we store your IP address together with a counter in order to limit automated mass requests. This entry is deleted automatically after 24 hours at the latest.

8. Cookies

On the public pages of weblift.pro we set no cookies and load no tracking pixels, maps or videos from third parties.

In the customer portal we set a single, technically necessary cookie so that you stay signed in during your visit. No consent is required for this, and therefore no cookie banner.

9. Service providers

We use the following service providers to operate:

• IONOS SE, Germany: servers for the website, database and file storage, located in the EU. We run the database (Supabase) ourselves on this server.
• Google: email mailboxes and sending of our messages (Google Workspace)
• Higgsfield: creating short motion clips from photos of your existing website for the new home page
• Smartlead: sending our promotional emails to businesses (see section 10)
• Anthropic PBC, USA: generating the texts and the page structure
• Stripe: payment processing. When you pay, your name, email address and invoice and payment details are transmitted to Stripe. Stripe processes payment data under its own responsibility.

10. Marketing emails

We approach companies by email when we assume that a new website could be of interest to them. The addresses come from publicly available sources, usually from the legal notice of the website in question. The legal basis is our legitimate interest in direct marketing under Article 6(1)(f) GDPR.

You can object to this at any time and without any formality, for example by email to office@weblift.pro. After that we will not write to you again and will keep your address only on a suppression list so that it stays that way.

11. Retention periods

• Enquiries without an order, including preview data: 12 months after the last contact, then deleted.
• Contract and invoice data: 10 years, because of commercial and tax retention duties.
• Server logs: 30 days at most.
• Suppression list for marketing objections: permanently, because otherwise we could not honour the objection.

12. Your rights

You have the right to access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and to object to processing based on a legitimate interest (Article 21).

An email to office@weblift.pro is enough. You may also lodge a complaint with a data protection supervisory authority.

13. Changes to this policy

We adapt this policy when our processing changes. The version published here always applies.