Privacy policy

Controller

• Freicon Software GmbH
• Frohmattenstr. 25
• 79268 Bötzingen, Germany
• Email: contact@sona-motion.ai

Website hosting and server logs

When you visit this website, technical data such as IP address, browser type, referrer and time of access are processed to deliver the site securely. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure operation). Hosting takes place in the EU/EEA.

Contact and demo forms

We store your enquiry in our database, create it as a lead in Zoho CRM and notify our team by email at contact@sona-motion.ai. The service providers involved are listed under "Recipients and processors".

Our contact and demo forms transmit the following data, which is processed to answer your request: name, email address, phone number, company, role (optional) and message (optional). The identifier of the form used and the language version of the page are sent along for technical reasons. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) and Art. 6 (1) (f) GDPR. A phone number is required so that we can call you back for the requested live test.

ROI calculator: unlocking results, callback

On our ROI calculator you can unlock the two euro figures. We handle two separate purposes and do not merge them.

• Unlock the result: email address and company, plus the values entered in the calculator (calls per day, share of missed calls, average contribution margin or revenue per appointment, conversion, working days, calculation mode), the language version and the page visited. We show the result and follow up on it. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measure at your request). We use a double opt-in; until you confirm, the record stays flagged as unconfirmed (evidence under Art. 7 (1) GDPR).
• Callback about the result: additionally name, phone number and optionally role and message. Legal basis: Art. 6 (1) (b) GDPR; the call is made at your express request. We log the time, the form text shown and the exact wording of your callback request as evidence. A phone number is not required to see the result.
• Besides your contact details we store the values you entered in the calculator and the results derived from them. Recipients are our hosting/database provider Lovable (data centre in Ireland, EU) and Zoho CRM (Zoho Corporation B.V., Netherlands / Zoho Corporation Pvt. Ltd.), whose EU data centre processes the data; EU standard contractual clauses (Art. 46 (2) (c) GDPR) apply to third-country transfers.

Recipients and processors

• Lovable (hosting, website operation, storage of form submissions) - registered office: Lovable Labs Incorporated, Stockholm, Sweden; hosting in the EU/EEA. Transfer basis: no regular third-country transfer; EU standard contractual clauses (Art. 46 (2) (c) GDPR) apply to support access that cannot be excluded. Enquiries submitted via our forms are stored in a database of our hosting provider Lovable (Lovable Cloud) in its data centre in Ireland (EU).
• We send confirmation emails and notifications about new enquiries via the email service of our platform provider Lovable. Delivery is handled by Mailgun (Mailgun Technologies, Inc., USA, a company of the Sinch group) via its data centre in the EU. The recipient address, the language and the content of the email, including the confirmation link, are processed. Legal basis is the provision of the service you requested (Art. 6 (1) (b) GDPR). As Mailgun is a US company, access from the USA cannot be ruled out; Mailgun Technologies, Inc. is certified under the EU-US Data Privacy Framework.
• Zoho CRM (Zoho Corporation B.V., Netherlands / Zoho Corporation Pvt. Ltd.) - CRM system for handling enquiries from the demo form and the ROI calculator. The data is processed in Zoho's EU data centre. Transfer basis: EU standard contractual clauses (Art. 46 (2) (c) GDPR).
• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and where applicable Google LLC, Mountain View, CA, USA (Google Analytics 4) - only with your consent. Transfer basis: EU standard contractual clauses (Art. 46 (2) (c) GDPR) and certification under the EU-US Data Privacy Framework (Art. 45 GDPR).
• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and where applicable Google LLC, USA (Google Ads conversion tracking) - only with your consent to the "Marketing" category. Transfer basis: certification under the EU-US Data Privacy Framework (Art. 45 GDPR), supplemented by EU standard contractual clauses (Art. 46 (2) (c) GDPR).
• Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (Microsoft Bookings, appointment booking). Transfer basis: certification under the EU-US Data Privacy Framework (Art. 45 GDPR).

Cookies and analytics

We store your cookie choice and your display preference (light/dark) in local browser storage (localStorage) and, during a session, technical identifiers in session storage (sessionStorage); see the cookie overview below. These entries remain on your device and are not transmitted; they require no consent (section 25 (2) TDDDG). Google Analytics 4 is only activated after you actively opt in to the "Analytics" category via the cookie banner (Art. 6 (1) (a) GDPR, section 25 (1) TDDDG). You can withdraw your consent at any time with effect for the future via "Cookie settings" in the footer.

Google Ads conversion tracking

We use Google Ads to draw attention to our offering and use conversion tracking to measure whether a click on an ad leads to an enquiry on our website, such as a demo request or appointment booking. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The ad click identifier, time, page visited and the triggered event, IP address, device and browser information and an identifier stored in a cookie are processed.

We do not use Google Ads for personalised advertising or remarketing.

The legal basis is your consent under Art. 6 (1) (a) GDPR and section 25 (1) TDDDG, given via the "Marketing" category in the cookie banner. A transfer to Google LLC in the USA is possible. Google LLC is certified under the EU-US Data Privacy Framework; standard contractual clauses apply in addition.

The conversion cookies have a lifetime of 90 days. You can withdraw your consent at any time via "Cookie settings" in the footer.

Microsoft Bookings

For direct appointment booking we link to our booking page at Microsoft Bookings, which opens in a new tab. Data is only transferred to Microsoft there. Microsoft processes the details you enter, such as name, email address, phone number and preferred appointment, as our processor. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. The legal basis is arranging the appointment at your request (Art. 6 (1) (b) GDPR). A transfer to the USA is possible; Microsoft is certified under the EU-US Data Privacy Framework. Information on the cookies used on the booking page can be found in Microsoft's privacy statement.

Cookies and local storage

Name - provider - purpose - lifetime - category:

• cookie_consent (localStorage) - SonaMotion - stores your cookie choice - until changed or deleted - Essential
• sm-theme (localStorage) - SonaMotion - stores the light/dark display setting - until changed or deleted - Essential
• sm-roi-lead (sessionStorage) - SonaMotion - keeps the unlocked ROI result during the session - end of session - Essential
• sm_lead_fired:* (sessionStorage) - SonaMotion - prevents an enquiry from being counted twice; only set when the event is actually sent with your consent - end of session - Analytics
• _ga - Google - distinguishes visitors for Google Analytics 4 - 2 years - Analytics
• _ga_XYTEKY7XQT - Google - stores the session state for Google Analytics 4 - 2 years - Analytics
• _gcl_au - Google - conversion measurement for Google Ads - 90 days - Marketing
• _gcl_aw - Google - stores the ad click identifier (only after an ad click) - 90 days - Marketing

Retention

Enquiries and leads that do not result in a contract are deleted no later than 12 months after the last contact. The legal basis is our legitimate interest in following up on your enquiry (Art. 6 (1) (f) GDPR). If a contract is concluded, we store the data for the duration of the business relationship and beyond that only where retention obligations under commercial and tax law apply.

Your rights

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Complaint to a supervisory authority - competent authority: State Commissioner for Data Protection and Freedom of Information Baden-Württemberg

Last updated

Last updated: October 2026