Legal

Privacy Policy

Last updated: September 5, 2026 · applies to the website www.convivia.info

This is an English translation provided for convenience. In case of doubt, the German version is authoritative.

1. Privacy at a glance

General notes

The following notes give a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.

Data collection on this website

Who is responsible for data collection? Data processing on this website is carried out by the website operator. Their contact details are given below in the section “Note on the responsible party”.

How do we collect your data? We collect your data when you give it to us — for instance, when you write us an email. Other data arises technically at the hosting provider when you visit the website.

What do we use your data for? Solely to serve the website without errors and to answer your inquiry. Your usage behavior is not analyzed: this website sets no cookies, uses no analytics service, and embeds nothing from third-party servers. That's why there is no cookie banner — there is nothing to consent to.

What rights do you have? You have the right, at any time and free of charge, to receive information about the origin, recipients, and purpose of your stored personal data. You also have the right to have this data corrected or deleted, and the right to lodge a complaint with the competent supervisory authority.

2. Hosting

External hosting

This website is hosted externally. Personal data arising when you visit this website is processed on the host's servers. This may in particular include IP addresses and meta and communication data.

Hosting serves the purpose of fulfilling our contract with our potential and existing users (Art. 6(1)(b) GDPR) and is in our interest of providing this service securely, quickly, and efficiently through a professional provider (Art. 6(1)(f) GDPR). Where consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) of the German TDDDG; consent can be revoked at any time.

Our hosting provider is:

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany

The server is located in a data center in Germany. No data processing takes place outside the EU.

No access logs are stored; your IP address is not routinely logged. There is therefore no record of who visited which page of this website and when. Only in the event of an error does the web server keep an error log that may contain an IP address; it is not evaluated, not combined with other data, and is automatically deleted after 14 days.

Data processing agreement

We have concluded a data processing agreement (DPA) for the use of the service named above. This is a contract required by data protection law, ensuring that the host processes the personal data of this website's visitors only according to our instructions and in compliance with the GDPR.

3. General notes and mandatory information

Data protection

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection rules and this privacy policy.

Please note that data transmission on the internet (e.g. communication by email) can have security gaps. Complete protection of data against access by third parties is not possible.

Note on the responsible party

The party responsible for data processing on this website is:

Mohamadreza Khostevan
Miroo Media
Stettiner Str. 9
28870 Ottersberg
Germany

Phone: +49 4205 6354726
Email: convivia@miroo-media.de

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

Storage period

Unless a more specific storage period is stated within this privacy policy, your personal data remains with us until the purpose for the data processing no longer applies. If you make a justified request for deletion or revoke your consent, your data will be deleted unless we have other legally permissible reasons for storing it (e.g. retention periods under tax or commercial law); in the latter case, deletion takes place once those reasons no longer apply.

General notes on the legal bases of data processing

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR. In the case of explicit consent to the transfer of personal data to third countries, processing is additionally based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or to access to information on your device, processing is additionally based on § 25(1) TDDDG. Consent can be revoked at any time. If your data is required to fulfill a contract or to carry out pre-contractual measures, we process it on the basis of Art. 6(1)(b) GDPR. Furthermore, we process data where required to fulfill a legal obligation, on the basis of Art. 6(1)(c) GDPR. Data processing may also take place on the basis of our legitimate interest under Art. 6(1)(f) GDPR.

Recipients of personal data

We pass on personal data to external parties only where required to fulfill a contract, where we are legally obliged to do so (e.g. passing data to tax authorities), where we have a legitimate interest in the transfer under Art. 6(1)(f) GDPR, or where another legal basis permits it. When using processors, we pass on our customers' personal data only on the basis of a valid data processing agreement.

Revoking your consent to data processing

Many data processing operations are only possible with your explicit consent. You can revoke consent you have already given at any time. The lawfulness of the data processing carried out before the revocation remains unaffected.

Right to object to data collection in specific cases and to direct advertising (Art. 21 GDPR)

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, their place of work, or the place of the alleged violation. This right exists without prejudice to other administrative or judicial remedies. The authority responsible for us is the State Commissioner for Data Protection of Lower Saxony (Landesbeauftragte für den Datenschutz Niedersachsen).

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only take place where technically feasible.

Information, correction, and deletion

Within the scope of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the data processing, and, where applicable, a right to correction or deletion of this data. For this, and for further questions about personal data, you can contact us at any time.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. For this you can contact us at any time. The right to restriction of processing exists in the following cases:

• If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of processing.
• If the processing of your personal data was or is unlawful, you can request the restriction of data processing instead of deletion.
• If we no longer need your personal data but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of processing instead of deletion.
• If you have lodged an objection under Art. 21(1) GDPR, your interests and ours must be weighed against each other. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of processing.

If you have restricted the processing of your personal data, this data may — apart from being stored — only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a member state.

4. Data collection on this website

Cookies, analytics, and embeds

This website sets no cookies, stores nothing on your device, and uses no analytics service. There are no ad networks, no maps, no videos, and no social media buttons. The page loads no JavaScript from third-party servers; the few scripts of our own (the header menu, displaying an invitation — see below) run exclusively in your browser.

The invitation page (/einladung, /en/invite)

Invitations to a Convivia group are sent as a link to the page www.convivia.info/einladung (older invitations to convivia.miroo-media.de/einladung — the same applies there). The name of the group, the name of the inviting person, and the actual iCloud invitation link are contained in the part of the address after the # character (the so-called fragment). For technical reasons, this part is never transmitted to any server by your browser — neither to ours nor to any other. The page reads it exclusively locally in your browser to show you the invitation; nothing is stored, evaluated, or passed on.

We therefore do not learn who invites, who is invited, what a group is called, or where the invitation leads. When the page is opened, the host only registers the page load itself — access logs, as described above, are not stored. The link preview that messengers show when the invitation is sent is the same for all invitations and contains no personal details.

Fonts

The fonts used (Public Sans, Petrona) are downloaded when the site is built and live on the same server as the website. When you open the page, no connection to Google Fonts or any other font provider is made; no data is transmitted to third parties.

Inquiries by email or phone

If you contact us by email or phone, your inquiry including all personal data arising from it (name, inquiry) is stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent. There is no contact form on this website — it only lists an address; you write from your own mail program.

This data is processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is necessary for carrying out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) where it has been requested; consent can be revoked at any time.

The data you send to us remains with us until you ask us to delete it, revoke your consent to its storage, or the purpose for storing it no longer applies (e.g. after your request has been dealt with). Mandatory statutory provisions — in particular statutory retention periods — remain unaffected.

Link to the App Store

The “Download on the App Store” badges lead to apple.com. The badge itself is hosted on our server; nothing is loaded from Apple when you visit this website. You only leave this website when you tap it, and we don't learn who follows the link. Apple is responsible for the App Store; the Apple Privacy Policy applies. There is no mailing list and no newsletter.

5. External links

This website contains links to third-party websites (e.g. apple.com and miroo-media.de). When you click such links, you leave this website; on the linked pages the privacy policies and terms of use of the respective provider apply. We have no influence on their content and data processing.