Summary

• All conversions and tools run inside your browser. Your files are not uploaded – we never receive, see or store them.
• You do not need an account. We use no social media plugins and no third-party analytics; we only count visits with our own cookieless reach measurement.
• We finance the free service with ads from Google AdSense. With your consent, Google may use cookies to personalise and measure ads; without it, Google shows only non-personalised ads. Google never receives your files.
• Everything else the website needs – fonts, icons and the conversion engines – is delivered from our own server.
• Like every website, our server processes your IP address to deliver the pages, and the site sets two technically necessary cookies.

Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

KV GmbH
Johannisstr. 112/113
49074 Osnabrück, Germany
Phone: +49 541 95224925
E-mail: info@kv.de

Further details are in our imprint.

Your files

When you convert a file or use one of our tools, the conversion software (for example FFmpeg, LibreOffice or Tesseract, compiled to WebAssembly) is downloaded to your browser and runs there, in the memory of your own device. The files you choose are read and written locally. They are not transmitted to us or to anyone else, so we process no personal data contained in them. The same applies to the text recognised by our OCR tools and to the values you enter in the unit and time-zone converters. We do not pass any of this to our advertising partner either.

Visiting the website and server log files

When you open our pages, your browser sends technically necessary data to our server, which is stored in log files: IP address, date and time of the request, the address requested, HTTP status code, amount of data transferred, the previously visited page (referrer) and browser and operating system.

This serves to deliver the website and to keep it secure and stable, for example to defend against attacks and to analyse errors. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in these purposes. Log files are stored only as long as necessary for these purposes and are then deleted. Where we use technical service providers (hosting) to operate our servers, they process the data solely on our behalf (Art. 28 GDPR).

Technically necessary cookies

The website sets two cookies: a session cookie (convertingnet-session) and a security token (XSRF-TOKEN) that protects against cross-site request forgery. The session itself is stored on our server and contains no information about you, your files or your IP address. Both cookies expire two hours after your last visit; the session data on the server is deleted regularly after it expires. Storing these cookies is strictly necessary for providing the service (Section 25(2) No. 2 TDDDG); the legal basis for the processing is Art. 6(1)(f) GDPR.

Data stored in your browser

To save you from downloading them again, your browser keeps the conversion engines in its cache, and the language models for text recognition in its local database (IndexedDB). If you add your own time zones to the time-zone converter, that list is saved in your browser’s local storage. Office documents (for example Word to PDF) are converted on a separate page of our site; to get your file there, your browser keeps it in its local database for the moment of the page change and deletes it as soon as that page has opened it. This data stays on your device; it is not sent to us. Storing it is strictly necessary for the functions you use (Section 25(2) No. 2 TDDDG). You can delete it at any time by clearing the site data in your browser’s settings.

Reach measurement

For statistical analysis of how our websites are used, every page loads a counting pixel from info.kv.de. In doing so, your IP address and browser identifier are processed briefly in memory to form an anonymous checksum together with a random value that changes daily. This lets us count visits without recognising you. The IP address is not stored, and the checksum is deleted after 24 hours at the latest. The reach measurement sets no cookies and stores no data on your device. Only aggregated figures are stored (page views and visitors per day and domain). The legal basis is our legitimate interest in measuring the reach of our services (Art. 6(1)(f) GDPR).

Advertising (Google AdSense)

We finance converting.net through ads served by Google AdSense, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). For this, your browser loads program code from Google. Google receives in particular your IP address, information about your browser and device, and the address of the page you visit. Google may use cookies and similar technologies on your device to serve ads, measure their performance, prevent fraud and abuse and – if you agree – personalise ads based on your interests.

Consent

On your first visit, a consent message asks whether you agree to this. It is provided by Google as a certified consent management platform and stores your choice on your device. If you agree, the legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). If you decline, Google shows only non-personalised ads, which are based on general information such as the page content and your approximate location; Google may still use cookies for purposes such as frequency capping, aggregated ad reporting and preventing fraud, insofar as permitted. You can change or withdraw your consent at any time with effect for the future via the “Privacy settings” link at the bottom of every page.

Transfer to the USA and further information

Google may also transfer data to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has issued an adequacy decision (Art. 45 GDPR). Google acts as an independent controller for its own purposes. You can find more information in Google’s privacy policy at policies.google.com/privacy and on how Google uses data from websites that use its services at policies.google.com/technologies/partner-sites. You can manage personalised advertising in your Google account at adssettings.google.com.

Links to other websites

Our pages link to other websites, for example to the source code of the open-source software we use. When you follow such a link, the privacy policy of that provider applies. We have no influence over how those providers process your data.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to the processing on grounds relating to your particular situation (Art. 21 GDPR). Where processing is based on your consent, you may withdraw it at any time with effect for the future. To exercise these rights, contact us at the address above.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority responsible for us: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.

Changes to this policy

We update this privacy policy when the website or the legal requirements change. The current version is always available on this page.