Privacy & GDPR
Last updated: September 9, 2026
Lead Scoring creates automated profiles based on visitor behavior (Art. 22 GDPR — Profiling).
Legal Basis
You can choose between two options:
Consent (Art. 6 (1) lit. a) — recommended
- Score is calculated only if the visitor has consented to tracking in the widget
- No tracking consent = only profile score (max ~15 points)
- Full transparency for the visitor
Legitimate Interest (Art. 6 (1) lit. f)
- Score is always calculated
- Visitors have a right to object
- You must document an interest balancing test
Three Consent Levels
| Consent | Available Data | Max Score |
|---|---|---|
| No Consent | Only profile fields | ~15 |
| Chat Consent | + Chat, Tickets | ~60 |
| Tracking Consent | + Browsing Data | 100 |
Data Subject Rights
- Information (Art. 15): Score is included in the GDPR data export
- Deletion (Art. 17): Score and score history are deleted upon GDPR deletion
- Retention: Score history is automatically deleted after the configured period
Checklist
- Privacy policy supplemented with scoring/profiling
- Consent banner configured in the widget
- Legal basis selected in scoring settings
- Retention period set