Privacy in the Conbool Mail app
Which data the Conbool Mail app processes, where it is stored and what rights you have.
This is a translation for your information. The German version is authoritative: Datenschutz in der App Conbool Mail.
Controller and roles
The app is provided by Conbool GmbH, Berlepschweg 11, 21079 Hamburg, Germany, info@conbool.com.
The app is part of our Conbool Mail service for businesses. We process your emails, appointments, contacts and files on behalf of your employer or client. The company that booked your mailbox with us is the controller for this content; we act as a processor under Art. 28 GDPR. We are the controller for operating the app itself, such as sign-in, device management and support.
What the app processes
| Data | Purpose | Where |
|---|---|---|
| Email address, name, sign-in | Signing in and linking to your mailbox | our servers in Germany |
| Device name, platform, device key | Device management, signing out lost devices, issuing your keys to exactly this device | our servers in Germany |
| Emails, appointments, contacts, tasks, files | Providing your mailbox | mailbox on our servers in Germany, encrypted copy on your device |
| S/MIME and PGP keys | Encrypting and decrypting on the device | encrypted in the app on your device; managed centrally in SecureMail if your company has booked it |
| Technical details | Support | only if you choose "Report a problem" in the app and include them |
What the app does not do
- No advertising, no tracking, no sharing with advertising or analytics services.
- No analysis of your content for our own purposes.
- The technical details contain no email content, subject lines, addresses, names or attachments.
Encryption
- The connection to our servers is always encrypted.
- The app stores emails, cache, outbox, sign-in data and your keys encrypted on the device. Settings and the list of your accounts are stored in the user profile of the device.
- Emails that are encrypted directly are encrypted and decrypted on the device. Only your signed-in device receives your private key, additionally encrypted for that device.
Other accounts
If you add accounts from other providers, such as Microsoft 365 or an IMAP mailbox, the app connects directly to that provider. Credentials and content of these accounts do not pass through Conbool and stay on your device. The privacy policy of the respective provider applies. Your company decides whether private accounts are allowed.
Permissions on the device
- Notifications: for alerts about new emails and appointments.
The app only sees photos and files that you select yourself to attach. It does not need a permission for this.
Legal bases
Art. 6(1)(b) GDPR (providing the booked service), Art. 6(1)(f) GDPR (secure operation, support). For the content of your mailbox, the data processing agreement with your company applies.
Retention and deletion
- Content is kept for as long as your company keeps the mailbox with us, according to its requirements.
- We delete device data when your company ends Conbool Mail with us.
- If you remove the app, the data on the device is deleted. If your company blocks a device, the app deletes its data there the next time it connects, including the connection to private accounts. Their mailboxes at the provider remain untouched.
Your rights
You have the rights under Art. 15 to 21 and 77 GDPR, described in our general privacy policy. For the content of your mailbox, contact your company as the controller; we support it in this.
Privacy contact
Conbool GmbH, Data Protection, Berlepschweg 11, 21079 Hamburg, info@conbool.com.