Privacy Policy (Data Protection Notice)

As of: 2021-10-15

This privacy notice informs you about the type, scope and purposes of the processing of personal data within the Optimyzer platform and our website, associated websites, functions and content, as well as external web presences, such as our profiles on social media networks and platforms.

Definitions

“Gauss ML” and/or “we” refers to Gauss Machine Learning GmbH as the responsible entity that provides this websitte.

"Newsletter" means newsletters, emails and other electronic notifications containing promotional information.

“Personal data” or “data” within the meaning of this privacy notice means personal data as defined in Article 4, point 1 of the GDPR.

“You” refers to the visitor or user of the website.

"Website" refers to the homepage and landing pages of Gauss ML, in particular gauss-ml.com and optimyzer.ai, including their respective subdomains.

For the terms used in this privacy notice, the definitions in Article 4 of the EU General Data Protection Regulation (GDPR) apply.

Gauss ML processes your personal data in compliance with applicable data protection law. Whenever Gauss ML processes personal data, this is always done for a specific purpose.

Controller within the meaning of the GDPR:

Gauss Machine Learning GmbH

Bergstr. 4/2

71229 Leonberg

Germany

Types of data, processing purposes and legal bases for data processing

Types of data

Contact details (e.g. full names, address details, email addresses, telephone numbers)
User communications sent to Gauss ML via the website (e.g., text entries in form fields)
Usage data (e.g. websites visited, time and duration of access)
Meta/communication data (e.g., device information, operating system used, browser used, IP addresses)
Location data (based on IP addresses).

Purposes of processing personal data

We process personal data for the following purposes:

Provision of our platform, our website, its functions and content,
Marketing and sales of products, services and/or events,
Processing inquiries regarding products, services and/or events,
Recruitment,
Ensuring the integrity and availability of the service (e.g., to prevent, detect and contain attacks, and to protect against unauthorized third-party access to the system).
Range measurement.

Cookies

Cookies are small files that are stored on users' computers via the browser. Various types of information can be stored within cookies. A cookie primarily serves to store information about a user (or the device on which the cookie is stored) during or even after their visit to an online service. Temporary cookies, also known as "session cookies" or "transient cookies," are deleted after a user leaves an online service and closes their browser. Such a cookie might, for example, store the contents of a shopping cart in an online store or a login status. "Permanent" or "persistent" cookies remain stored even after the browser is closed. These can be used, for example, to save login status so that users remain logged in when they return to the site after several days. Similarly, user interests can be stored in such a cookie for audience measurement or marketing purposes. Third-party cookies are cookies that are offered by providers other than the operator of the online service (otherwise, if they are only the operator's own cookies, they are called first-party cookies).

Cookies are primarily used to control certain sessions, in particular to display certain database content – a “display layer” whose control (such as “page forward and back”) is handled via session cookies.

As previously explained, cookies may be used within the website and platform. In this context, cookies are essential for concluding a contract.

When embedding images and videos from third parties, cookies may also be set. This is done by the respective third-party provider.

Cookies are also used when you create a user account on our website and remain logged in as a user.

You can generally object to the use of cookies for online marketing purposes with many services, especially in the case of tracking, via the US website [www.aboutads.info/choices/](https://www.aboutads.info/choices/) or the EU website [www.youronlinechoices.com](https://www.youronlinechoices.com). Furthermore, you can prevent the storage of cookies by disabling them in your browser settings. Please note that this may prevent you from using all the features of this website.

You can block cookies by configuring your browser to block our website from setting cookies. However, this may prevent you from fully using or using our website.

You can delete individual cookies or all cookies. You can also find information and instructions on how to delete cookies or block them from being stored in the first place. Depending on your browser provider, you can find the necessary information on their website.

Contact via contact forms

If you contact us via email or contact form, the information you provide will be stored for the purpose of processing your request, for possible follow-up questions, and, if necessary, for sending you requested information material.

Purpose of data processing:

To answer your inquiry.

Legal basis:

Article 6 paragraph 1 letter b GDPR (Necessary for the performance of pre-contractual measures taken at the request of the data subject)

Logging data

The web server temporarily records the connection data of the requesting computer (IP address), the pages you visit on our site, the date and duration of your visit, the identification data of the browser and operating system you are using, the website from which you accessed our site, and whether the request was successful in log files. The technical administration of the website and anonymous statistical surveys allow us to analyze website traffic and evaluate it with the aim of improving data protection and data security within our company, ultimately ensuring the highest possible level of protection for the personal data we process.

The server log file data is stored separately from any personal data you provide.

Purpose of data processing:

We store server log files for security reasons (e.g., to investigate misuse or fraud) for a maximum of 31 days and then delete them. Data that needs to be retained for evidentiary purposes will only be deleted after the respective incident has been fully resolved.

Legal basis:

Article 6(1)(f) GDPR (legitimate interest). Our legitimate interest here arises from the aforementioned security interest and the necessity of ensuring the uninterrupted availability of our website.

We only send newsletters with the recipient's consent or within the framework of a legally permissible basis. If the content of a newsletter is specifically described during the registration process, this description is decisive for the recipient's consent. Otherwise, our newsletters contain information about our services and/or our company.

Registration for our newsletter uses a double opt-in process. This means that after registering, you will receive an email asking you to confirm your subscription. This confirmation is necessary to ensure that no one can register using someone else's email address. Newsletter subscriptions are logged to provide legally compliant documentation of the registration process. This includes recording the registration and confirmation timestamps, as well as the IP address. Changes to your data stored with the email service provider are also logged. To subscribe to our newsletter, you only need to provide your email address. Optionally, you can also provide a name during the registration process, for example, for personalized greetings in the newsletter.

You are entitled to withdraw your consent to receive our newsletters at any time for the future. A clickable "Unsubscribe" or "Withdraw consent" button is available at the end of each newsletter you receive.

We store email addresses for up to three years after a user has withdrawn their consent to receive our newsletters, based on our legitimate interests, before finally deleting them. This storage allows us to prove that consent was previously given. Further processing of this data is solely for the purpose of defending against potential claims arising from allegedly invalid consent.

Purpose of data processing:

Regular sending of newsletters by email to the email address you have provided and marketing of our offers and services in accordance with Art. 6 para. 1 lit. f) (legitimate interest).

Legal basis:

Art. 6 para. 1 lit. a GDPR (consent) in conjunction with Section 7 para. 2 no. 3 of the German Act Against Unfair Competition (UWG) or on the basis of the legal permission pursuant to Section 7 para. 3 UWG. The registration process is logged on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f) GDPR (legitimate interest). Our interest lies in the use of a user-friendly and secure newsletter system that serves our business interests, meets user expectations, and allows us to provide proof of consent given.

Customer account online

To access our contractual services, we offer you the option of creating a customer account on our website. Registration is voluntary. To register, you must provide your full name and email address.

In your customer account, you can view, change, or delete your stored data. Deleting your customer account only deletes it from our website system. Deletion in downstream systems (e.g., backup systems) is not necessarily included.

In addition to the data requested during registration, you must provide a password of your choice for successful registration. This password, along with your email address, will be used to access your customer account.

A persistent cookie is set after registration. This feature saves you from having to re-enter your email address and password after your first login.

Legal basis:

Article 6(1)(f) GDPR. Our legitimate interest arises from providing a user-friendly experience on our website. Furthermore, Article 6(1)(b) GDPR applies. Enabling access to our services via the website.

Plugins, Tools

Recipients of the data may include technical service providers who act as data processors for the operation and maintenance of our website.

Unless otherwise stated in this privacy notice, data will not be passed on to third parties.

We maintain online presences within social networks and platforms to communicate with customers, prospects, and users active there and to inform them about our services. When accessing these networks and platforms, the terms and conditions and data processing policies of the respective operators apply. Unless otherwise stated in our privacy policy, we process user data when users communicate with us within these social networks and platforms, for example, by posting on our online presences or sending us messages.

Legal basis:

Art. 6 para. 1 lit. f) GDPR (legitimate interest). Interest in the analysis, optimization and economic operation of our online services in the sense of integrating third-party content or service offerings, such as videos or fonts (hereinafter referred to collectively as Content).

Google Analytics

We use Google Analytics to analyze website usage. The data obtained is used to optimize our website and advertising measures.

Google Analytics is a web analytics service operated and provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, United States). Google processes website usage data on our behalf and is contractually obligated to take measures to ensure the confidentiality of the processed data.

During your website visit, the following data, among others, is recorded:

Pages visited
Orders including revenue and ordered products
Achieving "website goals" (e.g. contact requests and newsletter sign-ups)
Your behavior on the pages (e.g., clicks, scrolling behavior and time spent)
Your approximate location (country and city)
Your IP address (in abbreviated form, so that no unique identification is possible)
Technical information such as browser, internet provider, device and screen resolution
Source of your visit (i.e., which website or advertising medium led you to us)

This data will be transferred to a Google server in the USA.

Google Analytics stores cookies in your web browser for two years from your last visit. These cookies contain a randomly generated user ID, which allows you to be recognized on future website visits.

The recorded data is stored along with the randomly generated user ID, enabling the analysis of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data remains stored indefinitely in aggregated form.

If you do not agree to the data collection, you can prevent it by installing the browser add-on to deactivate Google Analytics once, or by rejecting cookies via our cookie settings dialog.

Google Web Fonts

This website uses web fonts provided by Google for the consistent display of fonts. When you access a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly. For this purpose, the browser you are using must connect to Google's servers. This allows Google to know that our website was accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

If your browser does not support web fonts, a standard font from your computer will be used.

Further information about Google Web Fonts can be found at developers.google.com/fonts/faq and in Google's privacy policy: [www.google.com/policies/privacy/](https://www.google.com/policies/privacy/).

Google reCAPTCHA

To protect our contact forms and registration features against spam and abuse (e.g., by bots), we use the "Google reCAPTCHA" service provided by Google.

reCAPTCHA analyzes the behavior of the website visitor based on various characteristics (e.g., IP address, duration of visit, or mouse movements made by the user). This analysis begins automatically as soon as the website visitor enters the website. The data collected during the analysis is forwarded to Google.

Purpose of Processing

We use reCAPTCHA strictly to ensure the security of our website and to protect our web forms from automated abuse, spying, and spam.

Legal Basis

The processing is based on Art. 6(1)(f) GDPR. We have a legitimate interest in protecting our web offerings from abusive automated spying and from spam.

Data Processing Role

Regarding this service, Google acts strictly as a Data Processor on our behalf.

Storage period for personal data

We delete the data we process in accordance with Articles 17 and 18 of the GDPR or restrict its processing. Unless otherwise stipulated in this privacy policy, we delete the data stored by us as soon as there is no longer a need for its storage. A need in this sense exists in particular if we require the data to perform contractual services, to examine, grant, or defend against warranty and guarantee claims. A need also exists to the extent that we must comply with statutory retention periods. In this case, the data is deleted after the corresponding obligations have expired.

Unless the data is deleted because it is required for other legally permissible purposes, its processing will be restricted, meaning the data will be blocked and not processed for other purposes. This applies in particular to data that must be retained under commercial or tax law.

Your rights

According to Article 7 Paragraph 3 GDPR, you have the right to withdraw consents given pursuant to Article 7 Paragraph 3 GDPR with effect for the future.
According to Article 15 GDPR, they have the right to request confirmation as to whether personal data concerning them is being processed, and to access this data as well as further information and a copy of the data.
According to Article 16 GDPR, you have the right to request the completion of data concerning you or the rectification of inaccurate data concerning you.
According to Article 17 GDPR, you have the right to request that the data in question be deleted without undue delay or, alternatively, according to Article 18 GDPR, to request a restriction of the processing of the data.
According to Article 20 GDPR, you have the right to request that the data concerning you which you have provided to us be received and to request its transmission to other controllers.
According to Article 21 of the GDPR, you can object to the future processing of your personal data at any time. This objection can be made, in particular, against processing for direct marketing purposes.
According to Article 77 of the GDPR, you have the right to lodge a complaint with the competent supervisory authority.
If you have given us your consent, you can revoke it at any time with effect for the future.

Without the IP address, however, the service and functionality of our website cannot be guaranteed. Furthermore, individual services may be unavailable or restricted. For this reason, objection is not possible.

Data Protection Officer:

We are not legally required to appoint a data protection officer and therefore have not appointed one.