Privacy Policy

This website is operated by Gool GmbH, Schulstraße 2, 40213 Düsseldorf. In the following, we use the term "we" to refer to our company for the sake of simplicity.

With the following information, we would like to provide an overview of the processing of your personal data by us and your rights in accordance with the new data protection law based on the General Data Protection Regulation (hereinafter also "DS-GVO"). Which data is processed in detail and how it is used depends largely on how you use our website.    

1 Definitions

Our data protection notice uses terminology that is used by the European legislator when enacting the DS-GVO. For your better understanding, we would like to present some essential definitions of the terms used in accordance with the DS-GVO (Art. 4 DS-GVO).

a) Personal data
Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b) Data subject
Data subject means any identified or identifiable natural person whose personal data are processed by the data controllers.

c) Processing of data, restriction of processing
Processing means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment by linking, restriction, erasure or destruction. Restriction of processing is when stored personal data is marked with the aim of limiting its future processing.

d) Controller or person responsible for processing
The controller or person responsible for processing is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided by Union law under Member State law.

e) Processor
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the Controller.    


2 Name and contact details of the data controller

The controller for data processing within the meaning of the General Data Protection Regulation is
Gool GmbH, Schulstraße 2, 40213 Düsseldorf, Germany
Managing Directors: Dr. Robert Kohtes and Michael Proch
Telephone: 0049-(0)2161/30735-0
E-mail: info@gool.ai
   
3 What data do we process about you?

We collect a series of general data and information with each call to our website by a data subject or an automated system. This general data and information is stored in so-called log files of the server. The type of browser used and its version, the operating system used by the accessing system, the website from which an accessing system accesses our website, the sub-websites which are accessed via an accessing system on our website, the Internet service provider of the accessing system as well as certain cookies (see section 4 of our data protection notice) are recorded in this respect. Furthermore, the date and time of an access to our website as well as an Internet protocol address (IP address) are recorded. The general data and information collected by us are needed by us to optimize the content of our website for them, to ensure permanent functionality of our systems and the technology of our website and to provide any information in case of a criminal use of our website. Accordingly, the general data and information collected is evaluated statistically on the one hand, and on the other hand, with the aim of increasing data protection and data security within our company.

The aforementioned data will be stored for a maximum period of 3 months after collection. This data is stored for our own security purposes. As a matter of principle, this data is not passed on to third parties unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal prosecution.    

4 Cookies

We use cookies on our website. A cookie is a small file that is stored on your computer when you visit our website. Most cookies contain a cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters by which websites and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows us to distinguish your individual browser from other Internet browsers that contain other cookies. Through the use of cookies, we can provide you, the user, with more user-friendly services that would not be possible without the cookie setting.

Most cookies on our site are session cookies, i.e. they are automatically deleted when you leave our website. Persistent cookies remain on your computer until they are manually deleted in your browser. We use such persistent cookies to recognize you the next time you visit our website.

If you want to control cookies on your computer, you can select your browser settings to receive a notification when a website wants to store cookies. In addition, you can prevent the setting of cookies by our website at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time using an Internet browser or other software programs. This is possible in all common Internet browsers.    

5 Purpose of data processing, profiling

We process your personal data,
to provide you with our website in order to improve and further develop it,
to be able to compile usage statistics anonymously,
to be able to recognize, prevent and track abusive access to our website.

As a responsible company, we do not use automatic decision-making or profiling.    

6 Legal basis of data processing

If we process your personal data, this is done on the basis of the regulation in Section 6 (1) lit. f DS-GVO in our legitimate interest, which is to achieve the purposes stated in Section 5 of our Privacy Notice.    

7 Transmission of personal data

In the context of the use of your personal data, we transmit it to a limited group of recipients. This concerns the IT service provider commissioned by us.    

8 Duration of storage

As already explained (section 3 of our data protection notice), any IP address collected, including the date and time of your visit to our website, will be deleted no later than 3 months after collection. Furthermore, any personal data collected will be deleted in the cases mentioned in the following section 9 lit. c) of our data protection notice.

If other data is no longer required for the purposes for which it was collected, it will be routinely deleted.

9 Your rights as a data subject

Every data subject has the right to request confirmation from us as to whether personal data relating to you is being processed and, in particular, stored by us ( 15 DS-GVO). Furthermore, every data subject has the right to obtain from us, at any time and free of charge, information about the personal data stored about him or her and a copy of this information. The information includes those mentioned in Art. 15 (1) DS-GVO. Furthermore, you as the data subject have a right to information as to whether personal data has been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to receive information about the appropriate safeguards in connection with the transfer.

Every data subject also has the right to demand that inaccurate personal data relating to him or her be corrected without delay ( 16 DS-GVO).

As a data subject, you also have the right to request that we delete personal data relating to you ( 17 GDPR) without undue delay if one of the reasons set out in the aforementioned provision of the GDPR applies and as soon as the processing is not or is no longer necessary.

You also have the right to demand that we restrict processing if one of the conditions set out in 18 DS-GVO applies.

You also have the right to receive the personal data concerning you, which has been provided to us by you, in a structured, common and machine-readable format (20 DS-GVO). You also have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent given pursuant to Art. 6(1)(a) DS-GVO or Art. 9(2)(a) DS-GVO or on a contract pursuant to Art. 6(1)(b) DS-GVO and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us as controller. Furthermore, when exercising your right to data portability pursuant to Article 20(1) of the GDPR, you as a data subject have the right to obtain that the personal data be transferred directly from one controller to another controller, to the extent that this is technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.

Finally, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of 6(1)(e) or (f) DS-GVO (Article 21 DS-GVO).

We will no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If we process personal data for the purpose of direct marketing, you have the right to object at any time to the processing of personal data for the purpose of such marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes without undue delay.

In addition, you as the data subject have the right, on grounds relating to your particular situation, to object to processing of personal data concerning you which is carried out by us for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the DS-GVO, unless such processing is necessary for the performance of a task carried out in the public interest.

We would also like to point out that you, as the data subject, have the right to withdraw your consent to the processing of personal data at any time.

If you wish to exercise your rights under the aforementioned lit. a) - lit. g), you may contact us at any time via the specified contact channels (section 2 of this data protection notice). You are also free to exercise your right to object in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.

10 Use and application of Google Analytics

We have integrated the Google Analytics component on our website. Google Analytics is a web analysis service. Web analysis is the collection, compilation and evaluation of data about the behavior of visitors to websites.

The operating company of the Google Analytics component is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA. Google Analytics sets a cookie on the information technology system of the data subject. What cookies are has already been explained above (section 4 of our data protection notice). By setting the cookie, Google is enabled to analyze the use of our website. In this respect, the processing of your data is based on our overriding legitimate interest in compiling website access statistics that are easy to use in a cost-effective manner (Art. 6 para. 1 lit. f DS-GVO).

The information generated by the cookie about your use of our website (in particular your IP address and the URL of the web pages accessed) will be transmitted to and stored by Google on servers in the United States. We do not store any of your data collected in connection with Google Analytics.

Our website uses the IP anonymization option offered by Google Analytics. Your IP address is therefore shortened/anonymized by Google as soon as Google receives the IP address. On our behalf, Google will use the information obtained to evaluate your use of our website in order to compile reports on the use of our websites. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data by Google in accordance with Google's privacy policy.

As a data subject, you can prevent the setting of cookies by our website at any time by means of an appropriate setting of the Internet browser used, as already described above, and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the data subject. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs. Furthermore, it is possible to object to the collection of data generated by Google Analytics and related to the use of this website as well as to the processing of this data by Google and to prevent such processing. To do this, you can download and install a browser add-on at the link https://tools.google.com/dlpage/gaoptout. This browser add-on tells Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google as an objection. If your system is deleted, formatted or reinstalled at a later date, you as the data subject must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on has been uninstalled or deactivated by you, it is also possible to reinstall or reactivate the browser add-on.

Further information and the applicable privacy policy of Google can be found at

https://www.google.de/intl/de/policies/privacy/  

and at

http://www.google.com/analytics/terms/de.html

can be called up.
If you have any further questions, Google Analytics is available at the link

https://www.google.com/intl/de_de/analytics/

will be explained in more detail.

11 Competent supervisory authority (Privacy Policy)

The contact details of the supervisory authority responsible for us for matters relating to data protection law are:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
Kavalleriestr. 2-4,
40213 Düsseldorf
Telephone: 0211/38424-0
Fax: 0211/38424-10
E-mail: poststelle@ldi.nrw.de

Düsseldorf, August 2023