Privacy Policy | GoodML – AI/ML Cost Optimization Services

This Privacy Policy explains how Heinrich Sergeevic Heimbuch (hereinafter "Consultant") collects, uses, and protects personal data submitted via this website. The Consultant processes personal data in accordance with the General Data Protection Regulation (GDPR) and the German Telecommunications and Telemedia Data Protection Act (TDDDG).

1. Controller

The controller responsible for data processing on this website is:

Heinrich Sergeevic Heimbuch
Sella-Hasse-Straße 23
12687 Berlin, Germany
Phone: +491781026148
Email: hsheimbuch@goodml.eu
Website: www.goodml.eu

2. Data collected via the contact form

This website contains a contact form with the following fields: full name, email address, and message. Submitting the form constitutes a voluntary inquiry to the Consultant. The data you provide is stored and used solely for the purpose of responding to your inquiry.

The legal basis for processing contact form submissions is Art. 6(1) lit. b GDPR (pre-contractual measures) and, where applicable, Art. 6(1) lit. f GDPR (legitimate interest in responding to business inquiries).

Your data is not transferred to third parties. It is retained for as long as necessary to process your inquiry and for up to 3 years thereafter for documentation purposes, unless a longer retention period is required by law.

The checkbox "I consent to the Privacy Policy" confirms that you have read and understood this policy before submitting your data. It is required to submit the form.

3. Server log files

When you visit this website, the hosting provider automatically collects and stores information in server log files. This may include your browser type and version, operating system, referring URL, IP address, date and time of access, and Internet service provider. This data is not combined with other personal data and is used solely to ensure the technical operation and security of the website. The legal basis is Art. 6(1) lit. f GDPR (legitimate interest in operating a secure website).

4. Cookies

This website uses strictly necessary cookies only. These are small text files placed on your device that are required for the website to function correctly and to record your cookie consent preferences. They do not track you across other websites and do not collect personal information.

We do not use analytics cookies, advertising cookies, or any third-party tracking cookies.

Cookies we set

Cookie name	Purpose	Type	Expiry
_cfuvid	Cloudflare cookie used for security and traffic management purposes, including distinguishing users behind shared IP addresses.	First-party, session	Session
cookie_consent_level	Stores your cookie consent preferences (which categories you accepted or rejected)	First-party, Persistent	~1 year
cookie_consent_user_accepted	Records whether you have interacted with the cookie consent banner	First-party, Persistent	~1 year
cookie_consent_user_consent_token	Stores a unique token identifying your consent session for audit purposes	First-party, Persistent	~1 year

The cookie cookie_consent_level is set automatically on your first visit to record the default privacy-protective state (strictly necessary cookies only). The remaining cookies are set once you interact with the consent banner. All these cookies are strictly necessary to operate the consent mechanism required by §25 TDDDG.

No consent is required for strictly necessary cookies under Art. 5(3) of the EU ePrivacy Directive and §25 TDDDG.

If you wish to reset your cookie preferences, you can do so at any time by clicking Cookie Settings in the footer of this website. You may also block or delete cookies via your browser settings, though this may affect website functionality.

5. Your rights

Under GDPR, you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR): You may request confirmation of whether we process your data and obtain a copy.
Right to rectification (Art. 16 GDPR): You may request correction of inaccurate or incomplete data.
Right to erasure (Art. 17 GDPR): You may request deletion of your data where no legal obligation requires its retention.
Right to restriction of processing (Art. 18 GDPR): You may request that we limit how we use your data in certain circumstances.
Right to data portability (Art. 20 GDPR): You may request your data in a structured, machine-readable format.
Right to object (Art. 21 GDPR): You may object to processing based on legitimate interests.
Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right to object (Art. 21 GDPR): You may object to processing based on legitimate interests.
Right to lodge a complaint: You have the right to lodge a complaint with the Berlin supervisory authority: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, mailbox@datenschutz-berlin.de.

To exercise any of these rights, contact: hsheimbuch@goodml.eu

6. Legal basis for processing

Processing of personal data on this website is based on the following legal grounds:

Art. 6(1) lit. a GDPR: where you have given explicit consent
Art. 6(1) lit. b GDPR: where processing is necessary for pre-contractual or contractual measures
Art. 6(1) lit. c GDPR: where processing is required by law
Art. 6(1) lit. f GDPR: where processing serves the legitimate interests of the Consultant, such as website security and responding to business inquiries

7. Automated decision-making

This website does not use automated decision-making or profiling as defined in Art. 22 GDPR.

8. Changes to this Privacy Policy

This Privacy Policy may be updated to reflect changes in legal requirements or website functionality. The current version is always available at www.goodml.eu/privacy-policy.