Privacy and Security Policy

Last updated: 18 September 2024

1. Introduction

Welcome to gosuper.tools! We are committed to safeguarding your privacy and ensuring the protection of your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This policy outlines what data we collect, how it is used, on which legal basis it is processed, and your rights as a user of our website.

2. Information We Collect

2.1 Personal Information

When you create a user account, we may collect personal data, including but not limited to:

• goSupermodel Username
• goSupermodel User ID
• Auto-generated Password
• IP address (considered personal data under GDPR)

This information is used solely for providing account functionality and improving your user experience. The legal basis for the collection and use of this information is either the necessity to perform a contract with you (Art. 6(1)(b) GDPR) or your consent (Art. 6(1)(a) GDPR).

2.2 Non-Personal Information

We automatically collect non-personal information through server logs and tracking technologies. This includes:

• User agent information (browser type and version)
• Device information (device type, operating system)
• Usage data (pages viewed, time spent on the site)

This data is used to analyze website usage and optimize our services. The legal basis for processing this information is our legitimate interest in improving our services (Art. 6(1)(f) GDPR).

3. How We Use Your Information

We use the information collected for the following purposes:

• To provide and maintain user account services
• To improve website functionality and user experience
• To monitor and analyze usage trends with Google Analytics (as detailed below)

4. Google Analytics

We use Google Analytics to collect and analyze data about website traffic and user behavior. Google Analytics uses cookies and similar technologies to provide us with aggregated, anonymized insights. Google Analytics anonymizes IP addresses before processing to ensure compliance with the GDPR. Google's privacy practices are governed by their own privacy policy, which you can review here.

Since Google Analytics may involve the transfer of data to the USA, we ensure appropriate safeguards are in place, such as the use of standard contractual clauses. You may opt out of Google Analytics by adjusting your cookie preferences here.

5. Cookies and Tracking Technologies

Our website uses cookies to enhance the user experience and collect anonymized analytics data. These cookies are categorized as either necessary or optional. Necessary cookies are required for basic website functionality and cannot be turned off. For optional cookies, including those used for analytics purposes, we require your explicit consent before setting them.

You can manage your cookie preferences and withdraw consent at any time by adjusting your browser settings or by clicking here.

6. Data Security Measures

We take the following measures to protect your personal data:

• Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS protocols.
• Access Control: Access to personal data is restricted to authorized personnel only.
• Regular Security Audits: We regularly audit our systems to ensure the highest level of data security.
• Data Minimization: We only collect the minimum amount of personal data necessary for our purposes.

7. Third-Party Disclosures

We do not sell or share your personal information with third parties, except as necessary for operating our website or complying with legal obligations. Third-party service providers (e.g., hosting providers) are bound by data processing agreements ensuring GDPR compliance. If data is transferred outside the European Economic Area (EEA), we ensure that adequate safeguards (e.g., standard contractual clauses) are in place.

8. Your Rights Under GDPR

As a resident of the EU, you have the following rights concerning your personal data:

• The right to access the personal data we hold about you
• The right to correct inaccurate or incomplete data
• The right to request deletion of your personal data ("right to be forgotten")
• The right to restrict or object to the processing of your data
• The right to data portability
• The right to withdraw consent at any time, where consent is the legal basis for processing
• The right to lodge a complaint with a supervisory authority in your country of residence (for Germany, where goSupertools is operated from, the relevant authority is the Federal Commissioner for Data Protection and Freedom of Information (BfDI))

To exercise any of these rights, please contact us at help@gosuper.tools.

9. Data Retention

We retain personal data only for as long as necessary to provide user account services and fulfill the purposes outlined in this policy. Once your personal data is no longer needed, it will be securely deleted or anonymized. Non-personal information collected through Google Analytics may be retained for a longer period for analytical purposes.

10. IP Blocking and Security Measures

We reserve the right to block IP addresses in cases of security threats, spam, or misuse of our services. This helps ensure the integrity of our platform and protects all users from malicious activity.

11. Changes to this Policy

We may update this Privacy and Security Policy from time to time. Any material changes will be communicated to you through a notice on our website. The updated policy will also be available on this page, and the effective date will be reflected accordingly. Please review this policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions or concerns about this policy or our data practices, please reach out to us at help@gosuper.tools.