Privacy Policy

1. General Information and Principles of Data Processing

We are pleased that you are visiting our website. Protecting your privacy and safeguarding your personal data, the so-called personal data, when using our website is of great concern to us.

Personal data, as defined in Art. 4 No. 1 of the GDPR, includes all information related to an identified or identifiable individual. This includes details such as your first and last name, your address, your phone number, your email address, as well as your IP address.

Data that cannot be linked to your person, such as anonymized data, are not considered personal data. Processing (e.g., collecting, storing, reading, querying, using, transmitting, deleting, or destroying) according to Art. 4 No. 2 GDPR always requires a legal basis or your consent. Processed personal data must be deleted once the purpose of processing has been achieved and no legally mandated retention periods are applicable anymore.

Here, you'll find information about how your personal data is handled when you visit our website. In order to provide the features and services of our website, it is necessary for us to collect personal data about you.

We also explain to you the type and extent of each data processing activity, its purpose and the relevant legal basis, and the respective storage duration.

2. Responsible Entity

Responsible for the processing of personal data on this website is (see imprint): PaperSpace GmbH, Am Bartelskamp 16, D-38553 Wasbüttel, represented by the authorized managing director Martin Stämmler, Phone: +49 (0)151 40509735, Email: info@paperspace.ai

3. Provision and Use of the Website/ Server Logfiles

a) Type and Scope of Data Processing

When you use this website without otherwise transmitting data to us (e.g., through registration or using the contact form), we collect technically necessary data via server log files, which are automatically transmitted to our server, including:

  • IP address
  • Date and time of the request
  • Name and URL of the retrieved file
  • Website from which access is made (referrer URL)
  • Access status/HTTP status code
  • Browser type
  • Language and version of the browser software
  • Operating system

b) Purpose and Legal Basis

This processing is technically necessary to be able to display our website to you. We also use the data to ensure the security and stability of our website.

The legal basis for this processing is Art. 6 Para. 1 lit. f) GDPR. The processing of the mentioned data is necessary for the provision of a website and thus serves to protect a legitimate interest of our company.

c) Duration of Storage

As soon as the aforementioned personal data is no longer necessary for displaying the website, it is deleted. The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Consequently, there is no possibility of objection on the part of the user in this regard. Further storage may take place in individual cases if this is required by law.

4. Use of Cookies

a) Type, Scope, and Purpose of Data Processing

We use cookies. Cookies are small files that are sent to your device's browser during your visit to our website and are stored there.

Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies allow us to perform various analyses. For instance, some cookies can recognize the browser you use when you revisit our website and transmit various information to us. We use cookies to facilitate and improve the use of our website. Through cookies, we can make our online service more user-friendly and efficient, for example by tracking your usage of our website and determining your preferred settings (e.g., country and language settings). If third parties process information through cookies, they collect this information directly via your browser. Cookies do not cause any damage to your device; they cannot execute programs and do not contain viruses. Various types of cookies are used on our website, which are explained in the following.

Temporary Cookies/ Session Cookies

We use so-called temporary cookies or session cookies on our website that are automatically deleted when you close your browser. These types of cookies make it possible to capture your session ID, allowing various requests from your browser to be attributed to a common session, enabling your device to be recognized during subsequent visits to our website.

Permanent Cookies

We use so-called permanent cookies on our website. Permanent cookies are cookies that are stored in your browser for a longer period and can transmit information. The respective storage duration varies depending on the cookie. You can delete permanent cookies yourself via your browser settings.

Third-Party Cookies

We use analytical cookies to monitor anonymous user behavior on our website.

We also use advertising cookies. These cookies can track user behavior for advertising and targeted marketing purposes.

Social media cookies enable you to connect to your social networks and share content from our website within your networks.

Configuration of Browser Settings

Most web browsers are set to automatically accept cookies. However, you can configure your browser so that it only accepts certain cookies or no cookies at all. We would like to point out that you may then not be able to use all the functions of our website.

Through your browser settings, you can also delete cookies already stored in your browser. Furthermore, it is possible to set your browser to notify you before cookies are stored. As the functionalities of different browsers may vary, we recommend that you consult the help menu of your browser for the respective configuration options.

Deactivating the use of cookies may require storing a permanent cookie on your computer. If you subsequently delete this cookie, you will have to deactivate it again.

b) Legal Basis

Due to the purposes of use described, the legal basis for the processing of personal data using cookies is Art. 6 Para. 1 lit. f) GDPR. If you have given us your consent to the use of cookies based on a notice provided by us on the website ("cookie banner"), the legal basis is additionally Art. 6 Para. 1 lit. a) GDPR.

c) Storage Duration

Once the data transmitted to us via cookies are no longer necessary for the purposes described above, this information will be deleted. Further storage may occur in individual cases if this is required by law.

5. Data Collection for Pre-contractual Measures and Contract Performance

a) Type and Scope of Data Processing

In the pre-contractual stage and at the conclusion of a contract, we collect personal data about you. This includes, for example, first and last name, address, email address, phone number, and bank details.

b) Purpose and Legal Basis of Data Processing

We only collect and process this data for the purpose of contract execution or to fulfill pre-contractual obligations.

The legal basis for this is Art. 6 Para. 1 lit b) GDPR. If there is also your consent, the additional legal basis is Art. 6 Para. 1 lit. a) GDPR.

c) Duration of Storage

The data will be deleted as soon as they are no longer required for their processing purpose. Additionally, there might be legal retention obligations, for instance commercial or tax-related retention requirements based on the Commercial Code (HGB) or the Tax Code (AO). If such retention obligations exist, we will lock or delete your data at the end of these retention periods.

6. Booking Form

On our website, there is an order form that can be used for electronic bookings.

a) Type and Scope of Data Processing

Our data collection is limited to the following data:

  • First and last name
  • Phone number
  • Email address
  • PayPal payment information
  • Name of the booked service

b) Purpose and Legal Basis

The purpose of data processing is to be able to process your order appropriately.

The legal basis for this is Art. 6 Para. 1 lit. b) GDPR. The processing of the data serves the fulfillment of a contract, or is necessary for the implementation of a pre-contractual measure that was initiated at the request of the person concerned.

c) Duration of Storage

The data will be deleted as soon as they are no longer needed to achieve the purpose of processing.

There may also be legal retention obligations, such as commercial or tax-related retention requirements based on the Commercial Code (HGB) or the Tax Code (AO). If such retention obligations exist, we will lock or delete your data at the end of these retention periods.

7. Registration Opportunity

a) Type and extent of data processing

On our website, you can register. When you register, we collect and store the data you enter into the input form (e.g., last name, first name, email address). There is no transfer to third parties.

b) Purpose and legal basis of data processing

Your registration is necessary for using specific content and services on our website or for fulfilling a contract or for carrying out pre-contractual measures. After registration, you are free to modify the personal data provided at registration or to have it completely deleted from the data records of the controller.

The legal basis for processing, in the case of consent, is Art. 6 para. 1 lit. a) GDPR. If your registration is intended to prepare a contractual conclusion, Art. 6 para. 1 lit. b) GDPR is an additional legal basis.

c) Duration of storage

The data collected at registration will be stored by us as long as you are registered on our website and will then be deleted. Legal retention periods remain unaffected. In addition, your registered personal data will be deleted upon your request.

8. Data Transfer

8.1 We only pass on your personal data to third parties if:

a) You have given your explicit consent according to Art. 6 para. 1 lit. a) GDPR.

b) This is legally permissible and necessary according to Art. 6 para. 1 lit. b) GDPR to fulfill a contractual relationship with you or to carry out pre-contractual measures.

c) There is a legal obligation to do so under Art. 6 para. 1 lit. c) GDPR.

By law, we are obligated to transfer data to public authorities, e.g., tax authorities, social security institutions, health insurance companies, supervisory authorities, and law enforcement agencies.

d) The transfer is necessary according to Art. 6 para. 1 lit. f) GDPR to safeguard legitimate company interests, as well as for asserting, exercising, or defending legal claims, and there is no reason to assume that you have a predominant interest worthy of protection in not passing on your data.

e) We use external service providers, so-called processors, in the processing according to Art. 28 GDPR, which have been obliged to handle your data carefully.

We use service providers in the following areas:

  • Heroku: Hosting of the website and web app
  • Amazon Web Services: Hosting of the backend, storage of data
  • Azure: OpenAI API for chatbot functionality and document analysis
  • PayPal: Subscription payment

When transmitting to external bodies in third countries, i.e., outside the EU or the EEA, we ensure that these bodies treat your personal data with the same care as within the EU or the EEA. We only transfer personal data to third countries where the EU Commission has confirmed an adequate level of protection or where we ensure the careful handling of personal data through contractual agreements or other suitable guarantees.

8.2 PayPal

We offer the option to complete the payment process through the payment service provider PayPal (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). This serves our legitimate interest in offering a fast and secure payment method (Art. 6 Para. 1 lit. f GDPR).

In this context, we transmit the following information to PayPal, to the extent necessary for contract processing (Art. 6 Para. 1 lit. b GDPR).

  • First name
  • Last name
  • Address
  • Email address
  • Phone number

The processing of the data specified in this section is neither legally nor contractually required. Without the transfer of your personal data, payment via PayPal is not possible.

PayPal conducts credit checks for various services, such as payment via direct debit, to ensure your ability to pay and your willingness to pay. This corresponds to PayPal's legitimate interest (according to Art. 6 Para. 1 lit. f GDPR) and serves the purpose of contract fulfillment (according to Art. 6 Para. 1 lit. b GDPR). Your data will be transmitted to external parties for this purpose. We have no control over this and only receive the test result indicating whether the payment has been made, was rejected, or is pending.

For more information on objection and deletion options at PayPal, please visit: https://www.paypal.com/webapps/mpp/ua/privacy-full

Your data will be stored until the payment process is completed. This includes the period required for processing refunds, accounting, and fraud prevention.

9. Contact Form

a) Type and Scope of Data Processing

On our website, we offer you the opportunity to get in touch with us through a provided form. As part of the submission of your request via the contact form, reference is made to this privacy policy to obtain your consent.

If you use the contact form, the following personal data about you will be processed:

  • Title
  • First Name
  • Last Name
  • Title
  • Company
  • Industry
  • Position
  • Street
  • Street Number
  • Postal Code
  • City
  • Country
  • Email Address
  • Phone Number
  • Subject
  • Message Content

b) Purpose and Legal Basis

Providing your email address serves the purpose of sending you a response to your request via email. When using the contact form, your personal data will not be disclosed to third parties.

The legal basis for processing is consent pursuant to Art. 6(1)(a) GDPR based on the voluntary and revocable consent declaration you provide below for future reference.

c) Storage Duration

The data you enter in the contact form will remain with us until you request deletion, revoke your consent, or the purpose for data storage no longer applies (e.g., after processing your request is completed).

Mandatory statutory provisions — in particular, retention periods under the Commercial Code (HGB) or the Fiscal Code (AO) — remain unaffected by this.

10. Contact options via Email

On our website, you have the option to contact us via email.

a) Type and scope of data processing

You can reach out to us via email. In doing so, our data collection is limited to the email address of the email account you used to contact us, as well as any personal data you voluntarily provide during the course of communication.

b) Purpose and legal basis

The purpose of processing the data is to be able to respond to your concerns appropriately. The legal basis for this is Art. 6 Para. 1 lit. f) GDPR. There is a legitimate interest in processing the aforementioned personal data in order to address your concerns properly.

c) Storage duration

The duration of storage of the aforementioned data depends on the context of your contact. Deletion of your personal data regularly occurs if the intended purpose of the communication is no longer applicable and storage is no longer necessary. This can arise, for example, from the processing of your request.

11. Tracking and Analysis Tools

I. Google Analytics

a) Type and Scope of Data Processing

We use the tracking tool Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Phone: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-deutschland@google.com ("Google") on our website.

Google Analytics uses so-called "cookies", text files that are stored on your computer and that allow an analysis of the website's usage.

The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activities, and provide other services related to website and internet usage to the website operator.

When individual pages of our website are accessed, the following data is stored:

  • Three bytes of the IP address of the user's calling system (anonymized IP address)
  • The accessed website
  • The website from which the user accessed our website (Referral URL)
  • The sub-pages that are accessed from the accessed page
  • The duration of the stay on the website
  • The frequency of accessing the website

We use Google Analytics with activated IP anonymization. This shortens the IP addresses by the last octet (e.g., 192.168.79.***; so-called IP masking). Assigning the shortened IP address to the user's computer or device is no longer possible.

b) Purpose and Legal Basis of Data Processing

The Google Analytics service is used to analyze the usage behavior of our website. The legal basis is your consent according to Art. 6 Para. 1 lit. a) GDPR.

c) Storage Duration

We delete the stored data as soon as it is no longer required for our recording purposes. In our case, the storage duration is a maximum of 24 months.

d) Right to Object

You can prevent the storage of cookies with the appropriate settings in your browser software; however, we would like to point out that in this case, you may not be able to use all the functions of this website in full. Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en

More information on Google Analytics' terms of use: www.google.com/analytics/terms/en.html

More information on data protection at Google Analytics: https://support.google.com/analytics/answer/6004245?hl=en

In addition, you can change your cookie settings consent at any time [Change Your Consent].

II. Hotjar

This website uses Hotjar, an analysis software from Hotjar (Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta).

With Hotjar, user behavior on our site can be tracked and evaluated. This includes, for example, information about how much time users spend on which subpages, which links they follow, or what click and scroll behavior is recorded on our site. The information collected by Hotjar is transmitted to Hotjar servers and processed there.

The following information is processed:

  • IP address of your device (anonymized)
  • Screen size of your device
  • Device and browser type
  • Geographical data (country)
  • Preferred language settings

The purpose of this is to continuously improve the user-friendliness of our website based on an evaluation of user behavior.

The legal basis for data processing is your consent in accordance with Art. 6 Para. 1 lit. a) GDPR.

You can prevent Hotjar from collecting data by clicking on the following link and following the instructions provided: https://www.hotjar.com/opt-out.

Hotjar's privacy policy can be found at: https://www.hotjar.com/legal/policies/privacy

12. Data Security and Protective Measures

We are committed to protecting your privacy and treating your personal data confidentially. For this, we implement extensive technical and organizational security precautions, which are regularly reviewed and adapted to technological progress.

This includes, among other things, the use of recognized encryption methods (SSL or TLS). Unencrypted data that is disclosed, for example when sent via unencrypted email, can potentially be read by third parties. We have no control over this. It is the user's responsibility to protect the data they provide through encryption or other means against misuse.

13. Changes to the Privacy Policy

We reserve the right to update this statement as needed.

14. Your Rights

Here you can find your rights regarding your personal data. Details can be found in Articles 7, 15-22, and 77 of the GDPR. You can contact the responsible body (No. 2) in this regard.

Right to revoke your consent under data protection law according to Art. 7 para. 3 s. 1 GDPR

You can revoke your consent to the processing of your personal data at any time with effect for the future. However, this does not affect the legality of the processing carried out up to the point of revocation.

a) Right of access according to Art. 15 GDPR

You have the right to request confirmation as to whether we process personal data relating to you. If this is the case, you have the right to information about this personal data and to further information, e.g., the purposes of processing, the categories of personal data processed, the recipients, and the planned duration of storage or the criteria for determining the duration.

b) Right to rectification and completion according to Art. 16 GDPR

You have the right to request the immediate correction of incorrect data. Taking into account the purposes of the processing, you have the right to request the completion of incomplete data.

c) Right to erasure ("right to be forgotten") according to Art. 17 GDPR

You have a right to deletion, provided the processing is not necessary. This is the case, for example, if your data is no longer necessary for the original purposes, you have revoked your data protection declaration of consent, or the data was processed unlawfully.

d) Right to restriction of processing according to Art. 18 GDPR

You have the right to restrict processing, for example, if you believe that the personal data is incorrect.

e) Right to data portability according to Art. 20 GDPR

You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format.

f) Right to object according to Art. 21 GDPR

You have the right to object at any time, for reasons arising from your particular situation, to the processing of certain personal data concerning you.

In the case of direct marketing, you, as the data subject, have the right to object at any time to the processing of personal data concerning you for such advertising; this also applies to profiling insofar as it is associated with such direct marketing.

g) Automated individual decision-making, including profiling according to Art. 22 GDPR

You have the right not to be subjected to a decision based solely on automated processing — including profiling — except in the exceptional cases mentioned in Art. 22 GDPR.

Decision-making based solely on automated processing — including profiling — does not take place.

h) Right to lodge a complaint with a supervisory authority according to Art. 77 GDPR

Moreover, you have the right to lodge a complaint with a supervisory authority at any time, for example, if you believe that data processing is not in compliance with data protection regulations.