GTM Data Science
Privacy
Privacy policy
This privacy policy explains how "Peter Eigenschink" as sole proprietor, and/or the brand "GTM Data Science" ("we", "us", "our") uses the personal data we collect from you when you use our website, gtm-datascience.com.
What data do we collect?
We collect the following data:
- Personal identification information: your email address.
- Health-score self-assessment data: the responses you provide in the self-assessment.
- Self-assessment usage events collected automatically: approximate location, device information, and timestamps.
- Website usage events collected automatically on our homepage: page-view ("landed") and call-to-action (CTA) interaction events, each with approximate location, device information, and a timestamp.
How do we collect your data?
You directly provide us with most of the data we collect. We collect data and process data when you:
- Visit and interact with our homepage (we record "landed" and CTA events).
- Complete the health-score self-assessment on our website.
- Provide your email address to receive your report.
- Opt in to receive product updates or to be contacted for a call.
Some of this data (usage events) is collected automatically when you browse the site.
We do not receive your data indirectly from any third-party sources.
How will we use your data?
We collect your data so that we can:
- Measure how our website is used (which pages are landed on and which calls-to-action are clicked) to understand and improve its performance.
- Generate your health-score self-assessment report and send it to you by email.
- If you have given your separate consent, send you updates about our offering.
- If you have given your separate consent, contact you to arrange a call.
Each marketing/contact purpose is a separate, independent opt-in. You can withdraw any of them at any time without affecting the others. We record your consent (opt-in) together with the associated event so that we can demonstrate when and how consent was given, as required under Art. 7(1) GDPR.
What is our legal basis?
- Homepage usage events (landed, CTA): our legitimate interest in measuring and improving the performance of our website (Art. 6(1)(f) GDPR). These events are pseudonymous: they are grouped only by a temporary identifier that exists while the page is open, are not carried over to other pages, and are never linked to your email address.
- Self-assessment: your consent (Art. 6(1)(a) GDPR). Within a single self-assessment session, your responses, the associated usage events, and, if you provide it, your email address are grouped by a temporary session identifier so that we can generate and send your report.
- Product updates and arranging a call: your consent (Art. 6(1)(a) GDPR), given as separate opt-ins.
You have the right to object to processing based on legitimate interest at any time (see "What are your data protection rights?" below).
How do we store your data?
We securely store your data in Cloudflare D1, provisioned with the EU jurisdiction so that it is stored and processed within the European Union. Data is encrypted in transit (TLS/HTTPS).
Cloudflare acts as our data processor under a data processing agreement. Our use of Cloudflare is governed by Cloudflare's Data Processing Addendum, which incorporates the EU Standard Contractual Clauses: https://www.cloudflare.com/cloudflare-customer-dpa/
When you request your report, we are notified by email. That notification is sent through Mailgun (Mailgun Technologies, Inc., a Sinch company), which processes your email address on our behalf for that purpose only. We use Mailgun's EU region, so the message is processed within the European Union. Mailgun acts as our data processor under Sinch's data processing agreement, which incorporates the EU Standard Contractual Clauses: https://sinch.com/legal/terms-and-conditions/other-sinch-terms-conditions/data-processing-agreement/
Cloudflare and Mailgun are the only processors we use. We do not sell your data or share it with anyone else.
We keep your usage-event and self-assessment data for 12 months. We keep your email address for as long as you remain opted in (or until you withdraw consent or unsubscribe).
Once the applicable retention period has expired, or upon a valid erasure or unsubscribe request, we delete your data from the Cloudflare D1 database. Mailgun keeps its own short-term delivery log of the notification message; that log expires on Mailgun's own retention schedule and is not used for any other purpose.
Marketing
We would like to send you information about our offering that we think you might like.
If you have agreed to receive marketing, you may always opt out at a later date.
You have the right at any time to stop us from contacting you for marketing purposes.
If you no longer wish to be contacted for marketing purposes, please email us at contact@gtm-datascience.com and we will remove you from our marketing list.
What are your data protection rights?
We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
The right to access. You have the right to request us for copies of your personal data. We may charge you a small fee for this service.
The right to rectification. You have the right to request that we correct any information you believe is inaccurate. You also have the right to request us to complete information you believe is incomplete.
The right to erasure. You have the right to request that we erase your personal data, under certain conditions.
The right to restrict processing. You have the right to request that we restrict the processing of your personal data, under certain conditions.
The right to object to processing. You have the right to object to our processing of your personal data, under certain conditions.
The right to data portability. You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email: contact@gtm-datascience.com
Privacy policies of other websites
Our website may contain links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.
Changes to our privacy policy
We keep our privacy policy under regular review and place any updates on this web page. This privacy policy was last updated on 4.9.2026.
How to contact us
If you have any questions about our privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.
Email us at: contact@gtm-datascience.com