Privacy notice

01 Key definitions

Service

The Service is the website https://aiadminpanel.com, operated by 23 Investments GmbH.

Personal Data

Personal Data means data about a living individual who can be identified from those data. This includes data combined with other information that we hold or are likely to hold.

Usage Data

Usage Data is data collected automatically, either by the use of the Service or by the Service's infrastructure itself. An example is the pages you open and the time you open them.

Cookies

Cookies are small files stored on your device (computer or mobile device).

Data Controller

A Data Controller is the person or company that decides why and how personal data is processed.

For the purpose of this notice, 23 Investments GmbH, Aeschstrasse 4, 8834 Schindellegi, Switzerland, is the Data Controller of your Personal Data.

Data Processors (or Service Providers)

A Data Processor (or Service Provider) is any person or company that processes data on behalf of the Data Controller.

We use the Service Providers named in section 18 to run this website.

Data Subject (or User)

A Data Subject is any living individual who uses our Service and is the subject of Personal Data.

02 Information Collection and Use

We collect a few types of information, each for a stated purpose, to provide and improve the Service.

Types of Data Collected

Personal Data

When you use the request form or write to us, we receive information that can identify you ("Personal Data"). This is:

• your email address;
• what you run, as you choose it in the form;
• anything you write to us in an email;
• Cookies and Usage Data, as described below.

We use your email address to answer your request and to send you news about AI Admin Panel, as the form says. You can opt out at any time with the unsubscribe link in any email we send.

Usage Data

When you open a page, your browser sends technical information ("Usage Data"). This includes your IP address, browser type and version, the page you asked for, the time, and the page you came from.

If you accept statistics in the cookie banner, Google Analytics also collects more. It records the pages you visit, how long you stay, your device type and a random ID stored in a cookie.

Tracking Cookies Data

We use cookies and similar storage only as listed in section 16. Cookies are files with a small amount of data, which may include a random unique identifier.

Examples of the cookies and storage we use:

• Preference storage. It remembers whether you accepted or rejected statistics.
• Security cookies. Cloudflare may use them to tell people from bots.
• Statistics cookies. Google Analytics sets them, only after you click "Accept".

You can set your browser to refuse all cookies or to tell you when a cookie is being sent. Some parts of the site may then stop working.

03 Use of Data

23 Investments GmbH uses the collected data for these purposes:

• to provide and maintain the Service;
• to answer your request or your email;
• to send you news about AI Admin Panel, after you confirm your email address;
• to understand how the Service is used, only if you accept statistics;
• to detect, prevent and address technical issues and attacks.

04 Legal Basis for Processing Personal Data

Swiss data protection law (the Federal Act on Data Protection, FADP) applies to us. If you are in the European Economic Area (EEA), the General Data Protection Regulation (GDPR) can also apply.

Our legal basis depends on the Personal Data and the context in which we collect it. We may process your Personal Data because:

• you have given us your consent: statistics, and the emails you confirm through the request form (GDPR Article 6(1)(a));
• we need it for the steps before a contract you ask about, such as a licence (Article 6(1)(b));
• it serves our legitimate interests, which your rights do not override: a safe website, and answers to your emails (Article 6(1)(f));
• we need it to comply with the law (Article 6(1)(c)).

05 Retention of Data

23 Investments GmbH keeps your Personal Data only as long as necessary for the purposes in this notice. We keep and use it as far as necessary to comply with our legal obligations, resolve disputes and enforce our agreements.

We keep the details you give us in the request form until you unsubscribe. After that, we keep them only as long as necessary for these purposes, or as the law requires.

We keep Usage Data for a shorter time, unless we need it to strengthen security or improve how the Service works. We also keep it longer where the law requires us to.

06 Transfer of Data

Your information, including Personal Data, may be transferred to and kept on computers outside your state, province or country. The data protection laws there may differ from those where you live.

23 Investments GmbH is based in Switzerland. Some of the Service Providers in section 18 are in the USA. Cloudflare delivers the website from data centres around the world.

Some Service Providers are outside Switzerland or the EEA. For them, transfers rely on the adequacy decisions of the European Commission and the Swiss Federal Council. Where these do not apply, they rely on Standard Contractual Clauses.

23 Investments GmbH takes all steps reasonably necessary to treat your data securely and in line with this notice. We transfer Personal Data to an organisation or country only where adequate controls, including security controls, are in place.

07 Disclosure of Data

Business Transaction

If 23 Investments GmbH is involved in a merger, acquisition or asset sale, your Personal Data may be transferred. We will give notice before your Personal Data is transferred and becomes subject to a different privacy notice.

Legal Requirements

23 Investments GmbH may disclose your Personal Data in the good faith belief that this is necessary:

• to comply with a legal obligation;
• to protect and defend the rights or property of 23 Investments GmbH;
• to prevent or investigate possible wrongdoing in connection with the Service;
• to protect the personal safety of users of the Service or the public;
• to protect against legal liability.

We do not sell Personal Data.

08 Security of Data

The security of your data is important to us. Still, no method of transmission over the internet, and no method of electronic storage, is 100% secure. We use commercially acceptable means to protect your Personal Data, but we cannot promise its absolute security.

Your connection to this website uses HTTPS, and Cloudflare filters attacks on the traffic it delivers. Please never send us passwords or other secrets by email.

09 Do Not Track signals

This website does not respond to Do Not Track ("DNT") signals. Do Not Track is a setting in your web browser that tells websites you do not want to be tracked.

Statistics on this site run only if you accept them in the cookie banner, whatever your DNT setting.

10 Your Data Protection Rights

Under the FADP and, where it applies, the GDPR, you have rights over your Personal Data. We aim to take reasonable steps to let you correct, amend, delete or limit the use of your Personal Data.

If you want to know what Personal Data we hold about you, or want it removed from our systems, please contact us.

In certain circumstances, you have these rights:

• The right to access, update or delete the information we have on you.
• The right of rectification. You can have your information corrected if it is inaccurate or incomplete.
• The right to object to our processing of your Personal Data.
• The right of restriction. You can ask us to restrict the processing of your Personal Data.
• The right to data portability. You can ask for a copy of the data you gave us, in a structured, machine-readable and commonly used format.
• The right to withdraw consent at any time, where we rely on your consent. This does not affect what we did with your data before.

Please note that we may ask you to verify your identity before we answer such requests.

You have the right to complain to a data protection authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC), at www.edoeb.admin.ch. In the EEA, it is the data protection authority in your country.

11 Service Providers

We use third-party companies to help us run the Service ("Service Providers"). They are named in section 18.

These third parties have access to your Personal Data only to perform these tasks on our behalf. They are obliged not to disclose or use it for any other purpose.

Analytics

We use a third-party Service Provider to analyse the use of our Service, only if you accept statistics.

Google Analytics

Google Analytics is a web analytics service offered by Google that counts and reports website traffic. On this site it loads only after you click "Accept" in the cookie banner.

You can also stop Google Analytics in your browser by installing the Google Analytics opt-out browser add-on, at https://tools.google.com/dlpage/gaoptout.

For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy?hl=en

12 When you open a page

Cloudflare delivers this website through its network and protects it against attacks. Our web hosting provider runs the server, in Germany, that holds the pages.

Both receive the Usage Data that every browser sends. That is your IP address, the page you asked for, the time, your browser and the page you came from. Your browser may also send Cloudflare reports of network errors.

We use this data to deliver the pages, keep the site safe and find errors. Our legal basis is our legitimate interest in a website that works and is safe.

The fonts on this site come from our own server. Your browser does not contact Google Fonts or another font service.

13 The request form

The Get started page (aiadminpanel.com/request-access/) has a form. In it, you give us your email address and tell us what you run. You can also use it to ask for a call or a walkthrough.

The form is plain HTML on our page and loads no Kit script. When you send it, your browser sends your details straight to Kit (formerly ConvertKit), which stores them for us. Kit also receives your IP address and browser data, and may set its own short-lived cookies on kit.com at that moment.

Kit then sends you an email with a link to confirm your address. We use your details to answer your request and to send you news about AI Admin Panel.

Our legal basis is your consent, which you confirm by email. Where you ask about a licence, it is also the steps before a contract.

14 Email to and from us

Our emails to you go out through Kit. Kit records whether an email was opened and whether a link in it was clicked. We use this to judge whether what we send is useful.

Every email we send through Kit has a link to unsubscribe, and unsubscribing stops all of it.

If you write to us, we receive your email address and your message, and we use them to answer you. Email to our aiadminpanel.com addresses runs on Microsoft 365. Email to [email protected] runs on Google Workspace. Each stores the messages. Our legal basis is our legitimate interest in answering you, or the steps before a contract.

15 Video

The launch film on our home page is hosted by Bunny.net. It loads only after you click play. Until then, your browser does not contact Bunny.net.

When the film plays, Bunny.net receives your IP address and basic playback information. The player also contacts Bunny.net's own servers that measure connection speed and playback. Our legal basis is your consent, which you give by clicking play.

16 Cookies and similar storage

This site uses the following cookies and storage.

Table 16.1 · Cookies and similar storage

aap-consent	(stored by this site in your browser's local storage). It remembers whether you accepted or rejected statistics. It stays until you change your choice or clear your browser data. It needs no consent, because it stores your choice.
_ga and _ga_ET8Z2Q92JK	(Google Analytics). They tell visits apart for our statistics. They last up to two years. They are set only after you click "Accept".
Cloudflare	may set short-lived security cookies to tell people from bots. The __cf_bm cookie ends after 30 minutes without activity. The cf_clearance cookie is set after a security check and lasts 30 minutes. These cookies protect the site, so we do not ask for consent for them.
Kit	sets nothing on this site, because the form is plain HTML.

You can also block or delete cookies in your browser settings. Some parts of the site may then stop working.

17 Consent and how to withdraw it

Google Analytics loads only after you click "Accept" in the cookie banner, which we run ourselves on this site. Until then it does not run and sets no cookies. If you click "Reject", it does not load.

You can change or withdraw your choice at any time through the "Cookie settings" link at the bottom of every page. The banner opens again. If you reject, we remove the Google Analytics cookies from this site and reload the page, so statistics stop at once.

Withdrawing consent does not affect anything that happened before you withdrew it. It does not affect your request or any email you have asked for.

18 Who processes data on our behalf

We use the following processors. Some processors are outside Switzerland or the EEA. For them, transfers rely on the adequacy decisions of the European Commission and the Swiss Federal Council. Where these do not apply, they rely on Standard Contractual Clauses.

• Cloudflare — delivers and protects the website, including IP addresses and reports of network errors.
• Our web hosting provider (Germany) — server logs, including IP addresses, for security and operation.
• Google (Google Analytics 4) — page views and visit statistics. Only after consent.
• Kit (ConvertKit) — the request form, your email address and what you run, and email opens and clicks.
• Bunny.net — the launch film on the home page, including your IP address. Only after you click play.
• Microsoft 365 — the emails you send us and our replies.
• Google (Google Workspace) — the emails you send to [email protected] and our replies.

19 Links to Other Sites

Our Service contains links to sites that we do not operate. If you click a third-party link, you go to that third party's site. We strongly advise you to read the privacy notice of every site you visit.

We have no control over, and take no responsibility for, the content, privacy policies or practices of any third-party sites or services.

20 Privacy of children

Our Service is for businesses and does not address anyone under the age of 18 ("Children").

We do not knowingly collect Personal Data from anyone under the age of 18. If you are a parent or guardian and know that your Child has given us Personal Data, please contact us. If we learn that we have collected Personal Data from a Child without verified parental consent, we take steps to remove it.

21 The software has its own privacy policy

This notice covers the website. AI Admin Panel, the software you install on your own server, comes with its own privacy policy.

You can read it on this site, in our software privacy policy. The same text ships with the panel, under Settings → Legal.

22 Changes to This Privacy Notice

We may update this notice from time to time. We will post the new notice on this page and update the effective date at the top.

Where a change is significant, we will also show a clear notice on the website before it takes effect.

Please review this notice from time to time. Changes take effect when they are posted on this page.

23 Contact Us

If you have any questions about this privacy notice, please contact us:

• By email: [email protected]
• By post: 23 Investments GmbH, Aeschstrasse 4, 8834 Schindellegi, Switzerland