AI governance · EU AI Act · Styria, Austria
info@ki-beratung.st+43 664 1935195
KI-Beratung.sta QmiSoft company
Legal

Privacy Policy

Note: This English version is a convenience translation. Only the German version is legally binding.

1. Controller

The controller responsible for data processing on this website is:

Dipl.-Ing. (FH) Herbert Schrank
Software development and mechatronics applications
Sole proprietor (Einzelunternehmer)
VAT ID: ATU 72173346
Lindenweg 4
A-8190 Birkfeld
Austria

Mobile: +43 (0)664 1935195
E-mail: info@ki-beratung.st

2. Hosting

This website is hosted by World4You Internet Services GmbH, Hafenstraße 35, 4020 Linz, Austria. When the website is accessed, the IP address, date and time of access, requested content, browser type, browser version, operating system and referrer information in particular are processed for technical reasons, to the extent necessary for the secure and stable operation of the website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and reliable operation of the website).

3. Contacting us

If you contact us by e-mail or via the contact form, the data you provide (name, e-mail address, optionally company, phone number, request type, industry and message) is processed exclusively to handle your request. The form is processed on our web space at World4You and delivered to us as an e-mail; you receive an automatic confirmation with a reference number. To prevent misuse, we store your IP address only as a non-reversible hash value for at most one hour.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in communication).

4. Cookies and consent management

This website uses technically necessary storage and processing operations to save your cookie choice and to provide the website securely. Optional analytics cookies are only set after your explicit consent. You can change or withdraw your choice at any time via the “Cookie settings” link in the footer.

For access to the AI use case atlas, the server sets the technically necessary cookie “kib_atlas_ack” after you have expressly confirmed the notes on use. It contains only the version identifier of the confirmed notes and is deleted after 30 days. Without this cookie the atlas is not delivered. For access with a personal code (section 12), the server instead sets the technically necessary cookie “kib_atlas_tok” (code identifier, expiry time, checksum) after a valid access code has been entered; it becomes invalid when the code expires.

Legal bases: Art. 6(1)(a) GDPR (consent) for optional analytics cookies, Art. 6(1)(f) GDPR for technically necessary functions, and § 165 of the Austrian Telecommunications Act 2021 (TKG 2021).

5. Google Analytics

If you give your explicit consent, this website uses Google Analytics, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics is only loaded after your consent.

In particular, page views, technical usage data, browser information, approximate location information, interaction data and a shortened IP address may be processed. IP anonymisation is enabled.

Legal basis: Art. 6(1)(a) GDPR (consent).

6. Recipients and transfers to third countries

Recipients of personal data may be the hosting provider World4You and – if you have consented to web analytics – Google Ireland Limited and affiliated Google companies. A transfer to third countries, in particular the USA, cannot be ruled out.

For this, Google relies on its participation in the EU-U.S. Data Privacy Framework. Irrespective of this, it cannot be ruled out that US authorities access data. By giving your consent, you also agree to this possible transfer.

7. Storage period

Technical log data is only stored for as long as necessary for operation, security and error analysis. Contact enquiries are only kept for as long as necessary to handle your enquiry or as required by statutory retention obligations. Your cookie choice is stored locally in your browser until you delete or change it.

8. Your rights

  • Right of access pursuant to Art. 15 GDPR
  • Right to rectification pursuant to Art. 16 GDPR
  • Right to erasure pursuant to Art. 17 GDPR
  • Right to restriction of processing pursuant to Art. 18 GDPR
  • Right to data portability pursuant to Art. 20 GDPR
  • Right to object pursuant to Art. 21 GDPR
  • Right to withdraw consent with effect for the future

If you believe that the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna.

9. SSL/TLS encryption

For security reasons, this website uses SSL or TLS encryption.

10. AI chatbot / Botpress Cloud

Status: not in operation. No internal AI governance approval has yet been granted for the productive operation of the planned AI chatbot. In this version of the website, no Botpress scripts are loaded, no chat interface is activated and no chat data is transferred to Botpress.

Before any later activation, the actual technical configuration, legal bases, contracts, data flows, retention periods, sub-processors, possible third-country transfers, AI models used, transparency information and organisational control measures will be reviewed and documented.

11. Requests relating to the AI Atlas and retention

If you request an access code to the AI Atlas or an industry PDF, or wish to discuss a use case, via the contact form or by email, we process the data you provide (in particular name, company, email address, content of the request including your confirmation of the notes on use) as well as our reply and the version of the document sent.

Purposes and legal bases: handling your request and sending the access code or document (Art. 6(1)(b) GDPR); retaining the request, your confirmation and our reply as evidence for the establishment, exercise or defence of legal claims (Art. 6(1)(f) GDPR, legitimate interest).

Storage period: until the limitation periods for possible claims in connection with the request have expired (as a rule three years from knowledge of the damage and the person causing it, § 1489 ABGB); during ongoing proceedings until their conclusion. The data is not used for advertising without your separate consent.

12. Access codes for the AI Atlas

The AI Atlas can only be accessed with a personal access code that we send free of charge by email on request (section 11) or by invitation. When you sign in we process the code identifier (which we have assigned to the requesting or invited person), the time of the first and every further sign-in and the version of the confirmed notes on use. No IP address is stored in this process.

Purposes and legal bases: access control and limiting the validity of the code to five days from its first use (Art. 6(1)(b) GDPR); evidence of the confirmation of the notes on use (Art. 6(1)(f) GDPR). Storage period: as in section 11.

Last updated

October 2026