Privacy Policy

1. Data Protection at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified.

2. Controller

Responsible for data processing on this website is:

Simon Kirchebner
TyrolAI
Archengasse 4
6130 Schwaz
Tirol, Österreich
Email: kirchebner@tyrolai.com

3. Data Collection on this Website

Contact Form (Formspree)

If you send me inquiries via the contact form, your details from the form (name, email address, optionally company, department, and message) are processed for the purpose of handling the inquiry and for follow-up questions. For transmission I use the service Formspree by Formspree, Inc. (USA). Your entries are transmitted via Formspree and also stored there; this involves a transfer of data to the USA. The transfer is based on standard contractual clauses (Art. 46 GDPR) or an adequacy decision of the European Commission (Art. 45 GDPR). For details, see Formspree's privacy policy at https://formspree.io/legal/privacy-policy/. The legal basis for processing is Art. 6(1)(b) GDPR (handling your inquiry). I delete inquiries as soon as they are no longer required for processing and no statutory retention obligations apply. I will not pass on this data without your consent.

4. Web Analytics (Google Analytics)

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics is only loaded after you have given consent via the cookie banner (Art. 6(1)(a) GDPR); without consent, no analytics take place. Only then does Google Analytics set cookies ("_ga" and "_ga_…"), which are stored for up to two years. IP addresses are processed in truncated form. A transfer of data to Google servers, including in the USA, cannot be ruled out. In that case, the transfer is based on an adequacy decision of the European Commission (EU-US Data Privacy Framework, Art. 45 GDPR) or standard contractual clauses (Art. 46 GDPR). You can revoke your consent at any time via "Cookie Settings" in the footer of this website. When you revoke it, Google Analytics is deactivated and the Google Analytics cookies are deleted. More information: https://policies.google.com/privacy

5. Chat (Botpress)

For the chat on this website I use Botpress (Botpress Inc., USA). The chat is only loaded when you click the chat button. Before that, no connection to Botpress is established and no data is transmitted to Botpress. As soon as you open the chat, your IP address, technical information about your browser and your entries in the chat are transmitted to Botpress and processed and stored there to answer your inquiry. Botpress may create entries in your browser's storage for this purpose. The legal basis is Art. 6(1)(b) GDPR insofar as your inquiry relates to a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR (legitimate interest in providing an easy way to get in touch). You decide yourself whether the chat is loaded by actively opening it. The data is processed on servers in the USA; the transfer is based on standard contractual clauses (Art. 46 GDPR) or an adequacy decision of the European Commission (Art. 45 GDPR). I delete chat histories as soon as they are no longer required to handle your inquiry and no statutory retention obligations apply. Please do not enter sensitive data in the chat. More information: https://botpress.com/privacy

6. Hosting

This website is hosted by Netlify, Inc. (USA) and delivered via its servers. Each time a page is accessed, Netlify processes technically necessary access data (server log files): your IP address, date and time of access, the requested page or file, the previously visited page (referrer), and browser type and operating system. Without this data, the website cannot be delivered. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest lies in delivering the website securely, reliably and quickly. The log files are only stored for as long as necessary for these purposes. Data may be transferred to the USA in the process. The transfer is based on standard contractual clauses (Art. 46 GDPR) or an adequacy decision of the European Commission (Art. 45 GDPR). Your entries in the contact form and in the chat are not stored at Netlify but transmitted directly to the services named above. More information: https://www.netlify.com/privacy/

7. Cookies and Browser Storage

Simply visiting this website does not set any cookies. The website creates at most two entries in your browser's local storage (localStorage):

• "lang" stores the selected language (German or English) when you switch the language.
• "cookie-consent" stores your choice in the cookie banner (accepted or declined) so that the banner does not reappear on every page view.

These entries are technically necessary to keep the settings you have chosen (Section 165(3) of the Austrian Telecommunications Act 2021, TKG 2021). They contain no personal data, are not transmitted to me or third parties, and remain stored until you delete them in your browser. Google Analytics cookies are only set after your consent and are deleted when you revoke it (see section 4). The chat only creates its own entries after you open it (see section 5).

8. Your Rights

You have the following rights regarding your personal data, which you can exercise against me at any time and free of charge:

• Access to the data stored about you, its origin, recipients and the purpose of processing (Art. 15 GDPR)
• Rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability, i.e. receiving the data you have provided in a structured, commonly used and machine-readable format (Art. 20 GDPR)
• Withdrawal of consent you have given, with effect for the future (Art. 7(3) GDPR). This does not affect the lawfulness of processing carried out before the withdrawal. You can withdraw your consent to Google Analytics via "Cookie Settings" in the footer.

To exercise these rights, an informal message to the email address given in section 2 is sufficient.

Right to lodge a complaint with the supervisory authority

If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you can lodge a complaint with the supervisory authority (Art. 77 GDPR). In Austria, this is the:

Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40–42
1030 Wien
Email: dsb@dsb.gv.at
Web: www.dsb.gv.at

9. SSL Encryption

This site uses SSL encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.