Privacy Notice
Updated
Who operates this site
Maximilian Havas, Klosterneuburg, Austria, operates this project website and is responsible for the personal data he publishes here. For privacy questions or requests, email m.havas@vbs.ac.at. See the Legal Notice for the publisher details.
Team profiles and email contact
The public team section uses names, portraits, project roles and school email addresses from the team’s profile materials to introduce members, credit their work and provide project contact details. Anyone who visits the site can see these profiles while they are relevant to the project portfolio. If your profile appears on this site and you want it corrected or removed, contact the operator using the address above.
If you email the operator, your address and message are used to answer and follow up. The legal basis is the legitimate interest in handling project enquiries under Article 6(1)(f) GDPR. Correspondence is retained as long as needed to handle the enquiry and any follow-up or legal obligation.
Hosting and security
OpenAI hosts the site through ChatGPT Sites. Cloudflare provides network delivery and bot protection. When you load a page, the hosting infrastructure receives technical request data such as your IP address, browser information, the requested resource and the time of the request. This data supports site delivery and protection against abuse. ChatGPT Sites also measures traffic automatically and reports aggregate page views and unique visitor counts. The operator’s legitimate interests under Article 6(1)(f) GDPR are keeping the site available and secure and understanding its overall reach. See ChatGPT Sites documentation on traffic statistics.
OpenAI and Cloudflare may process technical data outside the European Economic Area. Their policies explain their retention criteria, transfer safeguards and privacy contacts. A site-specific retention period for hosting logs is not published in the documentation reviewed. See the OpenAI EU Privacy Policy and the Cloudflare Privacy Policy.
Cookies
Cloudflare sets __cf_bm to help distinguish automated traffic from visitors and protect the site from abuse. Cloudflare documents an expiry after 30 minutes of continuous inactivity. The site itself does not set advertising or analytics cookies. See Cloudflare’s cookie documentation.
Your rights
Under the GDPR, you may have the right to access, correct or erase your personal data, restrict its processing, object to processing based on legitimate interests, and receive portable data where applicable. Where processing is based on consent, you can withdraw consent at any time. Contact the operator to exercise these rights. You can also lodge a complaint with the Austrian Data Protection Authority or another competent supervisory authority.