Privacy Policy
1. Principle
The protection of personal data is a core concern of Mitterberger:Lab. This privacy policy explains what personal data is processed, for what purposes, and which rights data subjects have. Processing is carried out in accordance with the GDPR, the EU Data Act, and – where applicable – the EU AI Act.
2. Data Controller
Name: Mitterberger:Lab Owner: Claus Rainer Nisslmüller Country: Austria Email: claus.nisslmueller@gmail.com
3. Types of Data Processed
Depending on usage, the following data may be processed: - contact details voluntarily provided - communication content - technically necessary access data (e.g. IP address in anonymized or pseudonymized form, access time, browser type) - usage data required to ensure system stability No hidden tracking or profiling is performed.
4. Purposes of Processing
Personal data is processed exclusively for: - responding to inquiries - providing and maintaining system functionality - preventing misuse and technical attacks - fulfilling legal obligations No incompatible secondary use takes place.
5. Use of AI Systems
AI-based tools may be used to support internal processes such as: - text analysis - UX evaluation - system optimization Explicitly excluded are: - biometric identification - emotion recognition - automated decision-making with legal or significant effects - classification of natural persons All systems used fall under minimal or low-risk categories according to the EU AI Act.
6. Legal Basis
Processing is based on: - Art. 6(1)(a) GDPR (consent) - Art. 6(1)(b) GDPR (contractual or pre-contractual necessity) - Art. 6(1)(f) GDPR (legitimate interest in secure operation)
7. Data Retention
Personal data is retained only for as long as necessary for its intended purpose or required by law, after which it is deleted or anonymized.
8. Data Subject Rights
Data subjects have the right to: - access - rectification - erasure - restriction of processing - data portability - objection Requests can be submitted via email at any time.
9. Right to Lodge a Complaint
Data subjects have the right to lodge a complaint with a competent supervisory authority.