Privacy Policy

1. Controller

Jörg Fuchs
AI Engineering — Sole Proprietor
Buchgrabenweg 8
7000 Eisenstadt, Austria
Email: [email protected]

2. Overview of Data Processing

We process personal data only to the extent necessary to provide a functional website as well as our content and services. Personal data is generally only processed with the user's consent or where processing is permitted by law.

3. Legal Bases

• Consent (Art. 6(1)(a) GDPR): When you have given us consent to process your data (e.g. newsletter).
• Contract performance (Art. 6(1)(b) GDPR): For processing your purchase (ebook download, payment processing).
• Legal obligation (Art. 6(1)(c) GDPR): Retention of invoice data pursuant to Austrian tax law (7 years).
• Legitimate interests (Art. 6(1)(f) GDPR): Ensuring IT security and operation of our website.

4. Data Collected

a) When visiting the website

When you access our website, the following data is automatically collected: IP address, date and time of access, browser and operating system used, referrer URL. This data is stored in server log files and deleted after 90 days at the latest.

b) When purchasing a product

For processing your purchase, we process: name, email address and payment information. Payment is handled by Stripe, Inc. — your payment data (credit card numbers etc.) is exclusively processed by Stripe and never stored on our servers.

5. Third Parties and Processors

• Stripe, Inc. (South San Francisco, USA) — payment processing. Stripe is PCI-DSS certified. Privacy policy: stripe.com/privacy
• Cloudflare, Inc. (San Francisco, USA) — website hosting (Cloudflare Pages). Privacy policy: cloudflare.com/privacypolicy
• Rapidmail GmbH (Freiburg, Germany) — newsletter delivery. Your email address is only transmitted to Rapidmail upon active newsletter subscription. Legal basis: consent (Art. 6(1)(a) GDPR). Privacy policy: rapidmail.de/datenschutz

For data transfers to the USA, we rely on the EU-US Data Privacy Framework and/or Standard Contractual Clauses (Art. 46(2)(c) GDPR).

6. Cookies and Web Analytics

This website uses only technically necessary cookies required for its operation. No tracking or analytics cookies are used. A separate consent is therefore not required.

For anonymous website analytics we use Plausible Analytics (self-hosted). Plausible does not use cookies, does not collect personal data, and is GDPR-compliant without consent banners. No data is transmitted to third parties.

7. Newsletter

You may voluntarily subscribe to our newsletter. Only your email address is collected. Legal basis is your consent (Art. 6(1)(a) GDPR). Delivery is via Rapidmail (see section 5). You can unsubscribe at any time via the unsubscribe link in every newsletter email. After unsubscribing, your email address will be removed from the distribution list immediately.

8. Retention Periods

• Server log files: 90 days maximum
• Invoice data: 7 years (statutory retention obligation, Austrian Federal Fiscal Code — BAO)
• Email address (on purchase): as long as required for support, maximum 3 years after purchase

9. Your Rights

You have the right to:

• Access to your stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)

Send your request to: [email protected]

10. Right of Withdrawal for Digital Content

You have the right to withdraw your purchase within 14 days without giving any reason (§ 11 FAGG — Austrian Distance and Off-Premises Contracts Act).

Exception: If at the time of purchase you expressly consented to the immediate download and confirmed that you thereby waive your right of withdrawal, the right of withdrawal expires upon provision of the download (§ 18 para. 1 Z 11 FAGG).

To exercise your right of withdrawal, send a clear declaration (e.g. by email) to: [email protected]

11. Right to Lodge a Complaint

If you believe that the processing of your data violates the GDPR, you may lodge a complaint with the competent supervisory authority:

Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40-42, 1030 Vienna, Austria
Phone: +43 1 52 152-0
Email: [email protected]
Website: www.dsb.gv.at