Privacy

IoTrio GmbH, Clemensänger-Ring 24, 83556 Freising, Germany. Contact: Dr. Peter Schönweitz, e-mail: pescho (at) iotrio (dot) de

The website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, located in a data centre in Falkenstein (Germany). Hetzner processes data on our behalf (Art. 28 GDPR).

When you open a page, your browser transmits technical data (IP address, time, requested address, browser identifier). This data is required to deliver the page (Art. 6 (1) (f) GDPR). The public pages set no cookies and use no external tracking or analytics services. Fonts are served from this server; no third-party services are contacted.

Visitor statistics: to see how often the pages are used, the server records for each page view the time, the page (without query parameters), the language, the referring website (domain only), the device type and browser family (roughly derived from the browser identifier) and the country (determined locally from the IP address using the DB-IP database). The IP address itself is not stored. To count unique visitors per day, a hash is formed from the shortened IP address (IPv4 /24, IPv6 /48), the browser identifier and a random value that changes daily and is then discarded; visitors therefore cannot be recognised across days. Known bots are marked. Individual page views are deleted after 90 days; only daily totals are kept. Legal basis: legitimate interest in a needs-based design of the website (Art. 6 (1) (f) GDPR). Country data: IP Geolocation by DB-IP (CC BY 4.0).

If you use the light/dark switch, your choice is stored only in your browser (local storage) and is not transmitted.

The internal area and the guest chat use a technically necessary session cookie after sign-in (§ 25 (2) TDDDG). For protection against misuse, the application records the IP address with sign-in attempts and requests in its operating log; the log is size-limited and overwritten on a rolling basis.

Invited guests can ask questions about the EFCE method in a chat. We process: name and user name of the guest, a password hash (no plain-text password), the questions and answers with timestamps, and usage data (number of requests, costs). Purpose: scientific exchange and preparing a possible collaboration (Art. 6 (1) (b) and (f) GDPR).

If a guest in the standard mode is signed in, the visitor statistics (section 3) record their views of the public pages with their name. Guests with private access are only counted anonymously.

The answers are generated by an AI model (Claude) of Anthropic. For this purpose the questions and the course of the conversation are transmitted to Anthropic, which processes them as our processor. Anthropic is based in the USA; the transfer is based on the EU standard contractual clauses (Art. 46 (2) (c) GDPR). According to its commercial terms, Anthropic does not use these inputs to train its models.

In the standard mode, the conversations are stored on our server and read by Dr. Peter Schönweitz. They are deleted when the guest access is deleted, or earlier on request.

Private access: for guests invited without this monitoring, the server does not store any questions or answers. The conversation is kept only in the guest's browser (local storage), is sent along with each request and can be deleted by the guest at any time. The server keeps only counters (number of requests, tokens, costs) without any content. The transfer to Anthropic for generating the answers also takes place in this mode.

If you write to us, we process your message to answer it (Art. 6 (1) (b) and (f) GDPR).

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on Art. 6 (1) (f) GDPR. Please write to pescho (at) iotrio (dot) de. You may also lodge a complaint with a supervisory authority, e.g. the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.

There is no automated decision-making within the meaning of Art. 22 GDPR.