Courtesy translation — only the German version is legally binding.
01 · Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG) is:
Markus Schulz, Artcore Websystems (sole proprietorship)
Schärdingerstraße 8, 4980 Antiesenhofen, Austria
Phone: +43 680 317 3544
Email: office@artcore.at
We process personal data only insofar as this is necessary to fulfil our contractual and legal obligations or you have given us your consent. In doing so, we adhere to the principles of data minimisation, purpose limitation and transparency under Art. 5 GDPR.
When you visit our website, the server automatically records the following data:
Purpose: technical operation and security of the website
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
Retention period: 7 days, then automatic deletion
The website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The provider processes the data listed above on our behalf (data processing under Art. 28 GDPR); the servers are located in Germany.
The fonts used on this website (Archivo Black, IBM Plex Sans, IBM Plex Mono) are loaded locally from our own server. No connection is made to Google or any other font provider.
When you contact us, we process:
Purpose: handling your enquiry and maintaining contact
Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) or (f) (legitimate interest)
Retention period: 3 years from the last contact, unless a contractual relationship exists
In the context of a contractual relationship, we process:
Purpose: performance of the contract, invoicing, customer management
Legal basis: Art. 6(1)(b) GDPR
Retention period: 7 years in accordance with Austrian retention obligations (BAO)
If you subscribe to our newsletter, we process your email address on the basis of your consent.
Legal basis: Art. 6(1)(a) GDPR
Retention period: until you withdraw your consent
Unsubscribe: at any time via the unsubscribe link in the newsletter
Your personal data is only disclosed to third parties:
We use the following categories of service providers, with whom a data processing agreement may be in place:
Data is only transferred to third countries outside the EU/EEA where appropriate safeguards under Art. 46 GDPR are in place (e.g. EU standard contractual clauses).
Our website uses only technically necessary cookies and browser storage. We do not use any analytics, statistics or marketing services. On your first visit, nothing is stored until you make a choice in the notice window.
| Name | Type | Purpose | Duration |
|---|---|---|---|
real_cookie_banner-… | Cookie, own domain | Stores your choice in the cookie notice (time, anonymous ID, selected category) so the notice does not appear on every visit | 12 months |
real_cookie_banner-consent-queue-lock | Local storage, own domain | Technical lock while your choice is being saved | until you delete it |
artcore-theme | Local storage, own domain | Remembers the light/dark display — only if you switch it yourself | until you delete it |
artcore-particles | Local storage, own domain | Remembers the particle color (color/gray) — only if you switch it yourself | until you delete it |
artcore-news-seen | Local storage, own domain | Remembers that you have already seen the current news item (dot on the News button) | until you delete it |
Legal basis: § 165(3) Austrian Telecommunications Act 2021 (TKG 2021) — storage is strictly necessary to provide the service you have expressly requested; for the related processing, Art. 6(1)(f) GDPR (legitimate interest in technical operation). Consent is not required for this.
Record of your choice: As proof (Art. 5(2) and Art. 7(1) GDPR), we store an anonymous ID, the time, the option selected, the screen size and the page visited on our server. Your IP address is not stored in plain text, only as a hashed check value. This data is deleted after 12 months. We use the plugin “Real Cookie Banner” (devowl.io GmbH) for the notice; no data is transmitted to the manufacturer.
You can change your choice at any time via the Cookie settings link in the footer. You can also delete browser storage in your browser settings.
External AI platforms and tools (e.g. OpenAI/ChatGPT, Krater.ai, Microsoft Copilot) may be used as part of our services. Before personal data is entered into such systems, we inform you and — where required — obtain your consent. We only use AI services from providers that offer adequate data protection guarantees.
A chat assistant (“AVA”) is set up on our website. It runs on our own infrastructure at chat.jarvis-mcp.at (server in Frankfurt am Main, Germany; for the processor see section 4).
On every page view, your browser loads a small start script and the current chat configuration from this server. For technical reasons, your IP address, date and time and browser details are transmitted and briefly stored in server logs. The script does not set cookies and does not store anything in your browser. If the chat is switched off, no chat window is shown.
Notice pursuant to Art. 50 AI Act (Regulation (EU) 2024/1689): AVA is an AI system. When you chat with AVA, you are communicating with an artificial intelligence, not a human. Responses are generated automatically and may contain errors; binding information is only available from us personally.
If you actively use the chat, we process your input, your IP address and technical metadata (browser, time) in order to answer your request. An AI language model from an external provider may be used to generate responses; any transfer to third countries only takes place under the safeguards set out in section 4. Please do not enter sensitive personal data in the chat.
Purpose: answering enquiries and providing initial information about our services
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in efficient communication with users) or Art. 6(1)(b) GDPR for steps prior to entering into a contract
Retention period: as for other contact enquiries (see section 3.2)
You have the following rights with regard to your personal data:
| Right | What it means |
|---|---|
| Access (Art. 15 GDPR) | Confirmation and a copy of the data stored about you |
| Rectification (Art. 16 GDPR) | Correction of inaccurate data |
| Erasure (Art. 17 GDPR) | “Right to be forgotten” |
| Restriction (Art. 18 GDPR) | Restriction of processing |
| Data portability (Art. 20 GDPR) | Receiving your data in a machine-readable format |
| Objection (Art. 21 GDPR) | Objection to processing based on legitimate interest |
| Withdrawal | Withdrawal of consent given, without retroactive effect |
To exercise your rights, please contact: office@artcore.at
We will handle your request free of charge within 30 days.
You have the right to lodge a complaint with the Austrian Data Protection Authority:
Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40–42, 1030 Vienna, Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at
We use technical and organisational measures to protect your personal data against loss, destruction, manipulation and unauthorised access. Our security measures are continuously adapted to the state of the art (Art. 32 GDPR).
We reserve the right to amend this privacy policy where necessary, in particular in the event of changes to the legal framework or to our services. The current version is always available on our website.
Last updated: September 2026