Privacy Policy

1. Controller

The controller responsible for processing your personal data on this website is:

Full company details are listed in our Imprint .

2. What we process when you visit

When you open this website, our server automatically records technical data that your browser transmits:

• IP address
• Date and time of the request
• The URL requested and the referring page
• Browser type, version and operating system (user agent)

This is technically necessary to deliver the site and to keep it secure and stable. The legal basis is our legitimate interest in a functioning, attack-resistant website (Art. 6(1)(f) GDPR). These log entries are not merged with other data sources and are not used to identify individual visitors. They are deleted or anonymised as soon as they are no longer needed for security analysis.

3. Cookies, analytics and tracking

This website sets no cookies, uses no local or session storage, and runs no analytics, tracking or advertising tools. There are no social media plugins and no embedded videos or maps. The web fonts used here (Inter and Space Grotesk) are self-hosted: they are downloaded when the site is built and delivered from our own server, so your browser never contacts Google or any other font provider to load them. Because nothing requiring consent is loaded, this site does not need a cookie banner.

4. Newsletter and forms

The newsletter form on this website is operated by Brevo (formerly Sendinblue). The provider is Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, a subsidiary of Sendinblue SAS, Paris. Brevo acts as our processor under Art. 28 GDPR, and the subscriber list is the same one used by neob.ai.

When you submit the form, your email address and your consent are transmitted to Brevo's servers and stored there. We use a double opt-in procedure: after submitting you receive a confirmation email, and your subscription only becomes active once you click the link in it. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw that consent at any time — via the unsubscribe link in every newsletter email, or informally by writing to us. This does not affect the lawfulness of processing carried out beforehand. After withdrawal we remove your address from the list and keep only the record of the original consent for as long as we need it to meet our accountability obligation.

The form is a plain HTML form: nothing is transmitted to Brevo until you actually submit it. We deliberately do not load Brevo's JavaScript, so simply visiting a page that shows the form sends no data. Processing takes place within the European Union. See Brevo's privacy policy for details.

This website also has a community sign-up form on /community. When you submit it, we process the details you enter (name, email address, any organisation and your message) solely to handle your enquiry (Art. 6(1)(b) and (f) GDPR). The message is delivered to us by email through Resend, a transactional email service operated by Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA, acting as our processor under Art. 28 GDPR. This involves a transfer of your data to the United States, which Resend covers through EU Standard Contractual Clauses and its certification under the EU-US Data Privacy Framework. We keep the message for as long as the enquiry requires, plus any statutory retention periods. If you would rather not use the form, write to hello@aihub.wien instead.

If you write to us by email at hello@aihub.wien, we process your address and the content of your message solely to answer your enquiry (Art. 6(1)(b) and (f) GDPR) and keep it for as long as the matter requires, plus any statutory retention periods.

5. Links to other websites

This website links to external sites, including partner organisations, social networks and Google Maps for directions. These are ordinary links, not embedded content — nothing is loaded from those providers while you are on our pages, and no data is transmitted to them until you actively follow a link. Once you do, the third party's own privacy policy applies.

6. Recipients and transfers

We do not sell or rent personal data. The website runs on servers within the European Union; our hosting provider acts as a processor under Art. 28 GDPR. We do not transfer personal data to countries outside the EU/EEA.

7. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15)
• have inaccurate data corrected (Art. 16)
• have your data erased (Art. 17)
• restrict processing (Art. 18)
• receive your data in a portable format (Art. 20)
• object to processing based on legitimate interests (Art. 21)

To exercise any of these, write to hello@aihub.wien. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

8. Changes to this policy

We update this policy when the way we process data changes — for example when the newsletter or community forms go live. The current version is always published on this page.