Center for AI and Ethics Controller
Center for AI and Ethics (Europe)
Schönbrunner Straße 5/5, 1040 Vienna, Austria
Email: office@caie.at
Principle: Data minimisation
We collect and process only the personal data necessary for the operation of this website and for handling enquiries. For anonymised audience measurement we use Google Analytics — exclusively after your active consent via the cookie banner. For details see the section "Analytics & tracking".
No user data is shared with advertisers or data brokers.
Hosting
This website is hosted by Vercel Inc. (340 Pine Street, Suite 701, San Francisco, CA 94104, USA). The server infrastructure for visitors from Europe is located in the Frankfurt (fra1) region.
When accessing our website, server log files are automatically created containing the following information: IP address (anonymised), date and time of access, URL accessed, HTTP status code, browser type.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and uninterrupted operation of the website).
A data processing agreement (DPA) with Vercel is in place. Standard Contractual Clauses (SCC) pursuant to Art. 46 GDPR apply to data transfers to the USA. Residual risk notice: Vercel Inc. is a US company and potentially subject to the US CLOUD Act. The risk of government access is minimised through the EU server region (fra1) and SCC, but cannot be fully excluded.
Email contact
When you contact us by email (office@caie.at, verwaltung@caie.at), the data you provide (email address, optionally your name, and the content of your message) is processed for the purpose of responding to your enquiry.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries) or Art. 6(1)(b) GDPR where your enquiry relates to the initiation or performance of a contract.
Purpose: Processing your enquiry and contacting you.
Voluntary provision: The provision of your data by email is voluntary. Without this information we cannot respond to your enquiry.
Retention period: Your email will be retained for the duration of processing your enquiry and then for a maximum of 6 months, unless a statutory retention obligation applies.
Email delivery: For our outgoing email traffic we use Brevo SAS (55 rue d'Amsterdam, 75008 Paris, France) as SMTP provider. A data processing agreement is in place with Brevo. We currently use no web contact form and no third-party form provider (such as Brevo Forms, Tally, 123FormBuilder).
You may object to further processing at any time. Contact us at office@caie.at.
Fonts
This website uses the Inter typeface, which is stored locally on our server. No fonts are loaded from external servers (e.g. Google Fonts). No data is transmitted to third parties.
Analytics & tracking
This website uses Google Analytics 4 (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) for anonymised audience measurement. Google Analytics is loaded only after your active consent via the cookie banner. Without consent, no cookies are set and no data is transmitted to Google.
Data processed (with consent): truncated/anonymised IP address, browser type,
operating system, referrer URL, time of access, pages visited. IP anonymisation is enabled
(anonymize_ip: true).
Legal basis: Art. 6(1)(a) GDPR (consent). Consent can be withdrawn at any time via the "Cookie settings" link in the footer.
Data transfer: Google Ireland Ltd. is the controller in the EU/EEA. Transfers to the USA (Google LLC) may occur under the EU-US Data Privacy Framework. Google LLC is certified under the DPF.
Storage period: Data collected by Google Analytics is automatically deleted after 14 months.
Additionally, we use Google Search Console and Bing Webmaster Tools to verify our website's indexing by search engines. These services do not have access to individual visitor data on our website.
AI scraping policy
We permit AI search engines and answer engines (e.g. GPTBot, ClaudeBot, PerplexityBot, Google-Extended) to index our content for citation purposes. Training of AI models on our content is prohibited without our express permission (§42h(3) Austrian Copyright Act).
Note: robots.txt is a legally recognised opt-out signal under Art. 4 of the DSM Directive, not a technical block. Further details: Trust & Transparency.
Processors (overview)
- Vercel Inc. — Hosting & server infrastructure (fra1, Frankfurt)
- Brevo SAS — Transactional email via SMTP (outgoing)
Recipients
Data submitted by email is forwarded within the association to the respective responsible board members for processing. Data is not passed to third parties outside the association unless legally required.
Your rights
You have the right to:
- Information about the data stored about you (Art. 15 GDPR)
- Correction of inaccurate data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
To exercise your rights, please contact: office@caie.at
Right to lodge a complaint
You have the right to lodge a complaint with the Austrian Data Protection Authority:
Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna
Email: dsb@dsb.gv.at
Web: www.dsb.gv.at
Status of this privacy policy
April 2026. We reserve the right to update this privacy policy when changes occur.