Privacy Policy

Updated: 28 July 2026

1. Controller and contact

The controller within the meaning of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG) is:

Keanu Vengco
Hörlgasse 5
1090 Wien
Austria

Email: kontakt@ki-werktisch.com

2. Scope

This Privacy Policy applies when you visit the publicly accessible website, including its information, blog and legal pages, book a non-binding product demonstration or contact us by email.

The KI-Werktisch software is currently in development and is not accessible through the published website. The product interfaces shown are locally hosted image or video files. They do not process visitor input or connect to an AI provider.

3. Website delivery and server logs

When you access the website, technically necessary connection data is processed. This may include your IP address, date and time, the requested address or file, referrer address, browser and device information, operating system, HTTP status and the amount of data transferred. Processing is necessary to deliver the website, maintain its stability and security and prevent misuse.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable and user-friendly operation of this information service. The website is delivered through the globally distributed infrastructure of Vercel Inc. If technical requests are recorded in Vercel runtime logs available to us, those logs are generally retained for three days under the provider's current policy. We do not operate an additional permanent access-log drain for the public website.

4. Demo booking with Cal.com

We use the embedded booking interface provided by Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, USA for demo bookings. If you accept optional services in the cookie notice, we preload the embedding script and booking interface in the background so that it is ready faster when you later open it. Without that consent, the connection is established only when you select “Book demo” or an equivalent button. The embedding script is loaded from app.cal.com and the booking interface through cal.eu. The technically necessary connection data, particularly your IP address, time, browser and device information and the referring page, is initially transmitted.

If you book an appointment, we also process the booking information you enter, especially your name, email address, time zone, selected appointment and any optional message. These details are required to arrange the appointment. An appointment cannot be booked without a name, contact address and selected time.

The legal basis for optional preloading is your consent under Article 6(1)(a) GDPR. When you intentionally open and use the booking function, the legal basis is Article 6(1)(b) GDPR (steps at your request prior to entering into a contract). Cal.com receives the data to provide and process the booking. Where Cal.com processes data on our behalf, it acts as a processor under Article 28 GDPR. Cal.com's own processing activities are additionally governed by its privacy information at cal.com/privacy. The booking interface may use technically necessary session, preference and security cookies or comparable storage technologies.

Booking data is stored until the appointment has taken place or is cancelled and the enquiry has subsequently been handled. If no contractual or other business relationship arises, we generally delete it no later than twelve months after the appointment. It is retained longer only where required by law or necessary to establish, exercise or defend legal claims.

5. Contact by email

If you contact us by email, we process the sender and recipient addresses, time, subject, message content and any attachments to respond to your enquiry. Providing this information is voluntary, but we cannot reply without a reachable contact address.

The legal basis is Article 6(1)(b) GDPR for contractual or pre-contractual enquiries and otherwise Article 6(1)(f) GDPR. Our legitimate interest is the proper handling of incoming messages. If no contractual relationship arises and no statutory retention obligation applies, we generally delete correspondence no later than twelve months after it has been conclusively handled.

6. Cookies and local storage technologies

We do not use analytics or marketing cookies on the website itself. The following technically necessary storage technologies may be used:

  • wb-locale (cookie): stores the website language you selected for no longer than twelve months.
  • wb-cookie-consent (local browser storage): stores your selection in the cookie notice until you delete the website data in your browser. If you consent, the Cal.com booking interface may be preloaded in the background as described in Section 4; this does not activate analytics or marketing services.

The legal basis is Article 6(1)(f) GDPR; our legitimate interest is to respect your language and privacy settings. Under § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021), consent is not required for storage access that is strictly necessary. Storage technologies within the Cal.com booking interface may become relevant after you consent to preloading or intentionally open the booking function; Section 4 additionally applies.

7. Recipients and international data transfers

Personal data may be received, to the extent necessary for the relevant purpose, by:

  • Vercel Inc. — hosting, delivery and protection of the website
  • Cal.com, Inc. — provision and processing of demo bookings
  • Providers involved in email and internet transmission and, where applicable, the calendar or video-conferencing provider displayed in the booking dialog
  • Authorities, courts or legal advisers where legally required

Vercel and Cal.com are established in the United States. Access from or further processing in third countries cannot be completely excluded even when European infrastructure is used. Transfers to the United States rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework where the relevant recipient is validly certified. Otherwise, they rely on the European Commission's Standard Contractual Clauses under Article 46(2)(c) GDPR and, where required, supplementary safeguards. Information about the applicable safeguards is available on request.

Further information is available in the privacy notices of Vercel and Cal.com.

8. Retention periods

We store personal data only for as long as necessary for the relevant purpose. The usual periods are stated in the preceding sections. We retain data beyond those periods only where required by statutory retention duties, covered by consent or needed for legal claims. It is then deleted or, where immediate technical deletion is not possible, restricted until deletion.

9. Your rights

Subject to the statutory requirements, you have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and the right to object to processing based on legitimate interests (Article 21). You may withdraw consent at any time with effect for the future (Article 7(3)); this does not affect the lawfulness of processing before withdrawal.

To exercise your rights, contact the email address given in Section 1. If we have reasonable doubts concerning your identity, we may request additional information to confirm it.

10. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority under Article 77 GDPR. The competent authority in Austria is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at.

11. No automated decision-making

No decision based solely on automated processing, including profiling within the meaning of Article 22 GDPR, takes place in connection with this website, email contact or demo booking.

12. Data security and updates

We take appropriate technical and organisational measures under Article 32 GDPR, including encrypted website transmission using TLS and restrictions on administrative access. We update this Privacy Policy when processing activities or the legal position change, particularly before the Werktisch platform is made publicly available.