Privacy policy

We process your personal data solely in accordance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021). This policy applies to the website www.schlauerarbeiten.com and the customer portal portal.schlauerarbeiten.com.

The controller for the data processing is:

Robert Mair, Pegiusgasse 10a, 5020 Salzburg, Austria. Email: robert.mair@schlauerarbeiten.com.

No data protection officer has been appointed, as there is no legal obligation to do so.

For any data protection matters you can reach us at: robert.mair@schlauerarbeiten.com. We usually reply within a few working days, at the latest within one month.

The website and customer portal are operated at Scaleway SAS (France, EU; Paris data centre). When you access them, we process technically necessary server log data (IP address, time, page accessed, browser identifier) to ensure operation, detect faults and defend against attacks.

Legal basis: our legitimate interest in secure, stable operation (Art. 6(1)(f) GDPR). A data processing agreement is in place with Scaleway; the database is stored encrypted and only reachable via a private network. Retention of logs: 90 days.

We use exclusively technically necessary cookies, in particular for the login session. These require no consent under § 165(3) TKG 2021, so no cookie banner is needed. There is no tracking and no analytics or advertising technology. Fonts and other resources are served from our own servers, not from third-party networks.

Should we introduce any (even cookie-free) reach measurement in future, we will inform you here in advance and obtain any required consent.

To access protected areas you can sign in with:

Microsoft account (Microsoft Ireland Operations Ltd.): we receive your name and email address to check your access authorisation. No further account data or contacts are retrieved.

Sign-in via email link: you receive a short-lived sign-in link (valid for 15 minutes) at your email address. We process your email address, sign-in token and timestamps.

Legal basis: performance of the usage relationship or pre-contractual measures (Art. 6(1)(b) GDPR) and our legitimate interest in controlled access during the test phase (Art. 6(1)(f) GDPR).

When signing in via Microsoft, processing outside the EU may occur; Microsoft relies on an adequacy decision (EU-US Data Privacy Framework) and EU standard contractual clauses. Details in Microsoft’s privacy information.

When you complete our form (“I'm curious” or contact form), we process the data you provide (name, email address, optionally company/role and message) to answer your enquiry and inform you about the launch of our offering.

Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future, or pre-contractual measures (Art. 6(1)(b) GDPR).

When you request our free guide, we process your email address (and your answers from the skill check) to send you the guide and provide time-limited portal access (14 days).

Legal basis: performance of this service (Art. 6(1)(b) GDPR). We send further informational emails only with your consent (Art. 6(1)(a) GDPR), which you can withdraw with one click in every email.

In the customer portal we process, to provide the products you have booked:

Account data: name, email address, assigned company, activated products.

Learning data: learning progress, unlock schedule, results of the knowledge checks.

Diagnostic data (AI Strategy Sonar): your answers and the result calculated from them (maturity level, recommendation). The package recommendation is rule-based; no automated decision-making with legal effect within the meaning of Art. 22 GDPR takes place.

Notifications: information emails when new content is unlocked for you (part of the service, not marketing).

Legal basis: performance of the contract (Art. 6(1)(b) GDPR). Internal, aggregated usage statistics are based on our legitimate interest in improving the offering (Art. 6(1)(f) GDPR); you may object to this processing.

As part of the AI Strategy Compass, the AI Workbench is available to you in the customer portal. There you save your own entries — such as prompt templates, helper profiles and procedures — to find, copy and develop them later.

We process solely the content you enter yourself (title, text fields per entry type, optional source reference of the guide) as well as timestamps (creation, change) and the assignment to your user account.

Use of your own entries: for each entry we record two additional values: how often you have copied the entry yourself and when you last did so. Only your own copying is counted; if a member of your team copies a template you have shared, this does not affect your values. Several copies of the same entry in quick succession count as one action.

What is not stored: no log of individual clicks and no list of timestamps is created — only the most recent timestamp is stored, replacing the previous one. We do not analyse which text you copied, and the values are not combined with other data. Exports and merely viewing an entry are not recorded.

Purpose: providing and operating your personal workspace in the portal (saving, viewing, editing, copying and exporting your entries). The two usage values serve solely your own orientation in the portal: you see at a glance which of your templates you actually use and which lie dormant.

Legal basis: performance of the contract under Art. 6(1)(b) GDPR — the AI Workbench is part of the Compass service you have obtained. This also applies to the two usage values: they are part of the workspace you obtain with the Compass and serve solely its operation.

Retention: your entries remain stored as long as your account exists and you do not delete them yourself. If you delete your account, the associated Workbench entries are automatically deleted with it. If your Compass access ends, the entries are retained and deleted at the latest 24 months after the end of the contract, provided you no longer have an active account. The two usage values belong to the respective entry: they share its fate and disappear with it — when you delete the individual entry as well as when you delete your account. No retention beyond this takes place.

Your control: you can delete each entry individually and export all your entries as a file at any time (data portability, Art. 20 GDPR). If you delete an entry, the two usage values for it are deleted as well.

No further processing: your entries are not analysed and not processed by AI. Administrative views show only the number and timestamps of entries, not their content; no inspection of content takes place. Administrative views do not show the two usage values either; they are visible to you alone.

Usage note: the AI Workbench is intended for templates without personal data of third parties. Please enter placeholders instead of real names or cases.

For the Premium product we process your input from the intake form and an audio recording you create to produce your individual AI roadmap.

Legal basis: performance of the contract (Art. 6(1)(b) GDPR). Please do not include in the form or recording any personal data of third parties or information you are not permitted to disclose.

Retention: the raw audio file is deleted four weeks after your roadmap is provided.

Sign-in links, access and unlock notifications are sent via Scaleway Transactional Email (Scaleway SAS, France, EU) as processor. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

Our systems run in the EU (France). A transfer to third countries can only occur in the context of optional sign-in via Microsoft (see section 5); this provider relies on adequacy decisions and EU standard contractual clauses.

Server logs: 90 days.

Sign-in tokens: deleted after use or expiry (15 minutes).

Prospect enquiries: until resolved or withdrawn, at the latest 24 months after the last contact.

Account and learning data: for the duration of the contractual relationship; deletion of the account at the latest 24 months after the end of the contract, earlier on request.

Premium audio: four weeks after the roadmap is provided.

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21 GDPR). You may withdraw consent given at any time with effect for the future. Please contact robert.mair@schlauerarbeiten.com.

All connections are TLS-encrypted. The database is stored encrypted (encryption at rest) and only reachable via a private network. Access is limited to the necessary minimum; upload limits, rate limiting and further technical safeguards are in place.

Our learning content is created with the support of AI tools and is editorially reviewed and taken responsibility for before publication. On the platform you currently do not interact with an AI system; your inputs (e.g. AI Workbench, Sonar answers) are not processed by AI and not used to train AI models. No automated decision-making within the meaning of Art. 22 GDPR takes place.

We adapt this policy when our services or the legal situation change. The version published on this page at the time applies.

You have the right to lodge a complaint with the Austrian Data Protection Authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

As at 10 July 2026