Privacy Policy

Under the General Data Protection Regulation (GDPR) · Last updated: October 2026

Protecting your data matters to us. This statement explains which data is processed when you visit this website, in the client area and when you work with us as a client, and what rights you have.

Controller

AIDEAID e.U. (Owner: Axel Waltl)
Linke Wienzeile 16/7, 1060 Vienna, Austria
Email: axel@aideaid.ai

What data we process

This website is deliberately data-minimal. It uses no tracking and no analytics services. This website (aideaid.ai) sets no cookies itself; the embedded Cal.com booking tool is an exception (see the section "Appointment booking via Cal.com"). The client area at login.aideaid.ai sets a technically necessary sign-in cookie after you sign in (see the section "Client area").

Server log files: When the page is accessed, technically necessary data is processed (IP address, date and time, page requested, browser type). It serves secure operation and is deleted after a short time.
Getting in touch: If you email us (e.g. via the booking buttons on this page), we process the details you send in order to answer your enquiry.

Hosting

This website runs on a server within the European Union. A data processing agreement is in place with the hosting provider.

Appointment booking via Cal.com

For online appointment scheduling on the start page, we embed the booking service Cal.com. As soon as the page with the booking calendar loads, your browser establishes a connection to Cal.com's servers. In doing so, technically necessary data – in particular your IP address and details about your browser – is transmitted to Cal.com so that the calendar can be displayed. Cal.com may set technically necessary cookies for this purpose.

When you book an appointment, Cal.com processes the data you enter (e.g. name, email address, chosen time and notes) in order to arrange the appointment and makes it available to us.

Provider: Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, USA. Representative in the EU: Peer Richelsen, legal+eu@cal.com. Privacy policy: cal.com/privacy.

Transfer to the USA: Cal.com is a US provider; data is therefore transferred to the USA – a country without a generally equivalent level of data protection. Cal.com undertakes to apply appropriate safeguards; details can be found in Cal.com's privacy policy.

Legal basis: Loading the calendar is based on our legitimate interest in offering simple appointment scheduling (Art. 6(1)(f) GDPR); processing your booking data serves to initiate or carry out the appointment (Art. 6(1)(b) GDPR).

Contact form

If you write to us via the contact form, we process your name, your email address and your message in order to answer your enquiry. The form sends this information to our server at Hetzner Online GmbH in Germany; from there it is forwarded to us as an email via our email account at Apple (iCloud, Apple Distribution International Ltd., Ireland). Apple may also process data outside the EU and relies on standard contractual clauses for this.

The message is not stored on the server. The server log only records that a request was received (including the IP address) and is deleted after 14 days. We keep the email for as long as is necessary to handle your enquiry and any subsequent collaboration. The legal basis is handling your enquiry (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries and preventing abuse (Art. 6(1)(f) GDPR).

Clients

When you work with AIDEAID, we process the data needed for the offer, the contract, the work itself, invoicing and the client area: name, company, address, e-mail address, phone number, contract and billing data, and the documents you hand over to us for the work. The legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR) and, for bookkeeping and tax purposes, our legal obligations (Art. 6(1)(c) GDPR). How the client area works is described in the section "Client area (login.aideaid.ai)".

This data is kept on encrypted devices and on our own server in the EU. Recipients are only the service providers we use for e-mail, hosting and remote maintenance; we name them and the legal basis on request or in your contract. We use AI tools for the work on your documents — which providers receive personal data in the process is agreed with you in the contract or in the data processing agreement. Where we process data of your own clients, customers or employees on your behalf, we do so as a processor under your instructions on the basis of a data processing agreement (Art. 28 GDPR).

Invoices and contract documents are retained for seven years (Sec. 132 Austrian Federal Fiscal Code, Sec. 212 Austrian Commercial Code). Everything else is deleted once its purpose is fulfilled or the contract has ended, at the latest when the statutory retention periods expire.

Client area (login.aideaid.ai)

As a client of AIDEAID you get access to our client area at login.aideaid.ai. There you can see which building blocks and modules have been set up for you, your timeline and your wishes, and you can send new wishes. We create the access for you; it is not possible to register yourself.

Access: your name or short name, your email address and the type of your package; if you have your own instance, also its address.
Sign-in without a password: You enter your email address and receive a sign-in link that is valid for 15 minutes and works only once. We store the link and your session only as a checksum, together with the time and expiry, and delete them after they expire.
Content: the status of your building blocks and modules, phases and milestones of your timeline, journal entries, and your wishes (selected modules or your own text) with their processing status. Amounts and invoices are not kept in the client area.
Log: When you access the client area, the server processes your IP address and the address requested. This serves secure operation and troubleshooting; the log is deleted after 14 days. To protect against misuse, the server briefly counts sign-in attempts per IP address in memory.

Cookie: After you sign in, the client area sets a sign-in cookie so that you stay signed in. It is technically necessary, is valid for 30 days or until you sign out, and serves no other purpose. There are no tracking or analytics cookies. Your browser also remembers display settings such as language and light/dark mode; they stay on your device and are not sent to us.

Wishes: If you send a wish in your own words, we receive a short email notification with your name; we read the text itself in the client area. Please do not put content from your company or data about other people into your wishes – describe the process without names, figures or customer data.

Appointment booking: From the client area you can book a working session via Cal.com. Cal.com opens in a new window only when you tap the booking button; we pass on your first name and the titles of the modules you selected. What applies from then on is described in the section "Appointment booking via Cal.com".

Recipients: The client area runs on our server at Hetzner Online GmbH in Germany; a data processing agreement is in place with Hetzner. We send sign-in links and notifications via our email account at Apple (iCloud, Apple Distribution International Ltd., Ireland). Apple may also process data outside the EU and relies on standard contractual clauses for this. Other clients do not see your data.

Legal basis: The client area is part of performing our contract with you (Art. 6(1)(b) GDPR). The log and misuse protection are based on our legitimate interest in secure operation (Art. 6(1)(f) GDPR). The sign-in cookie is strictly necessary for the service you have requested and therefore does not require consent (Sec. 165(3) Austrian Telecommunications Act 2021).

Retention: We store your access, timeline, journal and wishes for as long as we work together and delete them no later than three months after the contract ends. You can remove individual wishes yourself at any time. Server backups are deleted after 30 days.

You can exercise your rights – for example to access or erasure – at any time as described in the section "Your rights".

Legal basis

Unless stated otherwise above, processing is based on our legitimate interest in the secure operation of the website (Art. 6(1)(f) GDPR) and on handling your enquiry (Art. 6(1)(b) GDPR).

Retention

We store personal data only for as long as it is needed for the respective purpose or as required by statutory retention periods — seven years for invoices and contract documents.

Your rights

At any time you have the right to access, rectification, erasure, restriction of processing, data portability and objection. Simply contact the email address above.

You also have the right to lodge a complaint with the supervisory authority: the Austrian Data Protection Authority, data-protection-authority.gv.at.