Privacy Policy Chat

General Information
- This privacy policy applies to the service - ISI CHAT
- Only the German version of this privacy policy is authoritative. Translations may not always be complete or up-to-date.

Scope of the Privacy Policy & Cookie Policy
In accordance with Art. 13 of Regulation (EU) 2016/679 (GDPR) and Measure No. 231 of 10 June 2021 on the use of cookies, we hereby inform website visitors about the use of transmitted data and the cookies used by the website. This privacy statement also complies with Recommendation No. 2/2001, adopted by the Working Party established under Article 29 of Directive 95/46/EC. It refers to the ISI CHAT service operated by Limendo GmbH, but not to other linked websites.
‍
Data Controller
When visiting the website, personal data or other data linked to the user may be processed, including data collected through the use of cookies. The data controller is Limendo GmbH, headquartered at Enrico-Fermi-Straße 20/B, 39100 Bolzano. The data controller can be contacted at the following details:
Tel.: +39 0471 1800 390
Mail: mail@limendo.com
‍
Purpose and Methods of Processing
Browsing Data
The computer systems and software procedures used to operate this website collect certain personal data during their normal operation, whose transmission is implicitly carried out using Internet communication protocols. This information is not collected to be associated with identified individuals, but due to its nature, it could potentially allow the identification of users through processing and linking with data held by third parties. This data category includes IP addresses or domain names of the computers used by users to connect to the website, URI addresses (Uniform Resource Identifier) of the requested resources, the time of the request, the method used to transmit the request to the server, the size of the file received in response, the numeric status code of the server’s response (success, error, etc.), and other parameters of the operating system and computer environment. This data is used solely to obtain anonymous statistical information about website usage and to verify its proper functioning, and it is immediately deleted after processing. The data could be used to establish liability in the event of presumed computer crimes causing damage to the website.
‍
COOKIES AND PASSIVE IDENTIFIERS
Cookies are small, usually alphanumeric text files that are stored in your browser or device memory when visiting a website and can be kept for the duration of the visit or longer. These cookies allow a server to recognize you after your first visit. Measure No. 231 of the Italian Data Protection Authority dated June 10, 2021, specifies that technical cookies do not require consent, as they are necessary for the operation of the website.

SSL ENCRYPTION
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., SSL) via HTTPS.

CHAT GPT
When using our CHAT service, inputs are sent in real time via the ChatGPT API by OpenAI. The communication between you and the AI, including your inputs and the AI-generated responses, is stored by us. The data you enter is transmitted to ChatGPT exactly as entered. Please note that users’ IP addresses are not shared with OpenAI. The communication is stored to monitor service quality and can be used for traceability if needed.

Data Sharing
Your inputs are transmitted in real time to Limendo GmbH/OpenAI to enable AI processing. However, we do not share any information about your identity. The communication between you and the AI is made available to us as the respective data controller (the page where you use the CHAT).
‍
Security of Data
We implement appropriate security measures to protect the transmission of your inputs to OpenAI. These efforts aim to ensure the security and confidentiality of your data.
‍
Data Storage
Data between you and the AI is stored to ensure conversation continuity, improve service quality, and allow tracing in case of requests or issues. Please note that OpenAI has its own privacy policy, available at https://openai.com/policies/privacy-policy. By using the CHAT service via the ChatGPT API, you agree to these privacy terms. Data storage is based on Art. 6(1)(a) GDPR, i.e., your consent. Without your consent, you cannot use the ISI CHAT service..

TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS
Your data is not transferred to third countries outside the EU or to international organizations, nor stored on servers in third countries.
‍
AUTOMATED DECISIONS
The data controller does not use any system for automated decision-making regarding your personal data.

RIGHTS OF THE DATA SUBJECT
You have the right at any time to request access to your data from the data controller as well as to request correction or deletion. You will receive a written response within 30 days, possibly electronically (unless you explicitly request an oral response). You also have the right to request the restriction of processing or to object to it. Furthermore, you can request the portability of your data to another data controller. You may revoke any consents granted on this website at any time. To revoke one or more of the consents, simply contact one of the addresses listed above. If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the supervisory authority.

Data Processing Methods
The processing of personal data is carried out through automated systems and/or manually and lasts only as long as necessary to achieve the specified purposes of data processing, in accordance with applicable legal provisions.

Voluntary Data Submission
Except for navigation data, it is the user’s free choice whether to provide personal data or not. The only consequence of not providing personal data may be that certain services of the website cannot be provided. The data subject may contact the processor or the controller to exercise their rights, as also provided in Art. 7 of GV No. 196/2003, which is reproduced here in full and supplemented with passages from the EU GDPR.

Art. 7 – Access to Personal Data and Other Rights
1. The data subject has the right to receive confirmation of the existence or non-existence of personal data concerning them, even if not yet registered, and to have this information provided in an understandable form. The data subject is entitled to receive the following information:
a) the source of the personal data;
b) the purpose and type of processing;
c) the system applied when processing using electronic tools;
d) data identifying the owner, controller, and representative pursuant to Art. 5, para;
e) individuals or groups to whom the personal data may be disclosed, or who may obtain knowledge of it as designated representatives, controllers, or processors within the territory.
2. The data subject is entitled to:
a) update, correct, or, if desired, complete the data;
b) delete, anonymize, or block unlawfully processed data, including data no longer necessary for the purposes for which it was collected;
c) confirmation that actions a) and b) have been communicated to third parties, including their content, unless this is impossible or disproportionately difficult considering the right being protected.
3. The data subject has the right to object, in whole or in part: a) to the processing of personal data concerning them for legitimate reasons, even if it serves the purpose of collection; b) to the processing of personal data for sending advertising or direct marketing materials or for market research purposes (this objection right is also in Art. 21 GDPR).
4. You have the right to request a restriction of the processing of your data (right to restriction pursuant to Art. 18 GDPR).
5. You have the right to receive data that we process automatically based on your consent or in fulfillment of a contract, in a common, machine-readable format, and to transmit them to another controller where technically feasible (right to data portability pursuant to Art. 20 GDPR).

Retention periods
We store personal data in compliance with GDPR/DSGVO and adhere to the legally required retention periods.

Privacy Policy Updates
Over time, changes to these privacy policy provisions may be necessary, so users are advised to review them regularly. LIMENDO will inform users of new versions of these provisions via links and notices in appropriate areas of the website, e.g., as a notification on the homepage. Where required by applicable law, LIMENDO will request users’ consent for specific data processing.