Privacy Policy
Last updated – 31 July 2025
1. Controller
Robimo GmbH
Roßauerlände 25/28
1090 Wien
E-Mail: info@ai4health.at
FN.: 441735k
Website: www.robimo.at
Website: www.ai4health.at
Mitgliedschaften:
Filmproduction
IT-Services
2. Scope
This Privacy Policy explains how expert.ai4health.at processes your personal data. We collect only the information required to create and manage user accounts, and we use strictly necessary cookies solely for login sessions and storing your preferred language. We do not employ tracking, analytics, advertising, or social-media technologies.
3. Personal Data We Collect
| Data Category | Purpose |
|---|---|
| Email address | Create and manage your user account; send essential service communications |
| Display / user name | Identify you in your profile and within the service |
| Password (hashed & salted) | Authenticate your login securely |
4. Cookies and Similar Technologies
We set three first-party cookies:
- Login session — keeps you signed in until you log out or the session expires.
- Language preference — remembers the language you selected so pages display correctly.
- CSRF Token — stores a randomly generated token that allows us to verify that form submissions originate from your device only (protection against Cross-Site Request Forgery, “CSRF”). The token is validated on every request to prevent third parties from performing actions on our website without your knowledge.
These cookies are not used for tracking, are never shared with third parties, and are deleted when you log out, close your browser (session cookie), or after their short validity period. Because they are strictly necessary, a cookie-consent banner is not required under the GDPR/ePrivacy Directive.
5. Legal Basis for Processing
| Activity | Legal Basis (GDPR Art. 6) | Explanation |
|---|---|---|
| Account creation & login | Art. 6 (1)(b) – contract performance | Required to deliver the service you request |
| Login & language cookies | Art. 6 (1)(f) – legitimate interest | Necessary for secure and convenient site use |
6. Data Retention
- Active accounts: retained until you delete your account.
- Account deletion: erased or anonymised within [30] days unless legal obligations require longer storage.
- Session cookie: removed upon logout or browser close.
- Language cookie: expires when the browser is closed.
- CSRF-Cookie: expires after 5 minutes (renewed at every request).
7. Data Security
- TLS 1.3 encryption in transit
- Secure password hashing (e.g., Argon2id / bcrypt / PBKDF2 / SHA256)
- Principle of least privilege for staff access
- Regular security updates and vulnerability testing
8. Your Rights
Under the GDPR you may access, correct, delete, or restrict your personal data, object to processing, request portability, or lodge a complaint with your supervisory authority. Contact us at info@ai4health.at to exercise these rights.
9. Third-Party Disclosure
We do not share your data with third parties except (a) our web-hosting provider, bound by a GDPR-compliant processing agreement, or (b) where legally required (e.g., court order). No data are transferred outside the EEA.
10. Automated Decision-Making
We do not use automated decision-making or profiling.
11. Updates
If we change our data-handling practices, we will update this Privacy Policy and, where relevant, notify registered users via email at least 14 days before changes take effect.