Privacy policy

The controller for this SmartTech website is Thomas Wingenfeld, Fraunhoferstraße 27a, 86167 Augsburg, Germany. For data protection enquiries: [email protected]. Further details can be found in the imprint.

This policy covers smarttech.b2badgen.com and its delivery through the hosting platform. Linked, independently operated websites on b2badgen.com, interaktivierung.net, technology-provider domains and other external portals have their own privacy information.

SmartTech uses Next.js/React and is hosted as a ChatGPT Sites project with Cloudflare-based delivery infrastructure. Unlike the static EU AI Gigafactories reference site, some SmartTech pages are generated or rendered by the application. When pages are requested, the systems involved may process IP addresses, timestamps, requested URLs, browser and operating-system information, referrers where transmitted, and technical error and security records.

Purposes are page delivery, availability, troubleshooting and protection from abusive access. The legal basis for technically necessary operation is Article 6(1)(f) GDPR (legitimate interest in secure operation of the public information service).

Recipients may include OpenAI and its hosting/delivery subprocessors. For users in the EEA, OpenAI identifies OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. Its published subprocessor list includes Cloudflare, but not every listed processor necessarily handles data for every page request. Subprocessor list, ChatGPT Sites data-processing terms, OpenAI EU privacy policy.

Retention of hosting and security logs follows the applicable provider rules. The publisher has not verified a universally applicable maximum retention period and therefore does not promise deletion after a specific number of days.

SmartTech offers catalogue search and interactive category filters using JavaScript in the visitor's browser. Search terms and selections are used to display matching entries. Search terms, the selected portal, filters and the active tab are stored in the page URL and retained when switching language. The Share search button copies this URL to the clipboard; if clipboard access is unavailable, the link is displayed for manual copying. A shared URL therefore includes the search terms and selections. URLs and parameters sent to the server can therefore appear in technical request logs or be included in a URL shared by the visitor; browser-side filtering is not, by itself, a transmission to an AI model.

The inspected application code does not implement its own analytics tracker or persistent storage of catalogue searches in localStorage or sessionStorage. The browser may cache site files. The hosting platform's independent functions and storage are addressed separately below.

The repository provides a helper for optional ChatGPT sign-in, but the inspected public catalogue pages do not require registration or sign-in. If sign-in, user accounts or community submissions are activated later, the privacy information must first be supplemented for the resulting data processing.

Cloudflare D1 database and R2 object-storage bindings are not enabled in the inspected hosting configuration. Their presence as supported technologies or code dependencies does not establish active processing of visitor data.

The inspected SmartTech application code does not set its own advertising or analytics cookies. Independently, the hosting and security platform may use cookies for bot protection, challenges or visitor handling. The following cookie names are known from an observation of the related EU AI Gigafactories ChatGPT Sites service on 5 October 2026; their presence, lifetime and purpose on SmartTech have not yet been confirmed by a production browser test:

• __cf_bm – Cloudflare bot protection; provider documentation describes expiry after 30 minutes of inactivity.
• cf_clearance – Cloudflare challenge outcome; duration depends on configuration.
• __Host-appgarden-visitor – Platform visitor cookie observed on the related site. Its exact purpose and binding retention period are not documented to the publisher; it is not classified as technically necessary without verification.

A browser test of the deployed SmartTech domain is required before stating which cookies are actually used. Where consent is legally required for non-essential storage or access to terminal equipment, the applicable consent requirements remain in force; a disclosure alone does not replace that consent. Cloudflare cookie documentation.

The website integrates Geist and Geist Mono using next/font. The inspected source and build artifacts include locally hosted font files, rather than a deliberate direct browser load from Google Fonts. Whether production responses actually avoid third-party font requests should be checked through the browser network panel after deployment.

External provider sites, original publications and other third-party services are predominantly linked, not automatically opened. Following a link establishes a connection to that site's operator and their separate privacy terms.

If you send an email, the sender address, message and any attachments are processed for handling and responding to your enquiry. The email providers involved in transmission and delivery also process data. The legal basis is Article 6(1)(f) GDPR, or Article 6(1)(b) GDPR for contractual matters. Information is retained as necessary for handling requests and claims, subject to statutory retention duties. Contact is voluntary; the public catalogue does not provide a contact form or newsletter subscription.

AI tools, including OpenAI Codex, may be used for editorial research, structure, translation and software development. This does not mean that visitor search queries or filter clicks are passed to those tools; the inspected public pages contain no visitor AI chat.

Publicly documented personal information, such as named authors or company representatives, may appear where relevant to sourced reporting. The legal basis, insofar as personal data are processed, is Article 6(1)(f) GDPR and the legitimate interest in traceable editorial information. Please report incorrect details or overriding legitimate interests to the controller.

Hosting services and other processors may process personal data outside the EEA, in particular in the United States. OpenAI describes adequacy decisions or EU Standard Contractual Clauses as relevant safeguards in its data-processing terms. Applicable recipients, locations and safeguards depend on the processing and contractual arrangements; details may be requested from the controller.

Subject to the legal conditions, you may request access, rectification, erasure, restriction, data portability and withdrawal of consent with future effect, where consent is the legal basis. You may object to processing based on Article 6(1)(f) GDPR for reasons relating to your particular situation.

Please contact [email protected]. You may also lodge a complaint with a data protection supervisory authority, especially at your residence, workplace or the place of the alleged infringement. For private controllers based in Bavaria, the Bavarian State Office for Data Protection Supervision is one possible authority. Complaint information.

Last editorial update: 20. Oktober 2026. This document reflects the application configuration inspected for the current proposed code revision. Statements requiring a production browser test, especially exact platform cookies and retention periods, are expressly marked as unverified. This policy must be adapted when features, service providers or legal requirements change. EU General Data Protection Regulation.