The protection of your data, together with a transparent approach to modern technologies, is a central concern of ours. On this page we provide you with comprehensive information regarding the use of Artificial Intelligence (AI) on our website, the underlying data processing operations, and your rights under the General Data Protection Regulation (GDPR) and the EU AI Act (AI Regulation).

We employ an intelligent, context-based search function on our website. In contrast to a conventional keyword search, this system is capable of understanding your questions in natural language. In order to provide you directly with precise and summarised answers, the system draws – by means of a so-called Retrieval-Augmented Generation (RAG architecture) – exclusively upon the vetted content and project descriptions held in our own website index. The AI model therefore does not generate answers from freely accessible sources on the internet, but responds to your enquiry solely on the basis of our own data.

Mode of Operation and Engaged Service Providers

When you enter a question into our search bar, the following process takes place in the background:

• Search Infrastructure (Algolia): Your entered question is first transmitted to our search index, which is provided technically by Algolia Inc. (USA/EU). Algolia filters out the most relevant text passages and project descriptions from our website. Further information on data protection at Algolia is available at https://gdpr.algolia.com/

• Framework (LangChain): The text passages found by Algolia are structured, together with your question, by means of the developer framework LangChain. We use LangChain locally within our code to control the flow of data and to monitor the quality of responses (performance tracking), in order to detect errors or faulty text generation ("hallucinations"). No IP addresses are stored and no user profiles are created via LangChain.

• Language Model (Google Gemini): The structured data is transmitted in encrypted form to the AI language model Gemini operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Gemini generates from the website information provided an answer in natural language, which is displayed to you in the search window.

Automatically Generated Content (EU AI Act): Pursuant to Article 50 of the EU AI Act, we expressly inform you that, within the framework of the search function, you are interacting with an AI system. The answers output in the search window are produced in a fully automated, artificial manner. These do not constitute human statements, expressions of opinion, or legally binding assurances on the part of Netural GmbH.

Exclusion of Liability for Errors ("Hallucinations"): AI models are highly sophisticated, yet may nonetheless generate erroneous, incomplete, or outdated information (so-called "hallucinating"). From a legal standpoint (in particular under the Austrian General Civil Code – ABGB), the following therefore applies: the outputs of the AI serve solely as non-binding preliminary information. Netural GmbH accepts no warranty or liability for the accuracy and completeness of the generated answers, nor for any detriment or damage arising from reliance upon such content. Please always verify critical information or project details directly against our official, static original website texts.

Data Protection & Your Rights (GDPR)

• Legal Basis of Processing: The processing of your input within the framework of the website search is carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR. Our legitimate interest consists in providing visitors to our website with a modern, efficient, and user-friendly search function and in technologically optimising our information offering.

• No AI Model Training: We have configured the technical interfaces (APIs) to our technology partners in such a way that your entered search queries and prompts may not be used by Google or Algolia for the training of public AI models or for the improvement of third-party products (so-called training opt-out).

• Warning Notice and 30-Day Deletion Period: As this is an open free-text field, the system processes all words entered by you. For your own protection, we ask that you under no circumstances enter personal, confidential, or sensitive data (such as full names, e-mail addresses, telephone numbers, or passwords) into the search field. Should you nonetheless inadvertently enter personal data, this will be stored within our internal system log files for technical error analysis for a maximum of 30 days and thereafter automatically and irrevocably deleted.

• Your Rights as a Data Subject (Article 13(2) GDPR): With regard to the processing of your data within the framework of this AI search, you are in principle entitled to the statutory rights of access, rectification, erasure, restriction, data portability, withdrawal of consent, and objection. Detailed information on how you may exercise these rights with us is set out in the sections "Rights of the Data Subject" and "Right to Object" of our general privacy policy. You also have the right to lodge a complaint with the competent supervisory authority (in Austria, this is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna).

Contact for Enquiries

Should you have detailed data protection enquiries regarding our AI infrastructure, or should you wish your right of access pursuant to Article 15 GDPR to be answered by one of our staff rather than by a machine, please contact us by e-mail at hello@netural.com.