Privacy Notice

1. Controller

The controller within the meaning of Art. 4(7) of the General Data Protection Regulation (GDPR) is:

Universität Innsbruck (University of Innsbruck)
Innrain 52, 6020 Innsbruck, Austria
Phone: +43 512 507-0
Web: www.uibk.ac.at

The service is run as a research project at the Department of Computer Science (Institut für Informatik), Technikerstraße 21a, 6020 Innsbruck. Questions about this service can be sent to the project contact at samuel.frontull@uibk.ac.at. The project contact acts on behalf of the University and is not a separate controller.

Data protection officer of the University of Innsbruck: datenschutzbeauftragter@uibk.ac.at. More information: www.uibk.ac.at/de/datenschutz.

Project partner: The Istitut Ladin Micurá de Rü is a cooperation partner of the project. It does not run this website and does not receive the data described here, except where this notice says otherwise.

2. Please do not submit sensitive data

The service is meant for ordinary language work. It is not designed to handle special categories of personal data (Art. 9 GDPR) or confidential material. Do not enter or upload health data, legal case material, financial or identity data, passwords, confidential business information, private correspondence, or personal data about other people. Remove or anonymise such information before using the service.

If you enter personal data in text anyway, it is processed only to the extent needed to carry out your request, as described below. You are responsible for having the right to submit any content that concerns other people.

3. What we process, why, and on what legal basis

3.1 Visiting the website (technical data)

When you visit the website, your browser automatically sends technical data such as IP address, date and time, requested page, browser and device information (user agent) and referrer. We use this data to deliver the website, prevent abuse (for example rate limits per IP address), find errors and keep the service secure. Rate-limit counters are kept only for the short time window they apply to. Server logs are kept only as long as needed for security and troubleshooting, normally no longer than a few weeks, unless a security incident requires longer retention.

Legal basis: Art. 6(1)(e) GDPR (the University's tasks in research and teaching under the Austrian Universities Act 2002) and Art. 6(1)(f) GDPR insofar as IT security is concerned.

3.2 Translation, dictionary, correction and writing tools

Text you enter is sent to our servers and processed by language models and tools run on University of Innsbruck infrastructure to produce the result. The full text of ordinary translation requests is not stored. We store only usage statistics without text content, such as text length, languages, engine, time and date. The text is held in memory only while the request is processed.

Your recent translations ("history") is kept only in your own browser (local storage). This history is not sent to us. You can turn it off or delete it at any time in the history panel or in your browser settings.

Legal basis: Art. 6(1)(e) GDPR (providing a research and language-technology service as part of the University's tasks).

3.3 Document translation

Uploaded documents are stored temporarily on University servers only to translate them. The original file and the translation are deleted automatically after the translation has been downloaded, or at the latest about 6 hours after upload. Job metadata without the document content (such as status, file type and timing) may be kept for statistics and troubleshooting.

Legal basis: Art. 6(1)(e) GDPR.

3.4 Chat

Chat messages, together with recent messages of the same conversation, are translated and answered by language models run on University of Innsbruck servers. The answers come from the open-weight model Gemma 4, which runs locally on the University's GPU cluster. No chat content is sent to Google, OpenAI, Microsoft or any other external provider. Chat messages are not stored, unless you are logged in and actively save or correct a question-answer pair (see 3.5).

Legal basis: Art. 6(1)(e) GDPR.

3.5 Feedback, saved translations, corrections and contributions

If you actively send feedback, save or memorise a translation, correct output, save chat question-answer pairs, add glossary or dictionary data, or take part in revision workflows, we store the text you submitted together with metadata (languages, time, workflow status and, if you are logged in, your account). We use this data to review and improve the service and to build Ladin language resources (such as dictionaries, corpora and evaluation or training data for language models) for research.

Before any language resource is published or shared with research partners (including the Istitut Ladin Micurá de Rü), it is checked and personal data is removed or anonymised. Your name or email address is not published with your contributions unless you have agreed to this separately.

Legal basis: Art. 6(1)(a) GDPR (your consent, given by actively submitting), and Art. 6(1)(e) and Art. 89 GDPR in connection with § 2f of the Austrian Research Organisation Act (FOG) for scientific research. You can withdraw your consent at any time with effect for the future (see section 7).

3.6 User accounts

If you create an account, we process your email address, display name, password (stored only as a secure hash), role and permissions, language preferences and the timestamps needed for login and account management.

Legal basis: Art. 6(1)(b) GDPR (providing the account you asked for) and Art. 6(1)(e) GDPR. Account data is kept while the account exists and is deleted when you delete the account or ask us to delete it, unless legal obligations require otherwise.

4. Cookies and local storage

We use only first-party cookies and browser storage. We do not use advertising, tracking or third-party analytics cookies.

• Strictly necessary: the session cookie (login and security, deleted when the browser is closed) and, if you choose "remember me", a login cookie valid for up to 12 months. The tradutur_view cookie stores your choice between the mobile and desktop view for 30 days. Legal basis: § 165(3) of the Austrian Telecommunications Act (TKG 2021). No consent is needed because these cookies are required for the service you request.
• Preferences (only with your consent): interface language, translator languages, accessibility, menu and dictionary layout. Without consent, these settings are kept only for the current browser session where possible. You can withdraw consent at any time by deleting the cookies in your browser. Legal basis: Art. 6(1)(a) GDPR and § 165(3) TKG 2021.
• Local storage: functional settings and the optional translation history stay in your browser and are not sent to us.

5. Recipients

Data is processed on infrastructure operated by the University of Innsbruck. All language models (translation, correction, writing assistance and chat) run on this infrastructure. Only authorised project members and the University's IT staff can access the data, and only as far as their tasks require. We do not use external AI or cloud providers to process submitted text. Data is not passed to third parties unless the law requires it, for example at the request of authorities. We do not sell data and do not use it for advertising.

6. Security

We use appropriate technical and organisational measures. These include encrypted transmission (HTTPS), access controls, password hashing, rate limiting and restricted administrative access. No online service can guarantee absolute security.

7. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Where processing is based on consent, you may withdraw it at any time. Processing carried out before withdrawal remains lawful. For scientific research, these rights may be limited as far as provided by Art. 89 GDPR and § 2f FOG. Anonymised data can no longer be linked to you and therefore cannot be deleted individually.

To exercise your rights, contact samuel.frontull@uibk.ac.at or the University's data protection officer at datenschutzbeauftragter@uibk.ac.at. Please give enough information to identify the account, contribution or feedback concerned.

You also have the right to lodge a complaint with a supervisory authority. In Austria this is the Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at.

8. No automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR. Machine translations and suggestions are offers that you decide whether to use.

9. Children

The service is not aimed specifically at children. Children under 14 should use account and contribution features only with the consent of a parent or guardian, or within a school setting.

10. Changes

We will update this notice when the service or the legal situation changes. The date at the top shows the current version. If we ever plan to have submitted text processed by an external provider, this notice will be updated before that happens.