Privacy Policy
for the AI audio guide (kiva.mobile-etage.de) · As of July 2026 · This is a convenience translation; the German version is authoritative.
1. Controller
Mobile-Etage GmbH, Natruper Str. 14, 49076 Osnabrück, Germany
info@mobile-etage.de ·
+49 541 600 15 50
2. What we process — why, and for how long
| Data | Purpose | Retention |
|---|---|---|
| Microphone audio (your voice) | Conversion to text (speech recognition) | Not stored |
| Text of your question and the answer | Answer generation; operation and quality assurance | A maximum of 14 days, then deleted automatically |
| Session identifier (random number, no name) | Links the turns of one conversation | With the log, a maximum of 14 days |
| Anonymous operational data (e.g. response times) | Operations monitoring | A maximum of 14 days |
| Technical server logs (IP address, requested URL, browser type) | Serving the site, operational security, attack prevention | A maximum of 14 days |
If you share personal details during a conversation, they may be contained in the briefly stored text. We therefore do not claim that "no personal data" is processed — we store sparingly and delete automatically.
3. Legal bases
The voice dialogue: your consent (Art. 6(1)(a) GDPR),
given by actively enabling the microphone or submitting a chat question. You can
withdraw it at any time with effect for the future — disable the microphone,
stop using the guide, or email us; processing carried out before withdrawal
remains lawful.
Logging, quality assurance, server logs, feedback: our
legitimate interest in a stable, secure and accurate service
(Art. 6(1)(f) GDPR).
Use is entirely voluntary; you are not obliged to provide any data. No automated decision-making within the meaning of Art. 22 GDPR takes place.
4. Recipients and US transfer
Processors (Art. 28 GDPR):
- Mistral AI SAS, Paris (EU) — speech recognition and speech output.
- OpenAI, L.L.C., USA — answer generation and conversion of your question text into a search signature (embedding); for Croatian, Ukrainian and Chinese also the speech output.
- Deepgram, Inc., USA — speech recognition for Croatian, Ukrainian and Chinese; processing for us takes place in EU data centres (Frankfurt).
- Hetzner Online GmbH, Germany — hosting.
OpenAI processes in the USA (a third country under the GDPR); this transfer is safeguarded by EU Standard Contractual Clauses. Deepgram processes for us in the EU; as Deepgram is a US-based provider, this processing is additionally safeguarded by EU Standard Contractual Clauses. You can request a copy of the safeguards from us.
5. Feedback and problem reports
Optional and voluntary (Art. 6(1)(f) GDPR): we store ratings and survey answers without any name or contact details, linked to the session identifier, for up to 6 months — then they are deleted or summarised without reference to the session. When you report a problem, the conversation history of that session plus technical details is attached (no IP address); it is deleted once the report is resolved, and after 90 days at the latest.
6. Cookies and browser storage
We use no cookies and no tracking. In your own browser, the guide stores the session identifier and the visible conversation history (deleted when the tab is closed) and a survey marker (about one hour). These entries are strictly necessary for the function you chose (§ 25(2) no. 2 of the German TDDDG).
7. Artificial intelligence
The audio guide is an artificial intelligence, labelled as such (EU AI Act, Art. 50). Answers are generated automatically and may be incorrect; the voice is synthetically generated.
8. Your rights
You have the right of access, erasure, rectification and restriction (Art. 15–18 GDPR) and the right to withdraw consent (Art. 7(3)). Since conversations are only linked to a random session identifier, we need that identifier or the approximate time of your visit to locate your data.
Right to object (Art. 21 GDPR): you may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest.
Requests: info@mobile-etage.de. Complaints may be addressed to a data protection supervisory authority, e.g. the Data Protection Commissioner of Lower Saxony (Landesbeauftragte für den Datenschutz Niedersachsen).
This policy applies to the AI audio guide. The websites of the exhibition and of Mobile-Etage GmbH have their own privacy policies. Legal Notice · Deutsche Version