2. General notes on data processing
When visiting a website, technically necessary data are usually processed: IP address, date and time of access, accessed URL, browser information and operating system. For such processing there are information obligations under the GDPR, in particular Art. 13 GDPR.
If cookies or comparable technologies are used on a website, German law may additionally require consent unless these technologies are strictly necessary. The German data protection authority points this out in connection with § 25 TTDSG (now TDDDG).
3. Hosting and server logfiles
When you access this website, the hosting provider typically processes technically necessary access data in server logfiles. This includes:
- IP address
- Date and time of access
- Requested URL
- Transferred data volume
- Browser type and version
- Operating system
- Referrer URL
Processing serves technical delivery, stability and security of the website. Legal basis is typically Art. 6 (1) (f) GDPR, where there is a legitimate interest in secure and stable operation. The concrete retention period and hosting configuration should still be reconciled with the actual hosting setup.
4. Contact
If you contact us by email, the data you transmit are processed to handle your request. This typically includes your email address, the content of your message and possibly further voluntarily disclosed information.
Processing serves the handling of your inquiry. Legal basis is depending on the case Art. 6 (1) (b) or Art. 6 (1) (f) GDPR.
5. Cookies and similar technologies
This website should be operated as data-sparingly as possible. If only technically necessary functions are used and no non-essential tracking or marketing technologies are employed, a consent banner can often be avoided. If non-necessary cookies or comparable technologies are used, prior consent is generally required.
For the specific live site it should therefore be checked whether only technically necessary cookies are used or whether additional external services are embedded.
6. AI chatbot (TrustChat)
An AI-assisted chat assistant provided by TrustChat is embedded on every page of this website. It answers questions about the Agentic Software Factory based on the public website content and the public project documentation.
Two distinct processing operations are involved:
- On every page load, the widget script is fetched from
trustchat.de. Technically unavoidably, your browser transmits your IP address and usual connection data (user agent, referrer) to the provider — even if you never open the chat. - Only when you use the chat are the messages you type transmitted to TrustChat and processed there to produce an answer. Please do not enter personal or confidential data into the chat — neither your own nor that of third parties.
The provider's servers are located in Nuremberg, Germany. Whether
TrustChat uses further processors to generate answers, and where those process data,
should be asked there — a chat assistant generally relies on a language model that
is not necessarily operated in the same place. Legal basis, data processing agreement and
retention period follow the agreement with the provider; details and TrustChat's own
privacy notice are available at
trustchat.de. If you
wish to avoid transmission to the provider, do not use the chat and block the loading of
trustchat.de in your browser.
7. External links
This website may contain links to external sites. When clicking such links, users leave this website. The respective operators are responsible for the content and data processing on external sites.
8. Data subject rights
Data subjects have, subject to the legal prerequisites, in particular the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object
- Right to lodge a complaint with a data protection authority
The GDPR obliges controllers to inform data subjects transparently about the processing of their personal data.
9. Status and review
Status: April 2026.
As the specific data protection assessment always depends on the actually deployed website, hosting, embedded services, forms, analytics tools and cookies, this privacy policy should be finalised against the real setup of softwarefabrik.io before publication.