Privacy Policy

1. Controller

Controller within the meaning of the GDPR (Art. 4 No. 7) is:

Lexa AI Srl
Inhaber: Andreea Izabella Scholz
Str. Izvorul Muresului 8, 040906 Sectorul 4, Bukarest, Romania
Telephone: +49 176 84176618
Email: info@autopresse.eu

2. Hosting / Server

This website is hosted on a managed server operated by Host Europe GmbH / GoDaddy (Hürth, Germany). The server is located in the European Union. Processing on our behalf takes place on the basis of Art. 6 (1) (f) GDPR (legitimate interest in secure, efficient hosting).

3. Server Log Files

The hosting server automatically records log data with every request and stores it for security and operational purposes (e.g. defence against attacks, troubleshooting), typically for up to 30 days: abbreviated IP address, date and time, requested URL, HTTP status code, data volume, referrer URL, browser and operating system. Legal basis: Art. 6 (1) (f) GDPR. We have no access to the full IP address in our own tools (see item 4).

4. Own Visitor Statistics (analytics_events)

We run our own, self-hosted statistics that work without third-party trackers and without cookies. For each page view we store:

• Event type (page view, article view, video view, search, newsletter signup)
• Path of the page called, article ID, language, device class (desktop/mobile/tablet)
• A pseudonymized visitor hash (MD5 of abbreviated IP address, browser identifier and the current hour). It changes every hour, cannot be reversed to identify a person and no complete IP address is ever stored in our database.
• Referring domain (host name only, no full URL), if the visit comes from another website

Purpose: aggregated, statistical evaluation of usage (which topics are read, which devices are used). Retention: analytics entries older than 180 days are deleted automatically by a scheduled job. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in demand-oriented editorial work). No data is passed on to third parties, no advertising networks, no Google Analytics.

5. Cookies

This website sets no tracking or advertising cookies. A session cookie ean_sess is only set when logging into the admin area (see item 6). We also use the following technically necessary cookies (each Secure, HttpOnly, SameSite=Lax): ean_rd counts how many articles you have read this month without a reader account (contains only the month and article numbers, signed, lifetime 40 days, no link to your person); ean_reader keeps you signed in as a reader after registration (signed account number, lifetime up to 400 days, see item 12); ean_lang stores a language you have chosen (90 days). ean_rv is only set when you rate an article with stars: a random identifier so you can change your rating and it is not counted twice (lifetime 400 days). For a rating we store only the article, the number of stars, the language and a shortened check value of your IP address that changes monthly, to prevent multiple votes – no full IP address, no name. Only the average of all ratings of an article is published. Legal basis: Section 25 (2) no. 2 TDDDG (strictly necessary for the functions you use). The choice of light or dark theme is stored in the browser's local storage (localStorage, key ean-theme) — this is not a cookie and is not transmitted to the server. Our cookie banner controls the future use of optional elements; the "necessary only" setting sets nothing beyond what is technically required.

6. Admin Login Cookies

Editors log into /admin with a random session token in the cookie ean_sess (flagged Secure, HttpOnly, SameSite=Lax, transmitted only via HTTPS). Sessions expire automatically after inactivity; extended "remember" logins last 30 days. Legal basis: Art. 6 (1) (b)/(f) GDPR.

7. Newsletter (Double Opt-in)

You can subscribe to our newsletter with your email address. After entering your address you receive a confirmation email with a one-time link (double opt-in); only after clicking this link does the subscription become active. We store: email address, status (pending/confirmed/unsubscribed), time of subscription/confirmation, language version and a random token for confirmation. Unsubscribing is possible at any time via a link in every newsletter. Legal basis: Art. 6 (1) (a) GDPR (your consent). Newsletter addresses are never sold or passed on. You can also request the newsletter when registering a reader account by ticking the box (voluntary, not pre-ticked); it only becomes active once you click the link in the confirmation email.

8. Contact and Rights Requests

When you contact us (e.g. contact form or email), we process the data you provide solely to answer your enquiry (Art. 6 (1) (b)/(f) GDPR) and delete it once the enquiry is resolved, unless retention obligations apply.

Your rights under Art. 15–21 GDPR: right of access, rectification, erasure, restriction of processing, data portability and objection. To exercise them, simply email info@autopresse.eu — no special form required.

9. Right of Complaint

You also have the right to lodge a complaint with a data protection authority (Art. 77 GDPR), in particular the authority responsible for Bavaria, Germany (Bayerisches Landesamt für Datenschutzaufsicht, Promenade 27, 91522 Ansbach).

10. Fonts, External Services

Our own fonts are delivered from our own server (self-hosted). There are no Google Fonts connections, no external CDN fonts, no embedded social media content. Third-party content is not loaded without your consent.

11. Voice Assistant "Eva" (OpenAI)

If you use our optional voice assistant "Eva", your spoken audio is transmitted encrypted via WebRTC directly to OpenAI (OpenAI OpCo, LLC, USA) for speech recognition and answer generation and processed there on our behalf (order processing / Art. 28 GDPR). OpenAI does not use this audio to train models, and audio is not stored beyond the conversation. Answer text is shown in the chat; no audio recordings are saved on our servers. Our server only issues a short-lived access key and stores a pseudonymized daily counter (hashed IP address) to enforce the limit of 3 voice conversations per visitor per day. The microphone starts only after your explicit consent ("Start talking"); text chat is available without any audio processing. Legal basis: Art. 6 (1) (a) GDPR (consent); data transfer to the USA under the EU-US Data Privacy Framework (OpenAI certified). You can end the conversation at any time.

12. Free Reader Account

Each calendar month you can read and listen to a certain number of articles in full without signing in. After that we ask you to register for free with your name and email address to keep reading and listening to articles in full. We store: name, email address, language, whether you requested the newsletter, time of registration and of the confirmation of your email address, time of last use, number of articles read, the article through which you registered, the country derived from your IP address (country code only) and a monthly changing, non-reversible hash of the IP address to protect against mass fake registrations. The full IP address is not stored.

After registration we send you an email with a confirmation link; you can also use this link to sign in on other devices. Purpose: providing free reader access. Legal basis: Art. 6 (1) (b) GDPR (user relationship for free reader access) and, for abuse protection, Art. 6 (1) (f) GDPR. The data is not passed on to third parties and not used for advertising. Retention: until you request deletion – an email to info@autopresse.eu is sufficient; you can unsubscribe from the newsletter independently at any time.

13. Podcast

Our daily podcast episodes are created from our own articles and spoken by speech software on our own server – no data is passed to third parties for this. Listening requires the free reader account (item 12). By registering for the podcast you also subscribe to our daily briefing (newsletter, item 7); it is only sent after you click the confirmation link (double opt-in) and can be cancelled at any time via the unsubscribe link. Briefing subscribers can listen via the link in the briefing email without entering their details again; a reader account is created with the already confirmed email address. In addition we store which countries you selected, your language and whether you want to receive the new episodes by email every morning. This email is voluntary, is only sent to confirmed email addresses and can be cancelled at any time via the unsubscribe link in every email. We count how often an episode is played without linking this to any person. Legal basis: Art. 6(1)(b) GDPR (providing the podcast) and for the email Art. 6(1)(a) GDPR (consent, revocable at any time).

Version

Version of 2 November 2026. Changes will be published on this page with an updated date.