Privacy policy

1. Controller

Controller

Dr. Herbert Schuster

Address

[Strasse Hausnummer, PLZ Ort, Österreich]

E-mail

herbert.schuster@deepnet.at

Phone

[Telefonnummer]

No data protection officer has been appointed; there is no legal obligation to do so.

2. Visiting the website (server logs)

When the site is accessed, the web server processes technically necessary data: IP address (complete), date and time, requested address, amount of data transferred, response time, status code, referrer and browser identification. The hosting provider writes one log file per domain and day. These logs serve secure operation and troubleshooting. They are also evaluated on the server into aggregated access statistics (views per page and day, domains of referring pages, downloads); only totals are produced – IP addresses are neither stored nor passed on for this.

• Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, uninterrupted operation).
• Retention: the log files are kept at the hosting provider for up to 12 months and then deleted; the aggregated statistics contain no personal data.
• Processor: [Name und Anschrift des Hosting-Anbieters] – processing exclusively within the EU/EEA.

3. Contact form

The form on the start page transmits name, e-mail address, selected subject and your message to the web server, which sends them by e-mail to the controller. Your e-mail address is used as the reply address. A copy is also kept on the web server – outside the web root, readable only by the controller – so that open enquiries are not lost in the mailbox. Your IP address is not stored with it.

• Purpose: handling and answering your enquiry.
• Legal basis: Art. 6(1)(a) GDPR (your consent, given explicitly in the form) and Art. 6(1)(b) GDPR where the enquiry serves the initiation of a contract.
• Retention: as long as required to handle the enquiry, afterwards in the mailbox until revocation or expiry of statutory retention periods. The copy on the web server is deleted automatically after 24 months at the latest and can be removed earlier on request.
• Abuse protection: an invisible additional field (honeypot) and a short per-IP delay (a few seconds, stored as a checksum in the temporary directory) prevent automated bulk submissions.
• Alternative without the form: you can always write directly to herbert.schuster@deepnet.at; the button “Send via mail program” only opens your own mail client.

4. Requesting the demo (confirming your e-mail address)

The form on the pilot page transmits your name and e-mail address as well as the optional details institution/field and intended use to the web server. The server stores them in a file outside the web root and sends you a message containing a confirmation link (double opt-in). Only when you click that link is a personal, time-limited download link created and sent to you. Additionally stored are the time and IP address of the request and of the confirmation, the browser identification and the time and number of downloads.

• Purpose: evidence that the address really is yours; handing the demo to a particular person rather than offering an open download; questions about the evaluation; being able to trace who received which version – for instance to reach you if a fault is found in a version.
• Legal basis: Art. 6(1)(b) GDPR (pre-contractual measure at your request) and Art. 6(1)(f) GDPR (legitimate interest in a controlled, documented handover of a development tool that is not a medical device). Ticking “inform me about new versions” relies on Art. 6(1)(a) GDPR (consent).
• Retention: unconfirmed requests are deleted automatically after a few days, confirmed records after 24 months at the latest. The download link expires after 14 days and after a limited number of downloads.
• Delete it yourself: every message from this process contains a link that deletes your record immediately and completely. Consent to being informed about new versions can be withdrawn at any time.
• Recipients: the controller. No disclosure to third parties; no newsletter service and no third-party form service are used.
• Where the file comes from: the installation file is served from this web server; the download does not leave deepnet.at and no third-party storage service is involved. The file is kept outside the web root and is reachable only through your personal link. Recorded are the time and number of downloads (see above) and the usual server logs (section 2).
• Abuse protection: an invisible extra field (honeypot), a short lock per IP address and a daily limit on confirmation mails prevent the form from being used to send mail to other people’s addresses.
• Without the form: you can also request the demo by plain e-mail; nothing is then stored on the web server.

5. Unlocking installed programs

Anyone who has installed one of the programs (Prostate Commander, RAD Reporter, IUCOM Reporter) can request an unlock key from it. The program then transmits to this website: your e-mail address (as reply address, confirmed by you in the dialog), the request code, the purpose, the language, the Windows computer name and the small marker file. The server sees your IP address. It forwards the details together with the time and the IP address by e-mail to the controller, files the request for the controller's licence administration and may sign the unlock key. The IP address is also used for a short block against repeated submissions.

• Purpose: issuing a computer-bound unlock key.
• Legal basis: Art. 6(1)(b) GDPR (performance of the usage relationship) and Art. 6(1)(f) GDPR (protection against misuse).
• No patient or client data: the marker file contains only administrative data: the purpose, a value derived from the computer identifier and the counter, depending on the program also the program name, time, expiry date and check signature, for a renewal the previous unlock key – no image data, no patient or client data, no API key.
• Recipient: the controller (by e-mail via the web server); no disclosure to third parties takes place. Only an end-to-end encrypted short notice with a shortened e-mail address and a shortened code goes to the controller's mobile phone; the phone's push service cannot read it.
• Stored are the e-mail in the controller's mailbox and, on the web server outside the public area, the request for licence administration (e-mail address, request code, language, computer name, processing status); if the server issues a trial or renewal key itself, also a register per computer identifier (time, e-mail address, IP address, request code), so that each computer is unlocked automatically only once.
• Retention: these details are kept for as long as the unlocking has to remain traceable (at most until statutory retention periods expire); the short IP block expires after a few seconds, and its block marker holds only a check value of the IP address, not the address itself.
• Without transmission: you may also copy the request code yourself and send it by informal e-mail; the controller then receives only what your e-mail contains.

6. Search and voice input

The site search runs entirely in the browser; no query is sent to a server. If you start voice input, the browser uses its own speech recognition (Web Speech API). Depending on the browser, this recognition may take place at the browser vendor – in that case the recording leaves your device. Voice input only starts on an explicit click and is not stored by this website.

7. No cookies, no tracking, no third parties

No cookies or comparable techniques are used. No analytics services, social media plugins, external fonts or content delivery networks are embedded. Settings the site remembers (e.g. language) stay locally in your browser.

Anonymous page counter: so that the operator can see which content is read, the page reports the file name of the page to this web server. Stored is only which page was opened how often on which day – no IP address, no browser identification, no cookie, no dwell time, no recognition. No visit can be attributed to a person from these numbers; they are not personal data. The counting runs on this server, no third-party service is involved, and switching off JavaScript prevents it entirely. On iuvect.eu the page additionally reports the language, the domain of the page you came from (e.g. google.com – never the full address), campaign identifiers from the link (utm_source, utm_medium, utm_campaign) and which links or buttons are clicked (type and target, e.g. “download” or a domain). One line per event with the hour is stored – likewise without IP address, cookie or identifier; the entries can be attributed neither to a person nor to one another. The only exception is the operator’s password-protected administration page, which sets a technically necessary session cookie; visitors to the website never see that page.

8. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You may withdraw consent at any time with effect for the future – an informal message to herbert.schuster@deepnet.at is sufficient.

You also have the right to lodge a complaint with the supervisory authority: Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

9. Changes

This statement is updated whenever the processing on this website changes. The version published here applies.

Stand: 15 October 2026