Privacy Policy
Last updated: April 2026
1. Privacy at a glance
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations (GDPR, Austrian DSG, TKG 2021) as well as this privacy policy. When you use this website, various personal data is collected. This policy informs you about which data we collect and what we use it for.
2. Controller
The controller responsible for data processing on this website is:
Ing. Andreas Huemer MSc MBA
FUTUREAISPHERE
Gartenstraße 7
A-5274 Burgkirchen, Austria
Phone: +43 664 964 19 80
Email: office@futureaisphere.com
3. Hosting
This website is hosted by IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany). When you visit the website, the server automatically records so-called server log files transmitted by your browser. These include:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the retrieved file
- Amount of data transferred
- Access status (HTTP status code)
- Browser type and version, operating system
- Referrer URL (previously visited page)
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure provision of the website). The data is deleted after 7 days, unless further retention is required for evidentiary purposes.
Data processing agreement: We have concluded a data processing agreement (DPA) with IONOS. Further information: IONOS Privacy Policy.
4. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the "https://" in your browser's address bar. When SSL/TLS encryption is active, the data you transmit to us cannot be read by third parties.
5. Data collection on this website
Data processing on this website is carried out by the website operator. Some of your data is collected when you provide it to us (e.g. via a contact form). Other data is collected automatically, or after your consent, by our IT systems when you visit the website (primarily technical data such as browser, operating system, or time of the page request).
6. Contact form & Formspree
If you send us enquiries via the contact form, your details (first name, last name, email address, message) are stored with us for the purpose of processing the enquiry.
For the technical transmission of form data, we use the service Formspree, Inc. (21750 Hardy Oak Blvd Ste 104 #26968, San Antonio, Texas 78258, USA). Formspree processes the data on our behalf and forwards the enquiries to us by email.
The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(a) GDPR (your consent via checkbox). The data is deleted as soon as the purpose of storage no longer applies or you request deletion.
Note on third-country transfer: Formspree is based in the USA. Data transmission is based on Standard Contractual Clauses (SCCs). Further information: Formspree Privacy Policy.
7. External resources and CDN
This website loads all static assets (fonts, CSS, JavaScript, images) directly from the hosting provider's server (IONOS SE). No third-party content delivery networks (CDN) and no external font servers are used.
- Fonts: Plus Jakarta Sans is self-hosted. No connection to Google Fonts or other external font servers.
- CSS & JavaScript: All stylesheets and scripts reside on our own server. No external CDN sources are embedded.
- Images & icons: Delivered locally, no third-party image sources.
External connections exist only in two cases:
- When the contact form is submitted, a connection to the Formspree service is established (see Section 6).
- For cookie-free reach measurement, the Plausible Analytics script is loaded when a page is viewed (see Section 9). Plausible processes data exclusively on EU servers and does not set cookies.
8. Cookies
This website uses no cookies of its own. We do not use marketing cookies or classic tracking cookies. The analytics tool we use (see Section 9) also operates entirely cookie-free.
9. Web analytics with Plausible Analytics
To measure the use of this website, we use Plausible Analytics. The provider is Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia (EU).
Plausible is a web analytics service that deliberately operates without cookies, without cross-site tracking, and without personal identifiers. No fingerprinting is used. Visitors are not recognized across pages. IP addresses are not stored, but are only briefly used to generate a daily, anonymous hash value, which is then discarded.
Only aggregated usage data is collected, such as: pages visited (URL), referral source (referrer), device type, browser, operating system, approximate country (at country level), and triggered interaction events (e.g. clicking a call-to-action or submitting a form). This data helps us improve the website's clarity and conversion quality.
Legal basis: Art. 6(1)(f) GDPR in conjunction with § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021) — legitimate interest in statistical, privacy-friendly reach measurement. Since Plausible does not set cookies, does not use comparable technologies to store or read information on your device, and does not create personal profiles, no separate consent under § 165(3) TKG 2021 is required.
Data storage location: Processing takes place exclusively on servers within the European Union. No third-country transfer.
Further information: Plausible Data Policy and Plausible Privacy Policy.
Objection: You can object to web analytics at any time by enabling the "Do Not Track" option in your browser or using a script blocker that blocks plausible.io.
9a. Interactive tools (Maturity Assessment, Solution Configurator, Quick Search)
This website offers three voluntary interactive tools: the Maturity Assessment (/maturity-assessment.html), the Solution Configurator (/solution-configurator.html), and a global Quick Search (keyboard: Cmd+K or Ctrl+K).
Data processing: All inputs (answers in the assessment, selections in the configurator, search terms) are processed exclusively locally in your browser — specifically in your browser's sessionStorage (keys: fais.assessment.v1, fais.configurator.v1). No personal data is transmitted to our servers or to third parties.
Storage duration: The data is retained for the duration of the browser session and is automatically deleted when the tab is closed. Manual deletion is possible at any time via the "Reset" buttons visible in the tools, or via your browser's function for clearing local data.
Transmission to FUTUREAISPHERE: Only when you submit the contact form is the pre-fill information visible in the pre-fill area transmitted, together with your remaining input, to our form provider Formspree (see Section 6). You can edit or completely remove the pre-filled block before submitting.
Search inputs: Entries in the quick search are neither stored nor transmitted to any server. Only the act of opening the quick search may be counted by Plausible (see Section 9) as an anonymous interaction event — the content of the search query is not recorded.
Legal basis: Art. 6(1)(b) GDPR (initiation of a business relationship on your initiative) or Art. 6(1)(f) GDPR (legitimate interest in a helpful self-assessment function without server access). No separate consent is required, as no cookies are set and no data leaves your device unless you actively submit the contact form.
9a.1 Emailing the Maturity Assessment result (optional)
In the Maturity Assessment, you may optionally have your result (score, stage classification, and where applicable driver and time horizon from your answers) sent to you by email. This function is strictly optional: the score and recommendation are fully visible in the browser even without entering an email address.
Data processed: Your email address, as well as the maturity score, the stage (1–4), the answers regarding "driver" and "time horizon," and the browser language.
Purpose: one-time delivery of the assessment result to the address you provide. No further contact will be made without separate consent.
Legal basis: Art. 6(1)(a) GDPR (consent). You actively give consent via a separate checkbox immediately before sending.
Processor: Technical email delivery is handled by Formspree (Formspree Inc., 21750 Hardy Oak Blvd Ste 104 #26968, San Antonio, Texas 78258, USA). Delivery takes place via the same endpoint that also serves the contact form (see Section 6). A data processing agreement with Formspree is in place, including the European Commission's Standard Contractual Clauses (SCCs) under Art. 46 GDPR for third-country transfers.
Third-country transfer: Since Formspree operates in the USA, data is transferred to a third country. This transfer is safeguarded by the Standard Contractual Clauses named above. Further information: Formspree Privacy Policy. The data processing agreement is available in the customer account or upon request.
Storage duration: The controller (FUTUREAISPHERE) does not retain your email address beyond successful delivery. Logs on Formspree's side are processed in accordance with their privacy policy.
Right of withdrawal: You may withdraw your consent for the future at any time — informally, by email to the contact address given in the Imprint. Withdrawal does not affect any delivery that has already taken place.
Consequences of non-provision: If you do not provide an email address or do not give consent, you will still receive the result directly in the browser — no disadvantages arise.
10. Social media
We do not embed any social media plugins on this website. No data is transmitted to social networks.
11. Email contact
If you contact us by email, your details (email address, and where applicable name and content) are stored for the purpose of processing your enquiry. We do not pass on this data without your consent. Legal basis: Art. 6(1)(b) GDPR (initiation of a contract) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).
12. Disclosure of data to third parties
Your personal data is not transmitted to third parties for purposes other than those listed below. We only disclose your personal data to third parties if:
- You have given your express consent (Art. 6(1)(a) GDPR)
- the disclosure is necessary for the performance of a contract (Art. 6(1)(b) GDPR)
- there is a legal obligation to do so (Art. 6(1)(c) GDPR)
- the disclosure is necessary to safeguard legitimate interests (Art. 6(1)(f) GDPR)
13. Data processing agreements
We have concluded data processing agreements (DPAs) pursuant to Art. 28 GDPR with the following service providers:
- IONOS SE (hosting)
- Formspree, Inc. (contact form processing)
- Plausible Insights OÜ (web analytics, EU hosting, cookie-free)
14. Retention period
Personal data is stored only as long as necessary to fulfil the purpose of processing, or as required by statutory retention periods. Data from the contact form is deleted no later than 6 months after the enquiry is closed, unless a contractual relationship arises. Server log files are deleted after 7 days.
15. Your rights as a data subject
You have the following rights with respect to personal data concerning you:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent (Art. 7(3) GDPR)
To exercise your rights, please contact: office@futureaisphere.com
16. Objection to data collection
Where your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to this processing pursuant to Art. 21 GDPR, provided there are grounds arising from your particular situation.
17. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR.
Competent supervisory authority in Austria:
Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40-42, 1030 Vienna
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: https://www.dsb.gv.at
18. Data security
We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
19. Currency and amendment of this privacy policy
This privacy policy is currently valid and dated April 2026. Due to the further development of our website, or as a result of changed statutory or regulatory requirements, it may become necessary to amend this privacy policy. The current version of this privacy policy can be accessed on this page at any time.