CORTEXPLORE

Privacy Policy.

Last updated: 23 June 2026.

Personal data (usually referred to just as “data” below) will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there.

Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the “GDPR”), “processing” refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not.

The following privacy policy is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under our own control or in conjunction with others. We also inform you below about the third-party components we use to optimize our website and improve the user experience, which may result in said third parties also processing data they collect and control.

Our privacy policy is structured as follows:

I. Information about us as controllers of your data
II. The rights of users and data subjects
III. Information about the data processing

I. Information about us as controllers of your data

The party responsible for this website (the “controller”) for purposes of data protection law is:

cortEXplore GmbH
Technologiepark 17
4320 Perg
Austria

Email: office@cortexplore.com

II. The rights of users and data subjects

With regard to the data processing to be described in more detail below, users and data subjects have the right

  • to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR);
  • to correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR);
  • to the immediate deletion of data concerning them (cf. also Art. 17 GDPR), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR;
  • to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. also Art. 20 GDPR);
  • to file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR). The competent supervisory authority for us is the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, Austria — dsb.gv.at.

We do not use your data for automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of Art. 22 GDPR.

In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.

Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller’s future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.

III. Information about the data processing

Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.

Server log files / Hosting

Our website is currently hosted by World4You Internet Services GmbH, Wolfgang-Pauli-Straße 2, BT3, 4020 Linz, Österreich. When you visit our website, our hosting provider automatically collects information that your browser transmits to our server. This data is stored temporarily in so-called server log files and includes:

  • IP address of the requesting device
  • Date and time of the request
  • Name and URL of the file retrieved
  • Website from which the access was made (referrer URL)
  • Browser used and, where applicable, the operating system of your computer

The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the secure and stable operation of the website. The data is not used in a way that allows conclusions to be drawn about your person. Log entries are deleted after a maximum of 14 days unless they are required for evidence purposes in the event of a security incident.

Cookies

a) Session cookies

We use cookies on our website. Cookies are small text files or other storage technologies stored on your computer by your browser. These cookies process certain specific information about you, such as your browser, location data, or IP address.

This processing makes our website more user-friendly, efficient, and secure, allowing us, for example, to keep you signed in to the members area or to remember the components you have added in the Build-Your-System configurator.

The legal basis for such processing is Art. 6 Para. 1 lit. b) GDPR, insofar as these cookies are used to collect data to initiate or process contractual relationships.

If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 Para. 1 lit. f) GDPR.

When you close your browser, these session cookies are deleted.

b) Third-party cookies

If necessary, our website may also use cookies from companies with whom we cooperate for the purpose of analyzing or improving the features of our website (see the sections on web analytics and YouTube below).

Please refer to the following information for details, in particular for the legal basis and purpose of such third-party collection and processing of data collected through cookies.

c) Disabling cookies

You can refuse the use of cookies by changing the settings on your browser. Likewise, you can use the browser to delete cookies that have already been stored. The steps and measures required vary depending on the browser you use. If you have any questions, please use the help function or consult the documentation for your browser.

If you prevent or restrict the installation of cookies, not all of the functions on our site may be fully usable.

When you first visit our website, a consent banner asks you to choose which categories of cookies and embedded media you allow:

  • Essential — required for the site to function. Always active.
  • Analytics — Google Analytics; loaded only after you opt in. Off by default.
  • External media — embedded YouTube videos on the tutorials page.

Until you accept the “External media” category, embedded videos run in a privacy-preserving fallback mode:

  • For YouTube, the embed is replaced by a placeholder; no request to YouTube’s servers is made until you opt in.

Google Analytics is loaded only after you accept the “Analytics” category. Separately, Cloudflare Web Analytics measures visits without cookies and stores no personal data (see below) — it therefore requires no consent and is not part of the banner.

You can change your choice at any time via the “Cookie settings” link in the page footer. Your choice is stored in a first-party cookie (cc_cookie) for a maximum of 12 months. The legal basis is Art. 6 Para. 1 lit. a) GDPR (consent) and § 165 Para. 3 TKG 2021 (Austrian implementation of the ePrivacy Directive).

We honor the Global Privacy Control browser signal (Sec-GPC: 1) where applicable for visitors covered by US state privacy laws.

Contact form / email

If you contact us via email or our contact form, the data you provide will be used for the purpose of processing your request. We must have this data in order to process and answer your inquiry; otherwise we will not be able to answer it in full or at all.

The legal basis for this data processing is Art. 6 Para. 1 lit. b) GDPR (steps prior to entering a contract) or Art. 6 Para. 1 lit. f) GDPR (legitimate interest in responding to inquiries).

Contact-form submissions are delivered by email to office@cortexplore.com and stored in a short-lived server log on the website for delivery verification.

Submissions are protected against automated abuse by Cloudflare Turnstile, a privacy-friendly CAPTCHA alternative provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Turnstile does not use tracking cookies. The legal basis is Art. 6 Para. 1 lit. f) GDPR; our legitimate interest is preventing spam and abuse.

Your data will be deleted once we have fully answered your inquiry and there is no further legal obligation to store your data, such as if an order or contract resulted therefrom.

Web analytics

We use Cloudflare Web Analytics, a privacy-first analytics service provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, to understand how our website is used.

Cloudflare Web Analytics is cookieless: it does not set any cookies, does not use localStorage, and does not fingerprint or otherwise track individuals across sites or over time. It collects only aggregated, non-identifying measurements such as page URL, referrer, country, browser and device type, and core web-vitals performance metrics. No advertising profiles are built and no data is sold or shared for advertising.

Because no personal data within the meaning of Art. 4 No. 1 GDPR is stored on your device or processed, this analytics does not require consent. To the extent any processing occurs, the legal basis is Art. 6 Para. 1 lit. f) GDPR; our legitimate interest is the needs-based design and continuous improvement of our website.

Further information is available in Cloudflare’s privacy policy at https://www.cloudflare.com/privacypolicy/.

In addition, and only after you opt in to the “Analytics” category of our consent banner, we use Google Analytics 4, a web-analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics sets cookies (e.g. _ga) and processes usage data — including a shortened IP address — to help us understand how our website is used; data may be transferred to Google servers in the USA. Until you consent, no analytics cookies are set and no data is sent to Google. You can withdraw your consent at any time via the “Cookie settings” link in the footer, which also deletes the analytics cookies.

The legal basis is Art. 6 Para. 1 lit. a) GDPR (consent) and § 165 Para. 3 TKG 2021. See Google’s privacy policy at https://policies.google.com/privacy.

YouTube (embedded videos)

The tutorials page embeds videos hosted on YouTube. YouTube is operated by Google Ireland Limited (address as above). We use the privacy-enhanced mode (youtube-nocookie.com), and the embed is only loaded after you have accepted the “External media” category in the cookie banner.

When you play an embedded video, YouTube may set cookies and similar technologies on your device to count views, remember playback preferences, and protect against abuse. Personal data, including your IP address, may be transmitted to Google servers, including in the United States. The legal basis is Art. 6 Para. 1 lit. a) GDPR (your consent).

For details, see Google’s privacy policy at https://policies.google.com/privacy.

LinkedIn

We maintain an online presence on LinkedIn to present our company and our services and to communicate with customers and prospects. LinkedIn is a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.

We would like to point out that this might cause user data to be processed outside the European Union, particularly in the United States. Transfers to LinkedIn Corporation in the US are based on the EU-US Data Privacy Framework and on Standard Contractual Clauses.

When you click the LinkedIn link in our footer, LinkedIn may record information about you and your visit. If you are logged into your LinkedIn account, that visit may be associated with your account. To prevent this, log out of LinkedIn before clicking the link.

The LinkedIn privacy policy is available at https://www.linkedin.com/legal/privacy-policy.

Members area

Pages under /members/ are protected by a sign-in. To use them, you provide an email address and a password, which we store in a server-side user file (passwords are hashed with bcrypt). Login state is maintained in a short-lived signed session cookie (cx_session). The legal basis is Art. 6 Para. 1 lit. b) GDPR (contract execution / pre-contract) and Art. 6 Para. 1 lit. f) GDPR (legitimate interest in restricting access to confidential resources).

You can request deletion of your account at any time by writing to office@cortexplore.com.

Model based on a Model Data Protection Statement by Anwaltskanzlei Weiß & Partner, adapted by cortEXplore GmbH.