Privacy Policy

Last updated: January 20, 2026

1. Responsible Body

Responsible for data processing on this website is the research team of the project "Design and Evaluation of an AI-Based Chatbot to Improve Information Access to BAföG Services" at the University of Potsdam:

Bruk Asrat, Elisa Haxhillazi, Ilia Sokolovskiy, Lamia Islam, Osman Mohmmed, Paul Bakos
University of Potsdam
Am Neuen Palais 10
14469 Potsdam
Germany

Email: contact@bafoeg.ilia.work

2. Collection and Storage of Personal Data

2.1 When Visiting the Website

When accessing our website, the browser used on your device naturally sends information to the server. This includes:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved file
  • Website from which access is made (Referrer URL)
  • Browser used and, if applicable, the operating system of your computer

This data is analyzed solely to ensure the trouble-free operation of the website and to improve our service. It is not possible for us to assign this data to a specific person.

2.2 When Using the Chatbot (Registered Users)

If you register and use the chatbot, we store the following data:

  • Email address
  • Chat history (Questions and Answers)

This data is stored to provide you with a personalized service and to make previous conversations accessible. The legal basis is Art. 6 Para. 1 lit. b GDPR (Performance of Contract).

2.3 When Using Incognito Mode

In Incognito Mode, no personal data is permanently stored. All chat data is kept strictly temporarily in your browser and is deleted when the session is closed.

3. Processors and Third Countries

3.1 Supabase

We use Supabase Inc. (USA) as a database and authentication provider. Supabase processes data in accordance with EU Standard Contractual Clauses. More information: https://supabase.com/privacy

3.2 Brevo

For sending emails, we use Brevo (Sendinblue), a French company based in the EU. Processing takes place in accordance with the GDPR. More information: https://www.brevo.com/en/legal/privacypolicy/

3.3 Vercel

This website is hosted on Vercel Inc. (USA). Vercel processes data in accordance with EU Standard Contractual Clauses. More information: https://vercel.com/legal/privacy-policy

4. Cookies and Local Storage

We only use technically necessary cookies for authentication. In addition, we store accessibility settings (font size, ease of language) locally in your browser (localStorage). This data is not transmitted to third parties.

5. Your Rights

According to the GDPR, you have the following rights:

  • Right to Information (Art. 15 GDPR): You can request information about your stored data.
  • Correction (Art. 16 GDPR): You can request the correction of incorrect data.
  • Deletion (Art. 17 GDPR): You can request the deletion of your data.
  • Restriction (Art. 18 GDPR): You can request the restriction of processing.
  • Data Portability (Art. 20 GDPR): You can receive your data in a structured format.
  • Objection (Art. 21 GDPR): You can object to the processing.

To exercise your rights, please contact us at: contact@bafoeg.ilia.work

6. Right of Appeal to the Supervisory Authority

You have the right to complain to a data protection supervisory authority. Responsible is:

The State Commissioner for Data Protection and for the Right to Inspect Files Brandenburg
Stahnsdorfer Damm 77
14532 Kleinmachnow
www.lda.brandenburg.de

7. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy if necessary to adapt it to changed legal situations or changes to our service. You can always find the current version on this page.