Privacy Policy
This Privacy Policy explains how personal and technical data is processed in connection with GetAISet (https://www.getaiset.com). We are committed to transparency, data minimization, and honoring your data protection rights under the EU General Data Protection Regulation (GDPR).
1. Data Controller and Responsibilities
Oberhauser Péter Zoltán e.v. (Hungarian individual entrepreneur) is the data controller for personal data processed in connection with GetAISet where she determines the purposes and essential means of processing. This includes website operation, analytics, communications, and commercial or affiliate-related processing carried out directly by the business.
Data Controller and Website Operator: Oberhauser Péter Zoltán e.v.
Oberhauser Péter Zoltán e.v. (Hungarian individual entrepreneur, Hungary) operates GetAISet and acts as the data controller for the website-level processing operations where she determines the purposes and essential means. This includes:
• Technical operation, hosting infrastructure management, and temporary server access log processing.
• Performance and analytics measurement via Google Analytics 4 (strictly consent-gated).
• Management of user consent preferences (stored in localStorage under "learnai_consent") and language preferences (stored via the "learnai_locale" cookie).
• Handling general, support, and privacy-related user inquiries received via contact@getaiset.com, support@getaiset.com, or privacy@getaiset.com.
Commercial and Affiliate Processing
As the operator of GetAISet, Oberhauser Péter Zoltán e.v. also controls personal data processed directly in connection with the platform's commercial and affiliate activities. This includes:
• Managing commercial affiliate partnership accounts, network agreements, and direct business communications.
• Fulfilling statutory accounting, tax, and commercial recordkeeping obligations relating to affiliate commissions received.
Oberhauser Péter Zoltán e.v. does NOT automatically receive, process, or control personal data handled independently by third-party merchant, tool, course provider, or affiliate-network websites after you leave GetAISet.
Official business registration and tax details are available on our dedicated Legal Notice page.
Third-Party Affiliate Destinations and Networks
When you click an outbound affiliate link on GetAISet, you are directed to an external third-party website (such as an AI tool provider, online course platform, or affiliate network). Those independent third parties process personal data in accordance with their own separate privacy policies. GetAISet does not control and is not responsible for data processing conducted by third-party destination platforms.
Privacy Inquiries and Contact Point
For all privacy questions, data subject rights requests, or inquiries regarding website-level data processing, please contact: privacy@getaiset.com. Complete service-provider identification and official addresses are available on our dedicated Legal Notice page.
2. Categories of Data We Process
We collect and process only the minimal data necessary to deliver, secure, and improve our educational directory and platform.
Technical Server Logs
When you access GetAISet, our edge hosting infrastructure automatically processes standard HTTP request headers and access logs. This technical data includes your IP address, browser type and version, operating system, referring URL, date and time of access, and requested pages. This information is processed temporarily to ensure system stability, prevent malicious activity, and mitigate DDoS attacks.
Analytics Data (Google Analytics 4 — Consent-Gated Only)
GetAISet sends sanitized analytics event parameters that are designed not to include direct identifiers, raw search terms, or unnecessary sensitive URL data. After analytics consent is granted, Google Analytics may nevertheless process pseudonymous identifiers, cookies, and device/browser information in accordance with Google's service configuration and policies.
The Google Analytics script is strictly consent-gated: it is not loaded or initialized unless and until you provide affirmative, explicit consent via our cookie consent banner. If you decline or make no choice, no analytics scripts load and no tracking requests or cookies are dispatched.
Advertising Data (Google AdSense and Google Advertising Services)
GetAISet may use Google AdSense and related Google advertising services. When advertising is enabled, Google may act as an advertising technology provider and process advertising-related technical data, consent signals, device or browser information, IP-derived information, ad interactions, and cookies or similar technologies where permitted by applicable settings and consent.
Advertising-related data may be used to serve and measure ads, limit how often an ad is shown, prevent fraud and abuse, and support related advertising operations. Ads are not necessarily personalized. Personalized advertising and advertising storage depend on the user’s applicable consent choices and the Google consent-management platform (CMP) and advertising settings in effect for the relevant region.
Local Browser Storage
We store your cookie consent choice ("granted" or "denied") in your browser’s localStorage under the key "learnai_consent" to remember your preference. We also use a functional cookie ("learnai_locale") to persist your selected interface language across sessions.
Affiliate and Outbound Interactions
When you click outbound links to partner platforms, educational providers, or tools, our platform records sanitized telemetry events (such as the target host and category) to measure aggregate interest in specific resources. We do not construct individual cross-site tracking profiles.
Direct Communications
If you contact us voluntarily via email (e.g., to contact@getaiset.com, support@getaiset.com, or privacy@getaiset.com), we process your name, email address, and message content solely to respond to your inquiry and address your request.
3. Purposes and Legal Bases of Processing
We process data under the following lawful bases pursuant to Article 6(1) of the GDPR:
- Consent (Art. 6(1)(a) GDPR): Used for optional analytics and, where applicable, personalized advertising or advertising storage when those activities require and receive consent. You may withdraw an applicable consent choice at any time.
- Legitimate Interests (Art. 6(1)(f) GDPR): Used for technical server operations, network security, fraud prevention, basic aggregate telemetry, and defending against legal claims.
- Pre-contractual / Contractual Communications (Art. 6(1)(b) GDPR): Used to answer direct user inquiries, support requests, and partner communications.
- Legal Obligations (Art. 6(1)(c) GDPR): Used by Oberhauser Péter Zoltán e.v. where applicable to maintain statutory accounting, tax, and commercial records.
4. Consent Management and Withdrawal
You have full control over your analytics preferences at all times. When you first visit GetAISet, analytics scripts remain completely dormant until you click "Accept" on the consent banner.
You can change or revoke your analytics consent at any time by clicking the "Analytics preferences" link located in the footer of every page. Withdrawing consent immediately disables analytics tracking and applies the browser-level Google Analytics disable flag for subsequent interactions.
Where Google’s consent message or advertising preference control is presented, you can use it to manage the advertising consent choices that apply in your region. Personalized advertising is conditional on those choices and the active Google CMP settings.
5. Data Retention Principles
Personal and technical data is retained only for as long as necessary to fulfill the purposes for which it was collected:
• Technical server logs are retained temporarily by edge infrastructure (typically up to 30 days) for security diagnostics and are automatically purged.
• Analytics data collected via Google Analytics 4 is retained in accordance with standard Google Analytics retention settings (up to 14 months) in aggregated reporting format.
• Email correspondence is retained for as long as necessary to resolve your request and for up to 3 years thereafter to maintain records of communications and legal compliance.
• Commercial accounting and tax records maintained by Oberhauser Péter Zoltán e.v. are retained in accordance with mandatory statutory retention requirements.
6. Third-Party Infrastructure Providers
We rely on select, reputable infrastructure providers to operate the platform:
- Hosting & Edge Delivery: Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA) provides hosting, serverless compute, and content delivery network (CDN) services.
- Analytics (Strictly Consent-Gated): Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) / Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) provides Google Analytics 4 only upon explicit user consent.
- Advertising Technology: Google Ireland Limited / Google LLC may provide Google AdSense and related advertising services, subject to the applicable Google consent/CMP and advertising settings.
7. International Data Transfers
Where data is processed by service providers based outside the European Economic Area (EEA), such transfers are governed by appropriate safeguards recognized under the GDPR, including the EU-U.S. Data Privacy Framework adequacy decision and Standard Contractual Clauses (SCCs) approved by the European Commission.
8. Your Data Subject Rights Under GDPR
Under Chapter III of the GDPR, you have the following fundamental rights regarding your personal data:
- Right of Access (Art. 15 GDPR): You may request confirmation of whether your data is being processed and receive a copy of that data.
- Right to Rectification (Art. 16 GDPR): You may request the correction of inaccurate or incomplete personal data.
- Right to Erasure (Art. 17 GDPR): You may request the deletion of your personal data where retention is no longer necessary or lawful.
- Right to Restriction of Processing (Art. 18 GDPR): You may request that we temporarily restrict processing in certain circumstances.
- Right to Data Portability (Art. 20 GDPR): You may request to receive your provided data in a structured, commonly used, machine-readable format.
- Right to Object (Art. 21 GDPR): You may object to data processing based on legitimate interests.
- Right to Withdraw Consent (Art. 7(3) GDPR): You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
10. Security and Integrity
We implement modern technical and organizational security measures, including HTTPS/TLS encryption for all data in transit, strict access controls, and regular infrastructure reviews. While we make every reasonable effort to protect your data, no method of transmission over the internet or electronic storage is completely infallible.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our platform practices, technical architecture, or legal requirements. Any modifications will be posted on this page with an updated revision date.