Privacy Policy
Controller: Robert Beisteiner, Mühlweg 2, 1210 Vienna, Austria — robert(at)exbertl.com
What data we process
Account: name, email address and a password hash (the password itself is never stored). Legal basis: performance of contract (Art. 6(1)(b) GDPR).
Birth data: For horoscopes we process the details you enter (birth date, optional birth time, birth place, name, gender). Without an account these are only used for the calculation and not stored; with an account they are stored linked to your account.
Generated horoscope texts: Extensive horoscopes are stored in your account so you can access them at any time.
AI generation (OpenAI): To create the texts we transmit the astrological constellations and, if provided, first name and gender to OpenAI (OpenAI Ireland Ltd. / OpenAI L.L.C., USA — EU standard contractual clauses). Per OpenAI's API terms, API data is not used for training.
Photo caricatures (optional): If you voluntarily upload a photo, we transmit it once to OpenAI to create a watercolor caricature from it. The photo itself is never stored by us — it is processed in memory only; we store solely the generated drawing, which you can delete at any time together with the horoscope or your account. Legal basis: consent through the upload (Art. 6 (1) (a) GDPR).
Book printing (Lulu): If you order a printed book, we transmit your shipping address, email and phone number as well as the book PDFs to our print partner Lulu Press, Inc. (USA — EU standard contractual clauses) for contract fulfilment.
Approximate location: On the start page we derive your approximate location (city) from your IP address to display the sky for your place (service: ip-api.com). The IP is not stored permanently for this purpose. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Email delivery (double opt-in): Upon registration we send you a confirmation email. We only send horoscope and information emails if you actively ordered them AND your address is confirmed — every such email contains an unsubscribe link. Independently of this, you receive transactional emails (e.g. order confirmations). Legal basis: consent (Art. 6 (1) (a) GDPR) or contract performance.
Cookies & localStorage: We set exactly one technically necessary session cookie for login (no tracking, no advertising cookies). On request, your browser's localStorage remembers your last-entered birth data to prefill forms — this data never leaves your browser and can be removed via your browser settings at any time.
Server logs: Short-lived technical logs (IP, time, requested page) arise when accessing the site, used for error analysis and abuse prevention.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and the right to lodge a complaint with a supervisory authority (in Austria: dsb.gv.at).
Self-service deletion: In your account you can permanently delete each horoscope individually as well as your entire account ("My Area" → delete account). This irreversibly removes all horoscopes, chapters, birth data, book orders and stored book files.
Retention: Account data until you delete it; order data possibly longer where statutory retention obligations (e.g. tax law) apply.