Malpedia Actors
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared only with the providers who run the service.
- The documents do not say who can read your content.
A research-institute site: logs, cookies, event and shop data, third-party analytics, and event photos—not an AI chatbot.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
IP and browser logs, cookies, event or shop details, and sometimes payment or nationality.
Read the exact line
Privacy policy
“The browser installed on your device merely transmits information automatically to the server of our website (e.g., browser type and version, date and time of access)”
Training
They run the site, events, shop, newsletters, and analytics; they do not describe AI training.
Read the exact line
Privacy policy
“we process your personal data collected via our website and store them for the period necessary to achieve the specified purposes and to comply with statutory requirements.”
Sharing
Processors, payment firms, event partners, Wiredminds, YouTube/Google, and sometimes authorities.
Read the exact line
Privacy policy
“We only give your personal data to third parties if: You consented explicitly to the data transfer to a third party”
Kept
Logs four weeks; events about three years; shop and tax records can last about ten years.
Read the exact line
Privacy policy
“We store data we collect in context with registrations to events for three (3) years unless we are legally obligated to store them for a longer period of time”
Controls
You can unsubscribe, use access/ rights, and email the data protection officer.
Read the exact line
Privacy policy
“You may unsubscribe from our newsletter at any time. You may find an ‘unsubscribe’ link at the end of each of our newsletters.”
Fine print
Event fees often stay due if you cancel; they may film events; German law; policy dated 2020.
Read the exact line
Terms of service
“If Participant is unable to attend the event for any reason, the participation fee is due and payable nonetheless, and payments that have already been made will not be refunded.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Unsubscribe from newsletters
Unsubscribe link in each newsletter, email abmeldung@sit.fraunhofer.de, or www.fraunhofer.de/de/fraunhofer-newsletter-abmeldung.html
Ask to see or delete your data
Data Protection Officer at datenschutz@zv.fraunhofer.de or Hansastrasse 27 c, D-80686 München
Block cookies in your browser
Browser settings; they warn some site features may stop working
Log out of YouTube before watching embeds
Privacy statement section on YouTube components
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
If you skip a paid event, they still keep your money unless that event’s description says otherwise.
Read the exact line
Terms of service
“If Participant is unable to attend the event for any reason, the participation fee is due and payable nonetheless, and payments that have already been made will not be refunded.”
For example, if you get sick the week before, you may still owe the full fee.
They can film or photograph you at events and use that for publicity, including social media and the press.
Read the exact line
Terms of service
“Organizer will take photos and make video/audio recordings (e.g. photos or videos) during the event, including the supporting program, and use these for purposes of documentation, for reporting during and after the event, for post-event promotion, and for announcing future events.”
For example, a photo of you in the audience could appear on Facebook or their website.
A third-party tracker watches visits (aimed at companies) using pixels.
Read the exact line
Privacy policy
“Our website uses the Leadlab service by Wiredminds GmbH and its tracking pixel technology to analyze user behavior and optimize our site accordingly.”
For example, visiting from a work network can be logged as that company visiting the site.
Some event sign-ups ask for your nationality for venue security.
Read the exact line
Privacy policy
“In exceptional cases - especially when we offer events together with organizations that have to implement increased requirements for access control to their premises - we additionally collect your nationality as part of the registration.”
For example, a joint event on a partner campus might require you to state your nationality.
Order and billing data can sit around for about ten years because of tax rules.
Read the exact line
Privacy policy
“For this storage period (ordinarily ten (10) years after entering into the sales contract), we will re-process the data solely for audits by the fiscal authorities.”
For example, a shop purchase from 2018 could still be in their tax files in 2028.
On the Sharing research tool, what you post can be seen by everyone on that service.
Read the exact line
Privacy policy
“These data are accessible for all users.”
For example, a document you upload there is visible to other project users.
If they are only slightly careless, they pay only for limited, typical losses, not extra knock-on harm.
Read the exact line
Terms of service
“In the case of ordinary negligence, Organizer’s to cases of breach of obligations essential to the contract (cardinal obligations)”
For example, if a cancelled talk costs you extra travel, they may not cover that extra cost.
Ordinary website visit logs, including IP, are dropped after four weeks.
Read the exact line
Privacy policy
“This information is temporarily stored in a so-called log file and will be deleted after four weeks.”
For example, the IP from today’s visit should be gone from logs in about a month.
They say the connection to the site is encrypted like online banking.
Read the exact line
Privacy policy
“We transmit all your personal data using the widely used and secure TLS (Transport Layer Security) encryption standard.”
For example, the address bar should show https when you fill a form.
Leaving the newsletter should wipe that email from the list right away.
Read the exact line
Privacy policy
“Upon receiving your unsubscribe notice, we will delete your email address immediately.”
For example, after you click unsubscribe, they say they delete that address at once.
Words to know
Legal words from the lines above, in plain English.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- tracking pixels
- Tiny invisible images or bits of code in a page, app or email that report back when and where you opened it. For example, a pixel in a marketing email tells the sender the moment you read it.
- limitation of liability
- A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
How we got here · grade D · score 36/100 · 15 of 15 policy answers backed by a verified quote · 7 not stated
What does the app collect beyond what it needs to work?
Besides forms you fill, they collect IP, browser data, cookies, and analytics. Event or shop sign-up can add address, payment, and sometimes nationality.
Does it record your voice, face or body, and what happens to that?
At events they take photos and video or audio and may give them to the press and post them on social media. This is not described as an AI voice product.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They use Wiredminds Leadlab tracking pixels and YouTube/Google embeds that can send data to those companies.
Do they sell or share your data, and can you opt out?
They say they give data to processors, payment firms, mail order, event partners, or authorities when required, not as an open sale.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
Logs last four weeks; event sign-ups about three years; shop and tax files often about ten years. GDPR erasure is offered by request.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They describe TLS encryption and general technical and organisational security measures. No audit or leak history is named.
Is there a real age gate, and are teens protected?
Not stated in the documents.
Will they tell you when the rules change, and is the policy specific?
The privacy text is dated September 2020 and says they may amend it; you should re-read the page. It does not promise advance personal notice.
Can they close your account without warning, and can you get your data out first?
Not stated in the documents.
If something goes wrong, who pays?
For events they disclaim third-party content and limit ordinary-negligence damages, while keeping liability for intent, gross negligence, and personal injury.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 3,520 words at a college graduate level (Flesch reading ease 39.4); the terms are 2,586 words at a college level.
