Imprint and privacy.
Who runs ai4bcm.org, and what it does with your data. In short: no accounts, no trackers, and no cookies unless you tick "Don't show again" in the nemo tour. What you type into the question box is sent to an AI model, and a record of it is kept for 90 days to check the answers. nemo, at nemo.ai4bcm.org, is a separate demo with its own rules, below.
Who runs this site.
Hollergasse 30/11
1150 Vienna, Austria
contact@kgerner.com
Konstantin Gerner owns and publishes ai4bcm.org and is responsible for its content (§5 ECG, §25 MedienG). There is no company, no VAT number and no entry in a commercial register. AI4BCM is a community, not a legal entity: AI4BCM Guidance has several authors, this website has one operator.
ai4bcm.org publishes AI4BCM Guidance on using AI in business continuity management. It is independent of any vendor, takes no payment and recommends no product. The site also shows nemo, which the same operator runs to show how AI can work on a standard BCM process. nemo is not part of AI4BCM Guidance and is not sold. It is a demo experiment: its answers are written by an AI model and can vary.
AI4BCM Guidance is published under CC BY 4.0: copy it, adapt it and share it, also commercially, with this credit: Hoekstra, W., Gerner, K., et al. (2026). AI4BCM: Guideline for using AI by BCM professionals. CC BY 4.0.
The website's own design and code are not covered. Nothing here, in AI4BCM Guidance, in nemo or in an answer from the question box is legal or professional advice. Linked sites are their owners' responsibility.
No analytics, nothing loaded from other sites, and no cookie unless you ask for one: if you tick "Don't show again" in the nemo tour, a cookie (nemo_tour_off) remembers that for a year on ai4bcm.org and nemo.ai4bcm.org. Untick it and the cookie is removed. The web server logs your IP address, the time, the page and your browser for 14 days, to keep the site running and safe (Art. 6(1)(f) GDPR). If you email us, we keep your message for as long as it takes to answer.
The box loads with the home page. On every other page nothing is requested from it until you press Ask it.
What you type, with the conversation so far, goes from our server in Helsinki, Finland to Anthropic in the USA, whose Claude Sonnet 5.5 model writes the answer. That transfer rests on the Standard Contractual Clauses in Anthropic's data processing addendum. Anthropic keeps what you type and the answer for up to 30 days, and for up to 2 years if its safety systems flag them as a breach of its usage policy. If Anthropic declines a question, cannot be reached, or the day's budget for it is spent, the box asks the GLM 5.3 Flash model instead, through OpenRouter, outside the EU, without the conversation so far. Zero data retention is enforced on that route: a question that cannot go to a provider that keeps nothing is refused. We enforce the route; we cannot audit the provider.
We keep a record of each conversation, with no name, email or IP address, on our server and at Langfuse (EU region, Ireland), for 90 days, only to check and improve the answers. To have a conversation deleted, email us roughly when you asked and a few words of it. Do not type anything confidential.
Legal basis: Art. 6(1)(b) GDPR for answering you, Art. 6(1)(f) for the record.
If you open nemo at nemo.ai4bcm.org, from our menu, a link or a QR code, everything typed in your chat is recorded the same way, sent to the AI model over a zero-retention route, and deleted within ninety days after the chat closes (Art. 6(1)(f) GDPR). An email address is optional: we use it only to ask about your experience, with your consent (Art. 6(1)(a)), which you can withdraw at any time. We read these chats to improve nemo, so do not type anything confidential. nemo sets one cookie, which brings you back to your chat on that device for up to 45 days.
- Hetzner Online GmbH (Germany): the servers, in Helsinki, Finland.
- Anthropic (USA): the question box's answers, keeping what you type and the answer for up to 30 days, and for up to 2 years if flagged.
- OpenRouter and the model provider: outside the EU, only when you use nemo or the question box falls back to its backup model.
- Langfuse (EU region, Ireland): the conversation records, for 90 days.
You can ask for access to your data, its correction, deletion or restriction, or a copy of it, and you can object to processing based on our legitimate interest (Art. 21 GDPR). Write to contact@kgerner.com. You can also complain to the Austrian Datenschutzbehörde or the authority where you live.