Privacy policy

Last updated: 13 November 2026. The German version is authoritative.

This policy covers the information website museum-rag.bh-automation.cloud and transparently describes data processing in the underlying “Museum-RAG” prototype. The Swiss Federal Act on Data Protection (FADP) applies.

1. Controller

Beat Hutter, Switzerland
Contact: wilhelmbiener68@gmail.com

2. Visiting this website

• This website is served via GitHub Pages, a service of GitHub, Inc. in the USA. GitHub processes technical connection data such as IP address, time and requested page in order to deliver the site and protect it from abuse. See the GitHub privacy statement.
• The website sets no cookies. It uses no analytics or advertising services, loads no external web fonts or third-party scripts and contains no public input form.

3. Contact by email or LinkedIn

If you get in touch by email or via LinkedIn, your details are used solely to respond to your message and are not shared with third parties.

4. Operation of the RAG prototype (application)

The chatbot prototype presented on this website runs on separate server infrastructure and is currently accessible only to a closed user group for testing and evaluation. Neither original documents nor photographs or personal data from the museum's holdings are published on this public project site.

• Hosting and database: The application, vector database (Qdrant) and media files run in Docker containers on a virtual server hosted by Hostinger (server location in the European Union).
• Language model and embeddings: To analyse search queries, score relevance (reranking) and synthesise answers, the system uses the API of OpenAI (OpenAI, L.L.C., USA; models used: gpt-4o-mini and text-embedding-3-small). The query text and relevant text excerpts from the archive are transmitted to OpenAI. Under OpenAI's API data usage policies, data submitted via the API is not used to train models. See the OpenAI privacy policy.
• Telegram integration: When using the optional Telegram channel, messages are transmitted via Telegram's infrastructure (Telegram Messenger Inc.) to the server's authenticated webhook.
• Anonymous operational log: For quality assurance and rate limiting, the system stores timestamp, channel (web or Telegram), query text, response latency, hit count and optional thumb ratings locally on the server in a SQLite database. IP addresses, real names or Telegram usernames are not stored; sessions are recorded only as one-way salted hashes (SHA-256).
• No sharing: Data is never sold or used for advertising.

5. Your rights

Under the Swiss Federal Act on Data Protection, you may request information about any personal data processed about you and ask for it to be corrected or deleted. Write to wilhelmbiener68@gmail.com.

6. Changes

This policy will be updated whenever the scope or access status of the project changes. The German version published on this website is authoritative.