Controller
Florian Hertrampf
Am Isarkanal 22
81379 Munich, Germany
Email: kontakt@pyxis-campus.de
Hosting and server logs
The application runs on our own server operated by Hetzner Online GmbH (Germany); the
domain and email address also run through Hetzner. When you access the site, Hetzner
processes connection data (e.g. IP address, timestamp, requested address, browser type) in
server logs for technical reasons, to ensure the operation and security of the website
(Art. 6 (1)(f) GDPR).
Language setting (cookie)
A cookie (pyxis_lang) remembers your last chosen language for one year, so
the site loads in that language on your next visit. It only contains the language code, no
further data, and is strictly necessary (§ 25 (2) no. 2 TDDDG) – no consent is required.
Locally stored data (localStorage)
Your timetable selection, entered grades and the status of the onboarding tour are kept
only in your browser's local storage. This data never leaves your device and is not sent
to our servers.
Uploading your transcript of records
If you upload your transcript of records (PDF), the file is sent to our server once,
processed in memory only for parsing, and then discarded – it is not stored permanently on
the server. The result is stored only in your browser (see above).
Module search (OpenAI API)
For the topic-based module search, your search term (at most 300 characters) is sent to
the OpenAI API, OpenAI Ireland Ltd or OpenAI LLC (USA), to turn it into an embedding and
find matching modules. No further personal data is transmitted. The legal basis is our
legitimate interest in a useful search (Art. 6 (1)(f) GDPR); any transfer to the USA is
based on the EU Standard Contractual Clauses.
Your rights
You have the right to access, rectify, erase and restrict the processing of your data,
as well as to data portability and objection. Contact the email address above. You can also
lodge a complaint with a data protection supervisory authority, e.g. the Bavarian State
Office for Data Protection Supervision.