1Permitted use

HTLCloud and its connected services — Rancher/Kubernetes, Portainer, Harbor, PostgreSQL/pgAdmin, Redis/RedisInsight, Grafana monitoring, Azure DevOps Server as well as school apps such as library, CAD and office tools — are provided for school purposes only: pre-scientific papers (VWA), diploma theses, project and laboratory work, and school-internal software. The list of services is not exhaustive. Sign-in is only possible with your own school Google account; accounts are personal and non-transferable. Access credentials must not be shared with third parties. There is no entitlement to specific resources or to availability.

2Prohibited use

1. Circumventing security measures or gaining unauthorised access to other users' systems, projects, containers, databases, namespaces or credentials (hacking).
2. Running software known to consume excessive resources (e.g. mining, stress/benchmark tests, fork bombs), overloading the services or making them unusable for others.
3. Using the services for private, commercial or non-school purposes (private web or file hosting, VPN tunnels, personal bots).
4. Installing or running software, scripts or containers not intended for school operation (e.g. hacking tools, port scanners, DDoS tools, exploits).
5. Unauthorised modification or deletion of data, or disrupting the functionality of the systems.
6. Collecting, viewing, copying, modifying or sharing other users' personal data without authorisation.
7. Obfuscating the attribution of activities to your own user, evading logging or falsifying logs.
8. Passing on passwords, API keys, registry robot accounts or CLI secrets to third parties, or letting third parties use them.

3Legal information (Austria)

Violations of these terms may be criminal offences. In particular, the following provisions of the Austrian Criminal Code (StGB) may apply — a selection, not an exhaustive list:

• § 118a StGB — Unauthorised access to a computer system Whoever gains unauthorised access to a computer system by overcoming a security measure — for example to other users' projects, containers, databases or admin interfaces — faces up to two years' imprisonment; up to three years for systems that are essential components of critical infrastructure (§ 118a (1) and (2) StGB).
• § 148a StGB — Fraudulent abuse of data processing Whoever influences the result of automated data processing in order to unlawfully enrich themselves or a third party — for example through forged input or accounts — faces up to six months' imprisonment or a fine of up to 360 daily rates. Commercial conduct or damage exceeding €5,000 raises the maximum to three years' imprisonment; for damage exceeding €300,000, one to ten years (§ 148a StGB).
• §§ 126a–126c StGB — Data damage, system impairment, misuse of programs and credentials Unauthorised alteration, deletion, impairment or suppression of data is punishable by up to six months' imprisonment or a fine of up to 360 daily rates (§ 126a StGB); likewise seriously impairing the functionality of a computer system (§ 126b). Creating, distributing or possessing hacking tools, passwords and access credentials is also an offence (§ 126c). In serious cases — e.g. prolonged disruption, damage over €5,000 or €300,000, or affected critical infrastructure — maximum penalties rise to up to two years, or six months to five years in the most severe cases.
• § 126 StGB — Severe property damage Whoever damages or destroys property that is an essential component of critical infrastructure (§ 74 (1) no. 11 StGB) or causes damage exceeding €5,000 faces up to two years' imprisonment; six months to five years for damage exceeding €300,000. Damage to the server, storage or network components of the school cloud may fall under this (§ 126 StGB).
• §§ 118, 119, 119a, 120 StGB — Privacy and telecommunications secrecy Opening other people's letters or documents is punishable by up to three months' imprisonment or a fine of up to 180 daily rates (§ 118 StGB); violating telecommunications secrecy (§ 119) and fraudulently intercepting data (§ 119a) by up to two years' imprisonment. Misuse of audio recording or eavesdropping devices is also an offence (§ 120). On the school network, messages and data not intended for you are protected just as they are elsewhere.

In addition, the following apply: Copyright Act (UrhG), Data Protection Act (DSG) / GDPR and further criminal provisions protecting data processing systems. Criminal acts are reported to the law enforcement authorities.

4Consequences for students

In addition to criminal prosecution, violations can lead to school disciplinary measures under § 47 SchUG: verbal or written reprimand, remaining in the school year (not moving up), expulsion from school, and — for serious violations — exclusion from school events. Where others are endangered, the school management may additionally impose a temporary exclusion from lessons. The house rules also apply — the platform is part of the school facility. Criminal acts are reported regardless.

5Consequences for teachers and employees

Unauthorised private use, sharing access credentials and breaches of confidentiality violate official duties. Under the Beamten-Dienstrechtsgesetz 1979 (BDG 1979, §§ 46–49) or — for contract employees — the Vertragsbedienstetengesetz, disciplinary measures may range from reprimand and fines to termination or dismissal. In addition, the school management is notified; criminal acts are reported.

6No entitlement to availability / liability

The services are operated with the resources available and without a guarantee of availability. There is no entitlement to availability, to the correctness of stored data or to the recovery of deleted data. The school is not liable for damage caused by unauthorised use by third parties.

7Logging & contact

Use of the services is logged: user, timestamp, action and IP address. The logs serve troubleshooting and the investigation of abuse. Upon reasonable suspicion they may be presented to the school management and — on request — to the law enforcement authorities.