Datenschutz

Privacy Policy

Information Obligation Statement

The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of legal provisions (GDPR). In this privacy information, we inform you about the most important aspects of data processing within our website.

When visiting our website, your IP address, start and end of session are recorded for the duration of this session. This is technically necessary and therefore represents a legitimate interest within the meaning of Art 6 Para 1 lit f GDPR. Unless otherwise specified below, this data will not be further processed by us.

Contact with us

When you fill out the contact form on the website, we receive your details as an email in our inbox. We use this data solely to handle your inquiry and for follow-up questions. The same applies when you contact us by email. We do not use external CRM or email marketing services for this.

Legal basis: Art. 6 Para. 1 lit. b GDPR (contract initiation) or Art. 6 Para. 1 lit. f GDPR (legitimate interest in processing inquiries).

We do not share this data without your consent.

Hosting and technical service providers

If you neither register nor log in as a visitor, we collect the following data in so-called log files that your browser transmits: IP address, date and time of the request, time zone difference to Greenwich Mean Time, content of the request, HTTP status code, amount of data transferred, website from which the request comes and information about browser and operating system.

This is necessary to display our website and ensure stability and security. This corresponds to our legitimate interest within the meaning of Art. 6 Para. 1 S. 1 lit. f GDPR.

We use the following service providers:

Vercel Inc.
Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA
Purpose: Website hosting and content delivery
Legal basis: Art. 6 Para. 1 S. 1 lit. f GDPR (legitimate interest)
Data transfer: EU-US Data Privacy Framework
Server location: Germany and EU

Google reCAPTCHA Enterprise
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Purpose: Spam protection and bot detection for forms
Legal basis: Art. 6 Para. 1 lit. f GDPR (legitimate interest)
Storage duration: Up to 2 years
Data transfer: EU-US Data Privacy Framework

Sentry
Functional Software, Inc. (Sentry), 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA
Purpose: Error tracking and technical stability of the website (session replay only on errors, text/media masked)
Legal basis: Art. 6 Para. 1 lit. f GDPR (legitimate interest)
Storage duration: Per Sentry guidelines, typically up to 90 days
Data transfer: EU-US Data Privacy Framework; Standard Contractual Clauses

You have the right to object to the processing. The functionality of the website is not guaranteed without the processing.

Cookies and tracking technologies

Our website uses cookies and similar technologies. These are small text files that are stored on your device with the help of the browser.

Necessary cookies:
- Session cookies: For website functionality
- Cookie consent: Stores your cookie settings
Legal basis: Art. 6 Para. 1 lit. f GDPR (legitimate interest)

Functional cookies:
- reCAPTCHA: _GRECAPTCHA (spam protection)
Legal basis: Art. 6 Para. 1 lit. f GDPR (legitimate interest)
Storage duration: Up to 2 years

Analytical cookies (only with consent):
- Google Analytics: _ga (2 years), _ga_* (2 years), _gid (24 hours)
- Google Tag Manager: _gtm, _gtag (various durations)
Legal basis: Art. 6 Para. 1 lit. a GDPR (consent)
Storage duration: Up to 2 years

Marketing cookies (only with consent):
- Google Ads Remarketing: _gcl_au (90 days), _gcl_aw (90 days), _gcl_dc (90 days)
- Google Ads Conversion: _gclid (30 days)
Legal basis: Art. 6 Para. 1 lit. a GDPR (consent)
Storage duration: Up to 540 days

You can change your cookie settings at any time via our cookie banner or configure your browser accordingly.

Web analysis and tracking

Google Tag Manager & Google Analytics 4
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Purpose: Website analysis, user behavior tracking, marketing optimization
Legal basis: Art. 6 Para. 1 lit. a GDPR (consent via cookie banner)
Data transfer: EU-US Data Privacy Framework (Adequacy Decision 2023)
Storage duration: 14 months (automatic deletion)
Consent Mode: Google Consent Mode V2 implemented

Data collected: Pages visited, dwell time, click behavior, approximate location (country/city), anonymized IP address, browser information, screen resolution, source

You can object to data collection at any time via our cookie banner or install the Google Analytics Opt-out Browser-Add-on.

Google Remarketing and Advertising

Google Ads Remarketing
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Purpose: Personalized advertising based on website visits
Legal basis: Art. 6 Para. 1 lit. a GDPR (consent)
Storage duration: Maximum 540 days
Data transfer: EU-US Data Privacy Framework

Google Ads Conversion Tracking
We use Google Ads conversion tracking to measure whether certain actions (e.g. form submission, button click) occur after a click on a Google ad. For this purpose, events are triggered on the website; attribution is based on cookies or Consent Mode (only when consent is given).

Google Ads Enhanced Conversions
If you have accepted marketing cookies, we use “Enhanced Conversions”: After actions such as submitting a contact form, your email and optionally phone number are normalized and hashed (SHA-256) according to Google’s specifications before being sent to Google (not in plain text). This improves attribution of conversion actions to ad campaigns. Processing only takes place with your consent (marketing cookies).

You can disable interest-based advertising in the Google Ad Settings or object via our cookie banner.

Your Rights

You generally have the rights to information, correction, deletion, restriction, data portability, revocation and objection regarding your data stored with us. If you believe that the processing of your data violates data protection law or your data protection claims have been violated in some other way, you can complain to us or the data protection authority.

You can reach us at the following contact details:

Nexene GmbH
Grazer Straße 34 / 4.2
8200 Gleisdorf
Austria
E-Mail: office@nexene.at
Phone: +43 (0)664 14 05 964

Data Protection Officer:
Sandro Zöbinger
E-Mail: office@nexene.at
Phone: +43 (0)664 14 05 964

Revocation of consents:
You can revoke given consents (e.g. for newsletters or cookies) at any time with effect for the future. Use the unsubscribe links in our emails or our cookie banner for this purpose.

Right to complain:
You have the right to complain to the Austrian data protection authority:
Austrian Data Protection Authority
Barichgasse 40-42, 1030 Vienna
E-Mail: dsb@dsb.gv.at
Phone: +43 1 52 152-0
Website: www.dsb.gv.at

Calendly (Appointment Scheduling)

We use Calendly for booking consultation appointments. Calendly is integrated via our domain.

Calendly LLC
271 17th St NW, 10th Floor, Atlanta, GA 30363, USA
Purpose: Appointment scheduling, calendar management and reminders
Legal basis: Art. 6 Para. 1 lit. b GDPR (performance of pre-contractual measures) or Art. 6 Para. 1 lit. a GDPR (consent)
Data collected: Name, email address, optionally phone number, chosen appointment, message
Storage duration: Until deletion by you or us, at least for the duration of the business relationship
Data transfer: EU-US Data Privacy Framework; Standard Contractual Clauses

For more information, see the Calendly Privacy Notice. You can revoke or restrict processing of appointment data at any time by contacting us by email.

Tools on our domain (Airtable, n8n, Resend)

We offer tools (e.g. forms or applications) on our domain. Your data is only stored if you tick the privacy checkbox before submitting and thereby consent to the processing. The data you enter is stored in Airtable; a workflow then runs via n8n, which sends emails via Resend, among other steps.

Airtable
Airtable, 799 Market St, San Francisco, CA 94103, USA
Purpose: Storage and management of data you submit via our tools (e.g. contact or inquiry data)
Legal basis: Art. 6 Para. 1 lit. a GDPR (consent by ticking the privacy checkbox)
Data collected: Only the data entered in the respective tool (e.g. name, email, message), and only when consent is given
Storage duration: Until you withdraw consent or we delete the data, at least within statutory retention periods
Data transfer: EU-US Data Privacy Framework; Standard Contractual Clauses

n8n
n8n GmbH, Marienstraße 17, 10117 Berlin, Germany
Purpose: Workflow automation (e.g. processing data stored in Airtable, triggering email delivery)
Legal basis: Art. 6 Para. 1 lit. a GDPR (consent)
Data transfer: Processing on our behalf; n8n may use sub-processors (see n8n Privacy).

Resend
Resend, Inc., 940 Harrison St, San Francisco, CA 94107, USA
Purpose: Sending transactional emails (e.g. confirmations, notifications) as part of the workflow
Legal basis: Art. 6 Para. 1 lit. a GDPR (consent)
Data transfer: EU-US Data Privacy Framework; Standard Contractual Clauses
For more information: Resend Privacy Policy.

If you do not tick the privacy checkbox, your input is not sent to Airtable and the workflow (n8n/Resend) is not triggered. For more information on Airtable: Airtable Privacy Policy. You may exercise your rights (access, rectification, erasure, withdrawal) as described under “Your Rights”.