Privacy Policy

Last updated: 17 July 2026

1. Data Controller

Ali Najafzadeh
Einzelunternehmen ("Novixx")
Bockkellerstraße 6/1
1190 Vienna, Austria
Email: contact@novixx.eu
Phone: +43 681 81885458

2. GDPR / DSGVO Compliance

We process personal data in accordance with the EU General Data Protection Regulation (GDPR/DSGVO) and the Austrian Data Protection Act (DSG). We collect only the minimum data necessary for the stated purpose.

3. Data We Collect

Contact Form: Name, email address, company name, industry, and your message. This data is collected when you voluntarily submit the contact form.

2-Minute AI Check: Your answers to five multiple-choice questions about your organisation — team size, where your team loses the most time, how connected your systems are, how accessible your data is, and who would own an AI project internally — together with the name and email address you enter if you choose to send the result to us. The answers are shown to you on screen first; nothing is transmitted unless you submit the form. Retained for 12 months, as for the contact form.

Server Logs: IP address, browser type, access time, and pages visited. This is collected automatically for security and performance monitoring.

Cookies: We use only essential cookies required for website functionality. No tracking or advertising cookies are used.

4. Purpose of Data Processing

We process your data for the following purposes:

  • Responding to your inquiries (Art. 6(1)(b) GDPR)
  • Providing our services (Art. 6(1)(b) GDPR)
  • Website security and performance (Art. 6(1)(f) GDPR)
  • Legal compliance (Art. 6(1)(c) GDPR)

5. Data Retention

Contact form data is retained for 12 months after your last interaction. Server logs are retained for 30 days. You may request deletion at any time.

6. Your Rights

Under GDPR, you have the right to:

  • Access — Request a copy of your personal data
  • Rectification — Request correction of inaccurate data
  • Erasure — Request deletion of your personal data
  • Restriction — Request limitation of processing
  • Portability — Receive your data in a structured format
  • Objection — Object to processing based on legitimate interest

To exercise your rights, contact us at contact@novixx.eu.

7. Third-Party Services

Hosting: Our website is hosted in the EU. Browsing this website transfers no data outside the EEA. Two exceptions require your action first: the optional voice demo described below, and the external booking link (Calendly LLC, United States) offered after the 2-Minute AI Check — following that link opens Calendly's own site, where your IP address and any details you enter are processed under Calendly's privacy policy. No data reaches either service unless you click.

Fonts: All website fonts are self-hosted on our own server. No font data is requested from Google or any other third party, and no visitor data is transferred to an external font provider.

8. AI Voice Demo (optional, US transfer)

The AI voice demo on our demo page is not loaded until you click "Start Voice Demo". Until you do, no connection to any third party is made and no data about you leaves our EU-hosted website.

If you start the demo, an embedded application hosted on Vercel Inc. (United States) is loaded, and your browser asks for microphone permission. If you grant it and speak, the following is transmitted to that third-party service and to the voice-AI provider it uses:

  • your live microphone audio and any transcript derived from it,
  • your IP address and standard connection metadata.

This means your audio is processed on servers outside the EEA, in the United States. Starting the demo is entirely voluntary and is your explicit, informed decision to proceed with that transfer. You can use every other part of this website, and contact us normally, without ever starting it.

Because the demo is a simulated conversation, please do not speak real personal data, real patient information, or any health data into it. Speak only invented example information.

[[TODO: Rechtsgrundlage für die Drittlandübermittlung ergänzen — SCCs oder EU-US Data Privacy Framework-Zertifizierung von Vercel Inc. sowie des eingesetzten Sprach-KI-Anbieters; zusätzlich Speicherdauer und ob Audio/Transkripte zu Trainingszwecken verwendet werden. Beim Anbieter bestätigen lassen und hier konkret benennen.]]

9. Cookies

We use only essential cookies required for website functionality. No tracking or advertising cookies are used.

All website fonts are self-hosted and this website loads no third-party scripts. As long as you do not start the optional voice demo, no analytics, advertising, or third-party embed cookies are set.

If you start the voice demo, the embedded third-party application may set its own cookies or browser storage under its own domain (vercel.app). That storage is outside our control and is governed by that provider. It is not set unless you actively start the demo.

10. Supervisory Authority

You have the right to file a complaint with the Austrian Data Protection Authority:

Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna, Austria
www.dsb.gv.at

11. Changes to This Policy

We may update this privacy policy. Changes will be posted on this page with an updated date.