Skip to main content

Legal

Privacy information

by Novasign GmbH

We, Novasign GmbH, registered in the Austrian commercial register of the Commercial Court Vienna under FN 518558 k (“Novasign“), process certain categories of your personal data which we receive from you in the course of our business relationship and the use of our website. For the purpose of transparency and in accordance with Article 12ff of the General Data Protection Regulation (GDPR), we therefore want to inform you about the data processing as follows:

1. General information

The operator of the website https://www.novasign.at/ (the “Website“) and the controller of the data processing is:

Novasign GmbH
Aspernbrückengasse 2/2 floor
A-1020 Vienna, Austria
contact@novasign.at

For any request and further information regarding the processing of your personal data please contact: Novasign GmbH, contact@novasign.at.

2. Legal Basis for Data Processing

Novasign may process personal data relating to the user of the Website if one of the following applies:

  • users have given their consent for one or more specific purposes in accordance with Art. 6 (1) (a) GDPR;
  • the processing of personal data is necessary for the performance of an agreement with the users and/or for any pre-contractual obligations thereof in accordance with Art. 6 (1) (b) GDPR;
  • the processing of personal data is necessary for compliance with a legal obligation to which Novasign is subject in accordance with Art. 6 (1) (c) GDPR, if applicable; or
  • the processing of personal data is necessary for the purposes of the legitimate interests pursued by Novasign or by a third party in accordance with Art. 6 (1) (f) GDPR relating to advertising, market research and surveys, unless the users have exercised their right to object according to Art. 21 GDPR.

3. Data Use and Data Transfer

For the purpose of performing the contract concluded with users and/or for any pre-contractual obligations thereof and in order to manage authentication and user access to Novasign services and applications, Novasign may process the following personal data of the user or the contact person, if the user is a company:

  • gender (e.g., Mr., Ms., Mx.)
  • professional title (before and/or after the name)
  • first and last name
  • e-mail address
  • phone number
  • subject of the message, if applicable
  • message, if applicable
  • company or institution

For the purpose of promoting Novasign’s products and services, Novasign may process following personal data of the user or the contact person, if the user is a company:

  • gender (e.g., Mr., Ms., Mx.)
  • professional title (before and/or after the name)
  • first and last name
  • e-mail address
  • phone number
  • additional optional interests, if provided.

Within Novasign data will only be shared with those employees or consultants who need to know these data in order to be able to fulfil the contractual or legal obligations or comply with legitimate interests.

Data transfer on the internet (e.g. communicating via email) may imply certain security risks. For this reason, Novasign cannot guarantee full protection of the user’s data against third party access. However, Novasign has adopted a range of security measures to protect data against wilful or random misuse, loss, destruction or access by an unauthorised person. Novasign’s security measures are regularly evaluated and updated.

4. Detailed Information on the Processing of Personal Data, including Third Party Providers

Any transmission of personal data in the individual case takes place on the basis of the legal regulations and/or contractual agreement and – as far as necessary – for the handling of contracts among others to the following third parties:

  • legal representatives, notaries and other third parties involved in legal services;
  • courts, if applicable;
  • administrative authorities, if applicable;
  • participating contractual and business partners;
  • technical service providers;
  • mail carriers;
  • hosting providers;
  • IT companies; and
  • communication agencies.

If the above recipients of your personal data are located outside the EEA and the country in question has also not been determined by decision of the EU Commission to have an adequate level of data protection, we ensure that the transfer is made on the basis of standard contractual clauses (currently 2010/87/EC and/or 2004/915/EC).

5. Links to other webpages

You will find links to other webpages on our Website. Our privacy and data protection declaration is not applicable to these webpages. We kindly ask you to visit these webpages directly to receive the relevant data protection declaration and privacy policy. We can therefore not be held liable for these webpages.

6. Marketing Activities

After having obtained the user’s express consent, we may use the user’s personal data for marketing purposes and sending newsletter regarding our products and services. In accordance with Art. 21 GDPR the user can revoke the consent and/or object this use of data at all times by sending an email to contact@novasign.at or by the “unsubscribe” link in the newsletter (provided, however, that the newsletter could be sent from another email address by Novasign).

7. Duration of storage

Novasign will store personal data for the period necessary for the purpose of data processing and such additional time as is legally foreseen to comply with documentation obligations. Such obligations may arise from the Austrian Commercial Code, the Austrian Federal Fiscal Code and the Austrian General Civil Code, which, for example, can be up to 30 years in certain cases.

8. Your Rights

Subject to applicable law, the user has the right to

  • obtain information about your personal data processed by Novasign, the purposes of the processing, the categories of personal data processed, the recipients of the personal data, the storage period, the rights you are entitled to, the origin of the personal data and the existence of automated decision-making;
  • request the correction, deletion or blocking of incorrect personal data or personal data not processed in line with the applicable legal requirements;
  • revoke your consent to have your personal data processed at any time with future effect by letter or email, provided however that any personal data prior to your revocation may still be processed;
  • obtain the delivery of personal data processed in a standard, machine-readable format; and
  • complain to the competent authority as follows:

Österreichische Datenschutzbehörde
Barichgasse 40-42,
A-1030 Vienna,
+43 1 521 520,
email: dsb@dsb.gv.at
https://www.dsb.gv.at/

9. Amendments of this Privacy Policy

This privacy policy can be amended at any time and will be updated and made available at https://www.novasign.at/.

Cookies and services on this website

This section supplements the privacy information above. It describes what the website novasign.at itself stores on your device and which services it uses when you visit it. Where something below happens only with your consent, the legal basis is your consent (section 2), which you can withdraw at any time with effect for the future.

Cookies

novasign.at sets only the cookies that are necessary for it to work unless you consent to more in the cookie banner. You can change or withdraw your choice at any time through the Manage cookies control in the footer of this website.

ns-website-consent
Stores the cookie consent choice you made on this website, so you are not asked again on every page. First-party, set on novasign.at.
APP_LOCALE
Stores the language you chose, so a request without a language prefix goes to that language. First-party, set on novasign.at.
ns-announcement
Remembers that you closed the announcement strip, so it stays closed. First-party, set on novasign.at.
_pk_id.*
Stores a randomly generated visitor ID, so repeat visits are counted as one visitor rather than several. Set only after you allow measurement. First-party, set on novasign.at, expires after 13 months.
_pk_ses.*
Groups the pages you view into a single visit. Set only after you allow measurement. First-party, set on novasign.at, expires 30 minutes after your last page view.
_pk_ref
Stores the website or search engine you arrived from, so the visit can be attributed to it. Set only after you allow measurement. First-party, set on novasign.at, expires after 6 months.
mtm_consent_removed
Set only if you withdraw your consent to measurement: it records the withdrawal so measurement stays switched off, and the three cookies above are deleted at the same moment. First-party, set on novasign.at, expires after 6 months.

These are all the cookies this website sets. All of them are first-party cookies, set by novasign.at and read by no one else. The measurement cookies only once you allow measurement. Two settings are kept in your browser’s local storage rather than in a cookie, the light or dark theme you selected and the language the cookie banner was last shown in; neither is sent to Novasign.

Embedded video

A page that embeds a video loads the player from YouTube or Vimeo only after you have allowed that provider in the cookie banner. Until then nothing is requested from the provider, and the preview image comes from Novasign’s own media storage. Once you allow it, the provider receives the usual request data, including your IP address, and may set its own cookies; the provider’s own privacy policy applies to that.

Measurement

Novasign measures how this website is used (pages visited, how you arrived, which links you follow) with Matomo, running on Novasign’s own server. The data reaches no third party and is not used for advertising. Measurement starts only after you allow it in the cookie banner, and withdrawing your consent stops it and deletes the cookies it set.

Contact form

An inquiry sent through the contact form is stored in the content management system of this website and handled by Novasign as described in section 3. To keep out automated submissions, the contact and booking forms contain a hidden field that a person never fills in, the number of submissions from one IP address in a period is limited, and ticking “I’m not a robot” has your browser solve a short computation that this website’s server checks before it accepts the submission. That check sets no cookie and involves no third party. The hidden field is discarded before the submission is stored, and the IP address is not stored with it.

Scheduling a session with Novasign

The booking forms on this website are Novasign’s own, and your browser never contacts Microsoft while you use them. When you request a session, the website records your request, holds the time for you for a short while and e-mails you a link to confirm it; nothing is passed on before you confirm. When you confirm, Novasign’s server passes the session, the time, your name, your e-mail address, your answers and any phone number, address or notes the form asked for to Microsoft Bookings in Novasign’s own Microsoft 365 tenant, where Microsoft processes them on Novasign’s behalf. Microsoft Bookings then e-mails you the invitation, with the meeting link and a link to reschedule or cancel. You do not need a Microsoft account to book.

If you invite colleagues, this website sends them the invitation and any update itself; their addresses are not passed to Microsoft and are used for nothing else. Once a request has closed and the session is over, the personal details in it are erased from the website automatically. What remains is the session, the time, its outcome and a pseudonymous key derived from your e-mail address, which serves only to limit the number of requests per address. Requests above a daily limit are declined on the spot; a declined request is recorded only with the reason and erased in the same way.

Error monitoring

When a page or a form fails on the server, a technical report of the failure is written to Novasign’s own error-monitoring system; no monitoring provider receives it. The report does not include your IP address, your cookies or what you typed into a form. Only the country the request came from is attached, determined by Novasign from a local database. Nothing is collected while you simply browse.