Privacy

This privacy notice explains how Nizina GmbH processes personal data when you visit this website, use the contact form, or contact us by email.

1. Controller

2. Hosting and technical access data

This website is hosted using Firebase Hosting, a Google service. When the website is accessed, technical request data is processed to deliver, secure and troubleshoot the site. This may include the IP address, time of access, requested resource, referrer, browser and device information, and response status.

Firebase states that Hosting uses IP addresses of incoming requests for service operation, abuse detection and usage analysis and may retain Hosting IP data for a limited period. Firebase Hosting uses Google infrastructure, so processing may take place in countries where Google or its approved subprocessors maintain facilities.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the reliable, secure and efficient operation of the website.

3. Contact form and email communication

When you use the contact form, we process the information you enter: your name, email address, optional organisation and message. We also process form metadata needed to deliver the request and protect the form against abuse, such as the submission time, form version and page address.

The form is transmitted to a Google Apps Script web app operated under Nizina's corporate Google account. The script validates the request and sends it to info@nizina.at using Google Mail services. The form does not create a separate customer database or write message contents to a spreadsheet. To limit duplicate or automated submissions, short-lived hashed identifiers derived from the email address and message may be held in the Apps Script cache for no longer than ten minutes.

Messages and related correspondence are processed in Google Workspace. This normally includes the sender and recipient addresses, subject, message content, attachments if later provided by email, and operational metadata required to deliver and secure the communication.

The legal basis is Article 6(1)(b) GDPR where your request concerns steps before entering into a contract or an existing contractual relationship. For other business, research, investment or partnership enquiries, the legal basis is Article 6(1)(f) GDPR based on our legitimate interest in receiving, responding to and documenting business communications and protecting the form from misuse. The checkbox below the form confirms that you have read this notice; it is not used as the legal basis for processing.

You may always contact us directly at info@nizina.at instead of using the form.

4. Analytics, cookies and embedded content

This website does not use Google Analytics, advertising pixels, behavioural profiling, embedded social-media widgets, externally hosted web fonts, or non-essential marketing cookies.

No CAPTCHA or third-party tracking service is loaded with the contact form. Firebase Hosting and Google Apps Script necessarily process technical requests as described above.

5. External links

This website links to LinkedIn. No content from LinkedIn is loaded before you choose to follow the link. Once you leave this website, the privacy terms of the respective provider apply.

6. Service providers, recipients and international transfers

Google services are used for website hosting, the contact form and corporate email. Google group companies and approved subprocessors may process personal data on our behalf under the applicable Google Workspace, Firebase and Google Cloud terms, including the Google Cloud Data Processing Addendum.

Where personal data is processed outside the European Economic Area, the transfer is protected by an applicable adequacy decision or other safeguards under Chapter V GDPR, such as standard contractual clauses, as provided in the applicable service terms.

We may also disclose information where required by law or to professional advisers where necessary and subject to appropriate confidentiality obligations.

7. Retention

Technical access data is retained only for as long as needed for website delivery, security and troubleshooting, subject to the hosting provider's retention rules.

Temporary anti-abuse cache entries used by the contact form expire within ten minutes. Contact messages and email correspondence are retained for as long as necessary to handle and document the request and, where applicable, for statutory commercial, tax or legal retention periods. Messages that do not lead to an ongoing relationship are deleted when they are no longer needed, subject to legal obligations and the establishment, exercise or defence of legal claims.

8. Your rights

Subject to the applicable legal requirements, you may request access, rectification, erasure, restriction of processing, data portability, or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent for the future.

To exercise your rights, contact info@nizina.at.

9. Right to complain

You may lodge a complaint with the Austrian Data Protection Authority:

10. Changes

We may update this notice if the website, service providers or legal requirements change. The current version is identified by the date shown above.