privacy policy.

1. Privacy Overview & Fundamental Principles

We take the protection of your personal data very seriously. We process your personal data confidentially and in strict compliance with the European General Data Protection Regulation (GDPR / DSGVO), the Austrian Data Protection Act (DSG), and the terms of this Privacy Policy.

This policy explains what data we collect when you visit neesoi.com, the legal basis on which we process it, why we collect it, how it is handled, and your statutory rights regarding your data.

2. Data Controller & Joint Contact Details

The controllers responsible for data processing on this website pursuant to Art. 4(7) and Art. 26 GDPR are:

3. Legal Bases for Processing (Art. 6 GDPR)

We only process personal data in accordance with valid legal provisions under the GDPR:

• Inquiries & Contract Initiation (Art. 6(1)(b) GDPR): When you contact us or submit an inquiry via our contact form or Project Planner, processing is based on taking pre-contractual measures or fulfilling contractual requests.
• Legitimate Interests (Art. 6(1)(f) GDPR): For the technically error-free, secure, and performant provision of our website and IT infrastructure.
• Consent (Art. 6(1)(a) GDPR): Where you have granted explicit consent for specific processing activities (e.g., analytics or tracking cookies). You may withdraw this consent at any time with future effect.
• Legal Obligations (Art. 6(1)(c) GDPR): To comply with statutory accounting, tax, or commercial retention laws.

4. Data Collection on Our Website

A. Contact Form & Project Inquiries

When you submit an inquiry via our contact form or Project Planner, the data you enter (such as your name, email address, topic, and message content) is stored and processed to handle and respond to your request. Data submitted via our contact forms is processed on the basis of Art. 6(1)(b) GDPR (pre-contractual measures / responding to your inquiry). We do not share this data with unauthorized third parties.

B. Server Log Files

The provider of our website pages automatically collects and stores information that your browser transmits in technical server log files. These include:

• Browser type and version
• Operating system used
• Referrer URL (previously visited page)
• Host name of the accessing computer / IP address (anonymized/pseudonymized where applicable)
• Time and date of the server request

This data is not combined with other data sources. Processing is based on Art. 6(1)(f) GDPR (legitimate interest in maintaining the operational security, integrity, and performance of our web systems).

5. Third-Party Services & Processors

A. Netlify (Hosting & Form Processing)

Our website is hosted by Netlify, Inc. (44 Montgomery Street, Suite 300, San Francisco, California 94104, USA). When you visit our website or submit form data, your information is processed through Netlify's global content delivery network and servers.

We have concluded a Data Processing Agreement (DPA) with Netlify incorporating the EU Standard Contractual Clauses (SCCs) to ensure an adequate level of data protection in compliance with Art. 28 and Art. 46 GDPR. For more information, please review Netlify's Privacy Policy.

B. Google Analytics & Google Search Console

This website uses functions of the web analysis service Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland / Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Analytics uses cookies and tracking technologies to analyze how visitors interact with our website.

IP Anonymization: We have activated IP anonymization on this website. As a result, your IP address is truncated by Google within Member States of the European Union or other contracting states to the Agreement on the European Economic Area before transmission to the USA.

Data processing via Google Analytics occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You can prevent Google Analytics tracking at any time by configuring your browser settings or downloading and installing the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout.

C. Google Web Fonts

For uniform and aesthetically pleasing representation of fonts, this page uses web fonts provided by Google Ireland Limited. When opening a page, your browser downloads the required web fonts into your browser cache to display texts and fonts correctly. For this purpose, your browser must establish a direct connection to Google servers.

The use of Google Web Fonts is based on Art. 6(1)(f) GDPR (legitimate interest in uniform and visually appealing web design). Further details can be found at Google Fonts FAQ and Google Privacy Policy.

6. Data Retention Period

We store personal data only for as long as is necessary to achieve the respective purpose:

• Inquiry & Communication Data: Data submitted via our contact form or email inquiries is stored for as long as necessary to process and conclude your request, and is deleted no later than 12 months after our last contact, unless a formal contractual or commercial relationship follows.
• Client & Accounting Records: If a contractual relationship is established, relevant transaction and commercial data is retained in accordance with statutory Austrian retention periods (pursuant to § 132 Austrian Federal Fiscal Code / BAO and § 212 Austrian Commercial Code / UGB, generally 7 years).

7. Your Rights as a Data Subject (Art. 15–22 GDPR)

Under the GDPR, you have comprehensive statutory rights at any time free of charge regarding your stored personal data:

• Right of Access (Art. 15 GDPR): You have the right to obtain confirmation and information regarding your personal data processed by us.
• Right to Rectification (Art. 16 GDPR): You have the right to request the immediate correction of inaccurate data or completion of incomplete data.
• Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): You have the right to demand the deletion of your personal data, provided statutory retention obligations do not apply.
• Right to Restriction of Processing (Art. 18 GDPR): You have the right to request restriction of the processing of your personal data.
• Right to Data Portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21 GDPR): You have the right to object at any time to the processing of your personal data carried out on the basis of Art. 6(1)(f) GDPR (legitimate interests).
• Right to Withdraw Consent (Art. 7(3) GDPR): You have the right to withdraw any granted consent at any time with effect for the future.

To exercise any of these rights, simply send an email to info@neesoi.com.

8. Right to Lodge a Complaint with the Supervisory Authority

If you believe that the processing of your personal data violates data protection regulations, you have the right to lodge a formal complaint with the competent supervisory authority pursuant to Art. 77 GDPR.

9. SSL/TLS Encryption & Security

This site uses modern SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator. You can recognize an encrypted connection by the change in the browser's address line from "http://" to "https://" and by the lock icon in your browser bar.

10. Status & Policy Updates

We reserve the right to amend this Privacy Policy to ensure compliance with updated legal requirements or to reflect changes in our technical services.
Last Updated: September 2026