Privacy Policy

1. Responsibility

The protection of your privacy is very important to us, Nekonata XR Technologies GmbH (“NXRT”). Therefore, we treat your personal data confidentially and in accordance with the statutory provisions, in particular the EU General Data Protection Regulation (“GDPR” / “DSGVO”) and the Austrian Telecommunications Act (“TKG 2021”). With this privacy policy, we would like to inform you in accordance with Art. 13f GDPR about the processing of your data when you visit and use our website (“nxrt.io”) and our customer portal (“portal.nxrt.at”). “Personal data” is any information relating to an identified or identifiable natural person, such as name, address, and email address.

The entity responsible for processing your personal data on our website and customer portal is:
Nekonata XR Technologies GmbH (hereinafter referred to as “NXRT,” “we,” or “us”)
Geiselbergstraße 19 / 3 / 6, 1110 Vienna, Austria
Telephone: +43 660 50 12 312
Email: office@nxrt.io

2.1 Contacting NXRT
If you have any questions about our products, services, or other concerns, you can simply contact us using the form on our website. The data you provide (name, email address, telephone number, company name, company type, and content of your message) will be processed and stored by us for the purpose of handling your inquiry. If you contact us by phone or email, we will process your phone number or email address and the content of your message. Your data will be processed for the purpose of implementing (pre-)contractual measures (Art 6 Abs 1 lit b DSGVO).

2.2 Newsletter
You can subscribe to our newsletter via our website and when registering for the customer portal. It is published approximately once a month and contains news about NXRT and our services. We require your email address for this purpose. If you provide additional personal information, we will process it to personalize the newsletter and tailor offers to you. Once you have registered for the newsletter, we will send you a confirmation email with a link to confirm your registration. By agreeing to receive the newsletter, you also consent to the “performance measurement” of your opening and clicking behavior. Specifically, the following information is tracked and generated by the system: time of delivery, time of opening, duration of opening, email program used (mail client), which link was clicked, and the time of the click. The sending of the newsletter, the use of tracking technologies, and the subsequent processing of your data is based on your voluntary consent (Art 6 Abs 1 lit a DSGVO; § 165 Abs 3 TKG; § 174 Abs 3 TKG). You can revoke your consent at any time with future effect and without giving reasons free of charge, for example by clicking on the unsubscribe link at the end of each newsletter or by sending us an email.

2.3 Telephone contact
You have the option of agreeing to be contacted by NXRT by telephone for product surveys and information about the company via our website and when registering for the customer portal. For this purpose, we require your name and telephone number. If you provide additional personal information, we will process it in order to provide you with more targeted information. Contacting you by telephone for advertising purposes is based on your voluntary consent (Art 6 Abs 1 lit a DSGVO; § 174 Abs 3 TKG). You can revoke your consent at any time with future effect and without giving reasons free of charge, for example by informing our employees of the revocation during the telephone call or by sending us an email.

2.4 Customer portal
For easy access to our services, customers and partners can register for our customer portal at https://portal.nxrt.at/user/register. For registration, we process your name, email address, and the manufacturer and bundle number of the NXRT product. Optionally, you can also voluntarily select a title and enter your company name. Your data is processed in order to fulfill our contractual service and support obligations (Art 6 Abs 1 lit b DSGVO) and on the basis of our legitimate interest in providing our partners and customers with a user-friendly central point of contact for their business relationships with NXRT and in preventing unauthorized use of our services (Art 6 Abs 1 lit f DSGVO). If you select a title and/or enter your company name, we process this data on the basis of our and your legitimate interest in a personalized approach (Art 6 Abs 1 lit f DSGVO).

2.4 HubSpot (CRM)
We have connected our website to HubSpot, a customer relationship management tool. The application collects personal data that you provide to us when using the newsletter, contacting us, or maintaining a business relationship. The data received is used by HubSpot to create you as a contact in the CRM tool and to manage your communication with us. New information enables us to offer you more targeted services. If you have subscribed to our newsletter, we can also tailor our advertising measures to your needs. We process your data using HubSpot on the basis of our legitimate interest (Art 6 Abs 1 lit f DSGVO) in making our corporate communications efficiently, placing targeted marketing measures, and offering you the most personalized service possible. HubSpot is an application from HubSpot Inc., based at 25 First Street, Cambridge, MA 02141, USA, which acts as a processor for us in accordance with Art 28 DSGVO. The processing is subject to contract data processing – available at https://legal.hubspot.com/de/dpa. HubSpot Inc. is part of the Data Privacy Framework (“DPF”) between the US and the EU. The transfer of your data to the US is therefore lawful on the basis of an adequacy decision by the Commission pursuant to Art 45 DSGVO.

3. Web server logs

When you use our website, the connection information is stored in the server log files. This information includes:

  • IP address of the calling system
  • Browser information such as operating system used and screen resolution
  • Visited website
  • Source website
  • Time of access

We use the log data only for statistical evaluations for the purpose of operating, securing, and optimizing our website, which also constitutes our legitimate interests (Art 6 Abs 1 lit f DSGVO). However, we reserve the right to subsequently review the log data if there are concrete indications that give rise to a justified suspicion of illegal use.

The log data is recorded for the first 3 days, including the IP address, for development purposes and security-related analyses, such as in the event of hacker attacks. After 3 days to 30 days, the log files are anonymized and then deleted, unless their storage is required by law or necessary for the defense of legal claims.

4. Cookies

We use cookies and other trackers (collectively referred to as “cookies”) on our website to enable, facilitate, and analyze your use of the site. Some cookies are activated without your consent because they are technically necessary for us to provide our services (“strictly necessary cookies” in accordance with § 165 Abs 3 TKG 2021). We currently use only strictly necessary cookies:

  • Borlabs Cookie (cookie management)
  • Polylang (multilingualism of the website)
  • Wordfence (security service)
  • Google Tag Manager (tag management system)

We also use cookies that require your express voluntary consent (§ 165 Abs 3 TKG 2021 iVm Art 6 Abs 1 lit a DSGVO) before they can be used on your device:

  • Google reCAPTCHA (security service)
  • hCaptcha (security service)
  • Turnstile (security service)
  • OpenStreetMap (map tool)
  • Vimeo (video tool)
  • HubSpot (API to our CRM system)
  • Google Analytics (analysis tool)

You can access and edit your cookie settings at any time using the following button:

5. Marketing & Analytics

We use various marketing tools to track interactions with our platforms and deliver personalized advertising. In addition to the advertising and analysis functions of the social media platforms used (see section “6. Social Media”) and our CRM system (see section “2.4 HubSpot”), Google Analytics is also utilized. In this context, personal and pseudonymized data may be processed based on your interaction with our platforms.

6. Social Media

You can interact with us on our social media pages on LinkedIn, Vimeo, Facebook, and Instagram, as well as on our Google company profile, by commenting on our posts, reacting to them, sharing a post, or sending it to other users. NXRT will process your interaction, your username, and, if applicable, the personal data of invited third parties.

This data may also be processed by the respective platform in this context. In this case, NXRT and the platform are joint controllers in accordance with Art 26 DSGVO. You can find more detailed information about the processing of your data by the platforms here.:

7. Pictures & videos

NXRT regularly attends trade shows, customer events, and similar gatherings to showcase its current product portfolio and offer interested audiences the opportunity to try out our XR solutions.

NXRT’s public image is associated with extensive financial investments. NXRT therefore has a particularly strong interest in filming or photographing these marketing activities and sharing this content via our website and social media channels. In doing so, we always take into account any applicable restrictions on filming at the location.

When taking photographs, we cannot rule out the possibility that persons present may also be recognizable if they are in the immediate vicinity of our information stand or our products. If the photograph of the person concerned is only of short duration or blurred, the processing of the image data is based on our legitimate interest in recording our advertising activities and making them available online to our visitors and social media contacts (Art 6 Abs 1 lit f DSGVO).

If you recognize yourself in one of our videos and disagree with the content, you can contact us at any time and we will endeavor to find a mutual solution. This option is available regardless of your right to object to data processing pursuant to Art 21 DSGVO.

8. Transfer of data

The relevant data in each individual case will be transferred to the following recipients for the mentioned purposes:

  • to external third parties to the necessary scope on the basis of our legitimate interests (e.g., personnel consultants and service providers, auditors, insurers, legal representatives in specific cases, employment services, other third parties involved in the fulfillment of the contract with the data subject or the provision of services by the controller to the data subject and otherwise involved in the employment relationship, e.g., insurance companies, tax advisors, IT infrastructure operators, etc.);
  • to courts, authorities, and other public bodies to the extent required by law (e.g., Chamber of Labor, data protection authority, etc.).

In addition, we work with external service providers (processors) and transfer your personal data to them to the extent necessary for the performance of the service. Our processors include, in particular, IT service providers and service providers in the context of contract management:

  • Software and service providers (provision of IT applications) for email and administrative tasks;
  • General IT management (including support, software and maintenance, data centers and cloud providers).

If your personal data is transferred to a third country for which no adequacy decision within the meaning of Art. 45 GDPR applies, the protection of your data will be ensured by appropriate safeguards within the meaning of Art. 46 GDPR. If such appropriate safeguards are not in place, we will inform you of this and any transfer will only take place with your express consent within the meaning of Art 49 Abs 1 lit a DSGVO.

9. Storage period

We process your data for as long as it is necessary for the respective purposes. Specifically, we store data related to your registration for the customer portal for the duration of our business relationship.

If you have subscribed to our newsletter, we will store your data until you revoke your consent or for 6 months after the last contact. We will store your declaration of consent and revocation for a period of 6 months from receipt of your revocation.

Data relating to contact requests will be deleted 6 months after the contact request has been completed. A contact request is considered complete when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

Your entry in our CRM system (HubSpot), along with all associated data, will be deleted after 6 months if no business relationship develops between you and NXRT and you show no interest in further contact with us.

The data from your interaction with our social media accounts and contact media will be stored for as long as our content is online, unless you delete it beforehand or request us to delete it.

In addition, we also store your personal data beyond the aforementioned periods if necessary, as long as legal claims arising from the relationship between you and us can be asserted, in accordance with the limitation periods under § 1478ff ABGB or until the final clarification of a specific incident or legal dispute. This longer storage period is necessary to protect our legitimate interests in asserting, clarifying, and defending legal claims. Furthermore, we are obliged to store business-related books and records for seven years in accordance with § 132 BAO.

10. Your rights

You have the right to access, rectify, erase, restrict, and transfer your data. If the processing is based on your consent, you can revoke this consent at any time with future effect, e.g., by sending an email to office@nxrt.io.

In addition, you may object to data processing based on our legitimate interests for reasons worthy of consideration. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must outweigh your interests, rights, and freedoms, or the processing must serve to assert, exercise, or defend legal claims.

If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you have the option of lodging a complaint with the data protection authority. In Austria, this is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna. Before submitting a complaint to the data protection authority or exercising your rights and other questions, please contact us at office@nxrt.io.