privacy

We take your privacy very seriously. We are committed to protecting the information you provide to us in connection with the use of our website and/or mobile application. We are also committed to protecting and using your information in accordance with applicable law.

Version 1.0 (June 13, 2024)

Here's how we collect, use, and share your data when you use our digital services. It also includes our privacy policy, which you should read before using our services.

If you've read and understood this policy and don't agree with our approach, you'll need to stop using our digital assets and services.

If you want to keep using the Services, you agree to the Privacy Policy and any changes to it.

In this Privacy Policy, you'll learn:

what data we collect
how we collect data
why we collect this data
who we share the data with
where the data is stored
how long the data is stored
how we protect the data
who our hosting provider is
how we deal with minors
what rights you have
anything about updates or changes to the privacy policy
and who is responsible for data protection

In this privacy policy you will learn:

1. What data do we collect?

Here's what we collect:

Information you provide during the registration process or that we collect through our services ("non-personal data"). This doesn't allow us to draw any conclusions about who collected it. The non-personal data we collect mainly consists of technical and aggregated usage information.

This is any information that can be used to identify you, or that could be used with a little effort. This is your personal data. This includes things like names, email addresses, addresses, phone numbers, IP addresses, and more, which we collect through our services. If we combine personal data with non-personal data, we treat it as personal data as long as it's available in combination.

2. How do we collect data?

Here's a quick overview of the main ways we collect data:

We collect data when you use our digital offerings. So when you visit our apps or websites and use our services, we may collect, record, and store data about your usage, sessions, and related information.

We collect data that you give us yourself, for example when you contact us via a communication channel (e.g., an email with a comment or feedback).

We may also collect data from third party sources as described here. We collect data from you when you log in to our services via a third-party provider like Facebook or Google.

3. Why do we collect this data?

We use your data for a bunch of different reasons:

To provide and operate our services.
To develop, customize, and improve our services.
To respond to feedback, queries, and requests and to provide assistance.
To analyze request and usage patterns.
And for other internal, statistical, and research purposes.

We also use your data to improve our security measures and prevent fraud.
We also use it to investigate violations and enforce our terms and policies. This also enables us to ensure that we comply with all applicable laws, regulations, and official orders.

4. Who do we share this data with?

We may share your data with our service providers so that we can operate our services (e.g., storing data via third-party hosting services, providing technical support, etc.).

We may also share your info if we have to, like if we need to look into, catch, stop, or take action about illegal activities or wrongdoing.

(i) to look into, catch, stop, or take action about illegal activities or other misconduct;
(ii) to establish or exercise our rights of defense. (iii) To protect our rights, property, or personal safety, or the safety of our users or the public; (iv) In the event of a change of control of us or any of our affiliates (by way of a merger, acquisition, or purchase of substantially all assets, etc.); (v) To investigate, detect, prevent, or take action regarding illegal activities or other wrongdoing; (vi) To establish or exercise our rights of defense; (vii) ) to protect our rights, property or personal safety and the safety of our users or the public; (iv) in the event of a change of control of us or any of our affiliates (by way of merger, acquisition or purchase of (substantially) all assets, etc.); (v) to protect our rights, property or personal safety and the safety of our users or the public (vi) If we or any of our affiliates change hands (by way of merger, acquisition or purchase of etc.).
(v) To collect, hold and/or manage your information using third-party service providers (e.g. cloud service providers) as appropriate for business purposes.
(vi) To work with third parties to improve your user experience.

Just a heads-up: We can't share or use any personal data with third parties without your permission.

Cookies and similar technologies

When you visit or access our site, other companies can use web beacons, cookies, pixel tags, scripts, and other tracking technologies to analyze your user behavior on our site. These technologies may enable third parties to automatically collect data from you. We use these to make our digital assets better, make them work better, and give you a tailored experience. We also use them for security and fraud prevention.
If you want to know more, you can read our cookie policy.

Just to be clear, we're not connected to any advertising services.

We won't share your email address or other personal data with advertising companies or advertising networks without your permission.

5. Where do we store the data?

Non-personal data
Just a heads-up: Our companies and our trusted partners and service providers are located all over the globe. For the purposes set out in this Privacy Policy, we store and process any non-personal data we collect in different jurisdictions.

Personal data

Your data may be stored in the US, Ireland, South Korea, Taiwan, Israel, and other countries as needed to provide our services or as required by law (more on this below).

6. How long will the data be stored?

Just a heads-up: We'll keep your data as long as we need to provide our services, comply with our legal and contractual obligations to you, resolve disputes, and enforce our agreements. We may correct, amend, or delete inaccurate or incomplete data at any time, at our sole discretion.

7. How do we protect the data?

The hosting service for our digital assets provides us with the online platform through which we can offer you our services. Your data may be stored via our hosting provider's data storage, databases, and general applications. They store your data on secure servers behind a firewall and provide you with secure HTTPS access to most areas of their services.

Unfortunately, we cannot guarantee the protection and security of your data that you may upload, publish, or otherwise share with us or others.
We kindly ask you to set secure passwords and, where possible, not to provide us or others with confidential information that you feel could cause you significant or lasting harm if disclosed. As email and instant messaging are not considered secure forms of communication, we also ask you not to disclose confidential information via either of these communication channels.

8. Who is our hosting provider?

We host our website with WIX.
WIX STUDIO is a tool for creating and hosting websites.
The provider is Wix.com Ltd, 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (hereinafter "WIX").

When you visit our website, WIX analyzes your user behavior, where visitors come from, where they come from and how many visitors we have. WIX stores cookies on your browser that are required to display the website and to ensure security (necessary cookies).

The data collected by WIX may be stored on various servers worldwide. The WIX servers are located in the USA, among other places. You can find more information on this in WIX's privacy policy.

https://de.wix.com/about/privacy

According to WIX, data transfer to the USA and other third countries is based on the standard contractual clauses of the EU Commission or comparable guarantees in accordance with Art. 46 GDPR. Details can be found here:
https://de.wix.com/about/privacy-dpa-users

We use Wix on the basis of Art. 6, para. 1 lit. f GDPR to display our website as reliably as possible.
If you give us your consent, we will only process your data if you agree. This is set out in Article 6(1)(a) GDPR and Section 25(1) TDDG. If you give us your consent, we will also store cookies or access information on your device (e.g. device fingerprinting). This is also set out in Section 25 (1) TDDG. You can withdraw your consent at any time.
The company has been certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the EU and the USA which is intended to ensure that European data protection standards are complied with when processing data in the USA. Every DPF-certified company undertakes to comply with these data protection standards. Further information is available from the provider at the following link:
https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnbGAAS&status=Active

9. How do we deal with minors?

The Services are not for users under 18. We don't knowingly collect data from children. If you're under 18, you shouldn't download or use the Services or provide us with any information.
We can ask for proof of age at any time to make sure that minors aren't using our services. If we find out that a minor is using our Services, we may block their access and delete all the data we have about them. If you think a minor has given us data, please get in touch using the details below.

10. What rights do you have?

We'll only use your personal data for the purposes set out in the Privacy Policy and only where we're satisfied that using your personal data is necessary to perform or enter into a contract (e.g., to provide you with the Services themselves or customer or technical support). We also need to use your data to comply with our legal obligations. Or we need to use your data to support our business interests.

However, we'll only do this if we think about your data protection rights and it's a fair use.

As an EU citizen, you have the right to:

You can ask us to confirm whether we're processing any personal data about you.
You can also ask to see what data we have on you and get some extra info.
You can ask us to send you your data in a format that's easy for computers to read.
You can also ask us to change, delete, or block your data.
You can also say no to us processing your data or tell a regulator what's going on.

Just a heads-up: These rights aren't absolute, and they might be limited by our own legitimate interests and regulatory requirements. If you have any general questions about the personal data we collect and how we use it, please get in touch with us using the details below.

As part of providing the Services, we may transfer data across borders to affiliated companies or other third parties. We may also transfer data from your country/jurisdiction to other countries/jurisdictions worldwide. By using the Services, you consent to the transfer of your data outside the European Economic Area (EEA).

If you're in the EEA, we'll only transfer your data to places outside the EEA if we're sure there's an adequate or comparable level of protection for it there. We try our best to make sure our partners sign contracts that say they'll follow data protection rules. That way, we can be sure your data is safe and won't be misused, altered, deleted, lost, or stolen.
Our partners also have to follow the law.

If you're a California resident and use our Services, you might be able to get access to and delete your information under the California Consumer Privacy Act ("CCPA").

If you want to access or delete your information, just let us know. You can find out how to get in touch with us below.

We don't sell users' personal information for the purposes of the CCPA.

11. Updates or changes to the privacy policy

We may change this Privacy Policy from time to time, but we'll only do so if we think it's necessary. The version on our website is always up to date (you can see the 'Version' at the top of the page). We'll let you know about any changes when they're important. If you keep using the Services after we've told you about the changes on our website, it means you agree to the changes to the Privacy Policy. You agree to be bound by these changes.

12. This person is in charge of data protection.

If you have any questions about our services or the data we have about you, please get in touch.

on design
thomas nowack
westbahnstrasse 41/20
1070 wien
austria

info@o-n.design

at +43 676 49 700 40

de +49 151 40733167