Privacy Policy

Last updated: 15 January 2026

Data Controller Information

This privacy policy explains how nebulonex AG ("we", "us", or "our") collects, uses, and protects your personal information when you visit our website or use our services. nebulonex AG, with registration number FN965874a, located at Favoritenstraße 85, 1065 Vienna, Austria, serves as the data controller for the processing of your personal data.

Data Collection

We collect various types of information to provide and improve our services. The data we collect includes information you provide directly to us, such as when you fill out contact forms, subscribe to our newsletter, or communicate with us. This may include your name, email address, phone number, company information, and any messages or inquiries you send us. We also automatically collect certain technical information when you visit our website, including your IP address, browser type, device information, pages visited, and interaction data.

How We Use Your Information

We use the personal data we collect for several legitimate business purposes. Primarily, we use of your data to respond to your inquiries, provide customer support, and deliver the services you request. We also use your information to improve our website functionality, analyse user behaviour to enhance user experience, and communicate with you about our services, updates, and relevant business information. Additionally, we may use your data to comply with legal obligations and protect our legitimate business interests.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds: your consent when you voluntarily provide information or agree to receive communications; contractual necessity when processing is required to fulfil our services; legitimate interests for improving our services and business operations; and legal compliance when required by applicable laws and regulations.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Third Parties

We do not sell, trade, or rent your personal data to third parties. We may share your information with trusted service providers who assist us in operating our website and conducting our business, provided they agree to maintain confidentiality. We may also disclose your information when required by law, to protect our rights and property, or in connection with a business transaction such as a merger or acquisition.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations. Contact inquiries and communication records are typically retained for three years after the last interaction. Website analytics data is retained for up to 26 months. Marketing communications data is retained until you unsubscribe or request deletion. We regularly review and delete data that is no longer necessary for our business purposes.

Your Rights

Under GDPR and applicable privacy laws, you have several rights regarding your personal data. You have the right to access your personal data and receive information about how we process it. You can request correction of inaccurate or incomplete data, and in certain circumstances, you can request deletion of your personal data. You also have the right to restrict processing, object to processing based on legitimate interests, and receive your data in a portable format. If we process your data based on consent, you have the right to withdraw that consent at any time.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

International Data Transfers

As we operate primarily within the European Union, your personal data is generally processed within the EU. If we need to transfer data outside the EU, we ensure appropriate safeguards are in place, such as adequacy decisions by the European Commission or standard contractual clauses approved by the European Commission.

Contact Information

If you have any questions, concerns, or requests regarding this privacy policy or our data processing practices, please contact us at privacy@nebulonex.world or +43 13225359. You can also reach us by post at nebulonex AG, Favoritenstraße 85, 1065 Vienna, Austria. We are committed to addressing your privacy concerns promptly and transparently.

Complaints and Supervisory Authority

If you believe we have not handled your personal data in accordance with applicable privacy laws, you have the right to lodge a complaint with the relevant supervisory authority. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde). You can find more information about filing a complaint on their official website.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will notify you by posting the updated policy on our website and updating the "last updated" date. We encourage you to review this policy periodically to stay informed about how we protect your privacy.

Children's Privacy

Our services are not directed to individuals under the age of 16, and we do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects or similarly significant effects on individuals. Any automated processing we conduct is limited to technical functions such as website analytics and does not involve decisions that significantly impact your rights or interests.