Privacy policy
This English text is provided for convenience. The German version is legally authoritative. Datenschutzerklärung
Summary
- We only process data you send us or what we need to quote, book and deliver sessions.
- No ad tracking or data sales; session audio stays out of machine-learning pipelines.
- Session files are archived for 12 months unless we agree otherwise in writing.
- Questions: [email protected] or 01 405 82 16 — we usually reply within 2 business days.
1. Who is responsible
The controller under the GDPR and Austrian Data Protection Act (DSG) is:
- Nohexevo GmbH, limited liability company (GmbH)
- Registered office: Lindengasse 14, 1070 Wien, Austria
- Company register: FN 553099 y, court: Handelsgericht Wien
- VAT ID: ATU69488841
- Managing director: Markus Hartmann
- Phone: 01 405 82 16 — Email: [email protected]
Nohexevo runs a recording studio in Wien (Neubau). This policy covers visitors to nohexevo.click, messages via contact, and clients using vocal recording, mixing, mastering, band recording and podcast production.
We are not required to appoint a data protection officer. For privacy matters, contact us directly.
2. Scope
This policy describes how Nohexevo GmbH processes personal data as controller. It complements our legal notice and sits alongside the terms and conditions; contractual questions are governed by the terms.
When a business books guests, speakers or musicians and gives us their personal data, we usually act as processor. The data processing agreement then applies; the client's privacy information applies to those individuals.
3. Data we collect
Contact form: name, email, optional phone, requested service, optional preferred date and project description. Required fields are needed for a useful reply.
Booking and delivery: billing and payment details, artist or band name, scheduling, email and phone correspondence, bank transfer references. Card payments at the studio use our bank's terminal; we do not store full card numbers.
Recordings and project files: voice, instruments and session metadata can be personal data when you are identifiable. We use them only to deliver the booked service and to archive as set out in the terms on files.
Technical data: our host World4You Internet Services GmbH keeps connection logs (IP address, time, page requested, browser) to secure the site. Your consent choice is stored locally in the browser without direct identifiers (see cookie policy).
We do not collect special categories of data under Article 9 GDPR. To reschedule for health reasons, a short message is enough — no medical certificate is required.
4. Purposes, legal bases and retention
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Replying and preparing quotes | Form, correspondence | Art. 6(1)(b) GDPR (pre-contractual steps) | 3 years after last contact if no contract is signed |
| Contract, sessions and follow-up | Contact, project and schedule data | Art. 6(1)(b) GDPR | Duration of the relationship and applicable limitation periods |
| Session file archive | Recordings, project folders | Art. 6(1)(b) GDPR | 12 months after the last service, then deletion unless agreed otherwise in writing |
| Invoicing and tax | Billing and payment data | Art. 6(1)(c) GDPR | 7 years under Austrian tax retention rules |
| Defending claims | Correspondence, contract files | Art. 6(1)(f) GDPR (legitimate interest) | Until relevant limitation periods expire |
| Website security | Server logs at the host | Art. 6(1)(f) GDPR | Typically up to 12 months unless the host keeps less |
| Storing your tracker choice | Key nhxv_consent_v1 in the browser | Art. 6(1)(c) GDPR together with ePrivacy rules | 182 days (about six months) |
We do not sell or rent your data. There is no newsletter or marketing email without separate consent. Where we rely on legitimate interests, you may object under Article 21 GDPR.
5. Voice, image, minors and artificial intelligence
Your voice and likeness are protected. Marketing use of takes, stills from sessions or your name on nohexevo.click or third-party platforms happens only after we receive your explicit written approval.
Client takes remain part of the booked production only. We do not feed them into machine-learning or speech-synthesis tools, and any synthetic copy of a voice needs that individual's signed permission.
Online booking is for people aged 16 and over. Younger participants may record only with written consent from a legal guardian who contracts and stays present during the session. See FAQ and terms.
6. Recipients and processors
Only our team members (3 rooms — see about us) access data, and only for their tasks.
Recipients may include:
- World4You Internet Services GmbH (Hafnerstraße 47, 4020 Linz, Austria), website hosting in Austria;
- FormSubmit (formsubmit.co), forwarding the contact form to our mailbox;
- tax adviser, bound by professional secrecy, for billing data;
- bank, for transfers and card terminal;
- authorities, when legally required.
We use Article 28 GDPR contracts with processors. Business clients find obligations in the data processing agreement.
7. Transfers outside the EEA
Hosting runs through World4You Internet Services GmbH in Austria within the European Economic Area.
The contact form uses FormSubmit in the United States. Submitting the form routes its contents through that service. Transfers may rely on adequacy decisions or standard contractual clauses; where needed for your request, we also rely on Article 49(1)(b) GDPR for pre-contractual steps.
To avoid this transfer, email [email protected] or call 01 405 82 16 — we handle your request the same way.
8. Security
We apply appropriate measures: HTTPS delivery, restricted team accounts, strong passwords, encryption on portable media where feasible, locked premises outside sessions, and deletion of archived files after the agreed period.
If a breach is likely to affect your rights, we notify the Austrian Data Protection Authority and you when the risk is high (Articles 33 and 34 GDPR). No internet transmission is completely risk-free; once data reaches us, we apply our safeguards.
9. Your rights
You have the right to:
- access (Art. 15 GDPR);
- rectification (Art. 16);
- erasure (Art. 17);
- restriction (Art. 18);
- portability for data you provided (Art. 20);
- object to processing based on legitimate interests (Art. 21);
- withdraw consent (Art. 7(3)).
Send requests to [email protected] or our postal address. We usually respond within one month; complex cases may extend by two months with notice (Art. 12(3)). Exercising rights is free; we may ask for identity proof if reasonably in doubt.
You may lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at. Contact us first — most issues resolve quickly.
10. Cookies and similar technologies
Cookies and similar storage (e.g. localStorage) can remember settings. nohexevo.click does not use analytics, advertising or social trackers. We only store your consent choice under nhxv_consent_v1 for 182 days.
Our banner offers equal options to accept, reject and customise optional categories. Details are in the cookie policy; change settings anytime via .
11. External links
The site links to services such as OpenStreetMap (OpenStreetMap). Third parties apply their own policies; we are not responsible for them.
12. Status and changes
This policy informs you about our practices and does not limit statutory rights. We update it when services or law change. Effective 15 October 2026; last updated 15 October 2026.
Contact: Nohexevo GmbH, Lindengasse 14, 1070 Wien — [email protected]. Website prices include 20% VAT; example Vocal recording from €118 per hour — see services.