Privacy policy

Soneo AI GmbH

Hadikgasse 64
1140 Vienna, Austria

Email: info@soneo.ai

The company processes personal data in accordance with the GDPR, the Austrian DSG and the ECG. Data is only processed when voluntarily provided by users, for example via the contact form.

Data collected:

• First and last name
• Company name (optional)
• Email address
• Phone number (optional)
• Role/position in the company (optional)
• Subject and message

Purpose: Processing inquiries and contacting regarding services.

Legal basis: Art. 6(1)(b) GDPR.

Retention period: Data is deleted after your inquiry has been fully processed, unless statutory retention obligations apply, maximum 12 months.

Data is not shared with third parties, except for contract fulfillment, with explicit consent, or under legal obligation.

Potential recipients: IT service providers and authorities.

A transfer of personal data to third countries outside the EU/EEA takes place where you consent to the use of HubSpot (transfer to the USA, see the section “Use of HubSpot”), and in the context of hosting and reach measurement via Vercel (see the section “Hosting and reach measurement”). These transfers are based on the EU-US Data Privacy Framework and/or the EU Standard Contractual Clauses. Beyond that, personal data is generally not transferred to third countries.

The company implements TOMs to protect against loss, manipulation and unauthorized access.

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

Requests to: info@soneo.ai

Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
www.dsb.gv.at

The contact form, webinar sign-up and demo booking on this website are provided via HubSpot (provider: HubSpot, Inc., 2 Canal Park, Cambridge, MA 02141, USA; in the EU: HubSpot Ireland Limited, 1 Sir John Rogerson's Quay, Dublin 2, Ireland). HubSpot processes the data you enter (e.g. name, email, phone number, company) as well as technical connection data on our behalf (data processing agreement under Art. 28 GDPR).

When the HubSpot embed is loaded, cookies are set and data is transferred to HubSpot, including to the USA. The legal basis for loading the embed and the associated cookies is your consent (Art. 6(1)(a) GDPR); for the subsequent handling of your enquiry, Art. 6(1)(b) and (f) GDPR. The embed is loaded only after your consent, which you can withdraw at any time via “Cookie settings” in the footer.

For the transfer to the USA, HubSpot relies on the EU-US Data Privacy Framework and EU Standard Contractual Clauses. More information: legal.hubspot.com/privacy-policy.

This website is operated on Vercel (Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA). When you access the website, Vercel processes technical connection data as our processor (in particular IP address, time of the request, page accessed, and browser and device information), to the extent required to deliver and secure the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).

In addition, we use Vercel Web Analytics for reach measurement. Aggregated usage data is recorded: pages accessed, referring page, approximate region of origin, browser and device type, and individual interactions with the product tour (which example question was selected and which source was opened, whether a follow-up button was clicked and whether the booking calendar was reached). This tells us which content is understandable and where visitors drop off.

No cookies are set and no data is stored on or read from your device in the process. There is no cross-device recognition and no profiling; the evaluation is exclusively aggregated and not related to individual persons. Consent under § 165(3) of the Austrian Telecommunications Act 2021 is therefore not required. The legal basis for the processing is Art. 6(1)(f) GDPR (legitimate interest in privacy-friendly reach measurement).

Vercel is also our hosting provider; reach measurement does not add a further recipient. For the transfer to the USA, Vercel relies on the EU-US Data Privacy Framework and the EU Standard Contractual Clauses. Further information: vercel.com/legal/privacy-policy.

We only set technically necessary cookies where they are required to operate the website. Optional services — in particular the HubSpot embeds for the form and meeting booking — are loaded exclusively after your active consent via our cookie notice. You can change or withdraw your consent at any time with future effect via “Cookie settings” in the footer.

Our reach measurement (see the section “Hosting and reach measurement”) works without cookies and stores nothing on your device. It therefore runs independently of your cookie consent and is unaffected by a withdrawal.

This policy may be updated as needed. The current version is always available on the website.