Privacy policy

Soneo AI GmbH

Hadikgasse 64
1140 Vienna, Austria

Email: info@soneo.ai

The company processes personal data in accordance with the GDPR, the Austrian DSG and the ECG. Data is only processed when voluntarily provided by users, for example via the contact form.

Data collected:

• First and last name
• Company name (optional)
• Email address
• Phone number (optional)
• Role/position in the company (optional)
• Subject and message

Purpose: Processing inquiries and contacting regarding services.

Legal basis: Art. 6(1)(b) GDPR.

Retention period: Data is deleted after your inquiry has been fully processed, unless statutory retention obligations apply, maximum 12 months.

Data is not shared with third parties, except for contract fulfillment, with explicit consent, or under legal obligation.

Potential recipients: IT service providers and authorities.

A transfer of personal data to third countries outside the EU/EEA takes place where you consent to the use of HubSpot (transfer to the USA, see the section “Use of HubSpot”), where you consent to usage analysis with PostHog (provider based in the USA, storage in the EU, see the section “Usage analysis with PostHog”), where you consent to B2B reach analysis (Apollo, transfer to the USA, see the section “B2B reach analysis with Snitcher and Apollo”), and in the context of hosting and reach measurement via Vercel (see the section “Hosting and reach measurement”). These transfers are based on the EU-US Data Privacy Framework and/or the EU Standard Contractual Clauses. Beyond that, personal data is generally not transferred to third countries.

The company implements TOMs to protect against loss, manipulation and unauthorized access.

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

Requests to: info@soneo.ai

Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
www.dsb.gv.at

The contact form, webinar sign-up and demo booking on this website are provided via HubSpot (provider: HubSpot, Inc., 2 Canal Park, Cambridge, MA 02141, USA; in the EU: HubSpot Ireland Limited, 1 Sir John Rogerson's Quay, Dublin 2, Ireland). HubSpot processes the data you enter (e.g. name, email, phone number, company) as well as technical connection data on our behalf (data processing agreement under Art. 28 GDPR).

When the HubSpot embed is loaded, cookies are set and data is transferred to HubSpot, including to the USA. The legal basis for loading the embed and the associated cookies is your consent (Art. 6(1)(a) GDPR); for the subsequent handling of your enquiry, Art. 6(1)(b) and (f) GDPR. The embed is loaded only after your consent, which you can withdraw at any time via “Cookie settings” in the footer.

For the transfer to the USA, HubSpot relies on the EU-US Data Privacy Framework and EU Standard Contractual Clauses. More information: legal.hubspot.com/privacy-policy.

This website is operated on Vercel (Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA). When you access the website, Vercel processes technical connection data as our processor (in particular IP address, time of the request, page accessed, and browser and device information), to the extent required to deliver and secure the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).

In addition, we use Vercel Web Analytics for reach measurement. Aggregated usage data is recorded: pages accessed, referring page, approximate region of origin, browser and device type, and individual interactions with the product tour (which example question was selected and which source was opened, whether a follow-up button was clicked and whether the booking calendar was reached). This tells us which content is understandable and where visitors drop off.

No cookies are set and no data is stored on or read from your device in the process. There is no cross-device recognition and no profiling; the evaluation is exclusively aggregated and not related to individual persons. Consent under § 165(3) of the Austrian Telecommunications Act 2021 is therefore not required. The legal basis for the processing is Art. 6(1)(f) GDPR (legitimate interest in privacy-friendly reach measurement).

Vercel is also our hosting provider; reach measurement does not add a further recipient. For the transfer to the USA, Vercel relies on the EU-US Data Privacy Framework and the EU Standard Contractual Clauses. Further information: vercel.com/legal/privacy-policy.

If you consent via the cookie notice, we use PostHog for usage analysis (provider: PostHog, Inc., USA). The data is stored and processed in PostHog's EU cloud in Frankfurt am Main. PostHog acts as our processor (Art. 28 GDPR).

We record pages accessed, the referring page, clicks and scrolling (as a heatmap), approximate region of origin, and browser and device type. For this, PostHog stores a random identifier in a cookie and in your browser's local storage so that several page views of the same visit can be grouped together. PostHog does not store your IP address. No session recordings take place, and input in form fields is not captured.

Purpose: We see which content is read, where visitors click and where they drop off, and improve the website accordingly.

Legal basis: Your consent (Art. 6(1)(a) GDPR, § 165(3) of the Austrian Telecommunications Act 2021). PostHog is not loaded without consent. You can withdraw your consent at any time via “Cookie settings” in the footer; the PostHog cookies are then deleted and recording stops.

Retention: Usage data is deleted after 12 months at the latest.

Insofar as PostHog, Inc., as a company based in the USA, can access data, the transfer relies on the EU-US Data Privacy Framework and the EU Standard Contractual Clauses. Further information: posthog.com/privacy.

With your consent, we use Snitcher (Snitcher B.V., Netherlands) and Apollo (ZenLeads Inc., USA) to understand which industries and organisations visitors interested in our offering come from. For this, the two services assign the IP address of a request to the network of an organisation based on publicly available company data (such as industry, location, size) and record the pages accessed, the referring page, and browser and device type. A random identifier in a cookie or in your browser's local storage groups the page views of a visit together. Both providers act as our processors (Art. 28 GDPR).

The analysis relates to organisations, not to individual persons. We do not combine it with names or any other information about you. Requests from private or public networks cannot be assigned to an organisation.

Purpose: Aligning our content as well as our marketing and sales planning.

Legal basis: Your consent (Art. 6(1)(a) GDPR, § 165(3) of the Austrian Telecommunications Act 2021), which you can withdraw at any time via “Cookie settings” in the footer. Snitcher and Apollo are not loaded without consent.

Retention: Information about organisations is deleted after 12 months at the latest.

Apollo processes the data in the USA. The transfer is based on the EU-US Data Privacy Framework and EU Standard Contractual Clauses.

Further information: snitcher.com/privacy-policy and apollo.io/privacy-policy.

We only set technically necessary cookies where they are required to operate the website. Optional services, namely the HubSpot embeds for the form and meeting booking, usage analysis with PostHog and B2B reach analysis with Snitcher and Apollo, are loaded exclusively after your active consent via our cookie notice. Via “Settings” in the cookie notice you can choose statistics (PostHog) and marketing (B2B reach analysis, HubSpot) separately. You can change or withdraw your consent at any time with future effect via “Cookie settings” in the footer.

Our reach measurement (see the section “Hosting and reach measurement”) works without cookies and stores nothing on your device. It therefore runs independently of your cookie consent and is unaffected by a withdrawal.

This policy may be updated as needed. The current version is always available on the website.