Privacy Policy

Data Protection at a Glance

General Information

This section provides a concise overview of how we handle your personal data when you visit our website. Personal data refers to any information that can be used to identify you individually. For more detailed information on data protection, please refer to our comprehensive data protection declaration below.

Data Collection on Our Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. Their contact details can be found in the website imprint.

How do we collect your data? Your data is collected in two ways:

When you provide it to us, such as by entering information in a contact form.
Automatically by our IT systems when you visit the website. This primarily includes technical data such as your internet browser, operating system, or the time of page view, which is collected as soon as you enter our website.
Some data is collected to ensure the technically proper provision of the website. Other data may be used to analyze user behavior.
You have the right at any time to receive information free of charge about the origin, recipient, and purpose of your stored personal data. You also have the right to request correction, blocking, or deletion of this data, to contact us using the address listed in the imprint for privacy-related questions, to lodge a complaint with the competent supervisory authority, and to request restriction of processing under the conditions described below.

General Notes and Mandatory Information

Data Protection

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. This privacy policy explains what information we collect and how we use it, including the purposes for which it is processed.

Please note that data transmission over the internet, for example when communicating by email, may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Responsible Entity

The entity responsible for data processing on this website is:

DI Dejan Jaksic

Wichtelgasse 39a/2/41

1160 Vienna

Email: hello@osoi.io

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data, for example names or email addresses.

Revoking Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can revoke previously given consent at any time by sending us an informal email. The legality of data processing carried out before the revocation remains unaffected.

Right to Object to Data Collection in Specific Cases and to Direct Marketing (Art. 21 GDPR)

If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your specific situation. This also applies to profiling based on these provisions. The legal basis for processing can be found in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing. This includes profiling related to direct marketing. If you object, your personal data will no longer be used for direct marketing purposes. This includes emails we may send after an incomplete sign-up attempt, which you can object to at any time.

Right of Appeal to the Competent Supervisory Authority

In the event of GDPR violations, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or place of the alleged infringement. This right of appeal is without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to receive data that we process automatically based on your consent or in fulfillment of a contract in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done if technically feasible.

Information, Blocking, Deletion, and Correction

Within the framework of applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipient, and the purpose of data processing. You may also have a right to correction, blocking, or deletion of this data. For further inquiries about personal data, please contact us at the address provided in the imprint.

Right to Restriction of Processing

You have the right to request the restriction of processing your personal data. You can contact us at any time at the address given in the imprint. The right to restriction of processing exists in the following cases:

If you contest the accuracy of your personal data, we usually need time to verify this. During the verification period, you have the right to request the restriction of processing your personal data.
If the processing of your personal data was or is unlawful, you may request the restriction of processing instead of deletion.
If we no longer need your personal data, but you require it for the assertion, exercise, or defense of legal claims, you have the right to request the restriction of processing instead of deletion.
If you have objected pursuant to Art. 21(1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request restriction of processing.
If you have restricted the processing of your personal data, this data may, apart from being stored, only be processed with your consent or for the assertion, exercise, or defense of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State.

Cookies

Our website does not use advertising cookies, Google Analytics cookies, or a cookie consent provider. We do not set cookies to recognize your browser for marketing purposes.

Cloudflare may set strictly necessary cookies or use similar technical measures to provide security, bot protection, traffic management, and reliable delivery of this website. These cookies are used to protect the website and are not used by us for advertising.

You can configure your browser to inform you about cookie settings and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Cookies or comparable technical measures that are required for electronic communication, security, or the provision of requested website functions are processed on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in secure, technically reliable, and optimized delivery of this website.

Forms and Sign-Up Requests

If you send us a sign-up request, demo request, or similar inquiry through a form on this website, we process the information you provide so we can respond to your request and follow up with you. This can include your name, company, email address, phone number, company website, message, selected language, and the page from which the request was submitted.

For attribution and technical context, we may also process UTM parameters, the page URL, your browser user agent, and country information derived from Cloudflare request headers. We use this information to understand the source of the request, prevent abuse, and manage the sales or onboarding process.

Form submissions are processed through a Supabase Edge Function and stored in our CRM-related database. We may use Resend to send internal email notifications about new requests. We do not sell this data and do not share it for advertising purposes.

The processing of data entered in forms is based on your consent under Art. 6(1)(a) GDPR and on our legitimate interest under Art. 6(1)(f) GDPR in responding to business inquiries, preventing abuse, and managing customer relationships. You can revoke consent or object to further processing at any time by contacting us.

The data you enter in forms will remain with us until you request deletion, revoke consent to storage, or the purpose for data storage no longer applies, for example after we have completed processing your inquiry. Mandatory legal provisions, particularly retention periods, remain unaffected.

Name and company: used to identify the requester and understand the business context.
Email address and phone number: used to contact you about your request.
Company website, message, page URL, and UTM parameters: used to understand your inquiry and how you found OSOI.

If you subscribe to the OSOI newsletter, the email address you provide is sent to Loops, our newsletter service provider. We use this service to send product updates, news, and related information.

Newsletter processing is based on your consent under Art. 6(1)(a) GDPR. You can unsubscribe at any time through the unsubscribe link in our emails or by contacting us at the address listed in the imprint.

We keep your newsletter subscription data until you unsubscribe or request deletion, unless legal retention obligations require otherwise.

Hosting, Security, and Website Analytics

This website is hosted and delivered through Cloudflare. Cloudflare processes technical request data such as IP address, browser information, requested URL, time of request, Cloudflare Ray ID, and security-related signals to deliver the website, cache content, mitigate attacks, and protect against automated abuse.

Cloudflare may use JavaScript detection and other challenge platform functionality to distinguish legitimate visitors from automated traffic. This helps us keep the website available and secure.

We do not use Google Analytics or advertising trackers on this website.

We use Cloudflare Web Analytics to understand aggregated website usage and performance. Cloudflare Web Analytics is designed to collect limited performance and pageview information and does not require Google Analytics cookies or advertising cookies. We use this information to understand which pages are visited, how the website performs, and how we can improve the website.

The legal basis for hosting, security, and privacy-friendly website analytics is our legitimate interest under Art. 6(1)(f) GDPR in secure, reliable, and useful operation of this website.

Contact the Austrian Data Protection Authority

The data protection authority can be contacted at the following address:

Austrian Data Protection Authority

Barichgasse 40-42

1030 Vienna

Phone: +43 1 52 152-0

Email: dsb@dsb.gv.at

Data Protection Coordinator

No data protection officer has been appointed for this company. The data protection coordinator is:

DI Dejan Jaksic

Wichtelgasse 39a/2/41

1160 Vienna

Email: hello@osoi.io