Privacy policy

1. Data controller

2. Principles of data processing

We only process personal data insofar as this is necessary for the provision of a functional website and our content and services. Personal data is only processed with the user's consent or where processing is permitted by law.

3. Hosting

This website is hosted by Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA). Cloudflare processes technically necessary connection data (IP address, time of access, pages visited). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient provision of the website).

Cloudflare is certified under the EU-U.S. Data Privacy Framework. More information: Cloudflare Privacy Policy.

4. Contact form

When you contact us via the contact form, the data you provide (name, email address, company, phone number, message) is processed for the purpose of handling your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in processing enquiries).

The contact enquiry is sent by email via the service Resend (Resend, Inc., USA). Resend processes the transmitted data as a data processor on our behalf exclusively for the purpose of email delivery. More information: Resend Privacy Policy.

Your data will be deleted after your enquiry has been processed, unless statutory retention obligations apply. As a rule, deletion takes place after a maximum of 6 months.

5. Bot protection (Cloudflare Turnstile)

To protect our contact form from automated misuse, we use Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). Turnstile is a privacy-friendly alternative to traditional CAPTCHAs. It does not set cookies and does not store personal data in the browser. When using the form, technical connection data (including the IP address) is transmitted to Cloudflare to verify the legitimacy of the request.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protection against spam and misuse). Cloudflare is certified under the EU-U.S. Data Privacy Framework. More information: Cloudflare Privacy Policy.

6. Map display (OpenStreetMap)

To display our location, we use the open-source map library Leaflet in conjunction with map tiles from CARTO (CARTO, 307 5th Avenue, New York, NY 10016, USA), which are based on OpenStreetMap data. When the map is loaded, connection data (including the IP address) is transmitted to CARTO's servers. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in an appealing display of our location).

More information: CARTO Privacy Policy, OpenStreetMap Privacy Policy.

7. Web analytics (Cloudflare Web Analytics)

This website uses Cloudflare Web Analytics (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA) for statistical analysis of website usage. Cloudflare Web Analytics is a privacy-friendly analytics tool that does not use cookies, local storage or fingerprinting. No personal data is collected or stored.

The data collected consists exclusively of aggregated information such as page views, referrers, countries and visited URLs. Data is retained for a maximum of 6 months. No cookie banner or consent is required for this tool.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in analysing website usage to improve our offering). Cloudflare is certified under the EU-U.S. Data Privacy Framework. More information: Cloudflare Privacy Policy.

8. Cookies

This website does not use tracking cookies or any analytics tool that sets cookies. Only technically necessary cookies are used that are required for the operation of the website (e.g. session management by the hosting provider). A cookie banner is therefore not required.

9. Your rights

You have the following rights under the GDPR:

• Right of access (Art. 15 GDPR): You may request information about the personal data we hold about you.
• Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate data.
• Right to erasure (Art. 17 GDPR): You may request the deletion of your data, unless statutory retention obligations apply.
• Right to restriction of processing (Art. 18 GDPR): You may request the restriction of processing of your data.
• Right to data portability (Art. 20 GDPR): You may request the transfer of your data in a structured format.
• Right to object (Art. 21 GDPR): You may object to the processing of your data.

To exercise your rights, please contact us at: office@neon-geissler.at

10. Right to lodge a complaint

You have the right to lodge a complaint with the competent supervisory authority:

11. Currency

This privacy policy is currently valid as of February 2026. Due to the further development of our website or changes in legal or regulatory requirements, it may become necessary to amend this privacy policy.