Privacy Policy

1. Controller

Daniel Peric (sole proprietor, Nobrainer AI)
Schießstätte 12a
6800 Feldkirch
Austria

E-mail: [email protected]
Phone: +43 660 522 11 49

2. Data Collected

Contact form

When you send us a message via the contact form, the following data is collected:

• Name
• E-mail address
• Company (optional)
• Content of your message

Calendly appointment booking

When you book an appointment via Calendly, data is processed directly by Calendly. The Calendly Privacy Policy applies in addition. The data collected typically includes your name, e-mail address and the selected appointment.

Automatically collected data

When you visit this website, technical data is recorded automatically (server log files):

• IP address (anonymised)
• Date and time of access
• Page accessed
• Browser type and version
• Operating system
• Referrer URL

3. Legal Basis

The processing of your personal data is based on the following legal grounds:

• Art. 6(1)(a) GDPR (consent): When you contact us via the contact form or book an appointment.
• Art. 6(1)(b) GDPR (performance of a contract): For carrying out pre-contractual measures and fulfilling contractual obligations.
• Art. 6(1)(f) GDPR (legitimate interest): For the technical provision of the website and to ensure IT security.

4. Cookies & Tracking

This website uses Umami Analytics (self-hosted on our server in Germany) for anonymous reach and conversion measurement. Umami:

• sets no cookies
• creates no cross-site profiles
• collects only technical usage data in anonymised form (e.g. page views, referrer, device and browser type, events)
• is GDPR-compliant without consent, being cookieless and without personal profiles

When the website is served via Cloudflare, Cloudflare may additionally process technical access data for IT security and reach measurement (see section 5).

Our interactive features (AI analysis, the Nova chat assistant, newsletter and contact forms) transmit the data you enter to our automation and AI service providers named in section 5 in order to process your request. Depending on the feature, this may include the website URL, email address, chat content, analysis results and your consent status. The legal basis is Art. 6(1)(b) GDPR (service you requested) or Art. 6(1)(a) GDPR (optional newsletter or marketing consent).

We use no Google Analytics and create no cross-device advertising profiles.

5. External Services

Cloudflare Pages (hosting)

This website is hosted via Cloudflare Pages. In doing so, Cloudflare processes technical access data. More information: Cloudflare Privacy Policy.

Fonts

Fonts are hosted locally. No data is transferred to Google.

Calendly

For appointment booking we use the Calendly service (Calendly LLC, USA). When you book, data is transferred to Calendly. The transfer of data to the USA is based on the EU Standard Contractual Clauses. More information: Calendly Privacy Policy.

Brevo (email delivery & contact management)

For sending confirmation, contact and newsletter emails as well as managing contacts we use Brevo (Brevo SAS, Paris, France). Your email address and the data you provide in the form are transmitted. Processing takes place on servers within the EU. The legal basis is Art. 6(1)(b) GDPR, or Art. 6(1)(a) GDPR for the newsletter. More information: Brevo Privacy Policy.

Nova AI assistant & AI analysis (Anthropic, OpenRouter)

For the Nova chat assistant and the AI website analysis we process your input (chat content, website URL, analysis requests) using AI models from the providers Anthropic PBC (USA) and OpenRouter, Inc. (USA), which technically route and answer the requests. This may involve a transfer to the USA, based on the EU Standard Contractual Clauses (Art. 46 GDPR). Please do not enter any special categories of personal data (e.g. health data) in the chat. Before using the chat you are informed about the use of AI and asked for your consent. The legal basis is Art. 6(1)(f) GDPR (provision of the requested feature) or Art. 6(1)(a) GDPR (consent). More information: Anthropic · OpenRouter.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): You can request information about the data we have stored about you.
• Right to rectification (Art. 16 GDPR): You can request the correction of inaccurate data.
• Right to erasure (Art. 17 GDPR): You can request the erasure of your data, provided no statutory retention obligations apply.
• Restriction of processing (Art. 18 GDPR): You can request that the processing of your data be restricted.
• Right to object (Art. 21 GDPR): You can object to the processing of your data.
• Data portability (Art. 20 GDPR): You can request that your data be provided in a machine-readable format.

To exercise your rights, please contact: [email protected]

7. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the competent supervisory authority:

Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40-42
1030 Vienna
Phone: +43 1 521 52-25 69
E-mail: [email protected]
Website: www.dsb.gv.at

8. Retention Period

Personal data is stored only for as long as is necessary for the respective processing purpose. Contact requests are deleted once they have been processed and any statutory retention obligations (7 years in accordance with the Austrian Federal Fiscal Code, BAO) have expired. Server log files are deleted automatically after 30 days.

9. SSL Encryption

For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of the browser changes from "http://" to "https://" and by the padlock symbol in your browser bar. When SSL or TLS encryption is active, the data you transmit to us cannot be read by third parties.