Privacy Policy

Data Controller Information

This Privacy Policy explains how orixavexilon.top AG ("we", "our", or "us") collects, uses, and protects your personal information when you visit our website at orixavexilon.top or use our services.

Data Controller:
orixavexilon.top AG
Graben 48
4043 Linz, Upper Austria
Registration Number: FN829371a
VAT Number: ATU82371985

Data Collection

The data we collect includes personal information you provide directly to us and information automatically collected through your use of our website and services. We collect the following types of personal data:

• Contact Information: Name, email address, phone number, company name, and business address when you contact us or request information about our services
• Technical Information: IP address, browser type, device information, and website usage data collected automatically through cookies and similar technologies
• Communication Data: Records of correspondence when you contact us via email, phone, or contact forms
• Business Information: Details about your beauty business, service requirements, and implementation preferences for our automation tools

How We Use Your Information

We use of your data is based on legitimate business interests and your consent where required. Specifically, we use your personal information to:

• Respond to your enquiries and provide customer support
• Deliver our beauty service automation tools and related services
• Process and fulfil service requests and contracts
• Improve our website functionality and user experience
• Send relevant business communications and service updates
• Comply with legal obligations and protect our legitimate business interests
• Analyse website performance and user behaviour for service improvement

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and delivering our services, subject to strict confidentiality agreements
• Legal Requirements: When required by law or to protect our rights, property, or safety
• Business Transfers: In connection with any merger, sale of assets, or acquisition of our business

Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Contact Enquiries: 3 years from last contact
• Customer Data: Duration of service relationship plus 7 years for legal compliance
• Website Analytics: 26 months (Google Analytics default)
• Marketing Data: Until consent is withdrawn or 3 years of inactivity

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure data transmission, regular security assessments, and staff training on data protection principles.

International Data Transfers

As we are based in Austria (EU), your data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Children's Privacy

Our services are not directed at individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last updated" date.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out to us:

Supervisory Authority

You have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde) if you believe we have not handled your personal data in accordance with applicable data protection laws.