Last updated: 12 October 2026
Thank you for your interest in our website. The trust of all visitors and customers, the security of your data and the protection of your privacy are of central importance to us. We process your personal data in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021), and with this privacy policy.
Personal data is any information that can be used to identify you, e.g. your name, address, telephone number, email address or IP address. Below we explain which data we process, when and for what purpose. Please note that data transmission over the internet can never be completely protected against access by third parties.
The controller within the meaning of the GDPR is the operator of this website:
Novogenia Marketing GmbH, Strass 19, 5301 Eugendorf, Austria
Email: service@novogenia.com
You can reach our data protection officer at datenschutz@novogenia.com.
We only process personal data if one of the following legal bases applies:
We delete your personal data as soon as the purpose of storage no longer applies, unless statutory retention obligations prevent this. Specific storage periods are given for the individual processing operations below.
This website is hosted on Microsoft Azure (the services “Azure Static Web Apps” and “Azure Blob Storage”, e.g. for videos and PDF documents). The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft processes the data as our processor under Art. 28 GDPR on the basis of the Microsoft Products and Services Data Protection Addendum.
When you visit the website, the following log data is processed automatically:
This processing is necessary to deliver the website, keep it secure and analyse errors. The legal basis is our legitimate interest in secure and reliable operation (Art. 6(1)(f) GDPR). The data is not combined with other data and is deleted as soon as it is no longer required for these purposes.
A transfer to Microsoft Corporation in the USA cannot be ruled out. Microsoft Corporation is certified under the EU-US Data Privacy Framework; the transfer is therefore covered by an adequacy decision of the European Commission (Art. 45 GDPR).
If you contact us via the contact form, by email or by phone, we process your details to answer your inquiry. In the contact form these are your first name, last name, email address, phone number, the type of inquiry (end customer or partner), the product you are interested in and your message. Inquiries from end customers go to our customer service (service@novogenia.com), inquiries from partners to our key account team (keyaccount@novogenia.com).
For email we use Microsoft 365 (Microsoft Ireland Operations Limited) as our processor. The contact form currently opens your own email app with a pre-filled message; it is only transmitted once you send it there.
Forwarding to partner companies: We sell our products exclusively through partner companies. With your explicit consent in the contact form, we forward inquiries from end customers to a suitable partner company in which Novogenia holds an interest or with which Novogenia has a contractual relationship (e.g. sales partners), so that it can advise you and answer your inquiry. The partner company then processes your data under its own responsibility.
The legal basis is answering your inquiry or taking pre-contractual measures (Art. 6(1)(b) GDPR) and, for forwarding to partner companies, your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future. We delete inquiries once they are no longer needed and review this every two years; statutory retention obligations remain unaffected.
“Missing customer details” form: This form lets you submit details we need to process your order (order number, ordered products, name, address, mobile number, email address, gender, height, weight and date of birth). We process them to perform the contract (Art. 6(1)(b) GDPR).
WhatsApp: Some pages offer a link to WhatsApp. WhatsApp only opens when you click it. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; data may be transferred to Meta Platforms, Inc. in the USA, which is certified under the EU-US Data Privacy Framework. WhatsApp's own privacy policy also applies to communication via WhatsApp. The legal basis is Art. 6(1)(b) or (f) GDPR (answering your inquiry via the channel you chose).
The chat button opens our AI-powered support chatbot in a separate window. Only then is a connection to the provider's servers established. Your IP address, technical data about your browser and the messages you type into the chat are processed in order to answer your questions. Please do not enter health data or other sensitive information in the chat.
The chatbot is operated on our behalf by 2x10 GmbH, Parkgasse 10/17, 1030 Vienna, Austria. The application runs on Amazon Web Services in the EU (Frankfurt region); answers are generated by a language model from Anthropic (Claude) via AWS Bedrock, also in the EU Frankfurt region, without transfer to the USA. For content search, your query is converted into technical search vectors by Voyage AI (MongoDB, Inc., USA); permanent storage there is technically disabled. Conversation and session data are stored only as long as necessary, security logs for 6 months, error events (Sentry, EU region) for 90 days and the cookieless, self-hosted usage statistics (Umami) for 6 months. Details are in the chatbot’s privacy policy. The legal basis is our legitimate interest in answering questions about our products quickly and around the clock (Art. 6(1)(f) GDPR).
We use only a few cookies and entries in your browser's local storage:
We use strictly necessary cookies and storage entries on the basis of Section 165(3) TKG 2021 and our legitimate interest in a functioning website (Art. 6(1)(f) GDPR); all others only with your consent (Section 165(3) TKG 2021, Art. 6(1)(a) GDPR).
On your first visit we ask for your consent in our own cookie banner. You can decide separately on:
Without your consent these services are not loaded and no connection to them is made. We store your choice in the nd_consent cookie. You can change or withdraw it at any time via the “Cookie settings” link at the bottom of every page; withdrawal takes effect for the future.
Only if you consent to the “Statistics” category in the cookie banner do we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). It helps us understand how our website is used and improve it.
The following is processed: pages viewed and time spent, the page you came from, device type, browser, operating system, screen resolution, approximate location (country, region, city) and interactions on our website – clicks on email, phone and WhatsApp links, form submissions (without their content), opening the chatbot, clicks in the partner box, clicks on external links and downloads, the start of podcast videos and scroll depth. We do not send names, email addresses or form contents to Google.
Google Analytics 4 does not log or store IP addresses; the IP address is only used briefly to determine the approximate location. We have disabled Google signals and the use of the data for personalised advertising; no advertising cookies are set. Google processes the data as our processor. Event data is deleted automatically after 2 months (setting in Google Analytics; if it is changed, this sentence must be updated).
A transfer to Google LLC in the USA is possible. Google LLC is certified under the EU-US Data Privacy Framework; the transfer is therefore covered by an adequacy decision of the European Commission (Art. 45 GDPR).
The legal basis is your consent (Section 165(3) TKG 2021, Art. 6(1)(a) GDPR). You can withdraw it at any time via “Cookie settings”; Google Analytics then stops immediately and the analytics cookies are deleted. More information: policies.google.com/privacy.
Some pages embed videos from YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The videos are only loaded once you have consented to the “External media” category, and are then embedded in privacy-enhanced mode (youtube-nocookie.com). Preview images are served from our own server. When a video plays, your IP address and the page you are on, among other things, are transmitted to YouTube; if you are logged in to YouTube, YouTube can link the playback to your account. A transfer to Google LLC in the USA is possible (certified under the EU-US Data Privacy Framework, Art. 45 GDPR).
The legal basis is your consent (Section 165(3) TKG 2021, Art. 6(1)(a) GDPR). More information: policies.google.com/privacy.
On the page with the live share price of Novogenia AG we embed a stock widget from TradingView. The provider is TradingView, Inc. (USA). The widget is only loaded once you have consented to the “External media” category; your IP address and technical data about your browser, among other things, are then transmitted to TradingView.
The legal basis is your consent (Section 165(3) TKG 2021, Art. 6(1)(a) GDPR). The transfer to the USA is based on your explicit consent (Art. 49(1)(a) GDPR), which we point out in the cookie banner.
On our careers page we embed our open positions via a widget from JOIN. The provider is JOIN Solutions AG, Eichenstrasse 2, 8808 Pfäffikon SZ, Switzerland. The widget is only loaded once you have consented to the “External media” category; your IP address and technical data about your browser, among other things, are then transmitted to JOIN. Without consent you can reach all positions via the link to join.com. JOIN’s own privacy policy also applies to applications submitted via JOIN.
The legal basis is your consent (Section 165(3) TKG 2021, Art. 6(1)(a) GDPR). For Switzerland there is an adequacy decision of the European Commission (Art. 45 GDPR).
In the Novogenia AG newsroom we load the latest corporate announcements directly from the platform of EQS Group GmbH, Karlstrasse 47, 80333 Munich, Germany. When you open the newsroom, your IP address is transmitted to EQS for this purpose. The legal basis is our legitimate interest in providing the legally required capital-market information in up-to-date form (Art. 6(1)(f) GDPR).
We use the Montserrat font. It is loaded from our own server; no data is transmitted to Google or other third parties.
Our website contains links to websites of other providers, e.g. scientific sources, our shops and partner sites, or social networks such as Instagram, Facebook or LinkedIn. Data is only transmitted to the respective provider when you follow such a link. The respective provider is responsible for data processing on those websites; please refer to its privacy policy.
For security reasons our website uses SSL/TLS encryption. This protects transmitted data so that it cannot be read by third parties. You can recognise an encrypted connection by “https://” in the address bar and the padlock symbol in your browser.
You have the right of access to the data stored about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR).
Right to object: Where we process data on the basis of our legitimate interest, you may object to the processing at any time on grounds relating to your particular situation (Art. 21 GDPR). You may object to processing for direct marketing purposes at any time without giving reasons.
For all data protection matters – access, rectification, erasure, withdrawal or objection – please contact service@novogenia.com or our data protection officer at datenschutz@novogenia.com.
You also have the right to lodge a complaint with the supervisory authority: Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, Austria, email: dsb@dsb.gv.at.