Privacy Policy

01Controller

360 Design Agency GmbH, Ybbsstraße 35/1/13, 1020 Vienna, Austria, company register number FN 637501 b, Commercial Court Vienna.

Privacy and general contact: info@designagencygroup.com.

02Data we process

• —Technical data such as IP address, time of access, requested URL, browser and device information, referrer and security logs.
• —Contact and project data such as name, email address, telephone number, company, project requirements and message.
• —Nova chat content, conversation metadata and any contact or project data you voluntarily provide in the chat.
• —Analytics data only after you actively consent to analytics cookies.
• —Language, consent and session settings stored in your browser.

03Purposes and legal bases

• —Providing and securing the website: our legitimate interests under Article 6(1)(f) GDPR.
• —Responding to enquiries and preparing or performing a contract: Article 6(1)(b) GDPR; for business contacts, our legitimate interest in business communication may also apply.
• —Compliance with statutory obligations: Article 6(1)(c) GDPR.
• —Google Analytics and other non-essential storage or access: your consent under Article 6(1)(a) GDPR and section 165(3) TKG 2021.
• —Defending or enforcing legal claims: our legitimate interests under Article 6(1)(f) GDPR.

04Contact and project enquiries

When you submit the contact form, the information is stored in the website's Base44 lead system and made available only to authorised personnel for handling your enquiry. Fields marked as required are necessary for us to respond. The B2B checkbox records your declaration that you are acting for a business or professional purpose and not as a consumer.

To deter automated abuse, the submission endpoint derives daily one-way network and email fingerprints. The anti-spam attempt record is marked to expire after 24 hours and is removed during routine submission cleanup; it is not used for marketing.

We normally retain unsuccessful enquiries for up to 24 months after the last meaningful contact, unless a longer period is needed for a contract, statutory retention duty or legal claim.

05Nova AI assistant

Nova is an AI system, not a human. It answers service and portfolio questions and may collect project information to create a lead. AI output may be incomplete or incorrect and does not constitute a binding offer, legal advice or professional guarantee.

Do not enter passwords, payment details, confidential information or special-category personal data. You can always use the contact page or email us to communicate with a human.

06Service providers and recipients

Processors receive only the data needed for their task and are contractually required to protect it. We do not sell personal data.

• —Base44, used for website hosting, application services, database functions and the Nova AI assistant.
• —Technical hosting, security, communications and professional advisers where required.
• —Google Ireland Limited and its authorised processors for operational email delivery to company-managed mailboxes when a lead is submitted.
• —Google Ireland Limited for Google Analytics, but only after analytics consent.
• —Dropbox International Unlimited Company when you actively load the externally hosted company presentation; Dropbox then receives technical connection data such as IP address and browser information.
• —Public authorities or courts where disclosure is legally required.

07International transfers

Some providers may process data outside the European Economic Area. Where this occurs, we use an applicable adequacy decision, EU Standard Contractual Clauses and, where appropriate, supplementary safeguards. You may contact us for information about the relevant safeguards.

08Google Analytics

Google Analytics 4 is blocked by default and loads only after you choose Analytics in Cookie Settings. We use it to understand aggregated website usage and improve the site. You may withdraw consent at any time through Cookie Settings; withdrawal does not affect earlier lawful processing.

The configured measurement ID is G-57PVRE6XEK. Analytics retention settings are managed in the Google Analytics property.

09Storage periods

We retain personal data only as long as necessary for the purpose concerned. Contract and accounting records are retained for the statutory periods applicable in Austria. Security logs are retained for the period necessary to investigate incidents. Consent records are retained for as long as needed to demonstrate the choice made.

10Your rights

• —Access, rectification and erasure.
• —Restriction of processing and data portability where applicable.
• —Objection to processing based on legitimate interests.
• —Withdrawal of consent at any time with effect for the future.
• —A complaint to the Austrian Data Protection Authority or another competent supervisory authority.

11Automated decision-making

We do not use the website or Nova to make decisions producing legal or similarly significant effects about you solely by automated means.

12Security and changes

We use appropriate technical and organisational measures designed to protect personal data. No internet transmission is completely secure.

We may update this policy when services, providers or legal requirements change. The current version and update date are published on this page.