Cost calculatorRequest a demo DE

Privacy policy

This is an English translation of our German privacy policy. If the two versions differ, theGerman version prevails.

1. Privacy at a glance

The following information gives a simple overview of what happens to your personal data when you visit this website or send us an enquiry using the contact form or the demo request form. Personal data is any data that can be used to identify you personally.

This website is deliberately built to collect as little as possible: it uses no cookies, uses no advertising or marketing tools and loads no fonts from third-party servers (all fonts are hosted locally). We count visitors only without cookies and anonymously, on our own EU server (see section 10). Beyond that, data is only collected when you actively contact us (see sections 4 to 6) and in the form of technical server logs when a page is accessed.

2. Controller

Goma-it e.U.
Owner: Lukas Clemens Göggel
Winkelbühelweg 37
6751 Bludenz, Austria
Email: info@junova-ai.eu
Phone: +43 699 17119818

3. Hosting (Hostinger) and delivery (Cloudflare)

This website is hosted by Hostinger. The provider is Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. Personal data collected when you access the website (in particular your IP address and technical connection data) is processed on Hostinger’s servers within the EU. Hostinger also provides the email service for the addresses at junova-ai.eu and ki-wissensdatenbank.at. We have concluded a data processing agreement (DPA) with Hostinger.
Legal basis: Art. 6(1)(f) GDPR (efficient and secure provision of our online services).

The website is delivered via Cloudflare’s network (content delivery network and reverse proxy). The provider and processor is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. All requests to this website – page views as well as form submissions – pass through Cloudflare’s servers; for this purpose Cloudflare processes in particular your IP address and the technical request data in order to deliver the website quickly and protect it against attacks and abusive access. This may involve a transfer to the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR); in addition, Cloudflare’s data processing agreement provides for the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR). Further information:cloudflare.com/cloudflare-customer-dpa.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, stable and fast delivery of the website).

4. Contact form and demo

This website has two forms (contact, demo) that you can use to get in touch with us:

  • Contact form (/en/contact/): name, company, contact details (email address or phone number) and, optionally, your message in the field “Where do you spend the most time searching at the moment?”. Purpose: handling your enquiry and any follow-up questions.
  • Demo (/en/demo/): company, industry, name, email address, optionally your phone number, the “intro call” tick box if you wish, and a preferred time. Purpose: arranging and holding a demo by video (your industry determines the examples we show) and – only if you tick the box – an intro call by video or phone. If you do not tick the box, we will not call you.

When you submit a form, your details are sent by email, together with a timestamp and your IP address, to our mailbox info@junova-ai.eu (Hostinger’s email service, see section 3) and forwarded from there to the owner’s mailbox. In addition, the form details (without the IP address) are transferred via our self-operated n8n instance (section 5) to our CRM system Pipedrive (section 6) so that we can handle and follow up on your enquiry there. We do not pass your data on to any other third parties without your consent; the exceptions are the processors named in this policy and cases in which we are legally obliged to disclose it.

Legal bases: Art. 6(1)(b) GDPR for handling your enquiry, the demo and any intro call you request by ticking the box (steps taken at your request or prior to entering into a contract), or Art. 6(1)(f) GDPR where you make the enquiry as a contact person for a business (legitimate interest in communicating with business contacts); Art. 6(1)(f) GDPR also for enquiries not related to a contract and for following up on your specific enquiry (legitimate interest in handling and following up on enquiries properly). You may object at any time to processing based on point (f) (Art. 21 GDPR).
Providing your details is voluntary; however, we cannot handle your enquiry without contact details (email or phone).
In accordance with § 174 of the Austrian Telecommunications Act 2021 (TKG 2021), we only send you promotional emails (e.g. newsletters or follow-up emails with offers) with your prior consent (Art. 6(1)(a) GDPR). For this purpose, both forms contain a separate, voluntary tick box that is not pre-ticked; submitting a form without ticking this box does not count as consent. We store the time of your consent as proof. You can withdraw your consent at any time with effect for the future, for example by emailinginfo@junova-ai.eu.
Storage period: data sent by email is stored until your request has been dealt with in full and deleted no later than 24 months after it has been closed, unless statutory retention obligations apply. For the storage period in the CRM, see section 12.

Appointment booking: On the contact page we link to Calendly (Calendly, LLC, 115 E Main St, Ste A1B, Buford, GA 30518, USA) so that you can choose an appointment yourself. Calendly is not embedded; Calendly only processes your data once you open the link. If you make a booking, this means your name, email address, the chosen appointment and the details you enter in the booking form; we receive them in order to hold the appointment (Art. 6(1)(b) GDPR). The transfer to the USA is based on the EU-US Data Privacy Framework (Art. 45 GDPR). Calendly’s own privacy policy also applies to processing on the Calendly site.

5. Automation (n8n, self-hosted)

We use the workflow tool n8n to forward and process form data. We operate n8n ourselves on our infrastructure at Hostinger (Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus) within the EU, so the data flows are controlled within our own environment. We have concluded a data processing agreement (DPA) with Hostinger. n8n passes the details from the contact form and the demo request on to our CRM, Pipedrive (section 6).
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in efficient processing).

6. CRM system (Pipedrive)

We use the CRM system Pipedrive to handle and follow up on enquiries. From your form details, an organisation, a person and a deal are created there automatically, together with a task for the intro call; the data stored is the data you have provided (company, industry where applicable, name, contact details, the content of your enquiry or your details regarding the intro call, demo and preferred time). The enquiry itself is handled by Goma-it (owner and team).

For customers based in the EEA, the contracting party is Pipedrive OÜ, Mustamäe tee 3a, 10615 Tallinn, Estonia. Pipedrive processes the data as a processor on the basis of its Data Processing Addendum, which forms part of Pipedrive’s terms of service.

Storage location: the data is hosted by Amazon Web Services. Our Pipedrive account is in the EU region (data centres in Frankfurt and Dublin). Pipedrive also uses sub-processors, including affiliated companies (such as Pipedrive Inc., USA) and service providers outside the EEA (including Amazon Web Services, Inc. and Cloudflare, Inc., both USA); access to the data from outside the EEA is therefore possible. Pipedrive publishes its current list of sub-processors atpipedrive.com/en/subprocessors.

Safeguards for transfers to third countries: Pipedrive bases transfers outside the EEA on the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR); within the Pipedrive group, an intra-group data transfer agreement with standard contractual clauses applies. Pipedrive Inc. is also certified under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR). Further information:pipedrive.com/en/privacy/dpa.
Legal basis: Art. 6(1)(b) GDPR (handling your enquiry or steps prior to entering into a contract) and Art. 6(1)(f) GDPR (legitimate interest in handling and following up on enquiries in a structured way).

7. Server log files

When you access our website, information that your browser sends to the hosting provider or to Cloudflare (section 3) is collected automatically. These server log files contain your IP address, browser type and version, operating system, referrer URL and the time of the server request. This data is not combined with other data sources.
Legal basis: Art. 6(1)(f) GDPR (ensuring error-free operation and defending against cyber attacks). The log files are deleted automatically as soon as they are no longer needed for these purposes.

8. SSL/TLS encryption

This website uses SSL/TLS encryption. You can recognise an encrypted connection by the address bar starting with “https://” and a padlock icon being displayed. When SSL/TLS encryption is active, data you send to us cannot be read by third parties.

9. Cookies, local fonts and storage on your device

This website does not set any cookies and does not use any advertising or marketing tools. All fonts (web fonts) are hosted locally; no data is exchanged with third-party font servers when the page loads. There are two exceptions concerning storage on your own device:

  • If you close the notice banner, your browser remembers this choice in your device’s local storage (localStorage).
  • If you have been shown a pop-up notice about the demo, your browser stores a single value insession storage (sessionStorage) – without any identifier, solely so that the same notice does not interrupt you again during your visit. This entry is deleted as soon as you close the browser tab.

In both cases, no data is transferred to us or to third parties, and nothing can be inferred about you from it. The storage entry is based on the exception in § 165 (3) of the Austrian Telecommunications Act 2021 (TKG 2021): it is strictly necessary to preserve the state you have chosen – a closed or not repeated notice; no further processing of personal data takes place. If storage is blocked in your browser, the website works just the same.

10. Cookieless audience measurement (Umami, self-hosted)

To understand how many visitors access our pages, we use the open-source software Umami – operated by us on our own server at Hostinger in the EU; since 6 October 2026 the tracking script has been loaded directly from this server and no longer runs via Cloudflare. Umami works without cookies, does not create visitor profiles and does not pass any data on to advertising networks. A short-lived, hashed session identifier is generated on the server from your IP address and browser identifier; the IP address itself is not stored. The data recorded comprises page views, approximate region of origin, browser type, referring source and individual events, such as whether a pop-up notice was shown or closed. The data is pseudonymised and is not combined with other data. The script merely checks whether an opt-out entry (“umami.disabled”) has been set in your browser; it does not store anything on your device itself.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in audience measurement that collects as little data as possible).

11. Note on the junova product

This privacy policy covers visits to this website. For customers of junova (our AI knowledge base), the contractual provisions on data processing (data processing agreement) that you receive from us when placing your order apply in addition – covering, among other things, hosting on European servers, the AI models used and data backup. Your documents are not used to train AI models – neither by us nor by the provider of the language model.

12. Storage period

Unless a more specific storage period is stated in this privacy policy, your personal data remains with us until the purpose for processing it no longer applies. Where statutory retention periods apply (e.g. commercial or tax law requirements under the Austrian Commercial Code (UGB) and Federal Fiscal Code (BAO) – usually seven years), storage is governed by those periods.

We store data in the CRM system (section 6) for as long as it is needed to handle and follow up on your enquiry. If no contract is concluded, we delete it as soon as following up on your enquiry no longer makes sense or you object to the processing or request erasure. If a contract is concluded, the data remains stored for the duration of the business relationship; after that, the statutory retention periods mentioned above apply.

13. Automated decision-making

No decisions based solely on automated processing that produce legal effects within the meaning of Art. 22 GDPR are made. The automatic transfer of your details into the CRM (sections 5 and 6) serves organisational purposes only; every substantive response to your enquiry is made by people at Goma-it e.U. (owner and team).

14. Data protection officer

We are not legally required to appoint a data protection officer (Art. 37 GDPR). If you have any questions about data protection, please contact the controller named in section 2 directly.

15. Your rights

You have the right at any time to:

  • access the data stored about you (Art. 15 GDPR)
  • have inaccurate data rectified (Art. 16 GDPR)
  • have your data erased (Art. 17 GDPR), unless retention obligations apply
  • restrict processing (Art. 18 GDPR)
  • receive your data in a structured, commonly used and machine-readable format (data portability, Art. 20 GDPR)
  • object to processing (Art. 21 GDPR)
  • withdraw consent you have given, with effect for the future (Art. 7(3) GDPR)
  • lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at)

Last updated: October 2026