Terms of Service

 Last updated: 20.01.2026

This Privacy Policy explains how Novacry (“Novacry,” “we,” “our,” or “us”) collects, uses, and protects personal data when you access or use our website www.novacry.com and any related services (collectively, the “Services”).

Novacry is established in the European Union and processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable national data protection laws.

1.1 Personal data you provide to us

We may collect personal data that you voluntarily provide when you:

• Use or interact with the Services
• Contact us via email or contact forms
• Subscribe to newsletters or updates
• Register for an account or membership
• Purchase products or services
• Communicate with us offline (e.g. events or direct contact)

The personal data collected may include:

• Identification data: name, username
• Contact data: email address, phone number, postal address
• Account data: login credentials, account preferences
• Transaction data: purchase details, order history, invoices
• Payment data: payment method details (processed by third-party payment providers)
• Communication data: messages, inquiries, and correspondence

Providing personal data is generally optional; however, certain features of the Services may not be available without it.

1.2 Personal data collected automatically

When you access the Services, we may automatically collect:

• Log data: IP address, browser type, date and time of access
• Usage data: pages viewed, interactions, navigation behavior
• Device data: device type, operating system, unique identifiers
• Location data: approximate geographic location derived from IP address

1.3 Cookies and tracking technologies

We use cookies and similar technologies to:

• Ensure proper website functionality
• Analyze usage and performance
• Improve user experience
• Manage consent preferences

You can manage or withdraw your cookie consent at any time via our cookie settings. Disabling cookies may affect the functionality of the Services.

1.4 Personal data from third parties

We may receive personal data from service providers, payment processors, analytics providers, or marketing partners. Where applicable, such data is combined with information collected directly from you.

PurposeLegal BasisProviding and operating the ServicesContract performanceCustomer support and communicationContract / Legitimate interestProcessing purchases and paymentsContract / Legal obligationWebsite analytics and improvementLegitimate interest / ConsentMarketing communicationsConsentFraud prevention and securityLegitimate interestLegal complianceLegal obligation 

 We may disclose personal data to:

• Service providers and processors (e.g. hosting, payment, analytics, customer support) 
• Affiliated entities, where applicable
• Public authorities, if required by law
• Professional advisors (legal, accounting, security)
• Business partners in the context of a merger, acquisition, or restructuring
   

All processors act under contractual data processing agreements in accordance with Article 28 GDPR.

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards, such as:

• EU Standard Contractual Clauses
• Adequacy decisions by the European Commission

You have the following rights under Articles 12–22 GDPR:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority
   

To exercise your rights, contact us at: novacryofficial@gmail.com

We retain personal data only for as long as necessary for the purposes stated in this Privacy Policy, unless longer retention is required by law. After retention periods expire, data is deleted or anonymized. 

We implement appropriate technical and organizational measures to protect personal data. However, no system is completely secure, and we cannot guarantee absolute security.

Our Services are not directed at individuals under the age of 16. We do not knowingly collect personal data from minors.

Our Services may include links to third-party websites or services. We are not responsible for their privacy practices and recommend reviewing their privacy policies separately.

We may update this Privacy Policy to reflect legal, technical, or business changes. The updated version will be indicated by the “Last updated” date. Continued use of the Services constitutes acceptance of the revised policy.

Data Controller:
Andi Löscher

Koloniegasse 1, 8020 Graz Austria
novacryofficial@gmail.com