Privacy Policy

Last updated: August 2026

Thanks for your interest in Nolario. Protecting your personal data matters to us. Below we inform you, in accordance with Art. 13 GDPR, which data we process on this website and what rights you have. The controller responsible for this processing is named at the end of this policy.

1. Waitlist

When you join our waitlist, we process the email address you provide and, if you enter it, your name. You may optionally give a short piece of feedback about your needs.

• Purpose: to notify you once when Nolario launches and to gauge interest in the product.
• Legal basis: your consent (Art. 6(1)(a) GDPR), given when you submit the form.
• Storage period: until you withdraw your consent, and at the latest until the purpose no longer applies (product launch or discontinuation of the project). The data is then deleted.
• Voluntary / withdrawal: providing the data is voluntary. You can withdraw your consent at any time with effect for the future, without giving reasons; an informal email to matteo@cacic.at is enough. The lawfulness of processing carried out before the withdrawal is not affected.

2. Accessing the website (server logs, hosting)

This website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). When the site is accessed, Vercel processes technically necessary access data (e.g. IP address, date and time of access, page requested, browser type) in order to deliver the website and ensure its security and stability. This access data is processed only for as long as necessary for delivery and security, and is then deleted or anonymized.

Legal basis: legitimate interest in secure, functional provision of the website (Art. 6(1)(f) GDPR).

3. Storage of waitlist data (Google Firebase)

Waitlist entries are stored in Google Firebase / Firestore, a service of Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland) and Google LLC (USA), with whom a data processing agreement under Art. 28 GDPR is in place.

4. Reach measurement (Vercel Web Analytics)

For anonymous reach measurement we use Vercel Web Analytics. This service works without cookies and does not create cross-site user profiles; the data collected is evaluated in aggregate (e.g. page views, approximate origin).

Legal basis: legitimate interest in the statistical evaluation to improve our offering (Art. 6(1)(f) GDPR).

5. Meta Pixel (only with your consent)

If you agree in the cookie notice, we use the Meta Pixel of Meta Platforms Ireland Ltd. (4 Grand Canal Square, Dublin 2, Ireland). It lets us measure the success of our ads on Facebook/Instagram (e.g. how many sign-ups an ad produced). The pixel sets cookies and transmits usage and device data to Meta; your email address or name is not passed to Meta.

• Legal basis: your consent (Art. 6(1)(a) GDPR). The pixel is not loaded without your consent.
• Joint controllership: for the collection of data via the pixel, we and Meta are joint controllers (Art. 26 GDPR).
• Withdrawal: you can withdraw your consent at any time with effect for the future by opening “Cookie settings” in the footer of the website and choosing “Reject”.

For more information on data processing by Meta, see Meta’s privacy policy.

6. Fonts

The fonts used are served locally from our own server. There is no connection to third-party servers (e.g. Google Fonts); your IP address is not transmitted to third parties for this purpose.

7. Cookies and local storage

Without your consent, only technically necessary information is stored locally in your browser (e.g. your cookie choice and your light/dark theme preference). Non-essential cookies, in particular the Meta Pixel, are only set after your explicit consent.

8. Transfers to third countries

With the services Vercel, Google and Meta, data may be processed in the USA. Such transfers take place on the basis of the EU Standard Contractual Clauses or, where the providers are certified, the EU-US Data Privacy Framework (Art. 44 et seq. GDPR).

9. Secure transmission of your data

This website is served exclusively over an encrypted HTTPS (TLS) connection. This protects the data transmitted between your browser and our server (such as your entries in the waitlist form) from access by third parties.

10. Automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place on this website.

11. Your rights

You have the following rights regarding your personal data:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent given (Art. 7(3) GDPR)

To exercise them, an email to matteo@cacic.at is enough. You also have the right to lodge a complaint with a supervisory authority; in Austria this is the Data Protection Authority (dsb.gv.at).

12. Minors

Our offering is aimed at persons aged 14 and over. Persons under 14 may not submit personal data without the consent of their legal guardians.

13. Controller

The controller responsible for data processing on this website is:

A data protection officer is not legally required for this website and has therefore not been appointed.