Privacy Policy

1. Privacy at a glance

General notes

The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data is any data with which you can be personally identified. You'll find detailed information in the sections below.

Who is responsible for collecting data?

The data controller is razzfazz.ai GmbH. Contact details are in the imprint. General inquiries: info@rzfz.ai.

How do we collect your data?

Some data is collected because you provide it to us — through our own contact form, through the Quick Check, or through an order enquiry in the configurator. The embedded Pipedrive form described here previously has not been in use since August 2026. Other data is collected automatically when you visit the website — primarily technical data (browser, operating system, time of page request).

What do we use your data for?

Some data is collected to ensure error-free delivery of the website. Anonymous, cookie-free usage statistics only — nothing here identifies you personally.

What rights do you have?

You have the right to obtain information about the origin, recipients, and purpose of your stored personal data at any time. You also have the right to rectification, erasure, restriction of processing, and data portability. You can contact us at any time using the address in the imprint. You also have the right to lodge a complaint with the Austrian Data Protection Authority.

2. General notes and mandatory information

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations (GDPR) and this privacy policy.

Please note that data transmission over the internet (e.g., when communicating by email) may have security gaps. Complete protection of data from access by third parties is not possible.

Data controller

razzfazz.ai GmbH
Wienerbergstraße 3-5
1100 Vienna, Austria
Email: info@rzfz.ai

Withdrawal of consent

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. An informal email to info@rzfz.ai is sufficient. The legality of processing carried out before withdrawal remains unaffected.

Right to lodge a complaint

In the event of data protection violations, you have the right to lodge a complaint with the competent supervisory authority. In Austria, this is the Austrian Data Protection Authority.

Right to data portability

You have the right to receive data that we process automatically on the basis of your consent or in fulfillment of a contract, delivered to yourself or to a third party in a common, machine-readable format.

Objection to advertising emails

We hereby object to the use of contact data published as part of the imprint obligation for the purpose of sending unsolicited advertising.

3. Data collection on our website

Cookies and local storage

This website sets no cookies. None of our own and none from third parties — no marketing or tracking cookies either. That is why you will not find a cookie banner here.

We only store three technically necessary values in your browser's local storage (web storage, not cookies): rzfz-lang-redirect-done (stops the language redirect running twice, current session only), rzfz-lang (remembers your language — written only when you use the language switch) and rzfz-stackmap-view (remembers your chosen view of the stack map). None of them contains an identifier that could recognise you, and none is transmitted anywhere. Legal basis: Article 5(3) of the ePrivacy Directive (strictly necessary for the service you requested). You can clear them at any time via your browser's site data.

Server log files

The provider of the pages automatically collects and stores information that your browser transmits automatically in server log files: browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request, IP address. This data is not merged with other data sources. The legal basis is Article 6(1)(f) GDPR (legitimate interest in error-free technical operation).

Contact form

The form on /en/contact/ as well as the contact fly-out on most pages (not on the form and assistant pages themselves) is our own. What you type goes to our server (rzfz.ai) and nowhere else — your browser makes no connection to any third party when the page loads or when you submit. In particular we use no reCAPTCHA and no other captcha service; we keep automated submissions out with a hidden field and a minimum dwell time, so no data is sent to anyone else. A Pipedrive form used to be embedded here; that stopped in August 2026.

From our server we file your enquiry in our CRM, Pipedrive (Pipedrive OÜ, Mustamäe tee 3a, Tallinn 10615, Estonia; Pipedrive Inc., 530 Fifth Avenue, New York, USA), so that we can act on it. We process your name and email address, your company and phone number if you supply them, and your message. Pipedrive acts as our processor (Article 28 GDPR). Legal basis: Article 6(1)(b) GDPR (pre-contractual measures). Pipedrive's privacy policy: https://www.pipedrive.com/en/privacy.

Everything between this contact form and the CRM runs on our own self-hosted infrastructure (the rzfz.ai Stack); no further service provider is involved on that path.

Who sees your enquiry: we notify our sales team by email and send you an automatic acknowledgement to the address you gave us. Those mailboxes are operated by our sister company SEQIS GmbH (Wienerbergstraße 3-5, 1100 Vienna), which handles enquiries on our behalf as our processor. The email service itself is Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland); this may involve transfers to Google LLC in the USA, safeguarded by Standard Contractual Clauses and the EU–US Data Privacy Framework. Google acts as our processor.

Retention: enquiries that do not lead to a business relationship are deleted from the CRM no later than 24 months after the last contact. If a contract results, the periods in "Processing of data (customer and contract data)" apply. Statutory retention obligations are unaffected.

Newsletter

The contact form lets you subscribe to our newsletter, optionally. The box is not pre-ticked, and whether you tick it has no bearing on whether or how we handle your enquiry — tying the two together would not be permissible. Legal basis: your consent under Article 6(1)(a) GDPR.

For this we store your email address, your name, and the exact consent wording you saw when you submitted — the last of these because Article 7(1) GDPR requires us to be able to demonstrate what you consented to. You can withdraw your consent at any time with future effect, via the unsubscribe link in every email or informally to info@rzfz.ai. This does not affect the lawfulness of processing carried out beforehand. Unlike plain enquiries, newsletter data is kept until you withdraw — and the record of consent for as long as we may need to evidence it.

Quick Check

The Quick Check is a questionnaire from whose answers we produce an individual report for you. We process your answers to the Quick Check questions along with the contact details you enter in the final step: first name, last name, company, email address and — if you provide it — phone number. We send the finished report to that address as a PDF. At the same time, a notification containing the same details and the report goes to our sales mailbox so that we are prepared for your follow-up questions. Legal basis: Article 6(1)(b) GDPR (pre-contractual measures taken at your request).

The box for further information is optional and not pre-ticked. If you tick it, the legal basis for that is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time with future effect. Whether you tick it has no bearing on whether or how you receive your report.

Retention: we treat contact details and the report like an enquiry through the contact form and delete them no later than 24 months after the last contact.

Configurator and order enquiries

In the configurator you assemble a quote and can send it to us as an order enquiry or a request for a quote. We process the configuration you chose together with the details an order requires: first name, last name, company, billing address, a differing delivery address where given, VAT identification number, email address, phone number and any free-text notes you add. These details go by email to our sales mailbox; you receive a confirmation with the summary at the address you gave us. Legal basis: Article 6(1)(b) GDPR (pre-contractual measures, or performance of the contract).

Retention: if the enquiry does not lead to a business relationship, we delete it no later than 24 months after the last contact. If a contract results, the periods in "Processing of customer and contract data" apply, as do statutory retention obligations (in particular seven years under § 132 of the Austrian Federal Fiscal Code for invoicing and accounting data).

Anonymous usage statistics

We collect anonymous usage statistics directly through our own website — no cookies, no identifiers, no third-party analytics script, and no way to identify or recognise individual visitors. We record only structured interaction data: which of our assistants (Quick Check, use-case finder, configurator) was started, abandoned or completed, and which selections were made (e.g. chosen package and options). Names, email addresses and other contact details are never part of these statistics. We store the data as anonymous structured records for 24 months with our existing processor Google (see above). Queries entered into the use-case finder and the suggestions generated for them are analysed to improve our offering and deleted after 12 months; please do not enter personal data there. The legal basis is our legitimate interest in improving our offering (Art. 6(1)(f) GDPR).

On individual content pages (including the homepage) we additionally record the time spent per page section in seconds, the maximum scroll depth in percent, and clicks on calls to action, navigation menu items, and the contact widget. These values, too, contain no identifier.

Processing of customer and contract data

We collect, process, and use personal data only insofar as it is necessary for the establishment, content design, or modification of the legal relationship (inventory data). This is done on the basis of Article 6(1)(b) GDPR. The collected customer data will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

4. Embedded content and third-party fonts

Self-hosted fonts (Manrope)

This website uses the Manrope font, which we host ourselves. Your browser makes no connection to Google Fonts or any other font provider when visiting this site.

Hero video

The video on the homepage is delivered from our own infrastructure. No data is transmitted to third parties (e.g., YouTube, Vimeo).

5. Status

This privacy policy was last updated on 2026-08-31. We reserve the right to adjust this statement to reflect changes in our practices or legal requirements. The current version is available on this page.