Privacy Policy
With this Privacy Policy, we inform you about which personal data, also referred to as “data”, we process, for what purposes and to what extent.
This Privacy Policy applies to all processing of personal data carried out by us, particularly in connection with our website, marketing and communication activities, application processes and business relationships.
Additional information on specific processing situations, such as those involving applicants or business partners, may be provided in separate privacy notices.
This Privacy Policy complies with the requirements of the EU General Data Protection Regulation (GDPR) and the revised Swiss Federal Act on Data Protection (revFADP).
All terms used are gender-neutral.
Responsible entities
The neeyo brand is used within the neeyo Group. The individual companies of the neeyo Group remain independent controllers under data protection law.
Controller for the website and central communication activities
The controller responsible for processing personal data in connection with neeyo.io and central marketing and communication activities is:
neeyo Austria GmbH
(formerly DocuMatrix GmbH)
Mühlfeldstraße 4
3441 Einsiedl
Austria
Processing within the scope of operational activities
Where personal data is processed in connection with contractual relationships, services or other operational activities, the company you are in contact with is responsible.
These include in particular:
neeyo Austria GmbH
(formerly DocuMatrix GmbH)
Mühlfeldstraße 4
3441 Einsiedl
Austria
neeyo Deutschland GmbH
(formerly Formware GmbH)
Stangenreiter Street 2
83131 Nußdorf am Inn
Germany
neeyo Switzerland AG
(formerly Documatrix Switzerland AG)
Marktgasse 37
8400 Winterthur
Switzerland
Applications
Applications can be submitted to different companies within the neeyo Group, depending on the advertised position.
If applications are submitted via the website neeyo.io, processing is initially carried out by neeyo Austria GmbH. The company advertising the position is responsible for further processing within the application process.
Data protection contact
For data protection enquiries, you can contact:
neeyo Austria GmbH and neeyo Switzerland AG
EMail: dsb-at@neeyo.io
Postal address: Mühlfeldstraße 4, 3441 Einsiedl, Austria
neeyo Deutschland GmbH
EMail: dsb-de@neeyo.io
Postal address: Stangenreiter Straße 2, 83131 Nußdorf am Inn, Germany
Alternatively, you may contact us at hello@neeyo.io . Your request will be forwarded internally to the responsible company.
Further data protection information
Additional information on the processing of personal data is provided separately for specific processing situations:
Overview of processing
In the scope of our activities, we process, in particular, the following categories of personal data:
- Contact details (e.g., name, email address, company affiliation)
- File and contract data (e.g. customer data, contract information)
- Content data, e.g. messages submitted via contact forms
- Usage and log data (e.g., IP address, browser type, pages visited, access times)
- Technical device data (e.g., operating system, device type)
- Image and video data (e.g., event photos, team depictions, embedded videos)
- Tracking and marketing data (e.g., cookies, LinkedIn Insight Tag, Meta Pixel)
Purposes and legal bases of processing
We process personal data for the following purposes based on the respective legal basis.
Note for Switzerland:
To the extent the revised Swiss Data Protection Act (revDSG) applies, the processing of personal data will occur – depending on the purpose – in particular on the basis of your consent, for the performance of a contract or pre-contractual measures, for the fulfillment of legal obligations, as well as on the basis of overriding legitimate interests (e.g., in the secure and efficient operation of our website and our communication).
Provision and operation of the website
Purpose: Technical provisioning, stability, and security of the website
Legal basis: Art. 6 para. 1 lit. f GDPR
Communication and inquiries
Purpose: Processing contact requests, including applications
Legal basis: Art. 6 (1) (b), (f) GDPR
Contract performance and business development
Purpose: Customer and prospect care, and initiation of business relationships
Legal basis: Art. 6 (1) (b), (f) GDPR
Analysis and optimization of the website
Purpose: Usage analysis and reach measurement
Legal basis: Art. 6(1)(a) GDPR
Marketing and sales
Purpose: Direct marketing, remarketing, and sending newsletters
Legal basis: Art. 6(1)(a) GDPR
Measuring the success of marketing activities
Purpose: Analysis of the effectiveness of marketing measures (e.g., conversion tracking)
Legal basis: Art. 6(1)(a) GDPR
Public relations and company presentation
Purpose: Company presentation (e.g., images, videos, testimonials)
Legal basis: Art. 6(1)(a), (f) GDPR
Security measures
Purpose: Protection against abuse and attacks
Legal basis: Art. 6 para. 1 lit. f GDPR
General information on data processing
Security measures
We take appropriate technical and organizational measures to protect personal data from loss, misuse, and unauthorized access.
Data is transmitted in encrypted form (e.g. via HTTPS/TLS).
Recipients and disclosure of personal data
Personal data will only be passed on if this is necessary for the fulfillment of contractual obligations, there is a legal obligation, consent has been given, or there is a legitimate interest.
Recipients can include, in particular, IT service providers, hosting providers, and providers of analytics, marketing, or embedded content. With these, data processing agreements in accordance with Art. 28 GDPR.
The transfer of personal data within the neeyo Group may occur to the extent necessary for the respective processing purposes. The respective company remains responsible under data protection law.
International data transfers
If personal data is processed in countries outside the EU, EEA, or Switzerland, this will only be done in compliance with the legal requirements.
For data transfers to third countries, particularly to the USA, we primarily use providers certified under the EU-U.S. Data Privacy Framework (DPF).
Where necessary, we use additional appropriate safeguards, in particular the European Commission’s Standard Contractual Clauses (SCCs). For data transfers under Swiss data protection law, appropriate adjustments (e.g., the Swiss Addendum) are taken into account.
Data storage and deletion
Personal data is stored only for as long as is necessary for the respective processing purposes or as required by statutory retention obligations.
If the processing purposes are no longer applicable or consent is withdrawn, the data will be deleted, unless statutory retention obligations or legitimate interests preclude this.
Statutory retention obligations arise in particular from commercial and tax law regulations.
Specific processing activities
Provision of the online offering and web hosting
To provide our online services and to ensure the secure and stable operation of the website, we process users' personal data.
Technical access data is processed in particular, which is required to deliver content correctly and to ensure the security and functionality of the website. This includes, in particular, IP address, date and time of access, pages accessed, browser and device information, and technical log data.
Server log files
On every access to our website, server log files are automatically recorded. These contain in particular:
- IP address
- Date and time of access
- Pages or files accessed
- Amount of data transferred
- Browser type and version
- Operating system
- Referrer URL
Processing is carried out to ensure technical safety and stability, as well as to prevent misuse.
The log files are stored for a limited period and deleted after 30 days at the latest, unless statutory retention obligations or legitimate interests prevent this.
For the operation of the website, we use external service providers who process personal data on our behalf. Where necessary, we have concluded order processing contracts with them in accordance with Art. 28 GDPR.
If processing takes place in third countries, the protective measures described in the “International Data Transfers” section apply.
Processing is carried out on the basis of the legal bases described in the section. “Purposes and legal bases of processing”.
Cookie and consent management
We use cookies and similar technologies on our website to ensure the functionality, security, and user-friendliness of our online offering, as well as - if consent is given - to provide analysis and marketing functions.
Cookies are small text files that are stored on your device or read information from your device. Some cookies are technically necessary, while others serve optional purposes.
Cookies are used in accordance with legal requirements. Technically necessary cookies are used on the basis of legitimate interests. Any other cookies are set only with prior consent. Consent can be revoked or modified at any time via the cookie settings.
We use a consent management tool for obtaining and managing consents. This tool processes in particular information about consents that have been granted or withdrawn.
For the operation of consent management, we use external service providers who process personal data on our behalf. Where necessary, we have data processing agreements with these providers in accordance with Art. 28 GDPR.
If processing takes place in third countries, the protective measures described in the “International Data Transfers” section apply.
Processing is carried out on the basis of the legal bases described in the section. “Purposes and legal bases of processing”.
Contact form and enquiry management
When you contact us via our contact form, email, or other communication channels, we process the personal data transmitted within the scope of the inquiry to process and respond to your request.
For this purpose, we process information such as name, contact details, and the content of the inquiry. Mandatory fields are marked as such, as they are required for processing.
For the provision of our contact form, we use the service Heyflow (Heyflow GmbH, Germany). The data entered via the form will be transmitted to our systems for processing your request and further processed there.
Processing is carried out for the purpose of communication, handling of requests, as well as for the execution of pre-contractual measures and the initiation of contractual relationships.
We use external service providers to collect and process inquiries; these providers process personal data on our behalf. Where necessary, we have entered into data processing agreements with them in accordance with Article 28 of the GDPR. If processing takes place in third countries, the safeguards described in the section “International Data Transfers” apply.
Processing is carried out on the basis of the legal bases described in the section. “Purposes and legal bases of processing”.
Newsletter
When you subscribe to our newsletter, we process personal data in order to send you regular updates about our services, offers and content.
As part of the registration process, we process, in particular, your email address, as well as the time of registration and confirmation. Additional information—if provided voluntarily—may be used for personalization purposes. This processing also serves to document your consent.
For sending and managing our newsletter, we use the service Brevo (Brevo GmbH, Germany). We have a data processing agreement with Brevo in accordance with Art. 28 GDPR. The data collected during registration is processed via Brevo.
To improve our newsletter, we track whether it is opened and which content is clicked on. No automated decision-making or profiling takes place.
You can revoke your consent at any time, for example, via the unsubscribe link at the end of each newsletter or by notifying hello@neeyo.io.
If processing takes place in third countries, the protective measures described in the „International Data Transfers“ section shall apply.
Processing is carried out on the basis of the legal bases described in the section. “Purposes and legal bases of processing”.
Communication via social media
We maintain online presences on social networks, in particular LinkedIn (LinkedIn Ireland Unlimited Company, Ireland) and Instagram (Meta Platforms Ireland Limited, Ireland). If you contact us through these platforms (e.g., via direct messages, comments, or other interactions), we process the personal data transmitted in this process to handle and respond to your request.
In particular, we process your profile name, communication content, and other information that you provide to us when you contact us.
Please note that when using social networks, personal data is also processed by the respective platform operators. This processing is the sole responsibility of the providers and is beyond our control.
If processing takes place in third countries when using these services, the protective measures described in the section “International Data Transfers” apply.
Processing is carried out on the basis of the legal bases described in the section. “Purposes and legal bases of processing”.
Web analytics, monitoring and optimization
We use analysis and monitoring tools to evaluate user behavior on our website and to continuously optimize our online services.
This involves collecting information about how visitors use our website, which content is accessed, and how users navigate the site. The processing is generally pseudonymized. IP addresses are truncated or otherwise technically anonymized.
In this context, we use Google Analytics (Google Ireland Limited, Ireland) for the evaluation of website usage and the Google Tag Manager (Google Ireland Limited, Ireland) for the technical integration of analysis and marketing services.
The use of these tools is exclusively carried out if you have previously given your consent via the cookie banner. Without consent, no corresponding processing will take place.
For the use of analysis and monitoring tools, we use external service providers who process personal data on our behalf. Where necessary, we have data processing agreements with these providers in accordance with Art. 28 GDPR. If data processing takes place in third countries, the protective measures described in the section „International Data Transfers“ apply.
Processing is carried out on the basis of the legal grounds described in the section „Purposes and Legal Bases for Processing“. Further information on cookies and consents can be found in the „Cookies“ section.
Identification of company visitors
To optimize our sales and marketing processes in the B2B sector, we process information about which companies visit our website.
For this purpose, the IP address is processed and matched with publicly accessible and commercially available company databases to enable an assignment to a company.
No identification of individual natural persons takes place. No direct personal contact data such as names or e-mail addresses are collected, and no individual personal usage profiles are created.
For this, we use the Permagroup service (Permagroup, Switzerland).
You have the right to object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). You may submit your objection at any time by email to hello@neeyo.io turn.
For the use of corresponding technologies, we engage external service providers who process personal data on our behalf. Where necessary, we have concluded order processing agreements with these providers in accordance with Art. 28 GDPR. If data processing takes place in third countries, the protective measures described in the section „International Data Transfers“ apply.
Processing is carried out on the basis of the legal bases described in the section. “Purposes and legal bases of processing”.
Online marketing and conversion tracking
We use online marketing and tracking technologies to manage our advertising efforts and measure their success.
This allows us to understand if users take specific actions on our website after clicking on an ad (so-called conversion tracking). Furthermore, these technologies can be used to display interest-based advertising to users on other websites or platforms (remarketing).
In this context, we use Google Ads (Google Ireland Limited, Ireland), the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company, Ireland) as well as the Meta Pixel (Meta Platforms Ireland Limited, Ireland).
As part of the use of these services, cookies and similar technologies may be used, and pseudonymous usage data may be processed. No directly identifiable data, such as names or email addresses, is processed.
The use of these technologies will only occur if you have previously given your consent via the cookie banner.
For the use of online marketing and tracking technologies, we use external service providers who process personal data on our behalf. To the extent necessary, we have data processing agreements with these providers in accordance with Art. 28 GDPR.
If processing takes place in third countries, the protective measures described in the “International Data Transfers” section apply.
Processing is carried out on the basis of the legal grounds described in the section „Purposes and Legal Grounds for Processing“. Further information on cookies and consents can be found in the section „Cookies and Similar Technologies“.
Application procedure
Our website features a careers page where you can apply for open positions.
If you apply through our website or by other means, we process the personal data transmitted as part of the application to carry out the application procedure. This includes, in particular, contact details and application documents (e.g., resume, cover letter, certificates).
For the provision of the career page and the execution of the application process, we use the service Personio (Personio SE & Co. KG, Germany). The transmitted data will be processed via this service and forwarded to the respective responsible company within the neeyo Group.
For the deployment of corresponding systems, we engage external service providers who process personal data on our behalf. Where necessary, we have entered into order processing agreements with these providers in accordance with Art. 28 GDPR. If data processing takes place in third countries, the protective measures described in the „International Data Transfers“ section apply.
For further information on the processing of personal data in the context of the application process, particularly regarding purposes, legal bases, storage duration, and your rights, please refer to the „Further Data Protection Information“ section.
Processing is carried out on the basis of the legal bases described in the section. “Purposes and legal bases of processing”.
Login area and software usage (suite.neeyo.io)
Under the subdomain suite.neeyo.io, we provide a login area for using our software.
As part of registration and use of this area, personal data will be processed, in particular login credentials and technical access data.
The processing of personal data in connection with the use of the software is carried out on the basis of the applicable contractual agreements and the relevant privacy notices.
Rights of the data subjects
Data subjects have the following rights under the applicable data protection laws. These rights may be exercised if the respective legal requirements are met.
Rights under the GDPR
As a data subject, you have the following rights under the General Data Protection Regulation (GDPR) in particular:
- Right of access (Article 15 GDPR): You have the right to request information about whether and what personal data we process about you.
- Rectification (Art. 16 GDPR): You can request the correction of inaccurate personal data or the completion of incomplete personal data.
- Erasure (Art. 17 GDPR): You have the right to request the erasure of your personal data.
- Restriction of processing (Art. 18 GDPR): You can request the restriction of processing.
- Data portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, common, and machine-readable format or to have it transferred to another controller.
- Objection (Art. 21 GDPR): You can object to the processing of your data at any time for reasons arising from your particular situation. If processing is carried out for direct marketing purposes, you can object at any time without giving reasons.
- To exercise your right to object, you can contact us at any time at hello@neeyo.io .
- Withdrawal of consents (Art. 7(3) GDPR): You can withdraw a consent you have given at any time with effect for the future.
- Complaint to a supervisory authority (Art. 77 GDPR): You have the right to lodge a complaint with a data protection supervisory authority.
You may contact us at any time to exercise your rights: hello@neeyo.io .
Rights under the Swiss Federal Act on Data Protection (revFADP)
Affected individuals with a connection to Switzerland have the following rights in particular under the revised Swiss Federal Act on Data Protection (revFADP):
- Information about the processing of your personal data
- Provision or transfer of your personal data in a commonly used electronic format
- Correction of incorrect personal data
- Erasure, destruction, or restriction of processing, provided that no legal obligations or overriding interests oppose it
- Complaint to the Federal Data Protection and Information Commissioner (FDPIC)
Privacy policy changes
We reserve the right to amend this privacy policy to adapt it to changed legal requirements or changes in our services and processing.
The current version is available at any time on this website.
Status of the privacy policy
As of: May 2026