Privacy policy
The German version is legally authoritative. This English text is provided for convenience. Datenschutzerklärung
At a glance
- We use contact and project data to reply and deliver studio services.
- No ad tracking, no data sales, no use of your recordings to train AI.
- Session files are kept for 18 months, then deleted on schedule.
- Questions: [email protected] or 01 545 08 23 — we usually reply within 2 business days.
1. Who is responsible
Nocentcetra GmbH (“we”), a limited liability company (GmbH), registered at Margaretenstraße 78, 1050 Wien, Austria, is the controller for personal data processed through nocentcetra.digital and our recording studio work in Vienna.
Managing director: Stefan Hofer. VAT ID: ATU66152922. Company register: FN 591205 p, court: Handelsgericht Wien.
We comply with Regulation (EU) 2016/679 (GDPR), the Austrian Data Protection Act (DSG) and, where relevant, the Telecommunications Act on cookies and electronic communications. We are not required to appoint a data protection officer; for privacy matters contact [email protected] or 01 545 08 23.
2. Scope
These rules apply if you browse nocentcetra.digital, send us a message, or book time in our Margareten rooms for vocals, mixing, mastering, full-band days or podcast tables.
When we capture guests or narrators for your company or label, you remain the controller and we process on your instructions under the data processing agreement.
Fees, cancellation and payment sit in the terms and conditions; registration data is in the legal notice.
3. Data we collect
Contact form and email: name, email, optional phone, requested service (e.g. Vocal recording or Podcast recording), optional preferred date and project notes. Required fields are marked; without them we cannot prepare a meaningful quote.
Booking and delivery: billing details, artist or band name, track lists, scheduling messages, bank references. Card payments at the studio go through our bank’s terminal; we do not store full card numbers.
Recordings: voice and performance are personal data when you can be identified. We use them only to deliver the booked service and for agreed archiving.
Technical data: host World4You Internet Services GmbH keeps server logs (IP address, time, page, browser) to run the site securely. Your tracker choice is stored locally (key ncnt_consent_v1).
We do not ask for special-category data under Art. 9 GDPR. Bookings for people under 16 require consent from a legal guardian.
4. Purposes, legal bases and retention
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Replies and quotes | Form, correspondence | Art. 6(1)(b) GDPR — pre-contract steps | Up to three years after last contact if no contract is signed |
| Contract performance | Identity, contact, project, schedule | Art. 6(1)(b) GDPR | For the relationship plus limitation periods |
| Session file archive | Recordings, project folders | Art. 6(1)(b) GDPR | 18 months after the last relevant session unless agreed otherwise |
| Invoices and accounting | Billing and payment data | Art. 6(1)(c) GDPR — legal obligation | Seven years from the accounting year (typical for business records in Austria) |
| Website security | Host log files | Art. 6(1)(f) GDPR — legitimate interest | According to the host’s standard log retention |
| Cookie choice storage | ncnt_consent_v1 in the browser | Art. 6(1)(c) GDPR with TKG 2021 | 182 days |
We do not sell or rent data. There is no newsletter or advertising email. We do not use marketing trackers on nocentcetra.digital.
5. Voice, image and AI
Your voice and likeness are protected under Austrian privacy law. We do not publish audio excerpts, session photos or client names on the website or social channels without your prior written consent.
Material from paid sessions is never fed into machine-learning or generative models for our benefit, and we do not build synthetic doubles of a performer unless that person signs a separate written release.
If you film or photograph during a session, you remain responsible for image rights in that material.
6. Recipients
Only the studio team described on About us can access personal data, and only for their tasks.
- World4You Internet Services GmbH — website hosting in Austria;
- FormSubmit (formsubmit.co) — forwards the contact form to our inbox;
- Accountant — invoicing data under professional confidentiality;
- Bank — transfers and card terminal;
- Authorities — when the law requires it.
Processors are bound by Art. 28 GDPR contracts. B2B clients: see our DPA.
7. Transfers outside the EEA
Hosting runs through providers in Austria or the EU. When you submit the contact form, content is routed via FormSubmit (operated partly from the United States). Access from countries without an adequacy decision cannot be ruled out.
We rely on Art. 49(1)(b) GDPR because the transfer is necessary for pre-contractual steps you request. To avoid it, email [email protected] or call 01 545 08 23 directly — we handle your request the same way.
8. Security
We use appropriate measures: HTTPS, restricted access to studio systems, individual accounts, encryption on portable media where practical, and locked premises in Margareten outside opening hours (Mon–Fri 10–20, Sat 10–16).
If a breach is likely to affect your rights, we notify the Austrian Data Protection Authority and you when required by the GDPR. No internet transmission is completely risk-free; once data reaches us, our internal safeguards apply.
9. Your rights
Where the conditions are met, you may exercise:
- access (Art. 15 GDPR);
- rectification (Art. 16);
- erasure (Art. 17);
- restriction (Art. 18);
- data portability for data you provided (Art. 20);
- objection to processing based on legitimate interests (Art. 21);
- withdrawal of consent for the future (Art. 7(3)).
Contact [email protected] or our postal address. We usually reply within one month; complex cases may take two more months, and we will tell you. Requests are generally free; manifestly unfounded or excessive requests may be charged under the GDPR.
You may lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb.gv.at. Please contact us first — most issues are resolved quickly in dialogue.
10. Cookies
See our cookie policy for categories and settings. In short: no analytics or advertising cookies; only your consent choice under ncnt_consent_v1 for 182 days. Change it anytime via .
11. External links
The site links to third-party services such as OpenStreetMap on the contact page. Their privacy policies apply; we do not control their processing.
12. Updates
This policy describes our practices; it does not limit statutory rights. We update it when services, tools or law change. The version on this page with effective date 15 October 2026 applies.
Nocentcetra GmbH, Margaretenstraße 78, 1050 Wien — [email protected]. Services from €105 on Services; FAQ for common questions.