Privacy policy

1. Controller

The controller responsible for personal data processed through this website is:

Email: hello@voxsuprema.com
Telephone: +43 681 10892871

2. Hosting and server logs

This website is hosted by Namecheap, Inc., 4600 East Washington Street, Suite 300, Phoenix, AZ 85034, USA, on infrastructure located in the United States. When the website is accessed, the host processes technically necessary data, particularly the IP address, access time, requested file, transferred data, referrer, browser, operating system and access status.

Processing is necessary for the secure, stable and error-free operation of the website and is based on our legitimate interests under Article 6(1)(f) GDPR. Logs are retained only as long as required for operation, security, troubleshooting and legal obligations.

The performance excerpts shown on the website are delivered locally through the same hosting infrastructure. Playing them therefore creates no additional connection to a video platform; only the server-log data described above is generated.

For processing in the United States, Namecheap relies on Standard Contractual Clauses under Article 46 GDPR contained in its data processing agreement. Further information: Namecheap Data Processing Addendum and Namecheap Hosting Privacy Policy.

3. Contact form, email, telephone and WhatsApp

When you use the contact form or email, we process the information you provide, particularly your name, email address and message, to answer your enquiry and prepare a possible lesson arrangement. The required fields are necessary so that we can respond.

The legal basis is Article 6(1)(b) GDPR for pre-contractual steps and performance of a contract, and otherwise Article 6(1)(f) GDPR based on our legitimate interest in handling enquiries. Confirming that you have read this policy is not consent to processing the enquiry.

Form messages are forwarded through Namecheap’s hosting and mail infrastructure to a Microsoft Outlook mailbox. Processing may therefore be carried out by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, and affiliated companies. For transfers to third countries, Microsoft states that it uses applicable adequacy decisions and Standard Contractual Clauses. Further information is available in the Microsoft Privacy Statement.

Enquiries that do not result in lessons are generally deleted within six months. Data relating to booked and invoiced services may be retained for seven years because of tax and business-law obligations, or longer where necessary to establish or defend legal claims.

If you use the WhatsApp link, a connection is made to WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. WhatsApp may also process data in third countries and refers, among other safeguards, to the EU-US Data Privacy Framework and Standard Contractual Clauses. Its privacy information also applies. For confidential or particularly sensitive information, please use email or the contact form instead.

4. Privacy settings and necessary browser storage

Non-essential storage and functions requiring consent are activated only after your active choice. The Google tag may already load beforehand with storage permissions denied by default; cookieless measurement signals may be sent to Google as described in section 5. Your selections for statistics, Google Ads conversion measurement and external media are stored in your browser’s local storage under “vox-suprema-consent-v6” and requested again after no more than 180 days. The entry contains only your choices and the time they were saved and is not transmitted to us.

Storage of the selection is technically necessary to respect your decision and is based on Section 165(3) Austrian Telecommunications Act 2021. Consent is additionally based on Article 6(1)(a) GDPR. You can change or withdraw your choice at any time through “Privacy settings” in the footer.

5. Google Analytics 4 and Google Ads conversion measurement

After your consent, we use Google Analytics 4 with measurement ID G-P9KY0GQBEV, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It helps us understand how visitors find and use the website. The Analytics property is linked to our Google Ads account. The “generate_lead” event may be imported as a Google Ads conversion so that we can measure campaign performance.

Processed data may include technical IP information, device and browser information, approximate location, language, referrer, visited pages, visit times, session duration and interactions. We do not send names, email addresses or other directly identifying form data to Google Analytics.

After consent, Analytics may set the first-party cookies “_ga” and “_ga_<measurement-id>” for up to two years. User-level and event-level retention in the Analytics property is set to 14 months. Google Signals and personalised advertising are disabled by the website configuration.

Processing that uses cookies or comparable storage technologies is based on your consent under Article 6(1)(a) GDPR and Section 165(3) Austrian Telecommunications Act 2021. The Google tag is technically loaded with storage permissions denied by default. Before you consent, no Analytics or advertising cookies are set; however, Google may receive cookieless measurement signals through Advanced Consent Mode. Analytics storage is granted only after you consent to statistics. Advertising storage and advertising user-data parameters are granted only if you also consent to conversion measurement. The personalised-advertising parameter always remains denied; Google Signals and personalised advertising features are not used.

Data may be transferred to Google LLC in the United States. Google refers, among other safeguards, to the EU-US Data Privacy Framework and Standard Contractual Clauses. Further information: Google Privacy Policy and Analytics privacy information.

6. Contentsquare

After you consent to “Statistics”, we use Contentsquare, a service for analysing how our website is used and how users interact with it. The service is loaded only after you explicitly allow statistics. The provider is Content Square SAS, 7 rue de Madrid, 75008 Paris, France.

Contentsquare may process information such as pages visited, navigation paths, clicks, scrolling behaviour, interactions, technical device and browser information, referrer information and session information. Depending on the features enabled, interactions may also be analysed through session replay. We do not use Contentsquare to analyse names, email addresses or other directly identifying information entered in the contact form.

Contentsquare uses first-party cookies for analytics. These include in particular “_cs_id”, which has a fixed lifetime of 13 months, and “_cs_s”, which has a 30-minute lifetime and is renewed with user activity. Additional Contentsquare cookies may be used depending on the features enabled.

The legal basis is your consent under Article 6(1)(a) GDPR together with Section 165(3) Austrian Telecommunications Act 2021. If you do not consent to statistics, the Contentsquare script is not loaded. You can withdraw your consent at any time for the future through “Privacy settings” in the footer.

Further information is available in the Contentsquare Privacy Center and the Contentsquare cookie documentation.

7. Instagram and Spotify content

Embedded Instagram videos load only after your consent. A connection is then made to services of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. This may involve processing your IP address, browser and device information, the page viewed and interaction data and may link the visit to an existing Meta account. Meta may also process data in the United States and refers, among other safeguards, to the EU-US Data Privacy Framework and Standard Contractual Clauses.

The embedded Spotify player also loads only after your consent. A connection is then made to Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden. Spotify may process your IP address, browser and device information, the page viewed and usage data and may link the visit to an existing Spotify account. Spotify may also process data outside the EEA and refers, among other safeguards, to adequacy decisions and Standard Contractual Clauses.

The legal basis is Article 6(1)(a) GDPR together with Section 165(3) Austrian Telecommunications Act 2021. Without consent, only local placeholders and external links are shown. Further information: Instagram Privacy Policy and Spotify Privacy Policy.

8. External links

This website contains links to third-party services, particularly Instagram, Spotify, WhatsApp and Google Maps. A connection to the respective provider is made only after you click such a link. From that point, the destination provider is responsible for its processing.

9. Your rights

Subject to the legal requirements, you have rights of access, rectification, erasure, restriction, portability and objection. You may withdraw consent at any time for the future. Contact hello@voxsuprema.com to exercise your rights.

You may also lodge a complaint with a data protection authority. In Austria, this is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.

10. Automated decisions and security

No solely automated decision-making or profiling takes place. We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access.

11. Changes

This policy will be updated if the website, services used or applicable law changes. Version: 23 September 2026.