Privacy policy – Noscat Pharma GmbH
As of March 2026
Noscat Pharma GmbH, Wallnerstraße 4, 1010 Vienna (“NOSCAT“, “we“, “us“) takes the protection of your personal data very seriously. Therefore, compliance with data protection regulations, in particular the General Data Protection Regulation (“GDPR“), the Austrian Data Protection Act (“DSG“) and the Telecommunications Act 2021 (“TKG 2021“), is a matter of course for us.
Personal data is information about data subjects (natural persons) whose identity is determined or at least determinable (eg name, email address or IP address). This privacy policy informs you about the nature, scope and purposes of the collection and processing of your personal data in connection with your visit to and use of our website.
Data of the controller:
Name: Noscat Pharma GmbH
Address: Wallnerstraße 4, 1010 Vienna
Email address: office@noscat.at
1. What data do we collect from users of our website?
Contacting us
Data categories and purpose: When you contact us via our email address or our contact form, we process your personal data (name, email address or telephone number, as well as the content of your enquiry, further correspondence regarding your enquiry; in the case of accreditations, your profession and company are also included) for the purpose of processing and responding to your enquiry.
Legal basis: The legal basis is the fulfilment of our (pre-)contractual obligations in accordance with Art 6 para 1 lit b GDPR or our legitimate interests in accordance with Art 6 para 1 lit f GDPR in the rapid processing and response to any queries.
We forward your enquiries concerning a specific product or manufacturer directly to the relevant manufacturer. We will inform you of the identity of the specific manufacturer responsible immediately after forwarding your enquiry. In connection with such enquiries, we act as a processor for the respective manufacturer, who is the data controller responsible for the processing of your personal data. It cannot be ruled out that your message may contain health-related information that allows conclusions to be drawn about your state of health and thus constitutes special categories of personal data within the meaning of Art 9 GDPR. We also process this data exclusively as a processor on behalf of and on the instructions of the manufacturer responsible.
Storage period: We store your data for a period of six months when you contact us so that we can respond appropriately to any follow-up questions. A longer storage period only occurs if a business relationship ensues, due to legal retention obligations or for defence in any legal disputes. We delete product- or manufacturer-related enquiries immediately after forwarding them to the manufacturer.
Provision of the website and creation of log files
Data categories and purpose: The following technically necessary data within the meaning of Sec 165 para 3 TKG 2021 is automatically collected during your visit to our website to display the website to you and to ensure its stability and security:
- Information about the browser type and version used,
- the user’s operating system,
- the user’s internet service provider,
- the user’s IP address,
- date and time of access,
- content of the request (specific page),
- websites from which the user’s system accesses our website.
Legal basis: All this data is transmitted by your web browser when you visit our website. We process this data solely for the purpose of providing the website and for operational security, and it is therefore technically necessary within the meaning of Sec 165 para 3 of the Austrian Telecommunications Act 2021 (TKG 2021). This processing is based on our legitimate interests pursuant to Art 6 para 1 lit f GDPR and includes logging system usage, user authorisation processes and evaluation of server logs for problem analysis.
Storage period: We generally store your usage data when you visit the website for a maximum period of one year. This data is not stored together with other personal data of the user.
- Cookies
A complete list of cookies can be found in the cookie banner. The cookie banner appears automatically when you first visit our website. You can also access the cookie banner at any time via the menu item “Cookies” in the footer of the website. Further information on the use of cookies can also be found in our Cookie Policy.
2. Recipients of personal data
We treat your personal data as confidential. That is why we deliberately keep the circle of recipients of your data small.
We use service providers to operate our website and app, who have access to personal data in order to provide the services commissioned. Our processors are primarily providers of IT services:
- Software and service providers as well as providers of tools and solutions that support us in providing the website and our services,
- general IT administration (including support, software and maintenance, data centre).
These processors only process your data on our behalf, based on our instructions and for the purpose of providing the above-mentioned services. We have concluded agreements with all our processors in accordance with Art 28 GDPR.
In addition, we may transfer your personal data to the following recipients to the extent necessary in specific cases:
- to external third parties to the extent necessary based on our legitimate interests (eg auditors, debt collection agencies, insurance companies in the event of an insurance claim, legal representatives in the event of a legal dispute, etc);
- to authorities and other public bodies to the extent required by law (eg tax authorities, data protection authorities, etc).
Your personal data will not be passed on to any other third parties for their own purposes without your consent.
3. Storage period
We only store your personal data for as long as we need it to fulfil the purposes described above. Once we no longer need your personal data, we delete it from our systems or anonymise it so that you can no longer be identified.
Information on the specific storage periods can be found above under the respective purpose.
If the data processing is carried out in the legitimate interest of us or a third party, your personal data will be deleted as soon as this interest no longer exists, unless we are obliged to store it for a longer period due to legal retention obligations. This also applies to data processing based on consent. As soon as you revoke this consent for the future, the personal data will be deleted immediately, unless there is a legal retention obligation that requires longer storage.
In addition, we consider statutory limitation periods, which, for example, according to the General Civil Code (ABGB), are generally 3 years, in certain cases up to 30 years (Sec 1489 ABGB).
We store your data in connection with the exercise of data subject rights for 18 months as evidence of the completion of your request based on our legitimate interests (Art 6 para 1 lit f GDPR).
This applies without prejudice to cases in which longer storage is necessary for legal disputes, enquiries from the competent authorities or under applicable law.
4. International data transfers
Your personal data may be transferred to countries outside the European Union (EU) or the European Economic Area (EEA) that offer an adequate level of data protection, as determined by adequacy decisions of the European Commission (https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en).
The transfer of your personal data to countries that are not members of the EU/EEA and do not guarantee an adequate level of protection will only take place if the controller and the recipients of the data have concluded the European Commission’s Standard Contractual Clauses (SCCs) as adequate safeguards for the protection of your personal data, a transfer impact assessment has been carried out and supplementary security measures have been implemented, or you have given your express voluntary consent.
5. Data security
We have taken appropriate technical and organisational security measures within the meaning of Art 32 GDPR to ensure the confidentiality and security of your personal data.
6. Rights of data subjects
You have the right to obtain information about your personal data processed by us as the controller (Art 15 GDPR). In addition, you have the right to have inaccurate data corrected and your data deleted (“right to be forgotten”) (Art 16 and 17 GDPR). You may also have the right to restrict the processing of your data (Art 18 GDPR) and the right to receive the data you have provided in a structured, commonly used and machine-readable format (“data portability”, Art 20 GDPR). In addition, you can revoke your voluntary consent to the processing of personal data at any time with effect for the future, eg by sending an email to office@noscat.at (Art 7 para 3 GDPR).
Furthermore, you have the right to object to direct marketing measures and to data processing at any time for reasons arising from your particular situation (Art 21 GDPR). In this case, we will refrain from further processing your personal data unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, and if the processing serves to assert, exercise or defend legal claims.
If you believe that we are processing your personal data unlawfully, you also have the right to lodge a complaint with the competent supervisory authority or to seek a judicial remedy (Art 77 GDPR). In Austria, this is:
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Email: dsb@dsb.gv.at
You can also lodge a complaint with the supervisory authority of the EU country in which you have your habitual residence or work, or with the supervisory authority of the place where the alleged infringement took place.
To exercise these rights, you can contact us at any time, for example by emailing office@noscat.at.
7. Changes
Further development of our services may lead to changes. We will, of course, keep this privacy policy up to date and adapt it if necessary. We provide the currently valid version of the privacy policy on our website noscat.at and will notify you separately of any significant changes. We also recommend that you regularly check the current version.