Privacy Policy

Last updated: 15th January 2026

This Privacy Policy describes how zentravolixiuma.top AG ("we", "our", or "us") collects, uses, and protects your personal information when you visit our website zentravolixiuma.top or use our medical aesthetic equipment financing services.

Data Controller Information

The data controller for your personal information is:

Data Collection

The data we collect from you may include the following types of personal information:

• Contact Information: Name, email address, phone number, postal address
• Business Information: Company name, practice type, professional details
• Financial Information: Information related to financing applications and creditworthiness
• Communication Data: Records of correspondence, enquiries, and support requests
• Technical Data: IP address, browser type, device information, website usage data
• Marketing Data: Preferences for receiving marketing communications

How We Use Your Information

We use of your data for the following purposes, based on legitimate business interests and legal obligations:

• Providing medical aesthetic equipment financing guidance and services
• Processing and evaluating financing applications
• Communicating with you about our services and your enquiries
• Improving our website functionality and user experience
• Complying with legal and regulatory requirements
• Preventing fraud and ensuring security
• Sending marketing communications (with your consent)

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: For marketing communications and optional services
• Contract: To provide financing services and fulfil our obligations
• Legitimate Interests: To improve our services and prevent fraud
• Legal Obligation: To comply with financial regulations and legal requirements

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our cookie usage, please refer to our Cookie Policy.

Data Sharing and Third Parties

We may share your personal information with:

• Financial institutions and lenders for financing applications
• Professional service providers (legal, accounting, consulting)
• Technology service providers (hosting, analytics, customer support)
• Regulatory authorities when required by law
• Business partners involved in equipment financing transactions

We ensure all third parties maintain appropriate data protection standards and use your information only for specified purposes.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure adequate protection through:

• European Commission adequacy decisions
• Standard contractual clauses
• Binding corporate rules
• Other appropriate safeguards as required by GDPR

Data Retention

We retain your personal data for different periods depending on the purpose:

• Contact enquiries: Up to 3 years from last contact
• Financial applications: 7 years for regulatory compliance
• Marketing data: Until consent is withdrawn or 3 years of inactivity
• Website analytics: 26 months maximum
• Legal documents: As required by applicable law

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access: Request copies of your personal data
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a structured format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for marketing communications

To exercise any of these rights, please contact us using the details provided below.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Secure data processing and storage facilities
• Incident response procedures

Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out to us:

Supervisory Authority

You have the right to lodge a complaint with the Austrian Data Protection Authority if you believe we have not handled your personal data in accordance with data protection law: