Data protection policy
How we make sure that your data stays safe
General data usage
Thank you very much for your interest in our products and services. The security of your personal data is crucial for us. Therefore, we would like to inform you about our data protection measures.
Our data protection measures concern your personal data such as your name, postal address, email address, phone number or usage data such as your IP address. Whenever we need to collect and save some of your personal data, we will ask for your explicit agreement.
Scope of data collection and data storage
Inquiry handling
We require your personal data for services such as answering individual inquiries via email or our website forms (e.g. product and compatibility information, purchasing advice, technical support), warranty & RMA procedures, providing spare parts and mounting kits or for sending you our newsletters. The data you provide, which can include name, email address, contact details, product information, attachments (e.g. images, invoices,) may be processed by our ERP/CRM system (Odoo, self-hosted) and customer support system (Freshdesk). Freshdesk covenants that its platform and service are fully compliant with the General Data Protection Regulation of the European Union.
After closing the case of your inquiry (e.g. general questions, service inquiries, warranty requests, etc.), we save your data so that we can process future inquires more quickly and in order to guarantee the best possible service quality.
Emails
For sending emails (e.g. confirmations of receipt, shipping confirmations, transmission and answering of support inquiries), we either use our own outgoing mail server (SMTP) or Mailjet (Sinch Email / Sinch Group) as external service provider, who covenants that their processes and data protection measures are compliant with the General Data Protection Regulation of the European Union. In this case, your email address and the content of the emails are transferred to said service provider for sending the email.
Shipping
If you request that we send you spare parts, mounting kits or other products, we collect and save your data only as far as it is necessary to process your request. For this purpose, we may forward your personal data to logistic and shipping service providers (e.g. postal services or courier companies such as DHL, UPS or FedEx) that are involved in the shipping process . These partners receive only the data necessary to fulfil their task and are obliged to handle it securely and in compliance with applicable data protection laws.
Payment
For payments (e.g. for express shipping fees), we use Stripe Payments Europe Ltd. Payment data is processed directly by Stripe. We do not store or have access to complete credit card information. For details, please refer to Stripe’s privacy policy.
Hosting and file uploads
Our website is hosted on servers provided by Vercel Inc. and integrated with Neon.tech and Hetzner for backend services. In this context, technical data such as IP addresses and access requests are processed to ensure the secure and reliable operation of the website.
Our service providers operate in compliance with the GDPR and implement industry-standard encryption, access controls, and other technical and organizational measures to protect your data.
Uploaded files in our web forms (e.g. product images or invoices) may be stored temporarily on Google Cloud Storage before forwarding them to our internal systems, to ensure proper form delivery. Temporary file storage is deleted daily.
Analytics consent
Our website uses cookies and similar technologies to provide essential functions and to analyse usage data. Non-essential cookies are only set after you provide consent. You can change or withdraw your consent at any time in the consent preferences.
Qe set a cookie to document the time and date of your consent preferences. Whenever we make significant changes to the tools, purposes, or categories covered by our consent banner, we update its version and will ask you to renew your consent.
In order to optimise our website, we collect and save data such as your IP address, date and time of access, requested pages or files, browser type, version, referrals and operating system. We only collect this data for statistical purposes in order to analyse your demand for e.g. compatibility data, FAQs and product information and to further optimise our website, so that we can keep improving our offer. The collection of this data is optional and only takes place if you have consented to the use of site statistics in our consent settings. Your data is collected and stored in anonymised form only and cannot be related to you as an individual person. We use Matomo (self hosted, with IP masking) to ensure maximum data privacy.
Video consent
Our website embeds videos from YouTube, a service of Google Ireland Ltd. These integrations are deactivated by default to protect your privacy. No connection to YouTube’s servers is established, and no data is transmitted to Google unless you actively choose to enable and play a video. When you activate a video, YouTube may set cookies and collect data such as your IP address, device information, and interaction data. By doing so, you voluntarily consent to data processing by YouTube/Google in accordance with their privacy policy.
Social media
Our website also contains links to our official profiles on external social media platforms (such as X, Instagram and YouTube). These are pure hyperlinks — no social media plugins or embedded content (other than videos as mentioned above) are integrated into our pages. This means that no data is transmitted to these providers when you visit our website. Only when you actively click such a link will your browser connect to the respective platform, and the provider may then collect data in accordance with their own privacy policies. For more information, please refer to the privacy policies of the respective platforms.
Newsletter
If you subscribe to our newsletter or press list, we collect your email address, your IP address and timestamp (for documentation of consent). If you subscribe to our press list, we may also collect your name, media-details and the country of your target audience. We use Mailjet (Sinch Email / Sinch Group) to manage subscriptions and send newsletters in compliance with GDPR. We will not use your data for any other purpose than to inform you about Noctua products and news. If you unsubscribe from our newsletter, your data will be deleted from our system.
Access protection
Our website and internal systems (ERP/CRM) are protected against damage, destruction or unauthorised access by appropriate technical measures and all processes are constantly adjusted according to the latest data protection regulations.
Purpose-specific usage of data
We follow the principle of purpose-specific data usage. Therefore, we collect, process and save your personal data only for those purposes which you have authorised. We only forward your personal data to third parties with your agreement, such as in the case of forwarding agents that are required for sending you spare parts. We only disclose personal data to stately institutions or authorities that are entitled to receive such information and only within the scope of the legal obligation to give information or if we are committed to disclosure by court ruling.
We also take intra-corporate data protection very seriously. Our co-workers and external service providers are bound to confidence and to comply to all data protection regulations.
Right to information and right of withdrawal
You may always request us to disclose to you – free of charge and without giving reasons – your personal data that we store. You can always request us to correct or delete said data or withdraw your agreement that allows us to collect and use your data. For these purposes, please contact us at support@noctua.at. We’re always at your service for further question regarding data protection and the processing of your personal data.
Right to complain
If, against all odds, you should be unsatisfied with our data protection measures, please tell us. If we cannot find a solution, you have the right to complain at your national data protection authority.
Changes to this policy
We review this data protection policy regularly and update it when necessary, for example to reflect legal requirements or technical developments. The current version is always available on this page.
Last updated: October 20th, 2025.