Novartio

Privacy Policy

1. Overview

Welcome to novartio ("Website"), accessible at https://novartio.com. Your privacy is important to us. Your privacy is important to us, and we are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, use, and protect your data.

2. Controller within the meaning of Article 4(7) GDPR

The data controller responsible for processing your personal data on this Website is:

Peter Roos
Email: info(at)lost-backpacker.com

If you have any questions about this Privacy Policy or your data rights, you can contact us at the above email address.

3. Data We Collect

We collect the following types of personal data:

a) Automatically Collected Data

When you visit our Website, we automatically collect certain data through cookies and tracking technologies, including:

  • IP address
  • Browser type and version
  • Pages visited
  • Time and date of visit
  • Referring website
  • Device information

b) Data Provided by You

If you contact us via email or a contact form, we may collect:

  • Any other personal information you provide in your message
  • Name
  • Email address
  • Time and date of visit
  • Referring website
  • Device information

4. Purpose and Legal Basis for Data Processing

We process your data based on the following legal grounds:

  • Contractual Necessity (Art. 6(1)(b) GDPR): If you engage in direct communication with us.
  • Legitimate Interests (Art. 6(1)(f) GDPR): To improve our Website, ensure security, and analyze traffic.
  • Consent (Art. 6(1)(a) GDPR): When you accept cookies or provide information via a contact form.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to analyze website traffic and display personalized advertisements.

Brevo (formerly Sendinblue)

We use Brevo for our email marketing and communication services. When you interact with our website, book meetings or subscribe to our newsletter, Brevo collects and processes the following data:

  • Email addresses
  • IP addresses
  • Website interaction data
  • Time and date of interactions
  • Device information

This data is stored on Brevo's servers and is used for:

  • Sheduling meeting appointments
  • Sending newsletters and marketing communications
  • Analytics and tracking email engagement
  • Improving our marketing campaigns
  • Customer relationship management

By providing your email address and consenting to receive communications, you acknowledge that your information will be transferred to Brevo for processing in accordance with their privacy policy. You can review Brevo's privacy policy at https://www.brevo.com/en/legal/privacypolicy/.

Google Analytics

We use Google Analytics to analyze website usage. Google Analytics collects data such as page views, user interactions, and device information. Data is transferred to Google servers in the USA. You can opt out of Google Analytics by installing the Google Opt-Out Browser Add-on: https://tools.google.com/dlpage/gaoptout.

Google AdSense

We use Google AdSense to display ads on our Website. Google AdSense may use cookies to serve personalized advertisements based on your interests. For more information on how Google uses your data, visit: https://policies.google.com/technologies/ads.

Formbricks

We use Formbricks for user surveys and feedback collection. When you interact with our surveys, Formbricks collects and processes the following data:

  • Survey responses
  • Session data
  • Browser metadata (type, language)
  • Device information
  • Timestamp of interactions

The data is processed and stored on servers located in Frankfurt, Germany (AWS eu-central-1), ensuring compliance with GDPR requirements. Formbricks acts as our data processor, and we have a Data Processing Agreement (DPA) in place.

Your survey responses and associated data are used for:

  • Improving our services based on user feedback
  • Understanding user experience and satisfaction
  • Product development and optimization

You can learn more about Formbricks' privacy practices and GDPR compliance at https://formbricks.com/gdpr and at https://formbricks.com/privacy-policy.

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to:

  • Set preferences for how cookies are handled
  • Delete cookies
  • Block third-party cookies

6. Data Sharing and Third-Party Services

We may share your personal data with third parties only when necessary and under the following circumstances:

  • Service Providers: We use third-party services such as Google Analytics and Google AdSense.
  • Legal Compliance: If required by law, we may disclose your data to authorities.

We do not sell or rent your personal data to third parties.

7. Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

8. Data Retention

We retain your personal data only for as long as necessary for the purposes outlined in this Privacy Policy. Automatically collected data is typically retained for up to 14 months, unless legal obligations require a longer retention period.

9. Data Transfers Outside the EU

Since we use Google services, your data may be transferred outside the EU, including to the USA. Google complies with the EU-U.S. Data Privacy Framework to ensure adequate data protection.

10. Your rights

Under the GDPR, you have the following rights:

  • Right to Access (Art. 15 GDPR) – Request a copy of your data.
  • Right to Rectification (Art. 16 GDPR) – Request corrections to inaccurate data.
  • Right to Erasure (Art. 17 GDPR) – Request deletion of your data.
  • Right to Restriction of Processing (Art. 18 GDPR) – Request limited use of your data.
  • Right to Data Portability (Art. 20 GDPR) – Receive a copy of your data in a structured format.
  • Right to Object (Art. 21 GDPR) – Object to data processing based on legitimate interests.
  • Right to Withdraw Consent – If you have given consent, you can withdraw it at any time.

To exercise your rights, contact us at info(at)lost-backpacker.com.

Last updated: September 20, 2025