Privacy policy
This English text is provided for convenience. The German version is legally authoritative. Datenschutzerklärung
In brief
- We only process data you send us or data needed for sessions and invoicing.
- No marketing newsletters, no sale of data, no AI training on your recordings.
- Project files are deleted after 12 months in archive unless agreed otherwise.
- Questions: [email protected] or +43 1 526 48 92 — we usually reply within 1 business day(s).
1. Who is responsible
The controller under the General Data Protection Regulation (GDPR) and Austrian Data Protection Act (DSG) is Nomadisedexa GmbH, a limited liability company (GmbH), registered at Lerchenfelder Straße 45, 1070 Wien, Austria (VAT ID ATU78129561, company register FN 549050 i, Handelsgericht Wien). Managing director: Markus Höller.
We operate the Nomadisedexa recording studio in Wien and process personal data in connection with nomadisedexa.digital, enquiries, bookings, studio work, billing and support. We are not required to appoint a data protection officer; contact us at [email protected] or +43 1 526 48 92 for privacy matters.
Further mandatory information is in our legal notice. Contract terms are in our terms and conditions.
2. Scope
The notice applies to anyone browsing nomadisedexa.digital, sending us a message and clients whose work we host in our 3 rooms (live room about 38 m², vocal booth about 8 m², control room about 22 m²).
If a publisher or production company sends guest speakers or musicians and decides how takes are published, that organisation remains controller for those individuals. Nomadisedexa processes their data as processor under the data processing agreement. Related services: vocals and voice-over, band recording, mixing, mastering, podcast and dialogue.
3. Data we collect
Contact form: name, email, optional phone, requested service, optional preferred date and project description. Required fields are needed for a useful reply. Submission goes through FormSubmit (see recipients).
Booking and delivery: contact details, artist or band name, project information, scheduling, email or phone correspondence, payment references. Card payments at the studio use our bank terminal — we do not store full card numbers.
Recordings and files: voice, performance and session metadata are personal data when they identify someone. We use them only to deliver the booked service. Video filmed by your crew remains your responsibility.
Technical data: host World4You Internet Services GmbH keeps access logs (IP address, time, page, browser) to secure the site. Your consent choice is stored locally (key nmds_consent_v1) without identifying you.
We do not collect special-category data. To reschedule for health reasons, a short message is enough — no medical certificate.
4. Purposes, legal bases and retention
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Replying and quoting | Form, email | Art. 6(1)(b) GDPR (pre-contract steps) | Three years after last contact |
| Contract performance | Identity, project, schedule | Art. 6(1)(b) GDPR | Five years after the relationship ends |
| Session archive | Recordings, project files | Art. 6(1)(b) GDPR | 12 months after the last session, then deletion unless agreed otherwise |
| Invoicing and tax | Billing and payment data | Art. 6(1)(c) GDPR | Seven years under Austrian tax law |
| Defending legal claims | Correspondence, files | Art. 6(1)(f) GDPR (legitimate interest) | Until proceedings and appeal periods end |
| Website security | Host log files | Art. 6(1)(f) GDPR | Usually up to one year, or less if the host keeps shorter logs |
| Cookie preference storage | nmds_consent_v1 in the browser | Art. 6(1)(c) and (f) GDPR | 182 days (about six months) |
We do not sell or rent data. We do not send marketing emails. New purposes would be compatible or based on consent.
Where we rely on legitimate interest, you may object under Art. 21 GDPR.
5. Voice, image, minors and AI
Your voice and image are protected under Austrian law. We do not publish audio excerpts, session photos or client names on the website or social media without prior written consent.
Session material stays outside machine-learning pipelines: we do not feed client takes into model training, benchmarking or synthetic voice products, and we build no digital voice double without a separate written release from the performer.
Sessions for people under 16 must be booked by a legal guardian. Our online form is aimed at adults.
Practical tips before vocal sessions: prepare your voice.
6. Recipients and processors
Only the team listed on about us can access data, within their role. Recipients may include:
- World4You Internet Services GmbH (Hafenstraße 35, 4020 Linz, Österreich), website hosting, email and storage in Austria or the EU;
- FormSubmit (formsubmit.co, USA), forwarding the contact form to [email protected];
- accountant, bound by professional secrecy, for billing data;
- bank, for transfers and card terminal;
- authorities, when the law requires it.
Every provider processing data on our behalf is contracted under Art. 28 GDPR. Business clients may sign a DPA.
7. Transfers outside the EU
Hosting is mainly in Austria or the EU. FormSubmit is operated from the United States: form contents may be processed there. Where required, we rely on Art. 49(1)(b) GDPR because the transfer is necessary for pre-contractual steps at your request.
To avoid this route, email [email protected] or call +43 1 526 48 92 directly. More on site technologies: cookie policy.
8. Security
We use appropriate measures: HTTPS only, restricted team access with strong passwords, encrypted workstations and backups, locked premises outside sessions and scheduled deletion after the archive period.
If a breach risks your rights, we notify the Austrian Data Protection Authority and you when the risk is high (Arts. 33 and 34 GDPR). No internet transmission is completely risk-free; once data reaches us, we apply our safeguards.
9. Your rights
You have the right to:
- access (Art. 15 GDPR);
- rectification (Art. 16);
- erasure (Art. 17);
- restriction (Art. 18);
- data portability (Art. 20);
- object to processing based on legitimate interest (Art. 21);
- withdraw consent (Art. 7(3)).
Contact [email protected] or our postal address. We reply within one month, extendable by two months for complex requests (Art. 12(3)). Exercising rights is free unless requests are manifestly unfounded or excessive.
You may complain to the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at. Please write to us first. General questions: FAQ.
10. Cookies and similar technologies
Cookies are small text files; localStorage can serve similar purposes. We use no analytics, advertising or social trackers. Only your consent choice is stored under nmds_consent_v1 for 182 days.
Our banner offers equal options to accept, reject and customise optional categories (currently empty). Details: cookie policy. Change settings anytime via .
11. External links
The site links to third parties such as OpenStreetMap for directions on contact. Their privacy policies apply; we are not responsible for their practices.
12. Status and changes
This policy is information about our practice; it does not limit statutory rights. We update it when services or law change. The current version is on this page; effective date 15 October 2026. Material changes may be announced by email to existing clients where needed.
Contact: Nomadisedexa GmbH, Lerchenfelder Straße 45, 1070 Wien — [email protected]. Prices include 20% VAT; example Vocals & voice-over from €98. Book via contact or services overview.