Privacy Policy

Protecting your personal data matters to us. We process personal data exclusively on the basis of the applicable legal provisions (EU General Data Protection Regulation, Austrian Data Protection Act, Austrian Telecommunications Act 2021). This policy explains the processing on this website as well as in connection with our services around the AVIO inspection system.

This is an English convenience translation. The German version prevails.

1. Data processing on this website

1.1 Access data and server log files

When you visit this website, access data is collected for technical reasons (IP address or hostname, browser type, operating system, language setting, time and duration of access, pages visited, referrer URL, internet service provider). The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR). This information is not evaluated on a personal basis and is not combined with other personal data. Log data is deleted after 90 days at the latest, unless a security-relevant incident requires longer retention.

1.2 Hosting

This website is operated by an external hosting provider. The access data mentioned under 1.1 is processed on the provider's servers. Where data is transferred to third countries (in particular the USA), this is based on an adequacy decision (EU-US Data Privacy Framework) or on EU standard contractual clauses. Where required, a data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

1.3 Contact and demo requests

If you contact us by email (for example via the demo request on this website, which opens an email in your email client), we process the information you provide (name, company, contact details, content of your request) to handle your request, prepare offers and follow up (Art. 6(1)(b) and (f) GDPR). Request data is stored for six months; if a business relationship is established, statutory retention periods apply (in particular seven years pursuant to § 132 of the Austrian Federal Fiscal Code for accounting-relevant records). Your data is not shared with third parties without your consent.

1.4 Cookies and tracking

This website does not use cookies for analytics or marketing purposes and does not use tracking services. Should we introduce audience measurement in the future, it will only be done with cookieless technology or with your prior consent; this policy will be updated accordingly.

1.5 Google Fonts

This website uses fonts from Google Fonts. The service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When the page is loaded, your browser retrieves the required font files from Google servers, transmitting your IP address to Google. The legal basis is our legitimate interest in a consistent and appealing presentation (Art. 6(1)(f) GDPR). A transfer of data to the USA cannot be excluded; it takes place on the basis of the EU-US Data Privacy Framework. More information: developers.google.com/fonts/faq.

1.6 Embedded third-party content (CDN)

Technical libraries used to render the 3D content are loaded via content delivery networks (unpkg.com, Cloudflare). Your IP address is transmitted to the respective provider. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the functional provision of the website).

2. Data processing in connection with the AVIO system

2.1 Roles

When the AVIO system is used at our customers' facilities, the respective customer (facility operator) is in principle the controller for the data collected during inspections. Where DroneSense GmbH processes personal data in this context, it acts as a processor pursuant to Art. 28 GDPR; a data processing agreement is concluded with the customer for this purpose. Informing staff at the site of operation is the responsibility of the facility operator; we provide template information materials on request.

2.2 Inspection data

During operation, the AVIO system captures image, video and sensor data of facilities and infrastructure. This data serves exclusively for condition assessment, analysis and reporting. Recordings are directed at equipment and components; the capture of persons is avoided as far as possible through route planning, flight scheduling and technical measures.

2.3 On-board person detection (edge safety, privacy by design)

For the safety of people near the drone, a local person detection system runs on board. It processes camera images exclusively in real time on the device, serves solely for collision avoidance and abort logic, and stores no personal data. There is no identification, no biometric matching and no transmission of this detection data. Optionally, faces in inspection recordings can be automatically masked or pixelated according to the facility operator's policies.

2.4 Storage, operating modes and data security

Depending on the agreement, inspection data can be stored fully on-premise at the customer's site, in a hybrid setup or in a cloud environment; data sovereignty remains with the customer. Transmissions are end-to-end encrypted. Access is role-based and logged in an audit-proof manner (audit logs). Deletion concepts are in place, including automated deletion runs in line with the agreed retention periods.

2.5 Telemetry and system data

To ensure operational safety, maintenance and product improvement, we process technical system and telemetry data of the AVIO system (e.g. flight, charging and diagnostic data). This data is generally not personal; analyses for product improvement are carried out on an anonymized or aggregated basis (Art. 6(1)(f) GDPR).

3. Business contacts and applications

3.1 Customer, prospect and supplier contacts

We process contact and contract data of contact persons at customers, prospects and suppliers (name, role, business contact details, correspondence) for the initiation and performance of contracts and to maintain the business relationship (Art. 6(1)(b) and (f) GDPR). Data is stored for the duration of the business relationship and in accordance with statutory retention periods.

3.2 Job applications

We process application documents to carry out the application process (Art. 6(1)(b) GDPR). After completion of the process, documents are deleted no later than seven months, unless you have consented to longer retention.

4. Your rights

You have the rights to access, rectification, erasure, restriction of processing, data portability as well as withdrawal of consent and objection. No automated decision-making within the meaning of Art. 22 GDPR takes place. If you believe that the processing of your data violates data protection law, you can contact us (office@navion-robotics.com) or the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.

Version: July 2026. We will update this policy if our services or the legal situation change.