Privacy policy
Last updated: October 24, 2026
1. General Information
The protection of personal data is important to us. We process personal data exclusively in accordance with applicable legal requirements, particularly the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and the Austrian Telecommunications Act 2021 (TKG 2021).
This Privacy Policy explains how personal data is processed when using provova.com, including website checks, automated website analyses, AI-powered evaluations, digital reports, and paid services.
Provova is a digital analysis platform designed to examine and improve the technical quality, security, search engine visibility, information quality, and customer orientation of websites.
2. Data Controller
FELIX Beratungsgruppe.at OG
Brunnengasse 21/6
2230 Gänserndorf
Austria
Email: mf@provova.com
Website: https://provova.com
Data Protection Contact:
Dipl. Ing. (FH) Manfred Fellner
Contact details as stated above.
Requests concerning data protection may be submitted at any time using the email address provided.
3. Categories of Personal Data Processed
Depending on how our platform is used, we may process the following categories of data.
Customer and Contact Information
- Name, company name, and business contact details
- Email address and telephone number
- Billing address and, where applicable, VAT identification number
- Customer identifiers and account information
Technical Usage Data
- IP address
- Browser type and operating system
- Date and time of access
- Pages accessed and technical error messages
- Security-related log data
Analysis and Project Data
- Domains and URLs submitted for analysis
- Information about industry, target audience, and business objectives
- Competitors identified by customers
- Publicly accessible website content
- Technical metadata and assessment results
- SEO data and publicly available search results
- AI-generated evaluations and recommendations
Contractual and Payment Data
- Services ordered and purchased
- Payment status and transaction references
- Billing information and contractual documentation
Personal data is processed only to the extent necessary for the purposes described in this Privacy Policy.
4. Website Operation and Hosting
The website provova.com is operated using web hosting infrastructure provided by DomainFactory.
When visitors access our website, technical connection data may be processed automatically, including IP addresses, access timestamps, requested resources, browser information, and technical status codes.
This processing is necessary to provide the website, identify technical errors, maintain operational reliability, and prevent unauthorized access.
Legal basis: Article 6(1)(f) GDPR (legitimate interest in operating a secure and functional website).
Data is retained only for as long as necessary for the respective purpose. Specific deletion periods are determined according to the hosting configuration.
5. Automated Website Checks and Website Scanning
Provova enables automated assessments of publicly accessible websites.
These assessments may include:
- Website availability and HTTP status codes
- HTTPS and SSL/TLS configuration
- Security-related HTTP headers
- Redirects and canonical tags
- Robots.txt files and XML sitemaps
- HTML structure, page titles, and meta descriptions
- Structured data and technical SEO characteristics
- Mobile compatibility and performance indicators
- Internal linking and website architecture
- Visible content, headings, and information provided to visitors
5.1 Processing of Website Content
To perform analyses, Provova automatically retrieves publicly accessible web pages.
During this process, website content, metadata, technical configurations, and publicly available information may be processed.
Where such content includes personal data, such as names, business contact details, or information about publicly identified employees, this information may be collected as part of the technical analysis.
Provova does not aim to create personal profiles of individuals mentioned on the websites being analyzed.
Processing is limited to information necessary for the relevant analysis.
5.2 Purposes and Legal Bases
Data is processed to generate website assessments, quality evaluations, and improvement recommendations requested by customers.
For customers' personal data, processing is generally based on Article 6(1)(b) GDPR, where necessary for contractual performance or pre-contractual measures.
Where personal data relating to third parties appears on publicly accessible websites, Article 6(1)(f) GDPR may apply, provided that a documented balancing of interests supports the specific processing activity.
Our legitimate interest is to provide technical and content-related website analysis services while respecting data minimization, purpose limitation, and the rights and interests of affected individuals.
5.3 Limitations of Website Scanning
Provova is primarily designed to analyze publicly accessible website content.
The platform is not intended to bypass access restrictions, extract information from protected customer areas, or deliberately collect sensitive personal data.
Website scans are technically limited to avoid unnecessary server load.
Analysis results represent assessments at a particular point in time and do not guarantee that a website is completely secure or free from errors.
6. Analysis of Customer Questions and Website Content
Provova evaluates whether a website adequately answers the essential questions of its potential customers in a clear, understandable, and comprehensive manner.
For this purpose, publicly accessible content may be automatically analyzed and categorized.
The analysis may include:
- Identification of key topics and services
- Evaluation of information clarity and completeness
- Identification of unanswered customer questions
- Generation of FAQ recommendations
- Comparison with publicly available competitor content
- Recommendations for improving website structure
Artificial intelligence may be used to generate and evaluate these results.
Where personal information is not required for an assessment, it should be removed or minimized before further processing.
The legal basis is Article 6(1)(b) GDPR for customer data and, subject to an appropriate balancing of interests, Article 6(1)(f) GDPR for personal data relating to third parties.
7. Use of Artificial Intelligence
Provova may use external artificial intelligence services to analyze, structure, and evaluate website content and generate recommendations.
These services may include:
OpenAI
https://openai.com/privacy/
Anthropic (Claude)
https://www.anthropic.com/legal/privacy
Depending on the analysis function, text, publicly accessible website content, technical assessment results, customer questions, and analysis parameters may be transmitted to these providers.
We seek to limit transmitted information to what is necessary and, where possible, remove or pseudonymize personal data.
The transmission of sensitive personal data is not intended as part of regular website analyses.
7.1 Purposes of AI Processing
AI systems may be used for:
- Semantic content analysis
- Evaluation of information quality
- Identification of content gaps
- Generation of FAQ recommendations
- Assessment of customer orientation
- Development of improvement recommendations
- Quality assurance of analysis results
7.2 International Data Transfers
Depending on the provider, the contracted service, and the technical configuration, data may be processed outside the European Economic Area (EEA).
Where required, appropriate safeguards under Chapter V GDPR, particularly Standard Contractual Clauses, will be implemented, and supplementary protective measures will be assessed.
The specific recipients, contractual arrangements, and processing locations will be determined before the respective AI services are used in production.
7.3 Automated Evaluations
AI-generated evaluations are intended to provide technical and business guidance.
They do not constitute legally binding decisions about individuals.
The regular services offered by Provova are not intended to involve solely automated decisions producing legal effects or similarly significant effects on natural persons within the meaning of Article 22 GDPR.
8. External Analysis and SEO Data Providers
Provova may use external data providers, particularly DataForSEO, for advanced website and competitor analyses.
Website domains, search terms, technical analysis parameters, and comparable project-related information may be transmitted to these providers.
Where personal data is involved, processing takes place only on an appropriate legal basis and subject to any required data protection agreements.
Further information:
9. Storage of Analysis Results
Provova may store information submitted by customers and the resulting analysis data in a structured database.
This may include:
- Domain and project identifier
- Analysis date and parameters
- Technical assessment results
- Content-related evaluations
- Identified improvement opportunities
- Sources and supporting evidence
- AI-generated recommendations
- Purchased reports and services
Data is stored to provide reports, maintain traceability of analysis results, support customers, and deliver contracted services.
Personal data is retained only for as long as necessary for these purposes or as required by applicable legal obligations.
10. Customer Accounts and Digital Services
Where Provova offers customer accounts, we process the information required for registration, authentication, and use of the platform.
This may include names, email addresses, company information, securely hashed authentication credentials, purchased services, and saved analysis projects.
Processing is based on Article 6(1)(b) GDPR for contractual performance and Article 6(1)(f) GDPR for account security.
Access to customer accounts is protected by appropriate technical and organizational measures.
11. Payment Processing with Stripe – Planned Feature
Provova plans to integrate Stripe as a payment service provider for paid digital services.
Payment processing through Stripe will become available only after the relevant technical integration has been implemented.
Stripe is an international payment service provider. Depending on the contractual arrangement and service, relevant entities may include Stripe Payments Europe, Limited and Stripe Technology Company, Limited, Ireland.
During payment processing, the following data may be processed:
- Name and billing address
- Email address
- Payment amount and currency
- Order and transaction information
- Payment status
- Payment-related technical information
- Required payment details
Payment information will be processed according to the Stripe integration implemented.
Provova does not intend to store complete credit card numbers or card verification codes on its own servers.
Legal bases:
Article 6(1)(b) GDPR for payment processing and contractual performance.
Article 6(1)(c) GDPR for statutory accounting and record-keeping obligations.
Article 6(1)(f) GDPR, where applicable, for fraud prevention and protection against payment abuse.
Stripe may also process certain personal data as an independent data controller.
International data transfers may occur during payment processing and are subject to the applicable data protection safeguards and contractual arrangements.
Further information:
12. Contact Requests
When users contact us by email or through a contact form, we process the information provided to respond to their requests.
This may include names, email addresses, company details, messages, and any additional information voluntarily submitted.
The legal basis is Article 6(1)(b) GDPR for contract-related inquiries or Article 6(1)(f) GDPR for general inquiries.
Data is deleted once it is no longer necessary for the relevant purpose, unless statutory retention obligations or other legitimate grounds require continued storage.
13. Cookies and Local Storage
Provova may use technically necessary cookies or similar storage technologies, for example to maintain user sessions, store security-related information, or manage privacy preferences.
Non-essential cookies and comparable technologies, particularly those used for marketing or analytics, will be deployed only where the legally required consent has been obtained.
The applicable legal framework includes Section 165(3) of the Austrian Telecommunications Act 2021 and Article 6 GDPR.
Where consent is required, we provide an appropriate mechanism for granting and withdrawing that consent.
14. Data Security
Provova implements technical and organizational security measures designed to protect personal data.
Depending on the system, these measures may include:
- Encrypted data transmission using HTTPS
- Access restrictions and role-based permissions
- Protection of administrative accounts
- Security logging
- Regular software updates
- Protection against unauthorized access
- Data backup and recovery procedures
- Restrictions on transfers to external providers
Security measures are continuously developed in accordance with technical and organizational requirements.
Absolute protection against all security risks cannot be guaranteed.
15. Recipients and Data Processors
Personal data may be disclosed to service providers where necessary to operate the platform or deliver contracted services.
Such recipients may include:
- Hosting and infrastructure providers
- Technical maintenance and security providers
- AI and analysis service providers
- Payment service providers
- Email and communication service providers
- Tax advisers and recipients legally entitled to receive data
Where service providers process personal data on our behalf, we conclude the necessary agreements pursuant to Article 28 GDPR.
Personal data is not disclosed to third parties for their independent advertising purposes without an appropriate legal basis.
16. Data Retention and Deletion
We retain personal data only for as long as necessary to fulfill the relevant purposes.
Different retention requirements apply to different categories of data.
Technical Logs: Retained according to security requirements and configured deletion periods.
Contact Requests: Retained until the inquiry has been resolved and, where applicable, for an additional period justified by legitimate interests or legal obligations.
Analysis Projects: Retained for the contractually agreed availability and traceability of analysis results.
Customer Accounts: Retained for the duration of the contractual relationship and, where required, beyond that period to comply with legal obligations.
Invoices and Accounting Records: Retained in accordance with statutory requirements, generally seven years in Austria, unless longer legal retention periods apply.
After the applicable retention periods expire, personal data is deleted or anonymized unless another lawful basis permits continued retention.
17. Rights of Data Subjects
Under the conditions established by applicable data protection law, individuals have the following rights:
- Right of access under Article 15 GDPR
- Right to rectification under Article 16 GDPR
- Right to erasure under Article 17 GDPR
- Right to restriction of processing under Article 18 GDPR
- Right to data portability under Article 20 GDPR
- Right to object under Article 21 GDPR
- Right to withdraw consent under Article 7(3) GDPR
Consent may be withdrawn at any time with effect for the future.
To exercise these rights, individuals may contact:
as@felix-beratungsgruppe.at
18. Right to Lodge a Complaint
Individuals have the right to lodge a complaint with a data protection supervisory authority if they believe their personal data has been processed unlawfully.
The competent Austrian supervisory authority is:
Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
19. Provision of Personal Data
Access to publicly available information on our website is generally possible without actively providing additional personal data.
Certain services, such as purchasing analyses, maintaining customer accounts, or processing payments, require specific information.
If the required information is not provided, the relevant service may not be available.
20. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy to reflect changes in legal requirements, technologies, or the services offered.
The current version will be published at: https://provova.com/en/privacy/