ToEon Privacy Policy
(Data Protection Declaration & Disclosure on Data Processing)
I. Our Basic Principle and Responsibility
I.1. Controller
ToEon is a globally operating company headquartered in Vienna, Austria (operated by ToneTerrace GmbH). We are the Controller as defined by the General Data Protection Regulation (GDPR) and strictly adhere to the GDPR and all national and international data protection laws.
I.2. Highest Standards
The protection of your personal data is not only a legal obligation but the goal and an essential component of our business mission. Our top priority is the protection of the privacy of our users and visitors.
I.3. Legal Basis for Processing
We process personal data exclusively when one of the following legal bases is present:
- • For the fulfilment of a contract or pre-contractual measures (Art. 6 (1) lit. b GDPR).
- • For the fulfilment of legal obligations (Art. 6 (1) lit. c GDPR).
- • Based on your consent (Art. 6 (1) lit. a GDPR).
- • For the protection of legitimate interests (Art. 6 (1) lit. f GDPR), provided that your fundamental rights do not override these interests.
II. Principles of Data Processing
II.1. No Advertising-Based Data Use
ToEon DOES NOT process personal data for advertising purposes.
- • We do not run advertisements on our platform.
- • We do not create advertising profiles and do not conduct tracking for marketing purposes.
- • No automated decision-making or profiling takes place.
II.2. Type of Data Collection
We only collect data that is technically required or necessary for the fulfilment of the contract:
- • Registration Data (e.g., username, email address, password – encrypted).
- • Payment and Billing Data (for purchases/sales in the Marketplace).
- • Communication Content (in live chats or comments) for the provision and moderation of the service.
- • Automatically recorded technical data (e.g., IP address, browser type, device information, timestamp) to maintain security and functionality.
II.3. Purpose of Processing
We process data exclusively for the following purposes:
- • Provision of our platform functions (upload, comment, chat).
- • Execution of purchase and sales transactions in the Marketplace.
- • Moderation and security of the community and the platform.
- • Fulfilment of legal obligations and requirements.
- • Technical maintenance and improvement of the platform.
III. Disclosure, Storage, and Security
III.1. No Disclosure Without Legal Basis
We never disclose personal data to third parties, unless:
- • We are legally obliged to do so (e.g., by order of courts or authorities).
- • You have explicitly consented.
- • It is required for the contractual performance of the service (e.g., payment processing by specialized service providers).
III.2. No Disclosure for AI Training Purposes
ToEon does not disclose personal data, creative content, or any other user-provided data to third parties for the training, development, or improvement of Artificial Intelligence (AI) or machine learning. Such data is also not sold, rented, or commercially exploited for AI model training.
III.3. Storage Periods
We store personal data only for as long as it is necessary for the respective purpose (e.g., contract fulfilment). After the purpose ceases to apply or legal retention periods expire, the data will be securely deleted or anonymized.
III.4. Security
We implement technical and organizational measures to protect your data against unauthorized access, loss, misuse, or destruction. Passwords are always stored in encrypted form, and all data transmission takes place via secure, encrypted connections (SSL/TLS).
IV. Your Rights under the GDPR
As a data subject, you have the following rights regarding your personal data at any time:
- • Right of Access (Art. 15 GDPR): You have the right to obtain information about the personal data concerning you that we store.
- • Right to Rectification (Art. 16 GDPR): You can request the rectification of inaccurate or incomplete data.
- • Right to Erasure ("Right to be forgotten," Art. 17 GDPR).
- • Right to Restriction of Processing (Art. 18 GDPR).
- • Right to Data Portability (Art. 20 GDPR).
- • Right to Object (Art. 21 GDPR) against certain processing operations.
- • Right to Withdraw Consent (Art. 7 (3) GDPR) for given consents with effect for the future.
To exercise these rights, please contact us at: legal@Aeongraph.io
V. International Use and Child Data Protection
V.1. International Transfer
Even though we operate globally, data processing takes place in accordance with the data protection laws of the European Union. If data is transferred to a third country, we ensure that this transfer only takes place under the safeguards provided for in the GDPR (e.g., EU Standard Contractual Clauses).
V.2. Policies on Children's Data
ToEon is NOT intended for use by children under 13 years of age. We do not knowingly collect personal data from individuals below this age limit. If you live in a country or region where a higher age limit applies, you may only use our services once you have reached the legally prescribed minimum age for consent to the processing of personal data in that location.
VI. Changes to this Policy
We reserve the right to update this Privacy Policy from time to time. We will announce material changes clearly and promptly on this page. The currently valid version of the policy can be viewed on our website at any time. By continuing to use ToEon after the changes take effect, you agree to the updated policy.