01Data Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

NEED immersive reality GmbH
Joanneumring 7/7, A-8010 Graz, Austria
Managing Director: Rainer Edler
Phone: +43 699 190 262 88
Email: office@xr-need.com

02GeneralInformation

The protection of your personal data is very important to us. We process your data exclusively in accordance with legal requirements (GDPR, the Austrian Data Protection Act (DSG), and the Telecommunications Act 2021 (TKG 2021)). In this Privacy Policy, we provide you with information about the most important aspects of data processing in connection with our website www.meshloader.com and our software, meshloader XR.

03Hostingand Server Log Files

Our website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany (hereinafter “IONOS”). When you visit our website, IONOS automatically collects information in so-called server log files that your browser transmits: IP address, date and time of access, page/file accessed, amount of data transferred, browser type and version, operating system, and referrer URL.

This data is processed to ensure smooth operation, for security purposes, and for error analysis (Art. 6(1)(f) GDPR – legitimate interest). The log files are automatically deleted after 14 days. A data processing agreement has been concluded with IONOS in accordance with Art. 28 GDPR. For more information, please see the IONOS Privacy Policy.

04SSL/TLS Encryption

For security reasons, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the "https://" and the padlock icon in the browser address bar. This ensures that data you send to us cannot be read by third parties.

05 Cookiesand Consent

Our website uses cookies. We use technically necessary cookies (e.g., for the shopping cart, login, and language settings) based on our legitimate interest in ensuring the website functions properly (Art. 6(1)(f) GDPR, § 165(3) TKG 2021). All non-essential cookies—in particular those used for analytics and marketing—are set only after you have given your explicit consent via our consent banner (Art. 6(1)(a) GDPR).

We use the CookieYes consent management tool on our website to obtain and manage your consent. You can revoke your consent at any time, effective for the future, or change your selection—simply click here:

Change Cookie Settings

06Contact Us(Contact Form & Email)

If you submit inquiries to us via the contact form or by email, we will store your information—including the contact details you provide—for the purpose of processing your inquiry and in case of follow-up questions. The legal basis for this is Article 6(1)(b) of the GDPR (pre-contractual measures) or Article 6(1)(f) of the GDPR (legitimate interest in responding). We will not disclose this data without your consent. The data will be deleted as soon as it is no longer necessary for processing and there are no legal retention requirements that prevent this.

07Registration/ Member Login

To use certain features (Member Area, License Management), you can register on our website. We use the data collected during this process (e.g., name, email address, company name, login credentials) exclusively to provide your account and the associated services (Art. 6(1)(b) GDPR). Your data will be stored for as long as your account remains active and will then be deleted, provided there are no legal retention requirements.

08Online Store, Orders, and Payment Processing

For orders placed in our store (licenses/subscriptions for meshloader XR), we process the data necessary for contract fulfillment: name, billing address, email address, VAT ID number (if applicable), as well as order and payment details (Art. 6(1)(b) GDPR). We retain billing data in accordance with statutory retention requirements (Section 132 of the Austrian Federal Tax Code (BAO): 7 years).

Payment processing is handled by the payment service provider Stripe. For customers within the EU, the provider is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (hereinafter “Stripe”). When paying via Stripe, the data required for payment processing (e.g., name, payment details, invoice amount) is processed directly by Stripe; we do not receive complete payment details such as credit card numbers. The legal basis is Article 6(1)(b) of the GDPR (performance of a contract). This may also involve the transfer of data to Stripe, Inc. in the United States; Stripe is certified under the EU-U.S. Data Privacy Framework, and standard contractual clauses pursuant to Article 46 of the GDPR are also in place. For more information, please see Stripe’s Privacy Policy.

09Downloadthe trial version

When you download our 7-day trial version, we collect the data provided in the download form (e.g., name, email address, VR headset used). We process this data to provide the trial version, to improve our product, and—provided you have given your consent—to contact you regarding our offerings (Art. 6(1)(b) and (a) of the GDPR).

10Newsletters

If you subscribe to our newsletter, we will use your email address to send you information about our products and news. Subscription is handled via the double opt-in process; the legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe from the newsletter at any time by clicking the unsubscribe link at the bottom of each email or by sending an email to office@xr-need.com.

We use Mailchimp, a service provided by The Rocket Science Group LLC d/b/a Mailchimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (a subsidiary of Intuit Inc.), to send our newsletters. Your email address and, if applicable, other registration data are stored on Mailchimp’s servers in the United States. Mailchimp and Intuit are certified under the EU-U.S. Data Privacy Framework; in addition, standard contractual clauses pursuant to Article 46 of the GDPR are in place. Mailchimp also enables us to analyze newsletter usage (e.g., open and click-through rates). For more information, please see Mailchimp’s Privacy Policy.

11GoogleAnalytics

Provided that you have given your consent via our consent banner (Art. 6(1)(a) GDPR), this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Analytics uses cookies and similar technologies that enable an analysis of your use of the website. By default, IP addresses are not stored in Google Analytics 4 but are truncated before processing. The information generated is generally transmitted to Google’s servers, which may also involve a transfer to the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework; in addition, standard contractual clauses pursuant to Article 46 of the GDPR are in place.

You can withdraw your consent at any time via the cookie settings. For more information, visit policies.google.com/privacy

12 GoogleAds Remarketing

If you have given your consent (Art. 6(1)(a) GDPR), we use Google Ads Remarketing, provided by Google Ireland Limited, to target visitors to our website with interest-based ads at a later time within the Google Display Network. Cookies or similar technologies are used for this purpose. You can disable personalized ads in your Google settings: adssettings.google.com

13Weglot(Website Translation)

To provide a multilingual version of our website (DE/EN/FR), we use the translation service Weglot, Weglot SAS, 138 Rue Pierre Joigneaux, 92270 Bois-Colombes, France. Your language selection is stored in a cookie, and page content is delivered via Weglot’s servers; your IP address may be processed in this process. The legal basis for this is our legitimate interest in making our content available internationally (Art. 6(1)(f) GDPR). For more information, visit weglot.com/privacy

14 YouTube videos(tutorials)

On our website (particularly in the Tutorials section), we embed videos from YouTube, a service provided by Google Ireland Limited. Whenever possible, we use the enhanced privacy mode (“youtube-nocookie”). When a video is played, a connection is established with YouTube/Google’s servers and your IP address is transmitted; if you are logged into your Google account, Google may associate the viewing with your account. The embedding is based on your consent via the consent banner (Art. 6(1)(a) GDPR) or our legitimate interest in presenting our tutorials in an engaging manner (Art. 6(1)(f) GDPR). For more information: policies.google.com/privacy

15 SocialMedia

We maintain accounts on social media platforms (including Facebook, Instagram, LinkedIn, and YouTube). On our website, we provide links to these platforms—simply visiting our website does not result in any data being transmitted to these platforms. Only when you click on a link do the privacy policies of the respective provider apply:

Meta Platforms Ireland Ltd. (Facebook, Instagram), 4 Grand Canal Square, Dublin 2, Ireland – facebook.com/privacy/policy | privacycenter.instagram.com/policy
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland – linkedin.com/legal/privacy-policy

16DataProcessing in the meshloader XR Software

When you use our meshloader XR software, we process license and activation data for the purpose of fulfilling the contract (Art. 6(1)(b) of the GDPR).

We use the LimeLM service provided by wyDay, LLC (USA) for license management and product activation. During activation, product key information (product code, installation date, verification information) and an anonymized identifier (hardware fingerprint) generated from your computer’s hardware configuration are transmitted to wyDay. This identifier does not contain any personally identifiable information and does not reveal the brand, model, or other characteristics of your computer; it is used exclusively for license validation. We have a data processing agreement with wyDay that includes standard contractual clauses pursuant to Article 46 of the GDPR for data transfers to the United States. For more information, please refer to wyDay’s Privacy Policy and LimeLM’s Activation Privacy Notice.

Your 3D/CAD models and the .ml files generated from them remain stored locally on your systems and are not transmitted to us. When using the MultiUser feature via servers provided by us, the connection data required for the session is processed and deleted once the session ends. Furthermore, the software does not send any telemetry or usage data to us.

17RetentionPeriod

Unless otherwise specified in this Privacy Policy, we retain personal data only for as long as is necessary for the purposes stated herein or as required by statutory retention obligations (in particular, the 7-year retention periods under tax and corporate law).

18 YourRights

You generally have the rights to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21 GDPR). You may withdraw any consent you have given at any time, effective for the future.

To exercise your rights, please contact: office@xr-need.com

If you believe that the processing of your data violates data protection law, you have the right to file a complaint with the supervisory authority. In Austria, this is:

Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at

19DataSecurity

We take appropriate technical and organizational measures (Art. 32 of the GDPR) to protect your data from loss, destruction, tampering, and unauthorized access. Our security measures are continuously improved in line with technological developments.

20Changesto This Privacy Policy

We reserve the right to amend this Privacy Policy to reflect changes in the legal landscape or changes to our services. The most recent version published on this website is the one that applies.