PRIVACY POLICY

Controller

Boxlumen / Jakob Sebastian Vind
Sole trader
Dorf 135
6283 Schwendau
Austria

Email: sebastian@boxlumen.com
Phone: +43 676 774 5627

General information

Protecting personal data is important to me. Personal data is any information by which a person can be identified directly or indirectly. I process such data only to the extent necessary to operate this website, handle enquiries, display media or fulfil legal obligations.

Depending on the processing activity, the legal basis is consent under Article 6(1)(a) GDPR, steps prior to entering into a contract or performance of a contract under Article 6(1)(b) GDPR, a legal obligation under Article 6(1)(c) GDPR, or legitimate interests under Article 6(1)(f) GDPR. Consent may be withdrawn at any time with effect for the future.

Hosting and Squarespace

This website is operated using Squarespace. The provider for customers outside the USA is Squarespace Ireland Limited, Squarespace House, Ship Street Great, Dublin 8, D08 N12C, Ireland.

When you visit the website, Squarespace processes technically necessary data. This may include, in particular, your IP address, the date and time of access, the URL accessed, the volume of data transferred, the referrer URL, browser type, operating system, and device and log data. This processing serves to provide the website, maintain its stability and security, and analyse errors. The legal basis is Article 6(1)(f) GDPR. My legitimate interest is the secure and reliable operation of the website.

Images, fonts and the videos used on this website are delivered through Squarespace infrastructure. Loading and playing videos establishes connections to Squarespace servers; delivery of these media is not generally dependent on consent to optional cookies.

Squarespace provides further information at www.squarespace.com/privacy.

Squarespace Analytics and Activity Log

Squarespace provides integrated analytics features that can be used to evaluate page views, visitor numbers and traffic sources, among other things. Non-essential Squarespace Analytics cookies are restricted through the cookie settings and should be set only after the relevant consent has been given.

The Squarespace Activity Log is disabled. Restricting non-essential cookies does not prevent all connections to Squarespace. Technical checks continued to show requests for page and form tracking, as well as performance and error diagnostics. Server, connection and security data may be processed as part of website operation independently of optional cookies.

Where analytics are based on consent, the legal basis is Article 6(1)(a) GDPR. Consent may be withdrawn at any time through the cookie settings.

Cookies

This website uses technically necessary cookies and comparable storage technologies that may be needed for basic functions, security and storing your cookie preferences. Optional analytics cookies and comparable technologies that require consent are used in accordance with your chosen cookie consent.

Non-essential Squarespace cookies are restricted. In principle, they are used only after selecting “Accept all” or giving corresponding individual consent. Selecting “Reject all” allows you to reject optional cookies. Your cookie preferences can subsequently be changed or consent withdrawn through the permanently accessible cookie settings.

The legal basis for technically necessary cookies is Article 6(1)(f) GDPR in conjunction with applicable telecommunications legislation. For non-essential cookies, the legal basis is consent under Article 6(1)(a) GDPR.

Contact form

You can submit project enquiries using the contact form. The data processed includes your first name, last name, email address and message, together with any information you voluntarily provide about your company or project. The data is used to handle your enquiry, contact you and, where applicable, prepare a contract.

The legal basis is Article 6(1)(b) GDPR where the enquiry relates to a potential contractual relationship; otherwise, it is Article 6(1)(f) GDPR. My legitimate interest is responding to business enquiries. Form data is processed through Squarespace and may be made available in the Squarespace contacts area and through the configured recipient email address.

Data is stored only for as long as necessary to handle the enquiry or as required by statutory retention obligations. A contact enquiry alone does not result in further use of the data for newsletters or advertising.

Google reCAPTCHA is disabled in the contact form. Technical checks showed no connections to Google, gstatic or reCAPTCHA resources. An inactive reCAPTCHA configuration entry may remain in the page code generated by Squarespace; that entry alone does not demonstrate active use of the service.

Fonts / Squarespace CDN

The Anton and Epilogue fonts used on this website are delivered through Squarespace infrastructure or the Squarespace CDN. This establishes a connection to Squarespace servers and may involve processing technically necessary connection data, particularly your IP address. Following technical testing, Google Fonts and Adobe Fonts are not directly embedded on the website.

Processing is based on Article 6(1)(f) GDPR. The legitimate interest is a consistent, fast and reliable presentation of the website.

Recipients and transfers to third countries

Personal data may be transferred to technical service providers to the extent necessary, particularly to Squarespace for hosting, media delivery and processing contact enquiries. Processing in the USA or other countries outside the European Economic Area cannot be ruled out.

Where no adequacy decision by the European Commission applies, the providers state that they rely in particular on appropriate safeguards, such as standard contractual clauses, for these transfers. Despite such safeguards, transfers to third countries may involve a level of data protection that differs from that in the EU.

Data is disclosed to other recipients only where necessary to perform a contract, where there is a legal obligation or a legitimate interest, or where consent has been given.

Data subject rights

Subject to the statutory conditions, data subjects have, in particular, the rights of access, rectification, erasure, restriction of processing, data portability and objection. Where processing is based on consent, that consent may be withdrawn at any time with effect for the future.

To exercise these rights, please send a message to sebastian@boxlumen.com. If there are doubts about your identity, suitable proof of identity may be requested. You also have the right to lodge a complaint with a data protection supervisory authority.

Austrian Data Protection Authority

Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna
Austria

Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at

Last updated

September 2026