Privacy policy

This is a convenience translation. Only the German version is legally binding.

creativbox supplements the information and services offered on the creativbox.at website with this privacy policy. It describes how we protect the privacy of all visitors to this website in accordance with the applicable data protection regulations. If you have any questions about this, or a concern that you do not find covered in our privacy policy, please contact us.

Controller and contact details

The controller for data processing under the General Data Protection Regulation (GDPR) is:

Ing. Christian Högl
Vorgartenstraße 145-157/6/40
1020 Vienna

Email: christian.hoegl@creativbox.at
Phone: +43 699 11811038

Personal data

Personal or private data is information that can be used to determine the identity of the person concerned. This includes information such as name, address, telephone number, email and also the IP address used.

Insofar as personal data is collected on our website at all, it is disclosed on a voluntary basis – for example when you send us an email.

We use the data you transmit exclusively to process your enquiry or your request. In this context, however, we must point out that data transmission over the internet (for example by email) may unfortunately have security gaps over which we have no influence. Complete protection of data against unauthorised access by third parties is unfortunately not currently possible.

creativbox guarantees the confidentiality and security of the information you voluntarily transmit, insofar as it is used in the course of business activities. Access to this data at our end is restricted, and we employ technical and organisational security measures to protect data against loss, misuse and improper disclosure.

Hosting and server log files

This website is hosted on a server operated by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, in a data centre in Germany. IONOS processes the data on our behalf (data processing under Art. 28 GDPR).

With every request, the web server automatically stores technically necessary information in so-called log files: IP address, date and time, requested address, amount of data transferred, referring page, and browser and operating system. This serves the secure and stable operation of the website, for example to fend off attacks and to investigate errors (legal basis: legitimate interest under Art. 6(1)(f) GDPR). The log files are deleted automatically as part of the server’s regular log rotation and are not combined with other data.

Contact form and email

If you use the contact form or send us an email, we process the details you provide: name, email address and – if given – phone number, selected topics and your message. The form data is transmitted to our mailbox via an encrypted connection and stored there.

We use this data solely to handle and answer your enquiry (legal basis: Art. 6(1)(b) GDPR – steps prior to entering into a contract – and our legitimate interest in answering enquiries under Art. 6(1)(f) GDPR). Providing your details is voluntary; without an email address, however, we cannot reply to you.

We delete enquiries once they have been dealt with, unless statutory retention obligations apply. If an assignment results, we retain business-relevant correspondence in accordance with tax and commercial law retention periods (generally seven years).

To protect against automated mass submissions, the server stores a pseudonymised value of your IP address (hash) together with the time when the form is submitted. After one hour this entry is no longer taken into account and is deleted automatically (legal basis: Art. 6(1)(f) GDPR).

Disclosure of data

We may disclose your personal data for four reasons:

• At your express request, for example for a testimonial.
• Where the disclosure of data is necessary to process your enquiry or request. For example, we may commission a courier service to send you something. In that case we have to pass on the address and name you voluntarily provided. If data has to be passed on to service providers in the course of an assignment, those service providers are in any case bound by the applicable data protection regulations.
• In connection with the sale or other transfer of all or part of our agency, data may be disclosed at reasonable discretion.
• Mandatory legal provisions may require us to disclose personal data to state institutions and authorities.

Beyond this, we do not pass the information on to third parties without your express consent.

Your rights

The information collected about you as a visitor to our website is stored exclusively for the purpose of providing the requested service. Once that service has been provided, this data is deleted in accordance with the statutory requirements on retention periods and deletion deadlines. In addition, you generally have the rights to information, rectification, erasure, restriction, data portability, withdrawal of consent and objection. You also have the right to lodge a complaint with the competent supervisory authority. In Austria this is the Data Protection Authority (Datenschutzbehörde).

So if you wish to update, change or delete the data we hold about you, please contact us.

Use of cookies

This website uses no cookies and no tracking services. Fonts and all other resources are loaded directly from our server – no data is transmitted to third-party providers.

External links

This website contains links to websites of other providers, to which this privacy policy does not extend.

Changes to this privacy policy

We reserve the right to amend our privacy policy at any time in compliance with the applicable data protection regulations.

Last updated: September 2026