PRIVACY NOTICE
Last updated: 16 October 2026

1. Data controller

The controller responsible for processing personal data on this website is:

unglue gmbh
Karl-Punzer-Straße 86D
4400 Steyr
Austria

Email: mail@unglue.studio
Telephone: +43 677 62872995

You can contact us using these details if you have questions about data protection or wish to exercise your rights.

2. Visiting the website and technical operation

When you visit our website, technical data is processed to deliver the website, ensure that it functions properly and detect security incidents. This includes, in particular, your IP address, the date and time of access, the content requested, device and browser information and, where provided by your browser, the referring page. Technical error and security logs may also be generated.

The legal basis is Article 6(1)(f) of the General Data Protection Regulation (GDPR). Our legitimate interest is the reliable and secure operation of our website. Technical log data is retained only for as long as necessary to operate the website, resolve errors and prevent or investigate security incidents. In the event of a specific security incident, longer retention may be necessary for investigation and legal action.

3. Wix Studio and hosting

We create and operate our website using Wix Studio and the hosting infrastructure of Wix.com Ltd., 5 Yunitsman St., Tel Aviv, Israel (referred to below as “Wix”). This infrastructure also delivers the images and videos provided on the website.

Wix processes the technical data necessary to provide our website, as well as data you submit to us through Wix features such as the contact form. Where Wix acts on our behalf, this processing is governed by the data processing agreement under Article 28 GDPR, which forms part of the Wix contractual terms.

Technical operation is based on Article 6(1)(f) GDPR. For contact enquiries, the legal bases set out under “Contact form, email and telephone” apply. Information about international data transfers is provided below.

Information about Wix: https://www.wix.com/about/privacy
Data processing agreement: https://www.wix.com/about/privacy-dpa-users

4. Cookies and similar storage technologies

Our website uses cookies and similar technologies, such as browser local storage. These may support technical operation, security and the storage of your privacy preferences. Information about the services and storage technologies used is available through the website’s privacy settings.

The storage of information on your device, or access to information stored on it, is governed by Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021). These activities take place without consent only where strictly necessary for the transmission of a communication or to provide a service you have expressly requested. Where personal data is processed in this context, the legal basis is Article 6(1)(f) GDPR, particularly our interest in a secure and functioning website, or the legal obligations relating to consent management described below.

Storage and access that are not strictly necessary require your prior consent. The associated processing of personal data is based on Article 6(1)(a) GDPR. You can withdraw your consent at any time through the privacy settings, with effect for the future. This does not affect the lawfulness of processing carried out before withdrawal.

5. Consent management with Usercentrics for Wix

We use Usercentrics for Wix to manage your privacy preferences. The provider is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany.

The service records your choices and documents consent that has been given, refused or withdrawn. It processes, in particular, consent status, time, consent ID, banner version, language settings and technical information such as IP address and browser information. Browser local storage may be used to save your choices.

The purpose of this processing is to implement and document your privacy preferences. The legal basis is Article 6(1)(c) GDPR where we fulfil statutory accountability obligations, particularly under Articles 5(2) and 7(1) GDPR. Where processing is not based on a legal obligation, the technically necessary management of your choices is based on Article 6(1)(f) GDPR. Our legitimate interest is transparent and reliable consent management.

According to the information provided for this service, consent data is generally retained for one year. Current information and your available choices can be accessed through the website’s privacy settings.

Further information: https://usercentrics.com/wix-privacy-policy/

6. Contact form, email and telephone

When you contact us using the contact form, we process the information you enter. This may include your name, email address, telephone number, company name, a web address you provide and the content of your message. If you contact us by email or telephone, we process the corresponding contact and communication data.

We use this information to respond to your enquiry, clarify follow-up questions and, where applicable, prepare a proposal or working relationship. The website form is provided through Wix Forms. Submitted information may be processed in Wix’s form management, contact management and inbox systems and, during subsequent communication, in our email systems.

The legal basis is Article 6(1)(b) GDPR where your enquiry concerns a contract or pre-contractual steps and you are personally a party to the contract. In other cases, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is handling business and other enquiries addressed to us, including communication with company representatives.

Wix provides technical safeguards for the operation of forms, for example to detect abusive enquiries. The processing of technical data necessary for this purpose serves our legitimate interest in secure form operation under Article 6(1)(f) GDPR.

Providing your information is voluntary. However, without the contact details and content necessary to handle your enquiry, we may be unable to respond. The form indicates which fields are required for submission.

We delete enquiry data once the enquiry has been resolved and further retention is no longer necessary. Longer retention takes place only where statutory retention obligations apply, the data is needed for a subsequent contractual relationship, or retention is necessary for the establishment, exercise or defence of legal claims. Depending on the purpose, the legal bases are Article 6(1)(b), (c) or (f) GDPR.

7. Recipients and international data transfers

Within our company, access to personal data is limited to people who need it to perform their duties. We also use service providers for hosting, website functionality, consent management and electronic communication. Where these providers process data on our behalf, they do so under agreements pursuant to Article 28 GDPR. Disclosure may also be necessary to fulfil legal obligations or establish, exercise or defend legal claims.

As part of the Wix services, data may be processed in Israel and other countries, particularly the United States, including by group companies and subprocessors. Israel is covered by an adequacy decision of the European Commission under Article 45 GDPR. Transfers to other countries are subject to the applicable adequacy decisions or appropriate safeguards under Article 46 GDPR, particularly the European Commission’s Standard Contractual Clauses, supplemented by additional safeguards where necessary. The transfer mechanisms provided for by Wix are described in its data processing agreement. You can request further information about the applicable safeguards using the contact details above.

Wix subprocessors: https://support.wix.com/en/article/list-of-wixs-sub-processors

8. Links to external websites and social networks

Our website contains links to external services, such as our social media profiles. When you click one of these links, you leave our website. The provider’s own privacy information applies to its processing of personal data. The social media links used on our website are ordinary links.

9. Retention and security

Personal data is retained for as long as necessary for the relevant purpose. Relevant criteria include, in particular, the time needed to handle an enquiry, the duration of a contractual relationship and applicable statutory retention and documentation obligations. Where data is needed to safeguard legal claims, the retention period depends on the applicable limitation periods and the duration of any proceedings. The data is then deleted or anonymised. More specific provisions in individual sections of this notice take precedence.

We take appropriate technical and organisational measures to protect personal data. The website uses HTTPS for encrypted transmission. However, absolute security of data transmission and storage cannot be guaranteed.

10. Your rights

Subject to the applicable legal requirements, you have the right to access your personal data, have inaccurate data corrected, request deletion and restrict processing. You also have the right to data portability where processing is based on consent or a contract and is carried out by automated means.

Withdrawal of consent

You can withdraw consent at any time with effect for the future. This does not affect the lawfulness of processing carried out before withdrawal. You can change or withdraw consent to website technologies through the privacy settings. For other requests, please email mail@unglue.studio.

Right to object

Where we process data on the basis of Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then stop processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

You may object to the processing of your data for direct marketing at any time, without giving reasons.

Right to lodge a complaint

If you believe that the processing of your personal data infringes data protection law, you may lodge a complaint with a data protection supervisory authority, particularly in the country of your habitual residence, place of work or the alleged infringement. In Austria, this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, Austria, email: dsb@dsb.gv.at.

Data Protection Authority website: https://www.dsb.gv.at