Privacy policy (Datenschutzerklärung).
Last Updated: August 12, 2026.
This Privacy Policy explains how A ("we," "us," "our") processes personal data when you visit acreative.at (the "Site"), in accordance with the EU General Data Protection Regulation (GDPR) and applicable Austrian law (Datenschutzgesetz – DSG, and Telekommunikationsgesetz – TKG, for cookies).
1. Data Controller
The controller responsible for processing your personal data is:
Anastasiia Kozlova, Margaretenstrasse 9/5, 1040, Vienna, Austria
+43 660 664 6506
2. What Data We Collect and Why (Legal Basis)
a) Data You Provide Directly
If you contact us, sign up for a newsletter, or create an account, we collect the information you submit (e.g. name, email address, message content).
Legal basis: Art. 6(1)(b) GDPR (performance of a contract or pre-contractual steps) or Art. 6(1)(a) GDPR (consent), depending on context.
b) Data Collected Automatically (Hosting)
Our Site is hosted on Squarespace, Inc. Squarespace automatically processes technical data necessary to deliver the Site and keep it secure, such as IP address, browser type, device information, and access timestamps (typically stored in server logs).
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating a secure, functional website).
Squarespace acts as our processor under a Data Processing Addendum. More info: https://www.squarespace.com/privacy and https://www.squarespace.com/data-processing-addendum
c) Analytics Cookies (Google Analytics)
With your consent, we use Google Analytics (Google Ireland Limited, or Google LLC for US processing) to understand how visitors use the Site — pages viewed, time on site, device/browser type, and approximate location.
Legal basis: Art. 6(1)(a) GDPR (consent), obtained via our cookie consent banner before any Analytics cookie is set.
You can withdraw consent at any time via [the cookie settings link/banner on our Site] or by using the Google Analytics Opt-out Browser Add-on.
We have configured Google Analytics with [IP anonymization enabled / EU data residency settings / other measures — specify what you've actually enabled].
Google's privacy policy: https://policies.google.com/privacy
Note on international transfers: Google Analytics may transfer data to servers in the United States. Google offers Standard Contractual Clauses (SCCs) as a transfer safeguard. Be aware that the Austrian Datenschutzbehörde has previously found that some Google Analytics configurations do not fully satisfy GDPR transfer requirements. If this is a significant concern for your business, consider EU-based or server-side analytics alternatives, or ensure Google Analytics is configured with all available EU-focused safeguards.
3. Cookies
Our Site uses cookies set by Squarespace (necessary for the Site to function, e.g. session and security cookies) and, with your consent, Google Analytics cookies (see above).
Necessary cookies are used on the basis of Art. 6(1)(f) GDPR / § 165(3) TKG (technically required) and do not require consent.
Analytics cookies require your prior opt-in consent under § 165(3) TKG and Art. 6(1)(a) GDPR, collected via our cookie banner.
You can manage or withdraw your cookie consent at any time via [cookie settings link], and you can also block cookies through your browser settings.
4. How Long We Keep Your Data
Contact form / email inquiries: retained for [X months/years] or until the matter is resolved, unless a longer retention is legally required.
Google Analytics data: retained per your configured Analytics data retention setting (Google allows 2, 14, or 26 months, or "do not automatically expire" — specify your setting).
Server/hosting logs: retained per Squarespace's standard retention practices.
5. Who We Share Data With
We share personal data only with:
Squarespace, Inc. – hosting provider (processor)
Google Ireland Limited / Google LLC – analytics provider (processor, only with your consent)
Authorities, where required by law
We do not sell personal data.
6. Your Rights Under GDPR
As a data subject, you have the right to:
Access the personal data we hold about you (Art. 15)
Rectify inaccurate data (Art. 16)
Erase your data ("right to be forgotten") (Art. 17)
Restrict processing (Art. 18)
Data portability (Art. 20)
Object to processing based on legitimate interest (Art. 21)
Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3))
Lodge a complaint with a supervisory authority. In Austria, this is:
Österreichische Datenschutzbehörde (DSB) Barichgasse 40-42, 1030 Vienna, Austria Website: https://www.dsb.gv.at
To exercise your rights, contact us at admin@acreative.at.
7. International Data Transfers
Where data is transferred outside the European Economic Area (e.g. to Google in the United States via Google Analytics), such transfers rely on appropriate safeguards, in particular the European Commission's Standard Contractual Clauses (Art. 46 GDPR).
8. Children's Privacy
Our Site is not directed at children, and we do not knowingly collect personal data from individuals under 16 without parental consent, in line with Austria's implementation of Art. 8 GDPR.
9. Changes to This Policy
We may update this Privacy Policy periodically. The current version, with its "Last Updated" date, always applies.
10. Contact
+43 660 664 6506