Data Privacy
Flat Bold Studio - a brandy by LM Visions Creative Agency e.U.
Lukas Messing
Absberggasse 7/22 1100 Vienna, Austria
office@flatboldstudio.com
Last updated: 15 May 2026
1. Overview
Flat Bold Studio ("we", "us") operates the website flatboldstudio.com. We take the protection of your personal data seriously. This policy explains what data we collect, how we use it, and what rights you have. We process personal data in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
2. Controller
The party responsible for data processing on this website is:
Lukas Messing
Flat Bold Studio
Absberggasse 7/22, 1100 Vienna, Austria
Email: office@flatboldstudio.com
3. Data We Collect
Server log files. When you visit our website, our hosting provider automatically collects technical data sent by your browser. This includes your IP address, browser type and version, operating system, referring URL, and the date and time of access. This data is used to ensure the security and stability of the website. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR.
Contact requests. When you contact us by email or through a contact form, we collect the data you provide, such as your name, email address, and the content of your message. We use this data solely to respond to your inquiry. The legal basis is Art. 6(1)(b) GDPR where the contact relates to a contract or pre-contractual measures, otherwise Art. 6(1)(f) GDPR.
Project and client data. When you engage us for a project, we process the data necessary to deliver our services. This may include contact details, billing information, and project materials. The legal basis is Art. 6(1)(b) GDPR for contract performance and Art. 6(1)(c) GDPR for legal retention obligations.
4. Hosting
Our website is hosted by Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, Netherlands. Framer processes the data described above on our behalf under a data processing agreement in accordance with Art. 28 GDPR. As Framer is established within the EU, no transfer of data to a third country occurs through hosting itself.
5. Analytics and Cookies
Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies to analyze how visitors use our website. The information generated about your use of the website is generally transmitted to and stored by Google, including on servers in the United States. We have IP anonymization active where supported, so your IP address is shortened within the EU before transmission.
We only set Google Analytics and other non-essential cookies after you have given consent through our cookie banner. The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time with future effect through the cookie settings on our website.
For data transferred to Google in the United States, Google relies on the EU US Data Privacy Framework and Standard Contractual Clauses as appropriate safeguards under Art. 46 GDPR. More information is available in Google's privacy policy at policies.google.com/privacy.
6. YouTube Embeds
To showcase our video work, we embed videos hosted on YouTube, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). We use YouTube in privacy enhanced mode where available, which means YouTube does not store cookies on your device until you actively play a video.
When you play an embedded video, YouTube receives information including which page you visited, your IP address, and device data. If you are logged into a YouTube account, this data may be associated with your account. Playing a video may result in data being transferred to Google servers in the United States, with the safeguards described in Section 5. The legal basis for embedding videos is our legitimate interest in presenting our work under Art. 6(1)(f) GDPR, and your consent under Art. 6(1)(a) GDPR where cookies are involved. More information is available in Google's privacy policy at policies.google.com/privacy.
7. Data Sharing
We do not sell your personal data. We share data only with service providers who support our operations, such as our hosting provider, payment processors, and email services. These providers act as processors under contract. Where data is transferred outside the EU, we ensure appropriate safeguards such as Standard Contractual Clauses.
8. Retention
We retain personal data only as long as necessary for the purposes described or as required by law. Invoicing and tax records are retained for seven years in accordance with Austrian commercial and tax law. Contact inquiries are deleted once the matter is resolved and no retention obligation applies.
9. Your Rights
Under the GDPR you have the right to access your data, to rectification, to erasure, to restriction of processing, to data portability, and to object to processing. You also have the right to withdraw consent at any time. To exercise any of these rights, contact us at office@flatboldstudio.com.
You have the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Barichgasse 40 to 42, 1030 Vienna, dsb.gv.at).
10. Changes to This Policy
We may update this policy to reflect changes in our practices or legal requirements. The current version is always available on this page.