This Privacy Policy explains how PixBox Group collects, uses, stores, shares and protects personal data when individuals visit the corporate website, contact the Group, submit an enquiry, or otherwise interact with the website. It is drafted for a European business environment and is intended to support GDPR-compliant transparency.
1. Who we are
For publication, identify the legal entity acting as the website controller. If the website is centrally managed at group level, the controller will typically be PIXBOXONE OÜ, Tallinn, Estonia, unless another entity is designated on the site.
Recommended publication format:
• Controller: PIXBOXONE OÜ
• Registered address: Tornimäe tn 5, Kesklinna linnaosa, 10145 Tallinn, Harju maakond, Estonia
• Registration number: 16926923
• Contact email for privacy matters: hello@getpixbox.com
• General contact email: hello@getpixbox.com
• Data Protection Officer / privacy representative: No separate Data Protection Officer has been designated. Privacy matters are handled by the Controller using the contact details below.
2. Scope of this notice
This notice applies to the corporate website of PixBox Group and to personal data collected through:
• website browsing and technical logs;
• contact forms and direct email enquiries;
• business development, partnership or investor enquiries;
• recruitment or other submissions if such forms are added to the site; and
• cookies or similar technologies used on the website.
This notice does not automatically apply to separate customer-facing product websites, application environments, device-level services or third-party platforms unless specifically stated there.
3. Personal data we may collect
Depending on how the website is used, the Group may collect:
• identification and contact details, such as name, company name, job title, email address, phone number and country;
• correspondence data, including the content of enquiries, requests and follow-up communication;
• technical and usage data, such as IP address, browser type, device information, referring URLs, language, access times, pages viewed and interactions on the website;
• cookie and analytics data, where cookies or similar technologies are enabled; and
• any other personal data voluntarily submitted through forms or email.
4. How we use personal data
The Group may use personal data to:
• respond to enquiries and provide requested information;
• communicate about partnerships, investor relations, market opportunities or other legitimate business matters;
• operate, secure and improve the website;
• analyse website use and performance;
• maintain internal records and relationship management;
• comply with legal, regulatory or compliance obligations; and
• protect the rights, security and integrity of the Group, website users and third parties.
5. Legal bases for processing
Where the GDPR applies, the Group relies on one or more of the following legal bases:
• legitimate interests – for operating the website, responding to business enquiries, improving services, maintaining security, and managing normal business communications;
• steps prior to entering into a contract – where a request may lead to a commercial discussion, collaboration or service relationship;
• legal obligation – where processing is required by law, regulation or a lawful authority request; and
• consent – where consent is required, for example for non-essential cookies or certain optional marketing communications.
Where consent is used, individuals may withdraw it at any time without affecting the lawfulness of prior processing.
6. Cookies and similar technologies
The website may use strictly necessary cookies and, where implemented, analytics, preference or marketing cookies. Non-essential cookies should only be used where valid consent has been obtained in accordance with applicable law.
The website should include:
• a cookie banner or consent tool;
• a Cookie Policy describing the categories and purposes of cookies; and
• a persistent link allowing users to revisit or change cookie preferences.
7. How we share personal data
Personal data may be shared only where reasonably necessary and proportionate, including with:
• group companies involved in managing the website or responding to enquiries;
• website hosting, IT, analytics, CRM or communications service providers;
• professional advisers, including legal, tax, compliance or audit advisers;
• public authorities, courts, regulators or law enforcement where required; and
• potential investors, purchasers or restructuring counterparties, but only under appropriate confidentiality and legal safeguards.
The Group does not sell personal data.
8. International transfers
If personal data is transferred outside the European Economic Area, the Group will use an appropriate legal transfer mechanism where required, such as:
• an adequacy decision;
• the European Commission’s Standard Contractual Clauses; or
• another lawful safeguard recognised under applicable data protection law.
9. Data retention
Personal data will be kept only for as long as reasonably necessary for the purpose for which it was collected, including:
• as long as needed to respond to or manage an enquiry;
• as long as necessary to maintain business records and relationship history;
• as long as required by law, tax, accounting or compliance obligations; and
• until consent is withdrawn, where consent is the basis and no other legal basis applies.
The Group should maintain an internal retention practice that reflects the actual website workflow and service providers used.
10. Data security
The Group uses reasonable technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures may include access controls, hosting safeguards, limited user permissions, vendor controls and secure administrative processes.
No internet transmission or storage system can be guaranteed to be fully secure. Individuals should avoid sending sensitive personal data unless specifically requested through an appropriate channel.
11. Your rights
Where the GDPR or similar laws apply, individuals may have the right to:
• request access to their personal data;
• request correction of inaccurate or incomplete data;
• request deletion of personal data in certain circumstances;
• request restriction of processing;
• object to processing carried out on the basis of legitimate interests;
• request portability of data where applicable;
• withdraw consent where processing is based on consent; and
• lodge a complaint with the competent data protection authority.
To exercise any of these rights, users should contact the Group using the privacy contact details stated in this notice.
12. Children
The corporate website is not intended for children and is not directed to individuals below the age at which consent is legally valid under applicable law. The Group does not knowingly collect personal data from children through the corporate site.
13. Third-party links
The website may contain links to third-party websites or services. The Group is not responsible for the privacy practices or content of third-party sites. Users should review the privacy notices of those third parties before providing personal data.
14. Changes to this notice
The Group may update this Privacy Policy from time to time to reflect website changes, legal developments or business operations. The latest version should be published on the website together with the effective date.
15. Contact us
For privacy-related questions, requests or complaints, contact:
PIXBOXONE OÜ
hello@getpixbox.com
Tornimäe tn 5, Kesklinna linnaosa, 10145 Tallinn, Harju maakond, Estonia
If applicable, users may also contact the relevant supervisory authority in the country of the controller or in the country where they reside.