Privacy notice

1. Controller and contact

Skycontainer Interior LLC
c/o Harvard Business Services, Inc.
16192 Coastal Hwy
Lewes, DE 19958
USA

Represented by: Founder and CEO Mr. Mark Stabeleton

Registered Agent: Wyoming Registered Agent Services

E-Mail: [email protected]
Website: www.skycontainer.at

Privacy contact: Masha Narovy, reachable via [email protected] and the postal address above.

This notice covers the living ideas portal skycontainer.at, including its German and English pages, for visitors in Europe and the United States, including California and Delaware. Please send privacy requests to the email address above. The US postal address and registered agent do not designate a data-protection representative in the European Union.

2. Visits, hosting and security

Page requests involve technical information such as the IP address, requested address, time, browser and device information, and where provided the referring page. We use this information to deliver the website, fix errors and defend against attacks. Where the GDPR applies, the basis is Article 6(1)(f), our legitimate interest in operating a secure, available portal. We do not use security records to create our own personal advertising profiles.

Web hosting and email are provided through ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. See ALL-INKL.COM privacy information.

Cloudflare, Inc., United States, provides network delivery and security in front of our hosting. It processes connection and security information and may set necessary security cookies when a protection feature needs them. See Cloudflare privacy information and its data processing terms for processing, subprocessors and transfers.

3. Your information enquiry

The form collects your name, email address, message and selected category. A phone number is optional. An enquiry beside a picture or collection also includes its image/product reference, image description and relevant public page and image links. A technical request reference prevents duplicate delivery. We cannot process a form enquiry without the required contact information; you can still browse the portal.

The message is transmitted to the server over an encrypted connection and then emailed to the SkyContainer team members responsible for handling it. Existing mailboxes and administrative delivery arrangements, including configured email forwarding, are used. Enquiries are not published publicly.

General information enquiries are processed under GDPR Article 6(1)(f), our interest in responding to a question you have asked. Article 6(1)(b) applies only where an enquiry genuinely concerns requested pre-contractual steps. Sending a message does not provide blanket consent to newsletters, sale of contact details or manufacturer advertising. Any additional referral to an independent provider requires prior information about its purpose and recipient and a valid legal basis. The form currently does not implement automatic referrals to manufacturers.

For abuse prevention, the delivery service keeps pseudonymised checks derived from the IP address and enquiry, plus delivery status and timestamps. The register does not store the plain-text message. Entries more than 24 hours old are removed from the active register on the next delivery attempt; backups may retain them until their backup cycle expires.

Our own statistics and measurement

Our optional first-party statistics count page views, opened enquiry forms and browser-confirmed submissions by page and channel. They start only after your separate “Allow statistics” choice. Advertising and statistics are independent choices. The statistics register does not store visitor IDs, names, email addresses, phone numbers, message text or complete referrer addresses. Connecting to our server technically processes your IP address, but the statistics register does not store it. We do not send statistics to Meta or Google.

The sc_metrics_v1 choice cookie stores only version, yes/no and timestamp for up to 180 days. After permission, sc_campaign in this tab’s session storage contains only an approved channel and campaign code; withdrawal removes it, otherwise closing the tab ends it. There is no cross-visitor identification. Where the GDPR applies, optional processing relies on Article 6(1)(a). Withdraw your choice through privacy settings. Global Privacy Control keeps statistics off.

The active register holds daily totals for up to 400 days; older days are removed on its next update. Existing backup cycles may retain copies longer. Enquiries accepted by the mail server also count as a daily operational total without contact data, campaign or request identifier. Reconfirming delivery does not count as another enquiry. Page views are not unique visitors; declined statistics, blockers and technical failures limit reporting.

4. Optional Google advertising

Advertising may support the portal. Google AdSense uses Google services, including Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for EEA users, Google LLC, United States, and partners involved in the particular ad delivery. Google may process IP addresses, device and browser information, the page viewed, cookie/storage identifiers and advertising interactions. Limited ads do not automatically mean no personal-data processing or no security cookies.

The website loads optional Google advertising services only after your choice in privacy settings. Declining, withdrawing or a detected Global Privacy Control signal prevents new Google ad requests by our website. This choice applies to this device and browser. Any provider/purpose choices offered by Google are governed by the decisions you actually make there.

Where consent is required, processing is based on GDPR Article 6(1)(a) and applicable device-storage/access rules. See Google on partner sites, Google privacy information and Google advertising partners.

5. Pictures, videos, search and sharing

Pictures, short videos, fonts and site search are served from our website. Videos are not automatically loaded YouTube embeds. Search terms are processed in the browser and not sent to an external analytics service. The public portal does not load our own Google Analytics, Meta Pixel or Pinterest tracking scripts.

Sharing and Pinterest links connect you to the platform or app only when you act. The selected public page/image link and, where relevant, a suggested title are passed on; the platform may also process connection information and an existing sign-in. The provider’s terms then apply. Opening a sharing app does not itself publish a post on your behalf.

6. Recipients and international processing

Recipients include the operator’s authorised team, hosting/email and security providers and, when advertising is enabled, Google and relevant advertising providers. A platform you choose to open is an additional recipient. Authorities or professional advisers receive information only where a specific legal obligation or the handling of legal claims justifies this.

The controller has a US address. Cloudflare and Google operate internationally; processing or access may occur in the United States. German hosting alone does not exclude such access. Transfers covered by GDPR Chapter V require an applicable transfer mechanism. The EU-US Data Privacy Framework covers only certified recipients and covered activities, not every US company. Otherwise appropriate safeguards, such as standard contractual clauses and necessary supplementary measures, may be required. Contact us for information about the recipients and safeguards applicable to your data. We do not claim that SkyContainer itself is DPF-certified.

7. Retention and deletion

Enquiries and email correspondence are retained while needed for handling the request, related follow-up questions or specific legal claims. Once the purpose ends and no retention obligation applies, they must be deleted. An original enquiry does not automatically authorise retention for a new marketing purpose. Technical records are limited according to their security/troubleshooting purpose and the provider’s retention rules; evidence of a specific attack may need longer retention. Backups expire on their respective backup cycles.

8. Your rights in Europe

Where the GDPR applies, you have rights, subject to the legal conditions, to access and a copy, correction, erasure, restriction and portability. Consent can be withdrawn for the future at any time. For processing based on legitimate interests, you may object for reasons relating to your situation; objection to direct marketing does not require such reasons. Legal exceptions may apply, particularly for retention duties and legal claims.

Email [email protected]. We request only information needed to locate your records and verify your identity proportionately. GDPR requests are normally answered within one month; any permitted extension must be explained within that month. You may also complain to a data-protection authority, in particular where you live or work. In Austria, contact the Austrian Data Protection Authority.

9. Visitors from the United States

This notice also applies to US visitors, including residents of California and Delaware. Depending on your state and the law’s scope, you may have additional rights to access, correct, delete or obtain a portable copy of information and opt out of sale/sharing for cross-context advertising, targeted advertising and certain profiling. These requests can be made through [email protected] and privacy settings. Exercising privacy rights does not result in discrimination in access to editorial content.

The information categories and purposes appear above. Sources are your submissions, browser and the requests needed for delivery/security. The form currently does not implement automatic disclosure to manufacturers or an automatic sale of enquiries. When Google advertising is enabled, advertising providers’ processing may fall within broad US definitions of sale or sharing, even without a direct payment for personal information. Declining Google advertising disables that website integration. A detected Global Privacy Control signal is treated as a refusal for this purpose. The older Do Not Track header is not treated as a separate consent or opt-out mechanism.

To appeal a refusal of a privacy request, email [email protected] with “Privacy appeal”. We review the request again and explain the decision and applicable complaint options. Requests covered by the CCPA generally have a 45-day statutory response period with permitted extensions; other states have their own periods. The applicability of a law depends on activities, market connection and thresholds; a US address alone does not determine it.

10. Children and automated decisions

The portal presents home and interior ideas for adults and is not designed specifically for children. Please do not use the general form to send health information, identity documents or other particularly sensitive information. Enquiry handling does not make solely automated decisions with legal or similarly significant effects. Contact us for review and deletion if you suspect an unwanted submission of a child’s information.

11. Changes to this notice

We update this page when services, purposes, recipients or legal requirements change. The date above identifies the version. Material new uses of information already collected are communicated appropriately in advance, and any required new consent is requested separately.