1. Who is responsible for handling your data?
Sluicebox, Inc., 11801 Domain Blvd, Level 3, Austin TX 78758, United States of America, e-mail address: privacy@sluicebox.ai ("Sluicebox", "we", "us") is responsible for adequately protecting your personal data. Sluicebox therefore complies with all legal provisions for the protection, lawful handling and confidentiality of personal data, as well as for data security. This includes the EU's General Data Protection Regulation ("GDPR").
2. Data processing around the website
2.1 IT security when visiting the website
When you visit our website https://www.sluicebox.ai ("website"), your browser automatically sends information to our web server. The following information is stored in a log file:
- IP address of the requesting computer;
- Date and time of access;
- Name and URL of the retrieved file;
- the website from which the access was made (referrer URL); and
We process the aforementioned personal data on the basis of our legitimate interest in providing you with the website and ensuring the IT security of our website (Art. 6 para. 1 lit. f GDPR). We store this data for two years and subsequently delete it. Longer storage only takes place due to statutory retention periods or if this is necessary for the assertion, exercise or defence of legal claims.
2.2 Technically necessary cookies
Cookies are small text files that the websites visited by the user send to your computer or mobile device and store them there before sending them back to the same websites on the next visit. Cookies allow the website to remember the user's actions and preferences (such as login details, chosen language, font size, other display settings, etc.) so that they do not have to be re-entered when the user revisits the website or browses from one page to another. Cookies are therefore used for example for IT authentication, session monitoring and storing information about the user's activities when accessing a website.
This website uses only technically necessary cookies, which are absolutely essential for the proper functioning of the website, for data security and to prevent misuse and enable you to use the content and services you have requested properly and securely. These cookies cannot therefore be deactivated. If you do not wish this category of cookies to be installed on your device, you will be asked not to use the website. The data processing is based on our legitimate interests in accordance with Art. 6 para. 1 lit f GDPR.
2.3 Use of our contact form
If you have any questions, you can contact us using the form provided on the website. For processing and responding to your query, we rely on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR, which consists of processing and responding to your enquiry quickly and, if necessary, responding to further queries. If your enquiry results in the conclusion of a contract with you, we also process the personal data from your enquiry on the basis of our (pre-)contractual obligations in accordance with Art. 6 para. 1 lit. b GDPR.
The personal data collected by us for the use of the contact form will be stored for a maximum of two years after your enquiry has been dealt with so that we can respond to any queries. Data will only be stored for longer if a contract is subsequently concluded, due to statutory retention periods or if it is necessary for the assertion, exercise or defence of legal claims.
3. Our social media accounts
You can interact with our social media accounts by commenting on our posts, reacting to them (e.g. via the "Like" button), sharing them or sending them to other users. In doing so, we process your interactions, your username and, if applicable, the personal data of invited third parties. This data may also be processed by the platforms in this context. In this case, the respective platform and we are joint controllers pursuant to Art. 26 GDPR. You can find more information on the processing of your data at
The data processing is carried out to answer your questions, to give you the opportunity to express your opinion or feedback and to advertise our offer. The processing is therefore carried out on the basis of both our and your legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR or to fulfil our (pre-)contractual obligations in accordance with Art. 6 para. 1 lit. b GDPR.
We store your personal data for as long as we need it to fulfil the stated purposes. Your data will then be deleted.
4. Our software
4.1 Providing our services
We process the following personal data for the initiation and processing of business transactions relating to our products and services:
- Business name
- Telephone number and e-mail address of business contact
- Address
- Order details
- Account and record data
The processing is carried out to fulfil our (pre-)contractual obligations in accordance with Art. 6 para. 1 lit. b GDPR and on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR to provide our products and services. The personal data will be processed until 7 years or beyond this until the end of any legal disputes in which the data is required as evidence.
4.2 Accounting
We process the following data for accounting purposes relating our products and services:
- Business name
- Telephone number and e-mail address
- Address
- Bank details
- Order details
- Data on the payment behavior
- Account and record data
The processing of the data provided is carried out for the fulfilment of your contract (Art 6 para 1 lit b DSGVO) as well as for the compliance with legal obligations (Art 6 para 1 lit c DSGVO).
The personal data will be processed until the termination of the business relationship with the customer or until the expiry of the storage obligations or, in addition, until the termination of any legal disputes in which the data are required as evidence.
5. To whom may we pass on your data?
We transfer your personal data to the extent necessary to the following external service providers (processors):
- IT service providers and/or providers of data hosting or data processing or similar services;
- other service providers, providers of tools and software solutions that also support us in the provision of our services and act on our behalf (including providers of marketing tools, marketing agencies, communication service providers and call centres).
All our processors process your data only on our behalf and on the basis of our instructions for the provision of the above-mentioned services.
We also transfer your personal data to the following recipients to the extent necessary:
- any third parties involved in the fulfilment of our obligations to you;
- other external third parties to the extent necessary on the basis of our legitimate interests (e.g. auditors, insurance companies in the event of an insurance claim, legal representatives in the event of a claim);
- Authorities and other public bodies to the extent required by law (e.g. tax authorities).
If we process your data in a third country outside the European Union (EU) or the European Economic Area (EEA) or in the context of the use of third-party services, this will only take place if it there is an adequacy decision by the EU Commission or other appropriate safeguards according to Art. 46 GDPR.
6. What rights do you have?
If you wish, we will provide you with information about all your personal data that we process at any time. In some cases, you also have the right to data portability, i.e. to receive the personal data you have provided to us in a structured, commonly used and machine-readable format.
Under certain conditions, you can request the restriction of processing, rectification and erasure of your personal data.
In some of the cases mentioned above, we are authorised to process your personal data on the basis of your voluntary consent. You can revoke this consent at any time without giving reasons with effect for the future, until then we will process your data lawfully.
Would you like to make a complaint? In this case, you can contact us using the contact options listed under point 1. You also have the option of lodging a complaint with an supervisory authority.
Insofar as we process your data in the interests of us or a third party, you also have the right to object at any time if there are reasons for this arising from your particular situation.