Legal

Privacy Policy

This policy explains what personal data is processed when you visit velvetleafhouse.com, and why. We keep data processing to a minimum: this website hosts its fonts locally, embeds no third-party content, sets no cookies of its own, and loads its only analytics service, Google Analytics, exclusively after your consent.

1. Controller

10X Labs GmbH
Gregerstraße 20a
2401 Fischamend, Austria
Email: contact@velvetleafhouse.com

2. Hosting and server log files

This website is hosted by World4You Internet Services GmbH, Linz, Austria. When you visit the site, the web server automatically records technical access data in log files: the IP address of the requesting device, date and time of access, the requested file, the amount of data transferred, the browser type and version, the operating system and the referring page.

This data is processed to deliver the website reliably and securely, to detect and prevent misuse, and to diagnose technical problems. The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR). Log files are stored by the hosting provider for a limited period and then deleted. The hosting provider also generates aggregated, non-personalized visitor statistics from these log files. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.

3. Cookies and web analytics

This website itself sets no cookies. We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, together with Google Consent Mode. Until you make a choice in the consent banner, the Google tag runs in a restricted mode: it sets no cookies and stores no identifiers, and only transmits cookieless, aggregated signals. Full measurement, including analytics cookies, is activated only after you agree through the consent banner. The legal basis for full measurement is your consent (Art. 6(1)(a) GDPR, §165(3) TKG 2021).

When you consent, Google Analytics uses cookies and similar technologies. The information generated is generally transmitted to and stored on Google servers; data may also be processed by Google LLC in the USA on the basis of the EU–US Data Privacy Framework and standard contractual clauses. IP addresses are processed in shortened form in Google Analytics 4. Your consent choice itself is stored in your browser's local storage.

You can withdraw or change your choice at any time with effect for the future: open the cookie settings. If you decline after having accepted, Google Analytics is no longer loaded and its cookies on this domain are removed.

3e. Free guide by email

If you request our free guide, we process the email address you enter in order to send you a confirmation email and, after your confirmation, the download link (double opt-in). We use the email service Brevo (Sendinblue SAS, 7 rue de Madrid, 75008 Paris, France) for this; Brevo stores your email address, your confirmation and technical delivery data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. The legal basis is your consent (Art. 6(1)(a) GDPR). Every email we send contains an unsubscribe link; unsubscribing removes you from the list. Your address is never shared with third parties for their own purposes.

4. Instagram feed

The homepage shows recent posts from our own Instagram profile. These images are retrieved by our server through the official Meta Graph API and stored as copies on our own web space. Your browser loads them exclusively from our server: no connection is made between your device and Meta or Instagram, and no data about you is transmitted to Meta by this website.

5. External links

This website links to our Instagram profile at instagram.com. If you follow this link, Meta Platforms Ireland Ltd. is responsible for the data processing there; Meta's own privacy policy applies. This website transmits no data about you to Instagram.

6. Contact by email

If you contact us by email, we process the data you provide (your email address and the content of your message) to handle your inquiry. The legal basis is Art. 6(1)(b) GDPR where your inquiry relates to a contract, and otherwise our legitimate interest in answering inquiries (Art. 6(1)(f) GDPR). Emails are deleted when they are no longer needed, unless statutory retention obligations apply.

7. Your rights

You have the right to access the personal data we hold about you, and the right to rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise your rights, contact contact@velvetleafhouse.com.

You also have the right to lodge a complaint with a supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

8. No automated decision-making

This website performs no automated decision-making and no profiling.

9. Changes to this policy

We will update this policy when the website's features change, for example when digital products, payment processing, a newsletter or analytics services are introduced.

Last updated: 26 August 2026