Privacy policy

The controller under the GDPR is:

marswalk media GmbH, Schweglerstraße 20/19, 1150 Vienna, Austria. Email: hello@marswalk.media. Website: www.marswalk.media.

Further company details are in the imprint.

We process personal data only where at least one Art. 6(1) GDPR basis applies:

• Art. 6(1)(a) — consent (for example measurement tools after “Accept all”).
• Art. 6(1)(b) — contract or pre-contract enquiry (contact form, application).
• Art. 6(1)(c) — legal obligation (for example retaining business correspondence).
• Art. 6(1)(f) — legitimate interests, in particular running the site securely and efficiently, unless your interests override ours.

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. Each visit creates technically necessary server logs: IP address, time, URL, referrer and user agent. Vercel runs a global edge network and can serve requests from locations in the EU where that is possible.

Legal basis: Art. 6(1)(f) GDPR (operating and securing the site). Log retention follows the host’s defaults, typically a few days unless a security review requires longer.

Vercel may process data in the United States. Where required, transfers rely on the EU-US Data Privacy Framework and/or Standard Contractual Clauses.

Marketing images, files and video are delivered by Vercel Blob, a storage service of Vercel Inc. (the same processor as in Hosting). Your browser may load images, files and video from *.public.blob.vercel-storage.com. Connection data including IP address is then sent to that origin.

Legal basis: Art. 6(1)(f) GDPR (operating the site), as in Hosting. Vercel processes these request logs as a processor. For transfers to the United States, see Hosting.

Editorial text and documents are fetched from our CMS Sanity (Sanity AS, Norway) via its API. Our server, not your browser, requests those documents. Sanity does not deliver this site’s marketing images, files or video.

Legal basis: Art. 6(1)(f) GDPR — we cannot run the site without the CMS. Sanity processes those API requests as a processor.

The consent prompt is first-party. We do not use Cookiebot, Cybot, or AdSimple Consent Manager.

Your choice (“Accept all” or “Essential only”) is stored in your browser under marswalk-cookie-consent. That is localStorage on www.marswalk.media, not an HTTP cookie. It remains until you choose “Reset cookies” in the footer.

Legal basis: Art. 6(1)(f) GDPR (honouring and evidencing your choice) and Art. 6(1)(a) once you consent to optional tools.

We load the house typeface Adobe Aktiv Grotesk from Adobe Fonts (Typekit), Adobe Inc., 345 Park Avenue, San Jose, CA 95110, USA, kit tzh4hwv. Your browser requests the font files on every visit, regardless of cookie choice.

Without this typeface we cannot present the site. Your browser sends Adobe ordinary connection data (IP address, user agent). Legal basis: Art. 6(1)(f) GDPR (operating the site). Adobe may process data in the United States (Data Privacy Framework / SCCs where applicable). Objection under Art. 21 GDPR: write to us at the address above.

Google Tag Manager, Google Analytics 4, Meta Pixel, TikTok Pixel, LinkedIn Insight and Microsoft Clarity load only when both are true: you chose “Accept all”, and we have actually enabled that product in the live environment.

If a product is not configured, we do not request that vendor. We do not ship a noscript tracking iframe to Google.

Legal basis for enabled products: Art. 6(1)(a) GDPR. Withdrawal under Art. 7(3) GDPR: choose “Reset cookies” in the footer, or contact us. Vendors may process data in the United States (Data Privacy Framework / SCCs where applicable).

If you use the form, we process what you enter: project type, budget range, timeline, project description, name, company and email.

After each completed step — and if you leave the page without submitting — the in-progress values go to our own endpoint. From there we forward them to our automation webhook (Make) so unfinished enquiries are not lost. That first-party forward does not depend on your cookie choice. The submitted brief uses the same path; we use it to reply, typically via the contact address above.

We also keep the draft in your browser (localStorage) for up to 30 days so you can resume. User-agent and an internal lead id travel with the webhook.

Legal basis for the first-party step and abandon traffic is Art. 6(1)(f) GDPR (following up on started enquiries). A completed submit also rests on Art. 6(1)(b) (pre-contract enquiry). Optional conversion pings to Meta, TikTok and LinkedIn (Conversions API) go out only if you chose “Accept all” (Art. 6(1)(a) GDPR). Leaving without that choice does not fire those pings.

Retention: browser draft 30 days, or until you submit or clear it. Webhook copies stay for as long as handling or a legitimate follow-up requires, then any statutory bookkeeping period that applies.

Open roles may be loaded from JOIN (join.com). You apply on JOIN, which is then controller for that process. Entry page: https://join.com/companies/marswalk.

Speculative applications emailed to hr@marswalk.media are processed to decide on hiring (Art. 6(1)(b) and (f) GDPR). Unless we agree otherwise, we delete those files once the role is filled and no retention duty remains, typically after six months.

This site does not load Cookiebot / Cybot, AdSimple Consent Manager, or Google Fonts. Older versions of this notice that named those services no longer apply.

We keep data only as long as the purpose requires or the law sets a period. Server logs: see hosting. Consent in localStorage: until you reset it in the footer. Contact form: browser draft 30 days; webhook copies: see the contact-form section. Applications: see that section.

You have the rights in Art. 15–22 and Art. 77 GDPR, including access, rectification, erasure, restriction, portability, objection to legitimate-interest processing, withdrawal of consent for the future, and a complaint to a supervisory authority.

In Austria that authority is the Datenschutzbehörde: https://www.dsb.gv.at/

To exercise your rights, write to hello@marswalk.media.

If tools, purposes or legal bases change, we update this page. The current version is at https://www.marswalk.media/datenschutz.