Privacy Policy

The controller responsible for data processing on this website is: Three Purple Blocks AG, Schaanerstrasse 99, 9490 Vaduz, Liechtenstein, represented by its Board of Directors, e-mail: hello@threepurpleblocks.li. Data Protection Officer: We are not legally required to appoint a Data Protection Officer and have not appointed one. For all data protection matters, you can reach us at the address stated above.

We process personal data only to the extent necessary to provide a functional website along with our content and services, or where you have given your consent. The legal bases are in particular Art. 6(1)(a) (consent), (b) (contract/pre-contractual measures) and (f) (legitimate interest) GDPR. Processing of special categories of personal data (Art. 9 GDPR) does not take place.

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel processes the data arising via the website as a processor on the basis of a data processing agreement (Art. 28 GDPR). On each access, the server automatically records so-called server log files transmitted by your browser:

• anonymised/truncated IP address;
• date and time of access;
• page/file accessed, referrer URL;
• browser type and version, operating system.

Purpose: secure, stable operation, protection against misuse and attacks, error analysis. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is the technically secure and reliable operation of the website. Storage period: Log files are stored only for as long as necessary for these purposes and are then deleted.

We use technically necessary storage mechanisms (e.g. to store your cookie decision in your browser's local storage, key alpworks-consent, storage period approx. 6 months). These are necessary for operation; the legal basis is § 25(2) TDDDG or our legitimate interest (Art. 6(1)(f) GDPR). Optional, non-essential services (statistics – see section 5) are loaded only after your express consent. The legal basis for this is § 25(1) TDDDG (DE) or § 165 TKG (AT) in conjunction with Art. 6(1)(a) GDPR. Without consent, no statistics or marketing services are activated. You can withdraw or adjust your consent at any time with effect for the future – via the link "Cookie settings" in the footer. The lawfulness of the processing carried out up to the withdrawal remains unaffected.

With your consent, we use Vercel Speed Insights (Vercel Inc., USA) to measure anonymised performance and load-time data and to technically improve the website. No persistent cookies are set; the evaluation is carried out in aggregated/anonymous form and does not allow any conclusions to be drawn about individual persons. Legal basis: Art. 6(1)(a) GDPR (consent). Withdrawal: at any time via "Cookie settings". Third country: see section 8.

When you use our contact form, we process the data you enter:

• name (mandatory field), e-mail address (mandatory field);
• company (optional), project type, budget range;
• your message.

Purpose: handling and answering your enquiry as well as, where applicable, initiating a contract. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures), otherwise Art. 6(1)(f) GDPR (interest in answering enquiries). Processor: Transmission is technically carried out via the service Web3Forms (api.web3forms.com), which transmits the form data on our behalf as a processor; this may involve a transfer to the USA (see section 8). Storage period: We store the enquiry until it has been conclusively dealt with; thereafter we delete it, unless statutory retention obligations prevent this. Provision: Providing the data is voluntary; however, without name, e-mail and message we cannot process your enquiry.

Your data is passed on only to the following categories of recipients, which we have carefully selected and contractually bound as processors:

• Hosting: Vercel Inc. (USA);
• Form transmission: Web3Forms (api.web3forms.com).

No further disclosure to third parties takes place unless we are legally obliged to do so.

When using Vercel (hosting, Speed Insights) and Web3Forms, data may be transferred to or processed in the USA. The transfer is safeguarded by the EU-U.S. Data Privacy Framework and/or standard contractual clauses (Art. 46 GDPR). In the USA, there may be a possibility of access by US authorities; a level of data protection equivalent to EU law cannot be fully guaranteed in every case.

The fonts used on this website are hosted locally on our server. No connection is made to third-party servers and your IP address is not transmitted to providers such as Google.

We store personal data only for as long as is necessary for the respective purposes or as required by statutory retention periods. Thereafter the data is deleted or anonymised.

You have the following rights vis-à-vis us with regard to your personal data:

• access (Art. 15 GDPR);
• rectification (Art. 16 GDPR);
• erasure (Art. 17 GDPR);
• restriction of processing (Art. 18 GDPR);
• data portability (Art. 20 GDPR);
• objection to processing based on Art. 6(1)(f) (Art. 21 GDPR);
• withdrawal of consent given, with effect for the future (Art. 7(3) GDPR).

To exercise these rights, an informal notice to hello@threepurpleblocks.li is sufficient.

Without prejudice to any other legal remedy, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for the controller is: Data Protection Authority of Liechtenstein (DSS), Städtle 38, 9490 Vaduz, info.dss@llv.li, datenschutzstelle.li. You may also contact the supervisory authority of your country of residence, e.g.:

• Austria: Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb.gv.at;
• Switzerland: Federal Data Protection and Information Commissioner (EDÖB), edoeb.admin.ch;
• Germany: the state data protection authority responsible for your place of residence.

Automated decision-making or profiling within the meaning of Art. 22 GDPR does not take place.

This website uses SSL/TLS encryption to protect transmission. You can recognise an encrypted connection by "https://" in the address bar.

Last updated: June 2026. We will adjust this privacy policy as soon as the data processing changes.