Their website link
https://bitbox.site/ do not state any company and I would be very surprised if a registered company is behind BitBox.
Yeah it does, it's in the footer...
You mean ©2016 IT-BOX UG? Yeah, I saw this, but this means nothing.
If they would be a registered company, then they would have terms and conditions and would state the operator in the ToS.
Also German law requires to state an impressum with some info and I think you have also to state the tax number.
When I google for IT-BOX UG, there is no entry with the company.
The website is anonymous, they accept only Bitcoins. Pretty sure this is a scam, considering all the info available!