Privacy Policy

Last updated: June 2026 · pursuant to GDPR & DSG · English translation — the German version is legally binding

1. Controller

The controller responsible for data processing on this website is:

Filmspektakel GmbH
Obere Amtshausgasse 49/2, 1050 Vienna, Austria
Email: office@filmspektakel.at · Phone: +43 660 1506900

2. General

We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). In this policy we inform you which data we process when you visit this website and what rights you have.

3. Hosting & server log files

This website is hosted by Netlify, Inc. (512 2nd Street, Suite 200, San Francisco, CA 94107, USA). When the website is accessed, information transmitted by your browser is automatically stored in so-called server log files: IP address, date and time of access, page accessed, referrer URL, browser type and operating system.

This processing serves to ensure smooth operation and the security of the website, based on our legitimate interest (Art. 6(1)(f) GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider. As Netlify is based in the USA, data may be transferred to the USA in this context; such transfer is safeguarded by the European Commission’s Standard Contractual Clauses.

4. Contacting us

When you contact us by email, phone or via the contact form, we process the data you provide (e.g. name, email address, message) to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or (f) (legitimate interest in responding). The data is deleted as soon as it is no longer required for the purpose and no statutory retention obligations apply.

Contact form

When you submit the contact form, the data you enter (name, email address, subject and message) is processed via Netlify Forms from our hosting provider Netlify, Inc. and forwarded to us. Processing takes place to handle your enquiry on the basis of Art. 6(1)(b) and (f) GDPR. The transfer to the USA involved is safeguarded by the measures described in point 3 (Standard Contractual Clauses). The data is deleted as soon as it is no longer required to handle your enquiry.

5. Embedded videos (YouTube & Vimeo)

We embed videos from YouTube (Google Ireland Ltd.) and Vimeo (Vimeo Inc.) on our website. These videos are only loaded after your active consent or a click on the respective video — before that, no connection to the providers is made. YouTube videos are embedded in privacy-enhanced mode (youtube-nocookie.com) and Vimeo videos with “Do Not Track” enabled, to keep data transfer to a minimum.

Once a video is loaded, the providers receive, among other things, your IP address. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the . Privacy information: Google · Vimeo.

6. Cookies & local storage

This website itself sets no tracking or marketing cookies. We only store your cookie choice in your browser’s local storage so that the notice does not reappear on every visit — this information is technically necessary and does not leave your device. Embedded third-party content (see point 5) may set its own cookies after your consent.

7. Fonts

The fonts used are served locally from our server. There is no connection to Google Fonts or other third-party servers, and no personal data is transmitted to third parties.

8. Web analytics

To analyse website usage statistically, we use TWIPLA (Visitor Analytics) provided by TWIPLA GmbH, based in Germany. On this website TWIPLA runs in cookieless mode: no cookies are set and no cross-device profiles are created. For recognition, instead of cookies a privacy-friendly, anonymised method (digital fingerprint) is used, which does not enable cross-site or cross-device identification. Only aggregated, anonymised usage data is collected (e.g. pages viewed, approximate origin based on an anonymised IP address, browser/device type, referrer source), which does not allow conclusions about individual persons. The legal basis is our legitimate interest in privacy-friendly audience measurement to improve our offering (Art. 6(1)(f) GDPR). Processing takes place on servers within the EU; no transfer to third countries occurs. Further information is available in the TWIPLA privacy notice.

9. Your rights

Under the GDPR you have the following rights:

Right of access (Art. 15)
Right to rectification (Art. 16)
Right to erasure (Art. 17)
Right to restriction of processing (Art. 18)
Right to data portability (Art. 20)
Right to object (Art. 21)
Right to withdraw consent given (Art. 7(3))

To exercise your rights, simply send a message to office@filmspektakel.at.

10. Right to lodge a complaint

If you believe that the processing of your data violates data protection law, you can lodge a complaint with the Austrian supervisory authority:

Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna
www.dsb.gv.at

Imprint: to the imprint →