Privacy Policy

1. Controller

The controller within the meaning of the GDPR and the Austrian Data Protection Act (DSG) is: NKLS Multimedia e.U., owner Nikolas Backknecht, Unterer Mitterweg 10, 3495 Rohrendorf bei Krems, Austria. Email: [email protected], phone: +43 676 9606677. There is no legal obligation to appoint a data protection officer; for any privacy questions please contact the controller directly.

2. Data processed, purposes & legal bases

Inquiry and booking forms: we process name, email address, optionally phone number, preferred date, service area and your message in order to handle your request and prepare an offer. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures or performance of contract). Providing this data is necessary; without it we cannot respond to your request.

Server log files: when the website is accessed, technically necessary data (shortened IP address, date/time, page requested, browser type) is processed to ensure secure and stable operation. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in IT security). These logs are deleted or anonymised after 7 days at the latest.

Client galleries: access to private galleries is password-protected. A technically necessary session cookie is set for this (exemption under § 165(3) TKG 2021 - no consent required). Galleries and associated access data are deleted after the agreed availability period.

3. Storage period

Inquiry data without a subsequent contract is deleted no later than 12 months after the last contact. In the event of a contract, data is stored for the duration of statutory retention obligations (in particular 7 years pursuant to § 132 BAO and § 212 UGB).

4. Analytics & cookies

This website uses only technically necessary cookies and the self-hosted, cookieless analytics software Umami. No personal profiles are created, no cross-device recognition takes place and no data is transferred to third parties or third countries. As no consent-requiring cookies or trackers are used, a cookie consent banner is not required. Fonts, images and videos are served exclusively from our own servers in the EU.

5. Recipients & processors

To operate the website and send emails we use carefully selected service providers as processors within the meaning of Art. 28 GDPR (web hosting within the EU and an email/SMTP provider; the providers' names will be updated shortly). Data processing agreements are in place. No personal data is transferred to third countries outside the EU/EEA. Disclosure to other third parties only occurs where legally required or necessary to perform the contract.

6. Your rights

You have the right at any time to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR). You may revoke any consent given at any time with effect for the future. To exercise your rights, an informal message to [email protected] is sufficient.

If you believe that the processing of your data infringes data protection law, you have the right to lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, [email protected], www.dsb.gv.at).