Privacy Policy
for Mattebox Studio Krokus OG, Vienna

We take the protection of your personal data very seriously. Below we inform you about the processing of your data and your rights under the General Data Protection Regulation (GDPR).

I. Controller
Mattebox Studio Krokus OG
(see Imprint)
E-mail for privacy inquiries: contact@matteboxstudio.at

‍II. General Data Collection when Visiting the Website
When accessing our website, the server automatically collects so-called server log files:
– IP address
– Date and time of access
– Name and URL of accessed file
– Browser and operating system used
– Referrer URL (previously visited page)This data is used exclusively to ensure a smooth operation, IT security, and to optimize our website.

III. Collection and Processing of Personal Data
Personal data (e.g. name, address, e-mail, phone number) is collected only with the user’s consent whenever possible.
No data is shared with third parties without your explicit consent, unless legally required.

IV. Photo and Video Productions
As part of our production services (photo, video, CGI), we process personal data in the form of image and audio recordings.
The responsibility for obtaining necessary consents lies with the client (e.g. model releases, event notices).
We process such data solely for contractual purposes.

V. Contacting Us
If you contact us by e-mail or phone, we use the provided data solely for handling your request.
Legal basis:
– Legitimate interest (Art. 6(1)(f) GDPR)
– Pre-contractual measures (Art. 6(1)(b) GDPR), if your inquiry relates to our services
If a contractual relationship is established, we process the data exclusively for contract performance.

VI. Use of Processors and Third-Party Services
We may use third-party services such as:
– Cloud storage and file transfer (Dropbox, Google Drive, WeTransfer)
– Project management and communication platforms
– Payment services and accountingIf data is transferred to third countries (e.g. USA), this is done in accordance with EU Standard Contractual Clauses (SCC).

VII. External Links
Our website may contain links to external websites. We are not responsible for their content. At the time of linking, no legal violations were evident.

VIII. Cookies and Tracking
Our website uses cookies. You can disable or restrict cookies in your browser settings.

Google Analytics
We use Google Analytics (Google Ireland Ltd.). Pseudonymized usage profiles are created, and information (including IP address) may be transmitted to servers in the USA.
You can prevent this by adjusting your browser settings. More info: https://policies.google.com/privacy

‍IX. Social Media and Plugins
Our website may include plugins and links to social media platforms (Instagram, Facebook, YouTube, Vimeo, TikTok).
When accessed, data such as IP address and browser details may be transmitted to these providers. We have no control over this.

X. Your Rights

You have the right to:
– Access your personal data
– Rectify incorrect data
– Erase your data ("right to be forgotten")
– Restrict processing
– Data portability
– Object to processing
– Withdraw consent at any time with future effect

You also have the right to lodge a complaint with the Austrian Data Protection Authority (Wickenburggasse 8, 1080 Vienna).

XI. Data Retention
Your data will only be stored as long as necessary for the stated purposes or required by law (e.g. tax regulations).

XII. Security Notice
We point out that data transmission over the internet (e.g. by e-mail) may have security vulnerabilities. Complete protection against access by third parties is not possible.

XIII. Use of Contact Data
The use of published contact data for unsolicited advertising is prohibited. Legal action may be taken in case of spam e-mails.