Privacy policy

Introduction

Protecting your personal data is particularly important to me. I therefore process your data exclusively on the basis of the statutory provisions (GDPR, the Austrian Data Protection Act DSG, the Austrian Telecommunications Act TKG 2021). In this privacy notice I inform you about the most important aspects of data processing on this website.

Controller

Mathias Kissenberth, Filmproduktion
Churer Straße 26, A-6840 Götzis, Austria
Email: mathias@kissenberth.com
Phone: +43 680 1122 788

Visiting this website (hosting)

This website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you access the website, Cloudflare processes technically necessary connection data: your IP address, the date and time of access, the page accessed, and information about your browser and operating system. This data is required to deliver the website and protect it against attacks.

The legal basis is my legitimate interest in the secure and reliable operation of the website (Art. 6(1)(f) GDPR). Cloudflare acts as a processor. Data may also be processed in the USA; Cloudflare is certified under the EU-US Data Privacy Framework. Further information can be found in Cloudflare’s privacy policy.

This website shows no advertising and does not track individual visitors. The fonts are loaded from my own server, not from third parties.

Visitor statistics

To see how often the website is accessed and which pages are in demand, I use Cloudflare Web Analytics, a service of Cloudflare, Inc. (address above). For this purpose, each page loads a small script from a Cloudflare server (static.cloudflareinsights.com) which reports the page view.

The data recorded comprises the page accessed, the page you came from, browser, operating system and device type, the country of access and technical loading times. According to Cloudflare, no cookies are set for this, no information is stored on your device and visitors are not recognised on return; I only see aggregated figures. As with every page request, your IP address is transmitted for technical reasons but is not used to recognise you.

The legal basis is my legitimate interest in improving the website (Art. 6(1)(f) GDPR). You can object to this recording by blocking scripts from static.cloudflareinsights.com in your browser; the website will continue to work unchanged. Further information can be found in the description of Cloudflare Web Analytics.

Cookies and local storage

This website does not set any cookies for analytics or advertising purposes. Cloudflare may set technically necessary cookies to defend against attacks. If you switch between the light and dark design, your choice is saved in your browser’s local storage so that it is kept for your next visit. This information does not leave your device and can be deleted at any time via your browser settings. It is stored on the basis of Section 165(3) TKG 2021, because it is necessary for the function you have requested.

Cookies from YouTube can only be set after you have started a video (see next section).

Videos from YouTube

The films on this website are played via YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland. When a page is opened, only a preview image from my own server is displayed at first. At that moment, no data is transferred to YouTube.

Only when you click on “Play film” or “Watch the showreel” is the video loaded from YouTube. YouTube then receives your IP address and the information about which page you are visiting; YouTube may also set cookies and transfer data to the USA to Google LLC, which is certified under the EU-US Data Privacy Framework. If you are logged in to YouTube at the same time, YouTube can assign the visit to your account. The videos are embedded in YouTube’s privacy-enhanced mode.

The legal basis is your consent, which you give by clicking on the video (Art. 6(1)(a) GDPR, Section 165(3) TKG 2021). You can withdraw it for the future by no longer starting a video and deleting YouTube’s cookies in your browser. Further information can be found in Google’s privacy policy.

The silent background video on the home page comes from my own server; no data is transferred to third parties in the process.

Contact form and email

If you write to me via the contact form or by email, I process the data you provide: name, email address, optionally phone number and the chosen topic, and the content of your message. I use this data exclusively to process and answer your enquiry.

The legal basis is the performance of pre-contractual measures (Art. 6(1)(b) GDPR) or my legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

To deliver form messages to my email inbox, I use the email delivery service Resend (Resend, Inc., San Francisco, USA) as a processor. The form data is also processed in the USA in the process. Further information can be found in Resend’s privacy policy.

Your enquiry is deleted as soon as it has been dealt with conclusively and no statutory retention obligations stand in the way.

Please note that data transmission over the internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.

Data storage for commissions

Please note that the following data is stored by me for the purpose of handling contracts: name, address, email address and telephone number. The data you provide is necessary for the performance of the contract or for carrying out pre-contractual measures. Without this data I cannot conclude a contract with you. Data is not passed on to third parties, with the exception of my tax adviser in order to fulfil my obligations under tax law. If a contract is concluded, all data from the contractual relationship is stored until the expiry of the retention period under tax law (7 years). The data is processed on the basis of Art. 6(1)(b) (necessary for the performance of a contract) and (c) (legal obligation) GDPR.

Your rights

In principle, you have the rights of access, rectification, erasure, restriction, data portability, withdrawal of consent and objection. An informal message to the address given above is sufficient.

If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you can lodge a complaint with the supervisory authority. In Austria this is the Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

Last updated: October 2026