top of page

Privacy Policy

I. Overview

If we welcome you as a customer or business partner, please read from point III.

If you visit our website or you use the online application "Timelapserobot", please read from point II.

​

II. What data do we process when you visit our website or use Timelapserobot?

Welcome to our website! Please get an idea of how we process your personal data when you visit our website (Art 13, Art 14 GDPR; section 165 para 3 Austrian Telecommunication Act (“TKG”)).

 

When you visit our website, the following data may be processed:

  • Browser type (user agent),

  • Public IP address1 and pages visited on our website including entry and exit pages,

  • country,

  • operating system,

  • display resolution,

  • Device data: We may store personal data from your device. Such data includes geolocation data, IP address, unique identifiers (e.g. MAC address),

  • date, time and duration of access,

  • data you enter via a contact form,

  • e-mail address,

  • first and last name,

  • password,

  • language, time zone & region,

  • timestamp of last successful login,

  • timestamp of registration,

  • Timestamp of login attempts,

  • number of login attempts,

  • photos stored in Timelapserobot,

  • S/FTP access data (host name, IP address, user name, password),

  • number of FTP connection attempts,

  • Timestamp of the last failed FTP connection attempt,

  • Dropbox Access Token,

  • Related to Timelapserobot smartphone app: smartphone model name, operating system & version, battery level, installed Timelapserobot app version, charging status, WIFI connection status, time zone and region,

  • E-mail in the course of newsletter distribution.

​

The processing of this data is necessary to manage the security of the operation of the website or Timelapserobot and to ensure the functionality of the website or Timelapserobot from a technical point of view. The collection of this data is partly carried out via technical cookies. These technical cookies are only used to the extent necessary (section 165 para 3 TKG). The processing of this data is justified by our legitimate interest in operating our website or Timelapserobot (Art 6 para 1 lit f GDPR).

 

For the operation of our website or Timelapserobot, it may be necessary for us to disclose your data to the following recipients:

  • Recipient data: myLoc managed IT AG (webtropia)

    • Purpose of data processing: Hosting provider

    • Legal basis of data processing: Predominantly legitimate interest (Art 6 para 1 lit f GDPR)

    • Place of business: Germany

    • Basis for transfer to a third country : Within the EU.

  • Recipient data: Meta (WhatsApp, Facebook, Instagram)

    • Purpose of data processing: Social media provider

    • Legal basis for data processing: Consent (Art 6 para 1 lit a GDPR)

    • Place of business: USA

    • Basis for transfer to a third country: Art 49 para 1 lit a GDPR

  • Recipient data: DropBox, Inc

    • Purpose of data processing: Storage provider

    • Legal basis for data processing: Predominant legitimate interest (Art 6 para 1 lit f GDPR)

    • Place of business: USA

    • Basis for transfer to a third country: standard data protection clauses according to Art 46 para 2 lit c GDPR.

  • Recipient data: Amazon AWS

    • Purpose of data processing: Cloud computing provider.

    • Legal basis of data processing: Predominant legitimate interest (Art 6 para 1 lit f GDPR).

    • Place of business: USA

    • Basis for transfer to a third country: standard data protection clauses according to Art 46 para 2 lit c GDPR.

  • Recipient data: Alphabet, Inc (Google Analytics, Google Recaptcha).

    • Purpose of data processing: Statistical evaluation of the website and security tool.

    • Legal basis of data processing: Consent (Art 6 para 1 lit a GDPR) and legitimate interest (Art 6 Abs 1 lit f GDPR)

    • Place of business: USA

    • Basis for transfer to a third country: standard data protection clauses according to Art 46 para 2 lit c GDPR.

  • Recipient data: Wasabi Technologies, Inc.

    • Purpose of data processing: Cloud computing provider

    • Legal basis of data processing: Predominant legitimate interest (Art 6 para 1 lit f GDPR)

    • Place of business: USA

    • Basis for transfer to a third country: standard data protection clauses according to Art 46 para 2 lit c GDPR.

  • Recipient data: Cloudflare, Inc

    • Purpose of data processing: Content Delivery Network

    • Legal basis for data processing: Predominant legitimate interest (Art 6 para 1 lit f GDPR)

    • Place of business: USA

    • Basis for transfer to a third country: standard data protection clauses according to Art 46 para 2 lit c GDPR.

  • Recipient data: Paddle

    • Purpose of data processing: Software as a Service billing tool

    • Legal basis for data processing: Predominant legitimate interest (Art 6 Abs 1 lit f GDPR)

    • Place of business: USA

    • Basis for transfer to a third country: standard data protection clauses according to Art 46 para 2 lit c GDPR.

  • Recipient data: MailChimp, Inc

    • Purpose of data processing: Newsletter provider

    • Legal basis for data processing: Consent (Art 6 para 1 lit a GDPR)

    • Place of business: USA

    • Basis for transfer to a third country: standard data protection clauses according to Art 46 para 2 lit c GDPR

​

II.1. Overview of technical cookies

The data mentioned above is stored via „Cookies“. Cookies are text files that are stored on your computer and enable an analysis of the use of the website. They are used for the recognition and storage of temporary data of the homepage visitor or the users of Timelapserobot. We only use cookies to the extent necessary to communicate with you via the homepage.

These technical cookies are activated as soon as you visit our homepage.

The following cookies are used on our platform on the basis of our predominantly legitimate interest (Art 6 para 1 lit f GDPR):

  • Name of the cookie: JSESSIONID

    • Purpose of the cookie: website interaction

    • Duration of storage: session

  • Name of the cookie: locale

    • Purpose of the cookie: improvement of the user experience (adaptation of the language)

    • Duration of storage: session

  • Name of the cookie: remember-me

    • Purpose of the cookie: improvement of the user experience (remember log-in)

    • Duration of storage: 30 days

  • Name of the cookie: CloudFront-Key-Pair-Id

    • Purpose of the cookie: access to photos and gallery on AWS Cloud

    • Duration of storage: 24 hours

  • Name of the cookie: CloudFront-Policy

    • Purpose of the cookie: Access to photos and gallery on AWS Cloud.

    • Duration of storage: 24 hours

  • Cookie name: CloudFront-Signature

    • Purpose of the cookie: Access to photos and gallery on AWS Cloud.

    • Duration of storage: 24 hours

  • Name of the cookie: klaro

    • Purpose of the cookie: Cookie Consent Management

    • Duration of storage: 1 year

  • Cookie name: _GRECAPTCHER

    • Purpose of the cookie: Google Recaptcha Form-Security

    • Duration of storage: 6 months

  • Name of the cookie: Consent

    • Purpose of the cookie: Google Recaptcha Form-Security

    • Duration of storage: 6 months

  • Name of the cookie: AEC

    • Purpose of the cookie: Google Recaptcha Form-Security

    • Duration of storage: 6 months

  • Name of the cookie: _Secure-ENID

    • Purpose of the cookie: Google Recaptcha Form-Security

    • Duration of storage: 6 months

​

II.2. Overview of marketing cookies

In addition to the "technical cookies" described above, we also use so-called advertising cookies (including "statistical cookies"). These advertising cookies enable us to better understand and evaluate your interests. With the help of the advertising cookies, we can merge your "surfing behaviour" across the boundaries of our website with data from other websites. This is to enable us to better understand the interests of our homepage visitors and to target them more effectively.

We respect that not every visitor to the website wants this. Therefore, we only process your data in the course of advertising cookies if you consent to this (Art 6 para 1 lit a GDPR). You can revoke this consent at any time, whereby the data processing carried out until the time of revocation remains justified.

  • Name of cookie: _ga; ga# (Google) – Google Analytics

    • Purpose of cookie: Statistical purpose

    • Duration of storage: 2 years

    • Location of recipient: USA

    • How it works: Registers a unique ID that is used to create statistical data about website usage.

  • Name of the cookie: gid; gat(Google)

    • Purpose of the cookie: Statistical purposes

    • Duration of storage: 1 day

    • Country of residence of the recipient: USA

    • How it works: Registers a unique ID that is used to create statistical data about how visitors use the website.

  • Name of the cookie: _fbp; fpc

    • Purpose of the cookie: Marketing

    • Duration of storage: 3 months

    • Country of residence of recipient: USA

    • How it works: Meta pixels, user tracking on the website, analysis of page views, dwell time, buttons clicked, etc.

​

III. For what purposes do we process your data if you are a customer of ours or have a business relationship with us?

In the course of our business relationship with customers and business partners, we process data on the basis of contractual (processing of the contractual relationship with you, pre-contractual obligations, invoicing of services, dispatch of documents, communication for processing the contract) and legal obligations (legally required storage within the meaning of section 132 BAO) (Art 6 para 1 lit b and c GDPR) as well as on the basis of our legitimate interests or on the basis of the legitimate interests of third parties (Art 6 para 1 lit f GDPR), namely:

  • for the purpose of internal administration and management of your business case to the extent necessary (e.g.: Processing your business case, forwarding your business case to various departments, filing, archiving purposes, correspondence with you);

  • for the purpose of providing and processing the services related to Timelapserobot;

  • assertion and defence of legal claims

in each case to the extent necessary. The processing of your data serves the initiation, maintenance and handling of our business relations. If you do not provide us with this data, we will unfortunately not be able to process your business case.

Where applicable, we process your data based on your voluntary, express consent (Art 6 para 1 lit a GDPR).

​

IV. How long do we store your data?

We will only store your data for as long as is necessary for the purposes for which we collected your data. In this context, statutory retention obligations must be taken into account (for example, for reasons of tax law, contracts and other documents from our contractual relationship must generally be retained for a period of seven years (section 132 BAO)). In justified individual cases, such as for the assertion and defence of legal claims, we may also store your data for up to 30 years after termination of the business relationship.

We store data of interested parties for up to one year from the time of the last contact by the interested party.

Photos and content stored in Timelapserobot are deleted one month after termination of the contractual relationship.

​

V. Who might receive your data?

In the course of our business relationship, it may be necessary for us to transmit your data to the following recipients:

  • Recipients: Insurances

    • Purpose: Insurance of transports

    • Legal basis: Legal and contractual necessity

    • Country: Austria

  • Recipients: Auditors and tax consultants

    • Purpose: Tax advice

    • Legal basis: Contractual necessity

    • Country: Austria

    • Basis for transfer to third country: Within the EEA

  • Recipients: Banks

    • Purpose: Payment processing

    • Legal basis: Contractual obligation

    • Country: Within the EEA

    • Basis for transfer to third country: Within the EEA

  • Recipients: Lawyers, courts, dispute resolution.

    • Purpose: Pursuit and defence of legal claims

    • Legal basis: Predominantly legitimate interests

    • Country: Austria

    • Basis for transfer to third country: Within the EEA

​

VI. Do we receive data from external sources (Art 14 GDPR)?

In the course of a business relationship or the initiation thereof, it is naturally necessary to conduct research on the business partner. This is done exclusively to the extent required for this purpose. In this context, data may be retrieved and processed from the following sources:

Our company does not obtain personal data from external sources.

​

VII. Does automated decision making or profiling takes place (Art 13 para 2 lit f GDPR)?

No automated decision-making or profiling takes place in our company.

​

VIII. What rights do you have with regard to data processing?

We would like to inform you that, provided that the legal requirements are met, you have the right to request information about your personal data:

  • Have the right to request information about which of your data is processed by us (see in detail Art 15 GDPR).

  • You have the right to request the correction or completion of incorrect or incomplete data concerning you (see in detail Art. 16 GDPR).

  • Have the right to have your data deleted (see in detail Art 17 GDPR).

  • Have the right to object to processing of your data that is necessary for the protection of our legitimate interests or those of a third party (see in detail Art 21 GDPR). This applies in particular with regard to the processing of your data for advertising purposes.

  • Have the right to receive the transfer of the data you have provided in a structured, common and machine-readable format.

If we process your data on the basis of your consent, you have the right to revoke this consent at any time by e-mail. This does not affect the lawfulness of the data processing carried out up to this point (Art 7 (3) GDPR).

​

IX. Do you have a right to complain?

If, contrary to expectations, there is a violation of your right to lawful processing of your data, please contact us by mail or e-mail. We will make every effort to process your concerns promptly. However, you also have the right to lodge a complaint with the supervisory authority for data protection matters responsible for you.

The address of the Austrian data protection authority is:

Austrian Data Protection Authority

Barichgasse 40-42,

1030 Vienna

​

X. How can you get in contact with us?

If you have any further questions about the processing of your data, please feel free to contact our data protection coordinator using the contact details below.

​

XI. Controller

Controller pursuant Art 7 GDPR:

Filmspektakel GmbH

Grüngasse 16/8

1050 Vienna

Austria

+43 660 150 69 00

office [at] filmspektakel.at

bottom of page