Privacy Policy

This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website. We process personal data strictly in accordance with the applicable data protection regulations, including the General Data Protection Regulation (GDPR) and the Telecommunications Act 2003.

1. Data Collection When Visiting Our Website

When you access our website, certain technical data are automatically collected, including:

• your IP address or hostname,

• browser type and version,

• operating system and language settings,

• date, time, and duration of your visit,

• pages accessed,

• referring page (“leaving page”),

• Internet Service Provider (ISP).

This information is stored in server log files for technical and security reasons. Such processing is based on our legitimate interests (Art. 6 (1) (f) GDPR), namely ensuring the functionality, stability, and security of the website. These data are not combined with other personal data.

2. Contacting Us

If you contact us via our website contact form or by email, the personal data you provide will be stored for the purpose of processing your inquiry and handling any follow-up questions.

• Legal basis: Art. 6 (1) (b) GDPR (performance of a contract or pre-contractual measures) and Art. 6 (1) (f) GDPR (legitimate interest in responding to inquiries).

• Retention period: Six (6) months, unless a longer retention period is required by law or necessary to defend against legal claims.

• Data will not be disclosed to third parties without your explicit consent.

3. Cookies

Our website uses cookies to provide an optimal user experience. Cookies are small text files stored on your device via your browser.

• Some cookies are “session cookies,” which are deleted automatically after your visit.

• Other cookies remain on your device until manually deleted and allow us to recognize your browser upon your next visit.

You may configure your browser to notify you before cookies are set, to allow cookies only in specific cases, or to block them entirely. Please note that disabling cookies may restrict the functionality of our website.

4. Third-Party Services and Analytics

We may use third-party services to improve our website, analyze usage, or display embedded content (e.g., videos, social media features). These services may set their own cookies or collect personal data such as your IP address or browsing behavior.

Examples include:

• Analytics tools (e.g., Google Analytics) for measuring website performance and usage.

• Content delivery networks (CDNs) for faster loading of resources.

• Embedded third-party content (e.g., YouTube videos, Instagram feeds, social media plugins).

Where required, your data will only be processed based on your consent (Art. 6 (1) (a) GDPR), which you can withdraw at any time.

Please note that once you click on third-party content (e.g., a video or social media button), the respective provider’s privacy policy applies.

5. Data Retention and Security

• Retention: Personal data are stored only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law (e.g., tax or accounting regulations).

• Security: Our website is hosted on Squarespace, which employs industry-standard technical and organizational security measures to protect your personal data against unauthorized access, loss, misuse, or disclosure.

• Encryption: Data transmitted through our website is protected using SSL/TLS encryption.

• Access control: Access to personal data is restricted to individuals who require it for legitimate business purposes and who are bound by confidentiality obligations.

6. Legal Basis for Processing

We process personal data exclusively on the following legal bases:

• Art. 6 (1) (a) GDPR – Consent

• Art. 6 (1) (b) GDPR – Performance of a contract

• Art. 6 (1) (c) GDPR – Compliance with legal obligations

• Art. 6 (1) (f) GDPR – Legitimate interests (e.g., ensuring website security and functionality)

7. Your Rights as a Data Subject

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to data portability (Art. 20 GDPR)

• Right to object (Art. 21 GDPR)

• Right to withdraw consent at any time (Art. 7 (3) GDPR)

If you believe that your data have been processed unlawfully, you may lodge a complaint with us at office@tomhartfilms.com or with the competent data protection authority.

8. Contact Information

Website Operator: Thomas Schweichhart
Phone: +43 660 690 1999
Email: office@tomhartfilms.com