RITZLFILM

Privacy Policy

We, RitzlFilm — Film & Service Production, take the protection of personal data seriously. Below we explain what data is processed when you visit this website and in the course of our business, and what rights you have. Last updated: 2026.

Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

RitzlFilm — Film & Service Production
»RitzlFilm« Film.TV.Video.neue Medien
Wolfgang Günter Ritzberger, MA
Linke Bahngasse 7, 1030 Vienna, Austria
Email: office@ritzlfilm.at
Phone: +43 664 300 43 72
VAT ID: ATU13987408

General

We process personal data in compliance with the GDPR (Regulation [EU] 2016/679) and the Austrian Data Protection Act. Processing takes place only on a legal basis under Art. 6(1) GDPR, stated below for each operation. Everyone involved in processing is bound to confidentiality. No automated decision-making takes place.

As a rule we collect personal data from the data subject. In individual cases we collect contact details from correspondence with clients and business partners or from publicly accessible sources such as websites and company registers, on the basis of Art. 6(1)(f) GDPR.

Operation of this website

This policy applies to ritzlfilm.at and to ritzlfilm.com, which redirects to the same website.

Each time the site is accessed, your browser automatically transmits technical data required for delivery:

This data is held in server log files and is not merged with other data. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in delivering the site and in the stability and security of our systems. Log files are deleted after seven days at the latest, unless longer retention is required to investigate an attack.

The website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. A data processing agreement under Art. 28 GDPR is in place.

Typefaces

The typefaces used on this website are served from our own server. No connection is made to Google Fonts or any other external provider, and no data is transmitted to third parties for this purpose.

Cookies

We use only technically necessary cookies. These include a session cookie and a cookie storing your chosen language (pll_language), which outlasts the browser session so that a return visit takes you to your language. If you log in to the administration area, additional login cookies are set.

We do not use cookies for analytics, tracking or advertising. The legal basis for technically necessary cookies is Art. 6(1)(f) GDPR. You can delete cookies or restrict their storage at any time in your browser settings; some functions may then not be fully available.

Newsletter

We use Mailchimp to send our newsletter, operated by The Rocket Science Group LLC d/b/a Mailchimp, 405 N Angier Ave NE, Atlanta, GA 30308, USA (Intuit Inc.).

Subscription uses the double opt-in procedure: after entering your email address you receive a message containing a confirmation link. Only after confirmation do we add you to the list. We process your email address, where applicable your name, and the time and IP address of subscription as proof of consent.

The legal basis is your consent under Art. 6(1)(a) GDPR. You may withdraw it at any time with effect for the future, for example via the unsubscribe link at the end of every mailing or by writing to us. After withdrawal we delete your data from the list.

Mailchimp records whether mailings are opened and which links are clicked. This evaluation serves to improve our content. As the provider is based in the USA, data is transferred to a third country; the transfer is based on the EU-US Data Privacy Framework or on EU standard contractual clauses. A data processing agreement is in place.

Embedded videos

On individual pages we embed videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and Vimeo (Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA).

Videos are loaded only once you start them by clicking. Until then, no connection to the respective provider is established. When you start a video you transmit to the provider, among other things, your IP address, information about your browser and device, and which of our pages you accessed. If you are logged in with the provider, the request can be attributed to your account.

The legal basis is your consent, given by starting the video, under Art. 6(1)(a) GDPR. We have no influence over further processing by the provider; please refer to their privacy notices. With Vimeo as a US provider, a third-country transfer takes place on the basis of the EU-US Data Privacy Framework or EU standard contractual clauses.

Social networks

We maintain profiles on social networks to inform people about our work. The processing of personal data by these providers takes place under their own responsibility; we have no influence over it. If you visit our profiles or interact with posts, the terms of the respective provider apply. The legal basis for our presence is our legitimate interest in public communication under Art. 6(1)(f) GDPR.

Our website contains only plain links to these profiles. No buttons are embedded that would establish a connection to the providers on their own when the page loads.

With providers based in, or with parent companies in, the USA or China, a transfer to a third country may take place. Such transfers are based on the EU-US Data Privacy Framework, EU standard contractual clauses, or the derogations under Art. 49 GDPR.

Contacting us

If you contact us by email, telephone or a form, we process your details in order to handle your enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR where the enquiry concerns the initiation or performance of a contract, otherwise Art. 6(1)(f) GDPR.

Services and client care

For the provision of our services, client care and internal documentation we process personal data on the basis of Art. 6(1)(b) GDPR (contract and pre-contractual measures), (c) GDPR (legal obligations) and (f) GDPR (legitimate interests, in particular administration and the assertion or defence of legal claims). Providing certain data is necessary for a contract to be concluded.

Job applications

We process applicant data on the basis of Art. 6(1)(b) and (f) GDPR in order to carry out the application procedure. If no appointment is made, we retain the documents for six months after conclusion of the procedure, in line with the periods under §§ 15(1) and 29 of the Austrian Equal Treatment Act. With your consent we keep them for evidentiary purposes for up to two further years. Unsolicited applications are processed for a maximum of two years; you may object informally at any time.

Recipients

We transfer personal data only to the extent necessary: with your consent, for the performance of contractual relationships, where we are legally obliged to do so, to processors acting solely on our instructions, and where necessary to safeguard legitimate interests.

This may include in particular: contractual and business partners involved in a production, funding bodies and film funds in the context of applications and accounting, banks, tax advisers and auditors, legal representatives, courts, administrative authorities, social insurance institutions and insurers.

Retention periods

Unless stated otherwise, we retain personal data for as long as necessary to fulfil the stated purposes or as required by law.

For business correspondence, contracts and accounting records, § 212(1) of the Austrian Commercial Code and § 132(1) of the Federal Fiscal Code apply: at least seven years, and beyond that until the conclusion of any legal disputes in which the data is required as evidence. For services carrying potential claims for damages, for the period required in each case. Enquiries not leading to a contract are retained for up to three years.

Your rights

Where the statutory conditions are met, you have the following rights:

Please write to office@ritzlfilm.at. You also have the right to lodge a complaint with the supervisory authority: Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb.gv.at. If you are dissatisfied, we ask you to contact us first so that we can put things right.

Changes to this policy

We keep this privacy policy up to date and adapt it when our processing operations or the legal requirements change. The version currently in force is the one on this page.