Privacy policy

Last updated: 31 July 2026

1. Controller
AVG Filmproduktion e.U., Hermann Weiskopf, Grauer-Stein-Weg 9, 6020 Innsbruck, Austria; [email protected]; +43 (0) 660 6516432.

2. Data we process
When you visit, we process technically necessary connection and security data. Contact requests contain your name, email, optional phone number, subject, and message. Accounts contain name, email, password hash, login and verification data, and optional Google account data. Film purchases contain order, payment-status, transaction, and access data; Stripe, not AVG Filmproduktion, receives full payment details. We also store consent choices with reduced or hashed technical evidence.

3. Purposes and legal bases
We process data to provide and secure the website (legitimate interests, Art. 6(1)(f) GDPR), answer enquiries (pre-contractual steps or legitimate interests), operate accounts and perform film-purchase contracts (Art. 6(1)(b)), meet statutory retention duties (Art. 6(1)(c)), and provide optional functions only with consent (Art. 6(1)(a)). Consent may be withdrawn prospectively at any time.

4. Recipients and services
We use technical processors for hosting and email delivery, and Cloudflare for network services and R2 media storage. Stripe Checkout processes payments. Google sign-in is optional. OpenStreetMap/OpenFreeMap maps load only after external-media consent. Providers may process data outside the EEA using applicable safeguards; see their privacy notices for details.

5. Retention
Server and security data are kept only as needed for operation and abuse prevention. Contact enquiries are generally kept for up to three years after communication ends. Account and film-library data are kept for the contractual/account relationship. Tax and business records are generally retained for seven years where required. Consent evidence is kept as long as needed to demonstrate compliance. Data are then deleted or anonymised unless legal claims or duties require longer retention.

6. Your rights
Subject to the GDPR, you may request access, rectification, erasure, restriction, portability, or object to processing, and you may withdraw consent. Contact [email protected]. You may also complain to the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, dsb.gv.at.

7. Security and automated decisions
We use appropriate technical and organisational safeguards. We do not make solely automated decisions producing legal or similarly significant effects.

8. Changes
We update this policy when services or the legal position materially change.