data protection

1. INTRODUCTION
JOHANNA STUDIS appreciates your interest in its content and services. The protection of your privacy is a matter of concern to us, which is why we refer you to this data protection declaration. It is a matter of course for us to comply with the statutory provisions on data protection.

In this data protection declaration, we inform you which of your personal data is processed and how, and to which recipients, if any, it is passed on when you visit our website (www.johannastudios.com), subscribe to our newsletter, take part in our events, are on our social media channels, apply for a job with us or are a supplier, business partner or other contractor or provider. For third-party websites to which we link, no responsibility is taken for compliance with this privacy policy.

Personal data is data that is assigned or assignable to your person or your company. In this data protection declaration, the processing of data is understood to mean any kind of handling of data, such as the collection, storage and linking of data, but also their transfer to other natural or legal persons who use your data for their own purposes, provided that you have consented to this transfer.

2. CUSTOMER DATA

We collect from you as a (potential) customer, in addition to your general contact information (name, surname, address, telephone number, e-mail, etc.), all other data necessary for the proper performance of your business entrusted to us. The processing therefore serves the fulfillment of the purchase or work contract and the implementation of related pre-contractual obligations (Art 6 para 1 lit b DSGVO) as well as, if applicable, the fulfillment of the legal obligations incumbent upon us in relation to you (Art 6 para 1 lit c DSGVO). Finally, we may process your data to protect and enforce our claims (Art 6 para 1 lit f DSGVO).

In order to achieve the above purposes, it may be necessary to disclose your data to the following categories of recipients:

- Technical service providers who ensure the proper functioning of all devices, programs and connections in our office (esp. providers of our legal software, IT technicians, providers of remote maintenance solutions, operators of our servers, etc.);
- Service providers of various industries, as far as this is necessary for the fulfillment of the order (esp. tax consultants, law firms, insurance companies, subcontractors, etc.).

3. SUPPLIERS, BUSINESS PARTNERS, OTHER CONTRACTORS OR PROVIDERS
We collect from you as a supplier, business partner or other contractor or provider, in addition to the general contact data, all other data necessary for the proper management of the contractual relationship entered into with us. The processing therefore serves the fulfillment of the present contract or the implementation of pre-contractual obligations in this regard (Art 6 para 1 lit b DSGVO), the fulfillment of legal obligations incumbent upon us (Art 6 para 1 lit c DSGVO) and, if necessary, the protection and enforcement of our claims (Art 6 para 1 lit f DSGVO).

In order to achieve the aforementioned purposes, it may be necessary to disclose your data to the following (categories of) recipients:

- Technical service providers who ensure the proper functioning of all devices, programs and connections in our company (esp. providers of our the website and online store software, IT technicians, providers of remote maintenance solutions, operators of our servers, etc.);
- Service providers of various industries, insofar as this is necessary for the performance of the contract (esp. tax consultants, insurance companies, subcontractors, etc.);


4. INTERESTED PARTIES, APPLICANTS

If you contact us and, for example, are interested in our services or would like to apply for a job with us, we process not only the general contact data but also all other data necessary for the proper processing of your request or application. The processing therefore serves the completion of your request (Art 6 para 1 lit a DSGVO), if necessary the fulfillment of pre-contractual obligations, e.g. for the preparation of a service contract (Art 6 para 1 lit b DSGVO) and the fulfillment of the legal obligations incumbent upon us (Art 6 para 1 lit c DSGVO).

In order to achieve the aforementioned purposes, it may be necessary to disclose your data to the following (categories of) recipients:

- Technical service providers who ensure the proper functioning of all devices, programs and connections in our company (esp. providers of our the website and online store software, IT technicians, providers of remote maintenance solutions, operators of our servers, etc.);
- Service providers of various industries, insofar as this is necessary for the performance of the contract (esp. tax consultants, insurance companies, subcontractors, etc.);

5. CHANNELS ON SOCIAL NETWORKS

If you visit our channels on various social networks, any processing of your personal data will be carried out by the (legal) persons responsible for the operation of these networks. You can therefore find information on the extent and processing of the data collected in the data protection statements there.

We only collect your personal data as soon as you contact us via these channels, whereby the processing is limited to the data you provide voluntarily and serves the proper performance of your request (Art 6 para 1 lit a DSGVO).

6. USE OF THE WEBSITE

6.1 Plugins. Our website (www.johannastudios.at) may contain button-shaped links to plugins of various social networks, currently "Facebook", "Instagram". Personal data (e.g. IP address) can only be collected by the operator of the respective social network when the respective button is pressed. By pressing these buttons, you thereby consent to the processing by the operator of this network. We have no influence on the collection of data by the respective operators of the social networks. You can therefore find information on the extent and processing of the collected data in the data protection declarations there.

6.2 Server log data. When visiting our website, we collect access data and store it as so-called "server log files". The access data includes information about the time of access, the amount of data sent, the source from which you arrived at our website, the browser used, the operating system used and the IP address. The data is stored on the server of a technical service provider located in Austria. The server log files are kept for 30 days to enable conclusions to be drawn in the event of problems, e.g. server attacks. The data processing is based on our legitimate interest (Art 6 para 1 lit f DSGVO).

6.3 Cookies. Currently, no cookies are used on our homepage and we do not use any third-party services that require the use of cookies (e.g. Google Analytics).

7. NEWSLETTER
If you would like to receive our newsletter regularly by e-mail, you can register for this voluntarily or request it from us accordingly. For this purpose, we collect your first and last name, as well as your e-mail address. The basis for the processing is your consent (Art 6 para 1 lit a DSGVO).

To send the newsletter, we use the services of Newsletter2Go GmbH and Sendinblue GmbH. The data processing by these providers is limited to the data collected by us.

You can unsubscribe from receiving the newsletter at any time. To do so, simply object at the end of each newsletter using the link provided there or by sending emails to hello@johannastudios.com.

8. PROCESSING BY CONTRACTED DATA PROCESSORS AND TRANSFER OF YOUR DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS
For the processing and use of your data for the purposes stated in this Privacy Policy, we use external data processors. The categories of recipients can be found in the relevant sections of this Privacy Policy.

We will always ensure secure and legally compliant data processing by such a processor through contractual agreements prior to transferring this data to such a processor and - if the processor is located outside the European Economic Area - ensure adequate protection of your data in that country. In principle, however, it is not our intention to pass on data to recipients in third countries or international organizations.

9. SCOPE AND DURATION OF DATA PROCESSING
As a matter of principle, only those data are processed that have been provided to us voluntarily or that are necessary for the respective processing purpose. Your data will be deleted as soon as the purpose for which they were originally collected has expired, or legal retention periods have expired.
statutory retention periods have expired and we no longer have a legitimate interest (Article 6 para 1 lit f DSGVO) in retaining the data (in particular to defend claims within the statutory limitation rules).

10. DATA SUBJECT RIGHTS

10.1 Right to information. You have the right to request confirmation as to whether personal data relating to you is being processed. If this is the case, you have the right to information about this personal data. See Art 15 of the GDPR for more details.
10.2 Right to rectification. You have the right to request that inaccurate data be corrected. Insofar as this is necessary to achieve the purpose of data processing, you also have the right to request the completion of incomplete data. Please see Art 16 DSGVO in detail.
10.3 Right to erasure. You have the right to request the deletion of your personal data. Unless there is a legally recognized reason against deletion, we will delete your personal data without undue delay. Please see Art 17 DSGVO in detail.
10.4 Right to restriction of processing. You have the right to request the restriction of processing under certain grounds detailed in Art 18 DSGVO.
10.5 Right to object. If data processing is necessary to protect the legitimate interests of us or a third party, you have the right to object to the processing on grounds relating to your particular situation. If there are no compelling legitimate grounds for further processing that override your interests, rights and freedoms, and further processing is also not necessary for the assertion, exercise or defense of legal claims, we will delete your data immediately. Please see Art 21 DSGVO in detail.
10.6 Right of withdrawal. You have the right to revoke consents you have given us to process your data at any time. This does not affect the lawfulness of data processing that we have carried out until your revocation. Please see Art 7 DSGVO in detail.
10.7 Right to data transfer. If we process data with the help of automation based on your consent or to fulfill a contract with you, you have the right to receive the data you have provided in a common electronic format. Insofar as this is technically possible, you also have the right to request the transfer of the data you have provided to another controller. See in detail Art 20 DSGVO.

10.8 Right to complain. You have the right to complain to a supervisory authority if you consider that the processing of your data is unlawful. Please see Art 77 DSGVO in detail. The competent supervisory authority is the Austrian Data Protection Authority, Barichgasse 40-42 in 1030 Vienna.
10.9 Contact point for data subject rights. If you should make use of your data subject rights, please contact us by e-mail at hello@johannastudios.com. In case of a request for information, we ask you to send us a copy of your photo ID for identification purposes.

11. RESPONSIBLE FOR DATA PROCESSING IN THE SENSE OF ART-4 DSGVO is Johanna Hütthaler-Brandauer.
Please feel free to email us at hello@johannastudios.com or visit our website at www.johannastudios.com.

12. CHANGES
We review our privacy policy on a regular basis. However, it may be necessary from time to time to make changes to the privacy policy. Therefore, please note that the version of the Privacy Policy available on our website at www.johannastudios.com will always apply.

Status: February 2022