Privacy policy

Art. 1 Controller

The controller for personal data processed on this website and in the running of the studio is Klangnest Tonstudio GmbH, Burggasse 95, 1070 Vienna, Austria, represented by its managing director Lukas Steinbauer. You can reach us by e-mail at [email protected] or by telephone on +43 1 890 46 27. Further company details are in the legal notice. We are not required to appoint a data protection officer; please address data protection matters directly to the management.

Art. 2 Principles and legal bases

We process personal data in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). We collect only the data we need for the purpose in question and delete it once that purpose no longer applies and no retention obligation stands in the way.

Depending on the operation, we rely on the following legal bases:

• Art. 6(1)(a) GDPR (consent), for example if you agree to optional storage categories in future;
• Art. 6(1)(b) GDPR (contract and pre-contractual steps) for enquiries, quotes, bookings, sessions and delivery;
• Art. 6(1)(c) GDPR (legal obligation) for invoicing and tax retention;
• Art. 6(1)(f) GDPR (legitimate interest) for the secure operation of the website, spam protection and answering general enquiries.

Art. 3 Hosting and server logs

This website is hosted by World4You Internet Services GmbH, Hafenstraße 35, 4020 Linz, Austria. When a page is requested, the server necessarily processes the IP address of your device, the date and time, the address requested, the data volume, the status code, the referring page and the browser type and operating system. These logs serve to deliver the pages, find errors and fend off attacks; we do not combine them with other data or evaluate them for marketing.

The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). The hosting provider keeps the logs for a limited period only and then deletes them. A data processing agreement is in place with World4You; processing takes place in Austria.

Art. 4 Contact form and FormSubmit

For the contact form we use the service FormSubmit (formsubmit.co), operated in the USA. When you submit the form, the details you entered (name, e-mail address, message and optionally your telephone number and project details) are transmitted to FormSubmit together with the time of submission and forwarded from there to our mailbox as an e-mail. Transmission to a provider in the USA is a transfer to a third country; it is safeguarded by the standard contractual clauses of the European Commission under Art. 46 GDPR.

To filter spam, the form contains a field that is invisible to people (honeypot). If it is filled in, the message is discarded. We use no captcha and collect no behavioural data. The legal basis for processing your enquiry is Art. 6(1)(b) GDPR (pre-contractual steps); for spam protection it is Art. 6(1)(f) GDPR. FormSubmit may set technically necessary cookies on its own domain during submission; our website itself sets no cookies.

Art. 5 Contact by e-mail and telephone

If you e-mail or call us directly, we process the data you provide (sender address, telephone number, the content of your request) in order to reply and, for bookings, to prepare the session. The legal basis is Art. 6(1)(b) GDPR; for general questions without a contractual connection it is Art. 6(1)(f) GDPR. Our mailboxes are also operated by World4You in Austria.

Art. 6 Bookings, invoices and retention obligations

For quotes, bookings, running the session, delivering files and invoicing we process your name, address, contact details, your VAT number if you are a business, project details and payment data (bank transfer details, invoice amount). The legal basis is Art. 6(1)(b) GDPR. We keep invoices and booking records for seven years under the tax retention obligation in § 132 BAO (Art. 6(1)(c) GDPR).

Recordings contain voices and are therefore personal data of the people taking part. We process them solely to fulfil the job and keep project data for 12 months after completion, after which it is deleted (see terms, article 9).

Art. 7 Local storage: your choice in the notice

On your first visit the website shows a notice about data storage. We save your decision in your browser's local storage (localStorage) under the key klng_consent_v1. This entry contains only your choice and a timestamp, no identifier by which you could be recognised. It is kept for 365 days, is not transmitted to us or to third parties, and is technically necessary so that the notice does not reappear on every visit. The legal basis is § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021) (strictly necessary storage) in conjunction with Art. 6(1)(f) GDPR. Details, and how to change your choice, are in the cookie policy.

Art. 8 No cookies, no analytics, no profiling

This website sets no cookies and uses no web analytics, advertising networks, social media plug-ins, embedded videos or fonts from third-party servers. We create no usage profiles and make no automated decisions, including profiling. The map link on the contact page leads to OpenStreetMap; you leave our website only when you click it.

Art. 9 Recipients and disclosure

We pass on your data only where necessary for the purpose in question, to:

• World4You Internet Services GmbH, Linz, as hosting and e-mail provider (processor);
• FormSubmit, USA, as the technical service that transmits contact form messages (processor, third country with standard contractual clauses);
• our bank for transfers and refunds;
• authorities and courts where we are legally obliged to do so.

We do not pass data on for advertising purposes and do not sell data.

Art. 10 Retention periods

We store personal data only for as long as the purpose requires or statutory periods demand:

Art. 11 Your rights

Under Art. 15 to 21 GDPR you have the following rights:

• Access to the data we hold about you;
• Rectification of inaccurate or incomplete data;
• Erasure, unless a retention obligation stands in the way;
• Restriction of processing;
• Data portability in a common, machine-readable format;
• Objection to processing based on our legitimate interest.

You may withdraw any consent you have given at any time with effect for the future. To exercise your rights, an e-mail to [email protected] is enough. We reply as quickly as possible and at the latest within one month.

Art. 12 Complaints to the data protection authority

If you believe that the processing of your data breaches data protection law, you can lodge a complaint with the supervisory authority. In Austria this is the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, e-mail [email protected], website dsb.gv.at.

Art. 13 Data security

The connection to this website is encrypted with TLS. Only the three members of the studio team have access to enquiries, booking data and recordings, and only as far as their tasks require. Project data sits on access-restricted storage with regular backups; download links for deliveries cannot be found publicly. We review our measures regularly and adapt them to the state of the art.

Art. 14 Changes to this policy

We update this privacy policy when our processes, the services we use or the law change. The version published on this page applies; the effective date is shown above the text. If a material change affects jobs in progress, we inform you by e-mail. Questions are welcome through the contact page.