Skip to main content

Privacy Policy

Controller responsible for data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is:

FILMED ON LOCATON e.U.
Zieglergasse 58-64/2
1070 Wien
E-Mail: info@filmed-on-location.com

1) Data Collection When Visiting Our Website

When using our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our visited website

  • Date and time at the time of access

  • Amount of data sent in bytes

  • Source/reference from which you came to the page

  • Browser used

  • Operating system used

  • IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. There is no transfer or other use of the data. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

2) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after closing your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser on your next visit (so-called persistent cookies). If cookies are set, they collect and process certain user information on an individual basis such as browser and location data and IP address values. Persistent cookies are automatically deleted after a specified duration, which may differ depending on the cookie. You can find the duration of each cookie storage in the overview of the cookie settings in your web browser.

In some cases, the cookies serve to simplify the order process by storing settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). Insofar as personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of given consent, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

Please note that you can set your browser to inform you about the setting of cookies and to decide individually about their acceptance or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Please note that if you do not accept cookies, the functionality of our website may be limited.

3) Contacting Us

3.1 Own Rating Reminder

Based solely on your express consent pursuant to Art. 6 para. 1 lit. a GDPR, we use your email address to send you a one-time reminder to submit a review of your order. You can revoke your consent at any time by sending a message to the data controller.

3.2 Contacting Us

When contacting us (e.g., via contact form or email), personal data is collected. The data collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for the processing of this data is Art. 6 para. 1 lit. b GDPR (required to carry out pre-contractual measures). Your data will be deleted three years after your request has been finally processed.

4) Data Processing for Contract Execution

Contract Execution

In accordance with Art. 6 para. 1 lit. b GDPR, personal data is collected and processed if you provide it to us for the purpose of executing a contract. The data collected can be seen from the respective booking form. We store and use the data you provide for contract processing. After complete processing of the contract or deletion of your customer account, your data will be deleted in consideration of tax and commercial retention periods (currently 7 years).

5) Data Processing for Order Handling

5.1 As far as necessary for the processing of the contract for payment purposes, the personal data collected by us will be passed on to the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.

In order to process your order, we also work together with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transmitted to these service providers according to the following information.

6) Use of Your Data for Direct Advertising

6.1 Subscription to our Email Newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address.
By subscribing, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When registering for the newsletter, we store the IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data collected by us during the newsletter registration is used exclusively for promotional purposes via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to us. After you unsubscribe, your email address will be deleted from our newsletter distribution list immediately.

6.2 Sending the Email Newsletter to Existing Customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. In this case, we do not need to obtain separate consent from you in accordance with § 174 TKG. The data processing is based solely on our legitimate interest in personalized direct advertising according to Art. 6 para. 1 lit. f GDPR and § 174 TKG. If you initially objected to the use of your email address for this purpose, no emails will be sent. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying us accordingly.

6.3 Brevo
The dispatch of our email newsletters is carried out by the following provider: Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany
Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided during newsletter registration to this provider in accordance with Art. 6 para. 1 lit. f GDPR so that they can send the newsletter on our behalf.
Subject to your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR, the provider also carries out statistical evaluations of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure opening rates and specific interactions with the newsletter content. Device information (e.g. time of access, IP address, browser type, and operating system) is also collected and evaluated, but not combined with other data sets.
You can revoke your consent to newsletter tracking at any time with effect for the future.
We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.

7) Web Analytics

7.1 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables the analysis of your use of our website.
By default, cookies are set by Google Analytics 4 when you visit the website, which are small text modules placed on your device that collect certain information. This includes your IP address, which, however, is shortened by Google to prevent direct personal reference.
The information is transmitted to Google’s servers and processed there. Transfers to Google LLC, based in the USA, are also possible.
Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website and internet usage. The IP address transmitted and shortened by your browser as part of Google Analytics is not merged with other Google data. Data collected via Google Analytics 4 is stored for two months and then deleted.
All processing described above, in particular the setting of cookies on the device used, only takes place if you have given us your explicit consent according to Art. 6 para. 1 lit. a GDPR.
Without your consent, Google Analytics 4 will not be used during your visit. You can revoke your consent at any time with effect for the future by deactivating the service via the “cookie consent tool” provided on the website.
We have concluded a data processing agreement with Google that ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
Further legal information about Google Analytics 4 can be found at https://policies.google.com/privacy?hl=en and https://policies.google.com/technologies/partner-sites

Demographic Characteristics
Google Analytics 4 uses the special “demographic characteristics” function and can use it to create statistics that make statements about the age, gender, and interests of website visitors. This is done through the analysis of advertising and third-party information. This helps identify target groups for marketing activities. The collected data cannot be assigned to any specific person and is deleted after a storage period of two months.

Google Signals
As an extension to Google Analytics 4, this website may use Google Signals to enable cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google can, with your consent to the use of Google Analytics according to Art. 6 para. 1 lit. a GDPR, analyze your usage behavior across devices and create database models including cross-device conversions. We do not receive any personal data from Google, only statistics.
If you wish to disable cross-device analysis, you can turn off “personalized advertising” in your Google account settings. Follow the instructions here: https://support.google.com/ads/answer/2662922?hl=en
More information about Google Signals can be found here: https://support.google.com/analytics/answer/7532985?hl=en

UserIDs
As an extension of Google Analytics 4, the “UserIDs” function may be used on this website. If you have consented to the use of Google Analytics 4 under Art. 6 para. 1 lit. a GDPR, created an account on this website, and logged in from various devices, your activities, including conversions, can be analyzed across devices.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, which ensures an appropriate level of data protection based on a decision of the European Commission.

8) Retargeting/Remarketing and Conversion Tracking

8.1 Google Ads Remarketing
This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
For this purpose, Google sets a cookie in your browser, which automatically enables interest-based advertising via a pseudonymous cookie ID and based on the pages you have visited.
Further data processing only takes place if you have agreed with Google that your web and app browsing history will be linked to your Google account and information from your Google account will be used to personalize ads you see on the web.
If you are logged in to Google during your website visit, Google uses your data together with Google Analytics data to create and define target audience lists for cross-device remarketing. Your personal data is temporarily linked with Google Analytics data to form target groups.
Personal data may also be transferred to Google LLC servers in the USA.
All described processing, especially setting cookies to read information from the device used, only takes place if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, retargeting technology is not used during your visit.
You can revoke your consent at any time with effect for the future by deactivating the service in the “cookie consent tool” provided on the website.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework.
Details on how Google processes data can be found here: https://policies.google.com/technologies/partner-sites
Further information on Google’s data protection can be found here:
https://business.safety.google/intl/en/privacy/ and https://www.google.com/policies/privacy/

8.2 Google Ads Conversion Tracking
This website uses the online advertising program “Google Ads” and, as part of Google Ads, the conversion tracking by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
We use Google Ads to draw attention to our attractive offers on external websites with the help of advertisements (Google AdWords). We can determine how successful the individual advertising measures are. Our aim is to show you advertising that is of interest to you and to make our website more interesting for you, while ensuring a fair calculation of advertising costs.
This website uses Google Ads conversion tracking exclusively without the use of cookies, meaning that the service does not place any cookies on your device.
Instead, the local storage of your browser is used to store an individual ID assigned by Google that enables an analysis of your use of the website. Certain user information is processed via the ID.
The ID is set when a user clicks on a Google Ads ad. If the user visits certain pages of this website, Google and we can recognize that the user clicked on the ad and was redirected to that page.
Each Google Ads customer receives a different cookie. Cookies cannot be tracked via the websites of Google Ads customers.
The information collected is used to compile conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag.
However, they do not receive any information that can identify users personally.
Personal data may also be transferred to servers of Google LLC in the USA.
Details on processing initiated by Google Ads Conversion Tracking and on Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
Where the collected information contains personal reference, processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the statistical evaluation of the success of our advertising campaigns.
Google’s privacy policies are available here: https://business.safety.google/intl/en/privacy/ and https://www.google.com/policies/privacy/
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework.

9) Online Marketing

Google AdSense
This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Google AdSense uses so-called cookies, which are text files stored on your computer to analyze your use of the website. In addition, Google AdSense uses “web beacons” (small invisible graphics) to collect information, allowing simple actions such as visitor traffic to the website to be recorded, collected, and evaluated.
The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is generally transmitted to a Google server and stored there. Transfers to servers of Google LLC in the USA may also occur.
Google uses this information to evaluate your usage of AdSense ads. The IP address transmitted by your browser as part of Google AdSense is not merged with other Google data.
The information collected by Google may be transferred to third parties where required by law or where third parties process this data on behalf of Google.
All processing described above, in particular the reading of information from your device via cookies and/or web beacons, only takes place if you have given us your explicit consent under Art. 6 para. 1 lit. a GDPR. Without your consent, Google AdSense is not used during your visit.
You can revoke your consent at any time with effect for the future by deactivating the service in the “cookie consent tool” provided on the website.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework.
Further information on Google’s privacy policy can be found here:
https://business.safety.google/intl/en/privacy/ and https://www.google.com/policies/privacy/

10) Site functionalities

10.1 Facebook Connect
We provide a single sign-on function from the following provider on our website: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
In addition to data being transmitted to the provider’s aforementioned location, data may also be transmitted to: Meta Platforms Inc., USA
If you have an account with the provider, you can log in using your account data to create a user account or register on our website.
When you visit this page, a direct connection between your browser and the provider’s servers can be established via this login function, even if you do not have an account with the provider or are not logged into such an account. The provider thereby receives the information that you have visited our page. The information collected in this way (potentially including your IP address) is transmitted directly from your browser to a server of the provider and stored there. However, this information is not used to personally identify you and is not shared with third parties.
These data processing operations are carried out pursuant to Art. 6 para. 1 lit. f GDPR based on our legitimate interest in a user-friendly and interactive design of our online presence.
If you click the login button to register on our website using your account data with the provider, the provider will transmit to us—exclusively based on your express consent pursuant to Art. 6 para. 1 lit. a GDPR—the general and publicly accessible information stored in your account (user ID, name, address, email address, age, and gender).
We store and use the data transmitted by the provider to set up a user account with the necessary data (salutation, first name, last name, address data, country, email address, date of birth), provided you have released these to the provider. Conversely, based on your consent, data (e.g., information about your browsing or purchasing behavior) may be transferred from us to your account with the provider.
You can revoke your consent at any time with effect for the future.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

10.2 Google Sign-In
We provide a single sign-on function from the following provider on our website: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
In addition to data being transmitted to the provider’s aforementioned location, data may also be transmitted to: Google LLC, USA
If you have an account with the provider, you can log in using your account data to create a user account or register on our website.
When you visit this page, a direct connection between your browser and the provider’s servers can be established via this login function, even if you do not have an account with the provider or are not logged into such an account. The provider thereby receives the information that you have visited our page. The information collected in this way (potentially including your IP address) is transmitted directly from your browser to a server of the provider and stored there. However, this information is not used to personally identify you and is not shared with third parties.
These data processing operations are carried out pursuant to Art. 6 para. 1 lit. f GDPR based on our legitimate interest in a user-friendly and interactive design of our online presence.
If you click the login button to register on our website using your account data with the provider, the provider will transmit to us—exclusively based on your express consent pursuant to Art. 6 para. 1 lit. a GDPR—the general and publicly accessible information stored in your account (user ID, name, address, email address, age, and gender).
We store and use the data transmitted by the provider to set up a user account with the necessary data (salutation, first name, last name, address data, country, email address, date of birth), provided you have released these to the provider. Conversely, based on your consent, data (e.g., information about your browsing or purchasing behavior) may be transferred from us to your account with the provider.
You can revoke your consent at any time with effect for the future.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/

10.3 Apple Sign-In
We provide an Apple sign-in function from the following provider on our website: Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA
If you have an account with the provider, you can log in using your account data to create a user account or register on our website.
When you visit this page, a direct connection between your browser and the provider’s servers can be established via this login function, even if you do not have an account with the provider or are not logged into such an account. The provider thereby receives the information that you have visited our page. The information collected in this way (potentially including your IP address) is transmitted directly from your browser to a server of the provider and stored there. However, this information is not used to personally identify you and is not shared with third parties.
These data processing operations are carried out pursuant to Art. 6 para. 1 lit. f GDPR based on our legitimate interest in a user-friendly and interactive design of our online presence.
If you click the login button to register on our website using your account data with the provider, the provider will transmit to us—exclusively based on your express consent pursuant to Art. 6 para. 1 lit. a GDPR—the general and publicly accessible information stored in your account (user ID, name, address, email address, age, and gender).
We store and use the data transmitted by the provider to set up a user account with the necessary data (salutation, first name, last name, address data, country, email address, date of birth), provided you have released these to the provider. Conversely, based on your consent, data (e.g., information about your browsing or purchasing behavior) may be transferred from us to your account with the provider.
You can revoke your consent at any time with effect for the future.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
Further information on Apple’s privacy policy can be found here: www.apple.com/de/privacy

11) Tools

11.1 Consent Tool
This website uses a so-called “cookie consent tool” to obtain effective user consent for cookies and cookie-based applications that require consent. The cookie consent tool is displayed to users as an interactive interface when the page is accessed, where consent for specific cookies and/or cookie-based applications can be granted via checkboxes.
All cookies/services requiring consent will only be loaded if the respective user has granted the appropriate consents by checking the boxes. This ensures that such cookies are only placed on the respective user’s device if consent is granted.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context.
If, in individual cases, personal data (such as the IP address) are processed for the purpose of storing, assigning, or logging cookie settings, this is done pursuant to Art. 6 para. 1 lit. f GDPR based on our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our website.
The further legal basis for processing is also Art. 6 para. 1 lit. c GDPR. As the data controller, we are legally obligated to make the use of technically non-essential cookies dependent on the respective user’s consent.
Where necessary, we have concluded a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
Further information on the operator and the cookie consent tool settings can be found directly in the corresponding user interface on our website.

12) Data Subject Rights

12.1 The applicable data protection law grants you the following comprehensive data subject rights with regard to the processing of your personal data by the controller:

  • Right of access pursuant to Art. 15 GDPR: You have the right to obtain information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the intended storage period or the criteria for determining that period, the existence of the right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the source of your data if they were not collected by us, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing, and your right to be informed of the safeguards pursuant to Art. 46 GDPR when transferring your data to third countries;

  • Right to rectification pursuant to Art. 16 GDPR: You have the right to immediate correction of incorrect data and/or completion of your incomplete data stored by us;

  • Right to erasure pursuant to Art. 17 GDPR: You have the right to request the deletion of your personal data under the conditions of Art. 17 para. 1 GDPR. However, this right does not exist, in particular, where processing is necessary to exercise the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;

  • Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of processing of your personal data as long as the accuracy of your data contested by you is being verified, if you refuse deletion due to unlawful data processing and instead request restriction of processing, if you need your data to assert, exercise or defend legal claims after we no longer need them for the purposes for which they were collected, or if you have objected for reasons related to your particular situation, as long as it has not yet been determined whether our legitimate reasons prevail;

  • Right to notification pursuant to Art. 19 GDPR: If you have exercised your right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data have been disclosed about this rectification or erasure of data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

  • Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request transmission to another controller, to the extent technically feasible;

  • Right to revoke consent pursuant to Art. 7 para. 3 GDPR: You have the right to revoke consent once given at any time with effect for the future. In the event of revocation, we will delete the affected data immediately, unless further processing can be based on a legal basis for processing without consent. The legality of the processing carried out on the basis of the consent until the revocation remains unaffected;

  • Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of personal data concerning you violates the GDPR, you have the right—without prejudice to any other administrative or judicial remedy—to lodge a complaint with a supervisory authority; in Austria, this is the Data Protection Authority.

12.2 Right to object
If your personal data are processed on the basis of our overriding legitimate interest, you have the right at any time to object to this processing with effect for the future. Further processing remains reserved if there are compelling legitimate grounds for the processing.

13) Duration of storage of personal data

The duration of storage of personal data is based on the respective legal basis, the purpose of processing, and—if applicable—also on the respective statutory retention period (e.g., commercial and tax retention periods).

If personal data are processed on the basis of express consent pursuant to Art. 6 para. 1 lit. a GDPR, these data are stored until the data subject revokes their consent.

If statutory retention periods apply to data that are processed in the context of contractual or quasi-contractual obligations based on Art. 6 para. 1 lit. b GDPR, these data will be routinely deleted after expiry of the retention periods, provided they are no longer required for contract fulfillment or initiation and/or there is no legitimate interest in further storage on our part.

If personal data are processed for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f GDPR, these data will be stored until the data subject exercises their right to object pursuant to Art. 21 para. 2 GDPR.

Unless otherwise provided in the other information in this statement about specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

Discover Vienna as a film set

Contact us

© 2025

Supported by the Vienna Business Agency.
A fund of the City of Vienna.