Privacy Policy
1. Controller and Scope
1.1 The controller within the meaning of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG) is ICS Media GmbH, Cumberlandpark 97/3, 4810 Gmunden, Austria ("ICS", "we"). You can reach us at office@ics-media.at or +43 650 7789789.
1.2 This privacy policy applies to the website www.dockyard.at (including subdomains) and to the processing of personal data in the course of our business as a film, commercial, animation and AI production company under the brands dockyard and VAIN.
1.3 A data protection officer is not required by law and has not been appointed. Please direct data protection enquiries to office@ics-media.at.
2. General Information on Data Processing
2.1 We process personal data only to the extent necessary to provide our websites, to perform our services, to communicate with you or to comply with legal obligations. Depending on the case, the legal basis is Art. 6 (1) (a) GDPR (consent), (b) (contract or pre-contractual measures), (c) (legal obligation) or (f) (legitimate interest).
2.2 Personal data is deleted as soon as the purpose of processing ceases to apply and no statutory retention obligations (in particular 7 years under Section 132 of the Austrian Federal Fiscal Code and Section 212 of the Austrian Commercial Code) stand in the way.
2.3 Transfers to third countries take place only as stated in this policy, on the basis of an adequacy decision of the EU Commission (in particular the EU-US Data Privacy Framework) or the EU Commission's standard contractual clauses.
3. Hosting, Server Log Files and Technical Provision
3.1 www.dockyard.at and all images, videos and fonts on it are delivered via Bunny.net (BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia, EU). When the website is accessed, Bunny processes technically necessary log data on our behalf: IP address, date and time, file accessed, data volume, referrer and user agent. A data processing agreement is in place with Bunny.
3.2 This data is processed on the basis of our legitimate interest in the secure, stable and fast operation of the website (Art. 6 (1) (f) GDPR). To speed up delivery, copies of files may be cached on servers outside the EU; Bunny uses the EU standard contractual clauses for this. Log data is deleted after a few days at the latest. Further information: https://bunny.net/privacy
3.3 Fonts are hosted on our own server. No connection to Google Fonts or other font providers is established.
4. Cookies and Consent Management
4.1 Without your consent, www.dockyard.at sets no cookies. We only store your decision in the cookie banner in your browser’s local storage (key "dy-consent-v1"); this is technically necessary (Section 165 (3) TKG 2021, Art. 6 (1) (f) GDPR).
4.2 Google Analytics, Google Tag Manager and the services loaded through it (see section 5) are only loaded after you click "Accept" (Art. 6 (1) (a) GDPR, Section 165 (3) TKG 2021). You can change or withdraw your decision at any time with effect for the future via the "Privacy settings" link in the footer of every page.
5. Google Analytics, Google Tag Manager and Google Ads Conversion Tracking
5.1 On www.dockyard.at we use – only after your consent – Google Tag Manager and Google Ads conversion tracking of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This lets us see whether visitors who came via one of our Google Ads reach our contact page or send an enquiry. Google sets cookies for this and processes your IP address, device and browser data, the pages visited and the time of the visit. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework.
5.2 We also use Google Analytics 4 (Google Ireland Limited) – likewise only after your consent – to see which pages are visited, for how long and how visitors find us. Google Analytics sets cookies ("_ga", "_ga_*", stored for up to 2 years) and processes shortened IP addresses (IP addresses are not stored in Google Analytics 4), device and browser data, approximate location (country/city), the pages visited and the referring website. Google signals and advertising features in Analytics are deactivated; data retention is set to 14 months.
5.3 The legal basis is your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time via "Privacy settings" in the footer. Further information: https://policies.google.com/privacy
6. Videos (Bunny Stream)
6.1 Our films are delivered via our own video library at Bunny Stream (BunnyWay d.o.o., Slovenia, EU). A film only loads when you start it; the short preview loops on some pages are loaded from our own storage at Bunny.net. No third-party cookies are set and no data is passed to video platforms such as Vimeo or YouTube.
6.2 The legal basis is our legitimate interest in presenting our work (Art. 6 (1) (f) GDPR).
7. Social Media Links and Company Profiles
7.1 Our websites contain links to our profiles on Instagram and Facebook (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland), LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) and Vimeo. These are plain links without plugins; no data is transmitted to these providers when you visit our website. Only when you click a link are you taken to the respective provider's platform, whose privacy policy then applies.
7.2 When you visit our company profiles on these platforms, we are jointly responsible with the provider for the processing of data collected there (e.g. page insights). Further information can be found in the providers' privacy notices: https://privacycenter.instagram.com, https://www.facebook.com/privacy/policy, https://www.linkedin.com/legal/privacy-policy.
8. Contact, Enquiries and Contact Forms
8.1 If you contact us by e-mail, telephone or via the contact form, we process the data you provide (name, company, e-mail address, content of the enquiry) to handle your enquiry and for follow-up questions. Entries in the contact form are forwarded to our e-mail inbox via the automation service Make (Celonis Inc. and affiliates, processing in the EU zone eu1.make.com; for possible transfers to the USA Make relies on the EU-US Data Privacy Framework). Further information: https://www.make.com/en/privacy-notice
8.2 The legal basis is Art. 6 (1) (b) GDPR (initiation or performance of a contract) or Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries). The data is deleted once the enquiry has been finally dealt with and no retention obligations exist; business correspondence is retained for 7 years.
9. Clients, Business Partners and Productions
9.1 In the context of offers, contracts and productions we process data of clients, agencies, suppliers, crew, service providers and their contact persons (name, function, contact details, contract and billing data, bank details, correspondence, project documents) for the performance of the contract (Art. 6 (1) (b) GDPR), to comply with tax and commercial law obligations (Art. 6 (1) (c) GDPR) and to safeguard our legitimate interests in client care, reference use and enforcement of rights (Art. 6 (1) (f) GDPR).
9.2 In film, photo and audio productions we process image, sound and moving-image recordings as well as contact and contract data of actors, voice artists, extras, interviewees, employees of the client and other contributors. The legal basis is the contributor or image-rights agreement concluded with the respective person or their consent (Art. 6 (1) (a) and (b) GDPR) and our legitimate interest in producing and exploiting the work (Art. 6 (1) (f) GDPR). Raw material and project files are archived for the periods stated in our Terms & Conditions; finished works are used permanently within the scope of the usage rights granted and as references (showreel, website, social media) unless otherwise agreed.
9.3 In AI-assisted productions (VAIN brand), inputs provided by the client (e.g. reference images, voices, texts) are processed solely to create the commissioned work. Where likenesses or voices of persons are processed, we or the client obtain the necessary consents. AI services used act as processors or on the basis of their own terms of use; where technically available, we select providers that do not use inputs to train their models.
9.4 For processing we use processors (IT, cloud, review and transfer services, bookkeeping, tax advice) with whom contracts pursuant to Art. 28 GDPR are in place. Beyond that, data is disclosed to third parties only where necessary for the performance of the contract (e.g. broadcasters, platforms, festivals, insurers, banks) or where required by law.
10. Job Applications
10.1 Please send applications to jobs@dockyard.at or office@ics-media.at. We process your application documents (CV, cover letter, certificates, portfolio, showreel, contact details) exclusively for the purpose of the application procedure (Art. 6 (1) (b) GDPR, pre-contractual measures). If no employment or service contract is concluded, the documents are deleted no later than 7 months after the end of the procedure, unless you consent to a longer inclusion in our talent pool.
11. Newsletter and Direct Marketing
11.1 We currently do not send a newsletter. We occasionally inform existing business clients by e-mail about our own, similar services (Art. 6 (1) (f) GDPR, Section 174 TKG 2021). You may object to this at any time informally by e-mail to office@ics-media.at.
12. Data Security
12.1 Our websites are delivered via HTTPS (TLS). We take technical and organisational measures pursuant to Art. 32 GDPR (access restrictions, encrypted transmission, backups, access controls for project data and raw material) to protect your data against loss, misuse and unauthorised access.
13. Your Rights
13.1 You have the rights of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You may withdraw any consent given at any time with effect for the future (Art. 7 (3) GDPR).
13.2 You may object at any time, on grounds relating to your particular situation, to processing based on legitimate interests; you may object to direct marketing without giving reasons.
13.3 To exercise your rights, please contact office@ics-media.at or write to ICS Media GmbH, Cumberlandpark 97/3, 4810 Gmunden, Austria. If you believe that the processing of your data infringes data protection law, you may lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at.
14. Changes to this Privacy Policy
14.1 We amend this privacy policy when the legal situation, our services or the services we use change. The version published on www.ics-media.at or www.dockyard.at applies. In the event of discrepancies, the German version ("Datenschutzerklärung") prevails.
ICS Media GmbH · Cumberlandpark 97/3 · 4810 Gmunden · Austria · FN 99242 w · VAT ID ATU22010106
______________________________