Data privacy
Privacy Notice
Responsible for the data processing in connection with the website www.vidlab7.com and “controller” in terms of the GDPR is VidLab7 GmbH, Watzmannstraße 4, 81541 Munich, Germany, e-mail: info@vidlab7.com, Tel: +49 89 24416970.
1. Automatically generated website visitor information
We collect the data regularly transmitted automatically by your browser to our web server when you visit our website, such as your IP address, the URLs of the websites from which you accessed our websites, the browser used, browser language, the operating system and interface used, the device with which the services are used, the date and time of access, the pages of our websites accessed and the time you spend on our websites. The data is stored for a period of 6 months and then automatically deleted. Legal basis for the processing of such log data is Art. 6(1)(f) GDPR due to our following legitimate interest:
- to facilitate your access to and visit of the website,
- to improve our website and services and adapt them to the needs of our users,
- to perform internal quality checks,
- to prevent, detect, process and investigate malfunctions, incidents, fraudulent or other illegal activities, or mitigate the risk of occurrence of the aforementioned events,
- to create statistics on access channels and the use of our website.
2. Data processing in connection with our services
We offer our customers a service that allows them to personalize their own videos based on AI. The processing of personal data (in particular from customer videos) is based on the data processing agreement pursuant to Art. 28 GDPR, which we conclude with our customers.
To manage customer accounts, we process the email addresses and names of the respective users ("creators") of our customers. The legal basis is Art. 6 (1)(b) GDPR if the respective user is our customer and Art. 6 (1)(f) GDPR if the respective user is an employee of our customer, based on the legitimate interest of all parties involved in the administration of the customer account. We delete customer accounts at any time upon request, at the latest at the end of the contractual relationship.
We also process personal data, in particular contact data of customers or contact persons, invoice data and contract-related communication for the purposes of initiating, performing and terminating the contractual relationship. The legal basis is Art. 6 (1)(b) GDPR if the data subject is our customer or Art. 6 (1)(f) GDPR if the data subject is an employee of our customer. We delete the personal data as soon as it is no longer required for the aforementioned purposes. Personal data may be stored for the period in which claims can be asserted against us or by us (statutory limitation period of three or up to thirty years). We also store your personal data insofar as we are legally obliged to do so. Corresponding retention obligations arise from the German Commercial Code and the German Fiscal Code, among others. The storage periods are generally up to six or ten years. If required, we will be happy to provide you with further information on the duration of data storage in relation to the specific purpose.
3. Contact and communication
If you are interested in a contract with us or have questions about our services, you can contact us or our customer service via functions on the website. In this context, we process your data to communicate with you and to process your request.
The legal basis for data processing is Art. 6 (1)(b) GDPR, as your details are used for communication in connection with the initiation of a possible contract or to answer questions within an existing contractual relationship.
The data collected by us will be deleted by us at the latest after termination of the contractual relationship or - if a contract is not concluded - after processing your request, unless they are required for other purposes (e.g. for the execution of the contractual relationship if a contract is concluded). Insofar as communication is deemed to be a business letter within the meaning of commercial or tax law, we retain the correspondence for the periods specified by law (generally six years).
4. Cookies, analysis and tracking
We use cookies, web beacons or similar procedures when you visit our websites or use our offers.
Cookies are small text files that are stored on your computer or mobile device by your browser and that enable your computer or device to be recognized across different websites. The cookies do not contain any personal data. Some of the cookies we use are deleted at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our service providers to recognize your browser on your next visit (persistent cookies).
You can prevent the use of cookies by selecting the appropriate settings in your browser software. However, it is possible that certain areas of the websites or offers may then not function as intended.
Our website uses Google Analytics to collect anonymous information about how visitors use our site. This data helps us understand user behavior and improve the overall user experience. Google Analytics utilizes cookies to track website usage anonymously. These cookies do not personally identify you, but they may store information about your device and browsing activity. By continuing to use our website, you consent to the use of these cookies for analytics purposes. You can opt-out of Google Analytics tracking by adjusting your browser settings or using Google's opt-out browser add-on. Please note that disabling cookies may affect the functionality of our website. For more information on how Google Analytics handles data, please refer to Google's Privacy Policy.
The legal basis for the use of these cookies necessary for the operation of the service is your and our legitimate interest pursuant to Art. 6(1)(f) GDPR in the operation of the service as well as § 25 (2) no. 2 TTDSG.
5. Data recipients
We may use other external service providers and will also make personal data available to them if necessary to fulfill their activities.
We use technical service providers in particular for hosting and operating the website. If necessary, we will also make personal data available to these service providers in order to perform their activities. Of course, we also comply with all data protection regulations and oblige our service providers to do so where necessary. The service providers may only process the personal data on our behalf and not for their own purposes and must treat the data confidentially. To this end, we have concluded data processing agreements in accordance with Art. 28 GDPR.
Insofar as we use services whose providers are partly located in third countries outside the European Economic Area or process personal data there and the EU Commission has not issued an adequacy decision for these countries in accordance with Art. 45 GDPR, we have taken appropriate precautions to ensure an adequate level of data protection for any data transfers. These include the standard contractual clauses of the European Union or binding corporate rules. Where this is not possible, we base the transfer of data on your express consent.
If a transfer to a third country is planned and there is no adequacy decision or suitable guarantees, there is a risk that authorities in the respective third country (e.g. secret services) may gain access to the transferred data in order to collect and analyze it, and that the enforceability of your data subject rights cannot be guaranteed.
6. Rights of the data subject, right to lodge complaints, right to object
In addition to the right to revoke your consent given to us, if applicable, you have right to request access to (Art. 15 GDPR) and rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) of personal data or restriction of processing (Art. 18 GDPR), the right to object (Art. 21 GDPR) and the right to data portability (Art. 20 GDPR), provided that the respective legal requirements are met.
You have the right to object against all types of processing described in this privacy information that are based on Art. 6(1)(f) GDPR, based on grounds relating to your particular situation (Art. 21(1) GDPR). To the extent we process your personal data pursuant to Art. 6(1)(f) GDPR for direct marketing purposes, you can object against such processing at any time without giving a particular reason.
In addition, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
Version: March 2024