Data privacy
Privacy Notice
Responsible for the data processing in connection with the website www.vidlab7.com and “controller” in terms of the GDPR is VidLab7 GmbH, Rosental 7, 80331 Munich, Germany, e-mail: info@vidlab7.com, Tel: +49 89 24416970.
1. Automatically generated website visitor information
We collect the data regularly transmitted automatically by your browser to our web server when you visit our website, such as your IP address, the URLs of the websites from which you accessed our websites, the browser used, browser language, the operating system and interface used, the device with which the services are used, the date and time of access, the pages of our websites accessed and the time you spend on our websites. The data is stored for a period of 6 months and then automatically deleted. Legal basis for the processing of such log data is Art. 6(1)(f) GDPR due to our following legitimate interest:
- to facilitate your access to and visit of the website,
- to improve our website and services and adapt them to the needs of our users,
- to perform internal quality checks,
- to prevent, detect, process and investigate mal functions, incidents, fraudulent or other illegal activities, or mitigate the risk of occurrence of the aforementioned events,
- to create statistics on access channels and the use of our website0.
2. Data processing in connection with our services
We offer our customers a service that allows them to personalize their own videos based on AI. The processing of personal data (in particular from customer videos) is based on the data processing agreement pursuant to Art. 28 GDPR, which we conclude with our customers.
To manage customer accounts, we process the email addresses and names of the respective users("creators") of our customers. The legal basis is Art. 6 (1)(b) GDPR if the respective user is our customer and Art. 6 (1)(f) GDPR if the respective user is an employee of our customer, based on the legitimate interest of all parties involved in the administration of the customer account. We delete customer accounts at any time upon request, at the latest at the end of the contractual relationship.
We also process personal data, in particular contact data of customers or contact persons, invoice data and contract-related communication for the purposes of initiating, performing and terminating the contractual relationship. The legal basis is Art. 6 (1)(b) GDPR if the data subject is our customer or Art. 6 (1)(f) GDPR if the data subject is an employee of our customer. We delete the personal data as soon as it is no longer required for the aforementioned purposes. Personal data may be stored for the period in which claims can be asserted against us or by us (statutory limitation period of three or up to thirty years). We also store your personal data insofar as we are legally obliged to do so. Corresponding retention obligations arise from the German Commercial Code and the German Fiscal Code, among others. The storage periods are generally up to six or ten years. If required, we will be happy to provide you with further information on the duration of data storage in relation to the specific purpose
3. Contact and communication
If you are interested in a contract with us or have questions about our services, you can contact us or our customer service via functions on the website. In this context, we process your data to communicate with you and to process your request.
The legal basis for data processing is Art. 6 (1)(b)GDPR, as your details are used for communication in connection with the initiation of a possible contract or to answer questions within an existing contractual relationship.
The data collected by us will be deleted by us at the latest after termination of the contractual relationship or - if a contract is not concluded - after processing your request, unless they are required for other purposes (e.g. for the execution of the contractual relationship if a contract is concluded). Insofar as communication is deemed to be a business letter within the meaning of commercial or tax law, we retain the correspondence for the periods specified by law (generally six years).
4. Cookies, analysis and tracking
We use cookies, web beacons and similar technologies when you visit our websites or use our offers.
Cookies are small text files that are stored on your computer or mobile device by your browser and that enable your computer or device to be recognized across different websites. The cookies do not contain any personal data. Some of the cookies we use are deleted at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our service providers to recognize your browser on your next visit (persistent cookies).
We use cookies and other technologies for several purposes. Some of them are necessary for the proper functioning of the website, and others for improved website performance (‘functionality’ tools) and analytics (‘analytics’ tools). You can control the use of non-essential cookies and tools by choosing your desired settings in our cookie banner (more information in Section 4.2 below). You can also prevent the use of any cookies by selecting the appropriate settings in your browser software, but it is possible that some parts of our website or services may break.
4.1 Legal bases
We use cookies and similar technologies that are necessary for the operation of the website (Sec. 4.2) on the basis of your and our legitimate interest in the operation of the website and pursuant to § 25(2) No. 2 TDDDG.
We use other tools, in particular for analysis and marketing purposes (Section 3.3), on the basis of your consent in accordance with Art. 6 (1)(a) GDPR and § 25 (1) TDDDG, which is obtained via the cookie banner (see more in Sec. 4.2.1 below).
Where other legal bases apply to individual tools or processes, this is expressly stated below.
You can withdraw or modify your consent at any time via the button in the down left corner of each page.
You can find more information on the cookies used (including e.g. storage periods) in the consent management tool.
4.2 Necessary cookies and tools
4.2.1 Cookie banner / consent management
For the purpose of consent management, we use a consent management tool (“CMT”), which is also used to display the cookie banner. You can access the CMT at any time via the button in the down left corner of each page. The cookie banner is provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 München, Deutschland.
When you visit our website, a cookie is set by our CMT, which is used to store the consents given for the individual services and to control the corresponding activation or deactivation of the respective functionalities.
The CMT is used to obtain the necessary consent and to document it in accordance with our obligation to provide evidence. The legal basis is Art. 6(1)(c) GDPR.
The data collected is stored until you delete the cookie
4.2.2 Google Tag Manager
We use the Google TagManager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,Ireland. The Tag Manager is used to manage tracking tools and other services, so-called website tags. The Google Tag Manager does not require the use of cookies. The legal basis is our legitimate interest in integrating and managing several tags on our website in an uncomplicated manner in accordance with Art.6(1)(f) GDPR.
4.2.3 Cloudflare
For information security purposes, our websites use various services of the provider Cloudflare (Cloudflare Inc., 101 Townsend St.,San Francisco, CA 94107, United States).
In doing so, the data described in section 1 “Automatically generated website visitor information" is processed. We have concluded an order processing agreement with Cloudflare in accordance with Art. 28 GDPR. Data is only processed via servers located in the EU. The legal basis for the processing is Art. 6 (1)(f) GDPR. Our legitimate interests lie in ensuring the functionality of the websites and the protection of the VidLab7’s service in general.
In addition, we use the services of the ContentDelivery Network (hereinafter "CDN") of Cloudflare on our websites for the purpose of faster retrieval of our online offer. In the process, the data mentioned in Sec. 1 is transmitted by your browser to Cloudflare. The legal basis for the processing is Art. 6 (1)(f)GDPR. With the use of "Cloudflare", we pursue the legitimate interest of faster retrievability as well as a more effective and improved presentation of our online offer.
Cloudflare does not use cookies.
4.2.4 Cloud front
We use Cloud front, a content delivery network (“CDN”) that enhances website performance and security by Amazon Web Services EMEA SARL(AWS), 38 Avenue John F. Kennedy, L-1855, Luxembourg.
Cloud front enables us to deliver content more quickly to users, such as images and videos, by fetching them from its CDN when a page is opened. In the process, the data mentioned in Sec. 1 is transmitted by your browser to Amazon servers. The legal basis for the processing is our legitimate interest in ensuring the optimal performance of our website and protection against data loss, pursuant to Art. 6(1)(f) GDPR.
Cloud front does not use any cookies.
4.2.4 Customer sessions
4.2.5 Featurebase
We use Featurebase, a product feedback tool provided by Cordnet OU Kaluri tee 4 Haabneeme, 74001 Harju maakond, Estonia.
With Featurebase, we can collect upvotes or downvotes from users on their feedback regarding our posts and written guidance on the website. This helps us identify which content you find most useful. Featurebase may process data as described in Section 1 (“Automatically generated website visitor information”) for this purpose.
4.3 Analytics and marketing tools
4.3.1 GoogleAnalytics
We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,Ireland ("Google").
Google Analytics uses cookies and similar technologies to analyze and improve our website based on your user behavior. Google will process the information obtained for the purpose of evaluating your use of the website, compiling reports on website activity for us and providing other services relating to website activity and internet usage. By analyzing which features our visitors use, how often they use them and which pages they visit, we can better understand what our visitors find useful. With this information, we can design more relevant experiences and guide business decisions. Details about the technologies used by our visitors (e.g. app, operating system or browser version) can help us to identify and solve technical problems. The data collected in this context may be transferred by Google to a server in the USA for analysis and stored there.
We have concluded a data processing agreement withGoogle for the use of Google Analytics.
In particular, the following data is processed byGoogle Analytics: Anonymized IP address; Referrer URL (previously visited page); Pages accessed (date, time, URL, title, duration of visit); Links to other websites clicked on; If applicable, achievement of certain goals(conversions); Technical information: Operating system; browser type, version and language; device type, brand, model and resolution; approximate location(country and, if applicable, city, based on anonymized IP address), device information (e.g. also advertising ID), location information (e.g. city). If you have consented to this and are logged into your Google account when you visit our site and have activated personalized advertising, Google may also compile anonymized statistics for us based on your account data (“Google signals”).
You can find more information in Google's data protection information (https://support.google.com/analytics/answer/6004245?hl=de).
4.3.2 Intercom
We use Intercom, a customer engagement and communication company provided by R&D Unlimited Company 2nd Floor, StephenCourt, 18-21 St. Stephen's Green, Dublin 2, Ireland.
Intercom uses cookies to provide a live chat functionality with which you can interact by clicking on the chat widget at the bottom right corner of our website. To provide you with the chat, Intercom processes your data, such as contact data (e.g. e-mail address, telephone number), metadata and communication data (e.g. device information, IP address),and usage data (e.g. web pages visited, interest in content, access times). Some of the processing carried out byIntercom takes place in the USA.
We have concluded a data processing with Intercom for the use of their services.
4.4External content
4.4.1 Loom
We use Loom, a service provided by Loom Inc., 85 2nd Street Floor 1 San Francisco, CA 94105, USA, to host our help center videos. This enables us to enhance the functionality of our website. In the process, the data mentioned in Sec. 1 is transmitted by your browser to Loom’s servers. The legal basis is Art. 6(1)(f) GDPR based on our legitimate interest to provide you with a content-rich web experience. Loom does not use any cookies.
4. Data recipients
We may use other external service providers and will also make personal data available to them if necessary to fulfill their activities.
We use technical service providers in particular for hosting and operating the website. If necessary, we will also make personal data available to these service providers in order to perform their activities. Of course, we also comply with all data protection regulations and oblige our service providers todo so where necessary. The service providers may only process the personal data on our behalf and not for their own purposes and must treat the data confidentially. To this end, we have concluded data processing agreements in accordance with Art. 28 GDPR.
Insofar as we use services whose providers are partly located in third countries outside the European Economic Area or process personal data there and the EU Commission has not issued an adequacy decision for these countries in accordance with Art.45 GDPR, we have taken appropriate precautions to ensure an adequate level of data protection for any data transfers. These include the standard contractual clauses of the European Union or binding corporate rules. Where this is not possible, we base the transfer of data on your express consent.
If a transfer to a third country is planned and there is no adequacy decision or suitable guarantees, there is a risk that authorities in the respective third country (e.g. secret services) may gain access to the transferred data in order to collect and analyze it, and that the enforceability of your data subject rights cannot be guaranteed.
5. Rights of the data subject, right to lodge complaints, right to object
In addition to the right to revoke your consent given to us, if applicable, you have right to request access to (Art. 15 GDPR) and rectification (Art. 16GDPR) or erasure (Art. 17 GDPR) of personal data or restriction of processing(Art. 18 GDPR), the right to object (Art. 21 GDPR) and the right to data portability (Art. 20 GDPR), provided that the respective legal requirements are met.
You have the right to object against all types of processing described in this privacy information that are based on Art. 6(1)(f) GDPR, based on grounds relating to your particular situation (Art. 21(1) GDPR). To the extent we process your personal data pursuant to Art. 6(1)(f) GDPR for direct marketing purposes, you can object against such processing at any time without giving a particular reason.
In addition, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
Version: 09/2024