The protection of your personal data is particularly important to us. We therefore process your data exclusively on the basis of the applicable legal provisions (in particular the GDPR and the Austrian Telecommunications Act – TKG). This Privacy Policy informs you about the most important aspects of data processing in connection with this website.

1. Controller The controller responsible for data processing on this website is: Lederervision Owner: Andreas Lederer Reichshofstraße 4 6841 Mäder Austria E-mail: lederer.vision@gmail.com Phone: +43 677 61330151

2. Visit to the Website (Server Logs) When you visit our website, certain information is automatically transmitted by your browser to our server or to the server of our hosting provider and stored in so-called server log files. This includes in particular: - IP address and IP location (shortened, where technically implemented) - Date and time of access - Pages/files accessed - Browser type and version - Operating system used - Referrer URL (previously visited page) The processing is carried out to ensure a smooth connection, system security and the technical administration of the website. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR. The log files are stored only for as long as is necessary for the purposes stated and are then deleted, unless a longer retention is required for security reasons (e.g. to investigate attacks).

3. Hosting / Website Builder (Onepage) Our website is operated using the service “Onepage”. Data processing within the scope of hosting includes in particular: - Storage and delivery of website content - Technical provision of the website - Processing of server log files (see section 2) In this context, personal data (e.g. IP address, technical connection data) may be transmitted to the provider of the website builder/hosting service. The legal basis is our legitimate interest in the secure and efficient operation of our website pursuant to Art. 6(1)(f) GDPR and – where required – Art. 28 GDPR (data processing agreement).

4. Onepage Analytics We use “Onepage Analytics”, an analytics tool provided by the operator of our website platform. This tool enables us to evaluate user behaviour on our website (e.g. page views, time spent on pages, origin of visitors) in order to optimise our offering. Depending on the technical implementation, the following data may be processed, among others: - Shortened IP address - Pages and subpages visited - Date and time of access - Technical information about browser and device - Referrer URL (originating page) Where possible, the analysis is carried out in pseudonymised or anonymised form; a direct link to your identity is generally not possible for us. The legal basis for the use of Onepage Analytics is: - our legitimate interest in analysing and improving our website pursuant to Art. 6(1)(f) GDPR, and/or - your consent pursuant to Art. 6(1)(a) GDPR, where such consent is obtained via a cookie/consent banner. You can control the storage and evaluation via analytics cookies, depending on the design of our website: - via the displayed cookie/consent banner (granting or refusing consent), or - by deleting or blocking cookies in your browser settings.

5. Cookies Our website uses cookies. Cookies are small text files that are stored on your device by your browser. We use different types of cookies: - Technically necessary cookies: These are required to provide the basic functions of the website (e.g. page navigation, form functions). Without these cookies, the website may not function properly. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR. - Analytics/statistics cookies (Onepage Analytics): These cookies enable us to compile visitor statistics and evaluate the use of our website in order to improve our offering. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR, where such consent is obtained via a cookie/consent banner. You can generally prevent or restrict the setting of cookies in your browser. You can delete cookies that have already been stored at any time. If you deactivate cookies, the functionality of our website may be limited. If we use a cookie/consent banner, you can adjust your selection there at any time and withdraw your consent.

6. Embedded Videos (Vimeo) We embed videos from the “Vimeo” platform on our website. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. When you access a page containing embedded Vimeo videos, a connection to Vimeo’s servers is established. Information about your visit (e.g. IP address, information about the browser and device used, page accessed, date and time) is transmitted to Vimeo. Vimeo may also place cookies or similar technologies on your device to collect information about user behaviour. If you are logged in to Vimeo, Vimeo can associate your visit to our website with your Vimeo user account. You can prevent this by logging out of your Vimeo account before visiting our website.We use Vimeo videos to present our services in a clear and visually appealing manner and to make our online offering more attractive. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR. Where we obtain your consent via a cookie/consent banner (e.g. for marketing/media cookies), the legal basis is Art. 6(1)(a) GDPR. Vimeo may also process data in the USA. We point out that the USA does not provide a level of data protection equivalent to that in the EU. Data transfers to the USA may therefore involve certain risks. Where necessary, we base such transfers on appropriate safeguards within the meaning of Art. 44 et seq. GDPR (e.g. standard contractual clauses, participation in the Data Privacy Framework). Further information about data processing by Vimeo can be found in Vimeo’s Privacy Policy.

7. Contact (E-mail, Telephone, Contact Form) If you contact us by e-mail, telephone or via a contact form, the data you provide (e.g. name, contact details, content of the inquiry) will be stored by us for the purpose of processing your inquiry and for possible follow-up questions. This data processing is carried out: - to take steps prior to entering into a contract or to perform a contract (Art. 6(1)(b) GDPR) if your request is aimed at concluding a contract, or - based on our legitimate interest in processing inquiries (Art. 6(1)(f) GDPR). We do not pass on this data without your consent unless this is necessary for the performance of a contract or required by law. The data will be stored for as long as necessary to process your inquiry and any subsequent projects, and in accordance with statutory retention obligations (e.g. tax law retention periods).

8. Contract Execution / Customer Management In the context of our cooperation (e.g. preparing offers, project management, invoicing), we process personal data of our customers (e.g. name, company, contact details, project information, invoice data). The processing is carried out for: - preparation and performance of the contract (Art. 6(1)(b) GDPR) - compliance with legal obligations, in particular tax and corporate law retention obligations (Art. 6(1)(c) GDPR). Data is stored for the duration of the business relationship and thereafter in accordance with statutory retention periods (generally 7 years under the Austrian Commercial Code and Federal Fiscal Code – UGB/BAO).

9. Processing of Image, Video and Audio Material In the course of providing our services (creation of AI-generated image and video content), customers may provide us with the following data in particular: - Image and video recordings - Logos, trademarks, graphics - Texts, scripts, audio recordings (e.g. speech, music) - Information relating to depicted persons (e.g. employees, models) We process this data exclusively for the purpose of providing the contractually agreed services and only to the extent necessary. The legal basis is: - performance of the contract pursuant to Art. 6(1)(b) GDPR, - where required, the consent of the data subjects pursuant to Art. 6(1)(a) GDPR (e.g. for images of persons provided to us by our customer together with appropriate consents). The customer is responsible for ensuring that all necessary rights and consents for the material it provides (in particular from depicted persons, trademark owners etc.) are in place. The storage period depends on the duration of the project and statutory retention obligations. Raw data and project files may be retained for an appropriate period after project completion to allow for change requests or follow-up projects; at the customer’s request, this data can be deleted after project completion, provided no legal obligations to retain the data apply.

10. Use of Artificial Intelligence (AI) When creating image and video content, we use AI-based services and tools (e.g. to generate avatars, images, texts or animations). Depending on the project, inputs (prompts, reference images, texts) may also be processed that contain personal data. The processing is carried out: - for the performance of the contract (Art. 6(1)(b) GDPR), - on the basis of our legitimate interest in efficient and modern service provision (Art. 6(1)(f) GDPR). Where we use external service providers or AI providers, we ensure an adequate level of data protection and conclude data processing agreements pursuant to Art. 28 GDPR where required. We will provide specific information on the AI services used in each case upon request.

11. Disclosure of Data to Third Parties Your personal data is only transmitted to third parties: - where this is necessary for the performance of the contract (e.g. tax advisors, payment service providers, hosting providers, IT service providers), - where we are legally required to do so, or - where you have expressly consented. Where we use service providers within the framework of data processing on our behalf, this is done on the basis of Art. 28 GDPR and corresponding contracts.

12. Storage Period We store personal data only for as long as is necessary to fulfil the respective purposes or as long as we are legally obliged to do so (e.g. tax and corporate law retention obligations). Once the purpose of processing no longer applies and/or any statutory retention periods have expired, the data will be deleted or anonymised.

13. Your Rights as a Data Subject Under the applicable data protection law, you have the following rights in particular: - Right of access (Art. 15 GDPR) - Right to rectification (Art. 16 GDPR) - Right to erasure (Art. 17 GDPR) - Right to restriction of processing (Art. 18 GDPR) - Right to data portability (Art. 20 GDPR) - Right to object to processing (Art. 21 GDPR) - Right to withdraw consent (Art. 7(3) GDPR) If you wish to exercise any of these rights, you can contact us at any time using the contact details provided in section 1. If you believe that the processing of your data infringes data protection law or that your data protection rights have otherwise been violated, you have the right to lodge a complaint with the competent supervisory authority. In Austria, this is: Austrian Data Protection Authority Barichgasse 40–42 1030 Vienna

14. Security We implement appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access and unlawful processing. These measures are continuously adapted in line with the state of the art.

15. Updates to this Privacy Policy We reserve the right to amend this Privacy Policy as necessary to reflect changes in legal requirements, technical developments or our range of services. The current version published on this website shall apply.