Introduction
This Privacy Policy describes how CU Development GmbH (operating under the brand name “seeU/agency”, hereinafter also referred to as “seeU/agency”, “we”, or “us”) collects, processes, and uses personal data in connection with the website seeu.events/agency (hereinafter the “Website”) and the agency services provided thereunder.
We take the protection of your personal data seriously and treat your personal data confidentially and in accordance with the statutory data protection regulations, in particular the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
By using our Website or by entering into a business relationship with seeU/agency, you accept the practices described in this Privacy Policy. The current version is accessible at any time at seeu.events/agency/privacy.
Controller and contact
The controller within the meaning of the GDPR is:
You may contact us at any time regarding questions concerning the processing of your personal data. Inquiries are accepted via email at contact@seeu.events or by post to the address indicated above.
We have not appointed a designated Data Protection Officer, as we are not legally required to do so.
General principles of data processing
Personal data. “Personal data” means any information relating to an identified or identifiable natural person. This includes in particular name, address, email address, IP address, and similar information.
Lawfulness of processing. We process personal data exclusively on the basis of a legal ground in accordance with Art. 6 GDPR. The relevant legal grounds are referred to in the respective sections of this Privacy Policy. The principal legal grounds are:
- Consent of the data subject (Art. 6(1)(a) GDPR).
- Performance of a contract or implementation of pre-contractual measures (Art. 6(1)(b) GDPR).
- Compliance with a legal obligation (Art. 6(1)(c) GDPR).
- Legitimate interests of the controller or a third party (Art. 6(1)(f) GDPR).
Data minimization. We process only such personal data as is necessary for the respective purpose. As far as possible and reasonable, we use anonymized or pseudonymized data.
Storage periods. Personal data is stored only for as long as is necessary for the respective purpose or as required by statutory retention obligations (in particular tax and commercial law retention obligations of seven (7) years). Specific retention periods are indicated in the respective sections of this Privacy Policy.
Visiting the website (server log files)
Description. When you visit our Website, our hosting provider automatically collects technical information about the request and stores it in so-called server log files. This information includes:
- The IP address of the requesting device (in shortened form where technically possible).
- Date and time of the request.
- Browser type and version.
- Operating system.
- Referrer URL (the previously visited page).
- Requested file or URL on the Website.
- HTTP status code and amount of data transferred.
Purpose. The processing serves the technical provision of the Website, the optimization of our offering, the prevention of misuse, and the security of our IT systems.
Legal ground. The legal ground for processing is our legitimate interest in the secure and stable provision of the Website pursuant to Art. 6(1)(f) GDPR.
Storage period. Server log files are retained for a maximum of 30 days and are subsequently deleted or anonymized, unless storage for a longer period is required for security investigations.
Web analytics
Purpose. We use web analytics tools to analyze the use of our Website on the basis of statistically aggregated data and to continuously improve the Website. Where personal data is processed in this context, this is done exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
Privacy-friendly design. We endeavor to use web analytics tools that operate in a privacy-friendly manner. This includes in particular the anonymization of IP addresses, the renunciation of cross-website tracking, and short retention periods for analysis data.
Withdrawal of consent. You may withdraw your consent to web analytics at any time with effect for the future via the cookie settings link in the footer of the Website.
Specific tools. The web analytics tools currently used by seeU/agency are listed in the cookie banner of the Website. Further information on the respective tool, the data processed, and the storage period can be obtained directly via the cookie banner or by contacting us at contact@seeu.events.
Contact form and email communication
Description. On our Website you have the option of contacting us via a contact form or by email. When you contact us, the data you provide (in particular name, email address, company, message) is processed for the purpose of handling the request and any follow-up communication.
Purpose. The data is processed for the purpose of responding to your inquiry, providing information about our services, and, where applicable, preparing a contractual relationship.
Legal ground. The legal ground for processing is the implementation of pre-contractual measures pursuant to Art. 6(1)(b) GDPR or our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) GDPR.
Storage period. The data provided in the context of an inquiry is stored as long as necessary for the handling of the request. If a contractual relationship arises from the inquiry, the data is processed in accordance with the principles set out in Section 7. If no contractual relationship arises, the data is deleted at the latest twelve (12) months after the last contact, unless statutory retention obligations apply.
Data processing in business relationships
Description. In the context of business relationships with our clients, partners, suppliers, and other contractual parties, we process the personal data necessary for the implementation of the respective contractual relationship. This includes in particular:
- Master data of the contact persons (name, position, contact details).
- Communication data (email correspondence, meeting notes).
- Project-related data (briefings, content, feedback, deliverables).
- Billing and payment data (invoicing address, banking information).
Purpose. The data is processed for the purpose of executing the contract, the provision of agreed services, billing, and the fulfillment of statutory obligations (in particular accounting and tax obligations).
Legal ground. The legal ground for processing is the performance of a contract pursuant to Art. 6(1)(b) GDPR, the fulfillment of a legal obligation pursuant to Art. 6(1)(c) GDPR, and our legitimate interest in proper business administration pursuant to Art. 6(1)(f) GDPR.
Storage period. Data is processed for the duration of the business relationship and subsequently in accordance with the statutory retention obligations (in particular seven (7) years pursuant to § 132 of the Austrian Federal Tax Code).
Disclosure. Within the scope of the business relationship, personal data may be disclosed to processors engaged by us (in particular tax advisors, accounting service providers, hosting providers, IT service providers). Such disclosure takes place exclusively on the basis of corresponding data processing agreements pursuant to Art. 28 GDPR.
Use of personal data in project work
Description. As a creative and digital agency, we may, in the course of our project work for clients, process personal data of third parties. This includes in particular:
- Image, video, and audio material containing depictions of identifiable persons.
- Personal data contained in content provided by the client (e.g., user lists, contact data).
- Data accessible through third-party systems to which the client has granted us access (e.g., social media accounts, analytics tools, hosting environments).
Role of seeU/agency. In such cases, seeU/agency acts as a processor on behalf of the client. The legal responsibility for the lawfulness of the processing lies with the client as controller. seeU/agency processes the data in such cases exclusively on the basis of documented instructions of the client and on the basis of a separate data processing agreement pursuant to Art. 28 GDPR.
AI-generated content. In the context of the production of AI-generated media, we use external AI tools (in particular for the generation of images, videos, audio, and text). The data submitted to such tools is processed by the respective providers according to their own terms. We endeavor to use only such tools that adhere to appropriate data protection standards and that do not use the data submitted by us for training purposes without consent.
Hosting and technical infrastructure
Description. The Website is operated through an external hosting provider. The hosting provider processes, on our behalf, all data that arises in connection with the operation of the Website (in particular server log files, contact form data, and content stored on the Website).
Legal ground. The legal ground for the involvement of the hosting provider is our legitimate interest in the professional, secure, and reliable operation of the Website pursuant to Art. 6(1)(f) GDPR.
Data processing agreement. We have concluded a data processing agreement with our hosting provider pursuant to Art. 28 GDPR which ensures the protection of personal data.
Specific provider. Information on the specific hosting provider currently used can be obtained on request at contact@seeu.events.
Third-party services
Description. In addition to the hosting provider, we engage further third-party service providers in the operation of the Website and the provision of our services. The categories of services used regularly include:
- Email service providers for the dispatch of business and transactional emails.
- Cloud storage and project management tools for collaboration with clients.
- AI service providers for the generation and processing of media.
- Analytics service providers (only with your consent).
- Payment service providers (where billing through online payment is offered).
Selection of service providers. We carefully select third-party service providers and ensure through appropriate contractual arrangements (in particular data processing agreements pursuant to Art. 28 GDPR and standard contractual clauses pursuant to Art. 46 GDPR) that they comply with the applicable data protection regulations.
Data transfers to third countries. Some of the third-party service providers we engage are based outside the European Economic Area (EEA), in particular in the United States of America. In such cases, we ensure through appropriate safeguards (in particular the conclusion of standard contractual clauses pursuant to Art. 46(2)(c) GDPR or, where applicable, on the basis of an adequacy decision of the European Commission pursuant to Art. 45 GDPR) that an adequate level of data protection is guaranteed.
Rights of the data subjects
Right of access. You have the right pursuant to Art. 15 GDPR to obtain confirmation as to whether or not personal data concerning you is being processed and, where that is the case, access to the personal data and to certain other information.
Right to rectification. You have the right pursuant to Art. 16 GDPR to obtain the rectification of inaccurate personal data concerning you and the completion of incomplete personal data.
Right to erasure. You have the right pursuant to Art. 17 GDPR to obtain the erasure of your personal data, provided one of the legal grounds is given. Statutory retention obligations to which we are subject (e.g., from tax and commercial law) may delay erasure.
Right to restriction of processing. You have the right pursuant to Art. 18 GDPR to obtain the restriction of processing under certain conditions.
Right to data portability. You have the right pursuant to Art. 20 GDPR to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format and to transmit such data to another controller.
Right to object. You have the right pursuant to Art. 21 GDPR to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, where such processing is based on legitimate interests pursuant to Art. 6(1)(f) GDPR.
Right to withdraw consent. You have the right pursuant to Art. 7(3) GDPR to withdraw consent given at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of the consent prior to its withdrawal.
Exercise of rights. To exercise your rights, please contact us using the contact details provided in Section 1. To ensure that information is provided only to the data subject themselves, an appropriate verification of identity may be required. We will respond to your request within the statutory deadlines (generally within one month of receipt of the request).
Right to lodge a complaint. You have the right pursuant to Art. 77 GDPR to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR. The competent supervisory authority for Austria is:
Security of data processing
Technical and organizational measures. We take appropriate technical and organizational measures pursuant to Art. 32 GDPR to ensure a level of security appropriate to the risk of the processing. This includes in particular the use of encryption (TLS/SSL) for the transmission of data via our Website, access controls, regular security updates, and the careful selection of processors.
Encryption. Our Website uses TLS encryption for the secure transmission of data. You can recognize an encrypted connection by the lock symbol in the address bar of your browser and the address line beginning with “https://”.
Limits of internet security. Despite all care, complete security in data transmission via the internet cannot be guaranteed. The transmission of personal data via the internet is therefore at your own risk.
Children and minors
The services of seeU/agency are aimed exclusively at adults. Persons under 18 years of age may neither commission us with services nor send us their personal data without the consent of their legal guardian. If we obtain knowledge that we have collected personal data from a minor without the corresponding consent, we will delete such data without delay.
Changes to this privacy policy
We reserve the right to amend this Privacy Policy at any time, particularly to adapt it to changed legal or technical conditions. The respective current version is accessible on our Website and is dated with an effective date.
We recommend that you regularly review this Privacy Policy to stay informed about the processing of your personal data.
Final provisions
Applicable law. The GDPR, the Austrian Data Protection Act (DSG), and other applicable data protection regulations apply to the processing of personal data.
Severability. Should individual provisions of this Privacy Policy be or become wholly or partially invalid, the validity of the remaining provisions shall not be affected.
Social media profiles
11.1Description. seeU/agency maintains profiles on various social media platforms (in particular Instagram, LinkedIn, and TikTok). Visits to these profiles, as well as interactions with our content (likes, comments, shares), are processed in accordance with the respective platform's terms.
11.2Joint responsibility. In the case of certain platforms (in particular Meta-operated platforms), there is joint responsibility within the meaning of Art. 26 GDPR with the platform operator. Within the scope of joint responsibility, the platform operators are primarily responsible for the data processing on their platform. We have no influence on this processing and only have very limited possibilities to process and analyze data of users who interact with our profile.
11.3Information from the operators. Detailed information on the data processing by the respective platform operators can be found in the respective privacy policies of the platforms.
11.4Visiting our profiles. The visit to and use of our social media profiles are at your own risk. We recommend that you carefully read the privacy policies of the respective platform operators before using the profiles.