Privacy Policy

Last updated: August 25, 2025

We take the protection of your personal data very seriously. This Privacy Policy explains what personal data we collect when you visit our website www.jakobtrost.com, how we use it, and what rights you have under the General Data Protection Regulation (GDPR).

1. Data Controller

Jakob Trost Multi Media Agentur
Althanstraße 54
1090 Wien, Austria
Email: jakob.trost@jtmultimedia.com

2. Hosting & Server Log Files

Our website is hosted by Webflow, Inc., 398 11th Street, San Francisco, CA 94103, USA. When you visit our website, Webflow automatically collects and stores information in server log files that your browser transmits, such as browser type/version, operating system used, referrer URL, host name of the accessing device, time of the server request, and IP address. Processing is necessary to ensure the functionality, security, and delivery of the website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interests: secure and reliable provision of our website).

We have a Data Processing Agreement (DPA) with Webflow. Where data is transferred to the USA, safeguards such as the EU Standard Contractual Clauses (SCCs) and/or participation in the EU-U.S. Data Privacy Framework (where applicable) are used.

3. Collection and Use of Personal Data

a) Contact via Email / Form

If you contact us (e.g., by email or via a contact form), we process the data you provide (e.g., name, email address, message content) to handle your inquiry and any follow-up questions.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps / performance of a contract) or Art. 6(1)(f) GDPR (legitimate interests: efficient handling of inquiries).

b) Cookies & Consent Management

We use cookies and similar technologies. Essential cookies are necessary for the operation of the site. Non-essential (analytics/marketing) cookies are used only with your consent via the cookie banner.

Legal basis: Art. 6(1)(c) GDPR in conjunction with Art. 5(3) ePrivacy Directive (consent where required), Art. 6(1)(a) GDPR for analytics/marketing cookies, and Art. 6(1)(f) GDPR for essential cookies.

You can change or withdraw your consent at any time via the cookie settings: Adjust cookie settings.

c) Google Analytics

We use Google Analytics, a web analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) to analyze website usage. IP anonymization is enabled; according to Google, your IP address is shortened within the EU/EEA before transfer. Google uses cookies and similar technologies to help us understand how visitors use our pages (e.g., pages viewed, time spent, interactions).

Legal basis: Art. 6(1)(a) GDPR (your consent via the cookie banner).

Data retention for user- and event-level information in Google Analytics is configured to the minimum necessary and not longer than 14 months. You can withdraw consent at any time via the cookie settings. You can also prevent collection by installing the browser add-on provided by Google.

Depending on settings, data may be transferred to the USA. Safeguards include SCCs and/or the EU-U.S. Data Privacy Framework (where applicable). Further information can be found in Google’s Privacy Policy and the Google Analytics terms.

d) Instagram Embeds

Our website may embed content from Instagram (e.g., posts, reels). The provider is Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). When you load a page with such an embed, your IP address and other technical data may be transmitted to Instagram/Meta. Depending on your privacy settings with Instagram, cookies or similar technologies may be set.

Legal basis: Art. 6(1)(a) GDPR (your consent via the cookie/banner before loading non-essential embeds).

Data may be transferred to the USA. Safeguards such as SCCs and/or the EU-U.S. Data Privacy Framework (where applicable) apply. For details, see Instagram’s/Meta’s privacy information.

e) Google Fonts

We use Google Fonts to ensure consistent typography. Depending on our configuration, fonts may be served locally from our servers (no data transfer to Google) or fetched from Google’s servers (Google Ireland Limited). When requested from Google, your IP address and technical metadata are transmitted to Google to deliver the font files.

Legal basis: If fonts are loaded from Google servers: Art. 6(1)(a) GDPR (consent via cookie/banner before loading non-essential remote assets). If served locally: Art. 6(1)(f) GDPR (legitimate interests: proper rendering and fast delivery) with no third-country transfer.

Where applicable, data may be transferred to the USA with safeguards (SCCs/DPF). We recommend local hosting of fonts where feasible.

4. Legal Bases (Art. 6 GDPR)

• Art. 6(1)(a) GDPR – consent (e.g., analytics, embeds, remote fonts).
• Art. 6(1)(b) GDPR – performance of a contract or pre-contractual steps (e.g., handling inquiries that relate to services).
• Art. 6(1)(c) GDPR – compliance with legal obligations (e.g., cookie consent obligations under ePrivacy rules).
• Art. 6(1)(f) GDPR – legitimate interests (e.g., secure and efficient website operation; responding to general inquiries).

5. Data Retention

We store personal data only as long as necessary to fulfill the stated purposes or as required by law. Analytics data in Google Analytics is retained in accordance with our GA retention settings and no longer than 14 months for user-/event-level data.

6. Recipients & International Transfers

We may share data with service providers (processors) that support us in operating the website (e.g., hosting by Webflow, analytics by Google). Where data is transferred outside the EU/EEA (e.g., to the USA), we use appropriate safeguards such as SCCs and/or rely on adequacy decisions like the EU-U.S. Data Privacy Framework, where applicable.

7. Your Rights under GDPR

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and to object to processing based on Art. 6(1)(f) (Art. 21). You may withdraw consent at any time with effect for the future.

You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde) if you believe your data is processed unlawfully.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data. However, no method of transmission over the internet or electronic storage is completely secure.

9. Children’s Privacy

Our services are not directed to children under 16, and we do not knowingly collect data from them.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version is always available on this page.

11. Contact

Jakob Trost Multi Media Agentur
Althanstraße 53
1090 Wien, Austria
Email: jakob.trost@jtmultimedia.com