Privacy policy
Draft. This text is a starting point written during development, not legal advice. It must be completed and reviewed by a lawyer before the platform is opened to the public.
Controller: [name and address from the Impressum]. Contact for privacy questions: [email].
What we collect and why
- Account: your email address and name, to sign you in and identify you to people you work with (GDPR Art. 6(1)(b), contract).
- Editor profiles and portfolio videos: the profile text, packages and videos you upload. Published profiles and videos are public by design.
- Job posts: the project details you post. Open jobs are public; your name is not shown on them.
- Reports: what you write in a report and, if you give it, your email, to review ownership and abuse claims (Art. 6(1)(f), legitimate interest in a safe marketplace).
- Security records: a log of sensitive changes (publishing, moderation, verification) and short-lived, hashed connection data for rate limiting.
Cookies
We set only the cookie needed to keep you signed in. No advertising or analytics cookies.
Service providers
- Supabase (database, sign-in emails, file storage), project region: [check in Supabase settings, ideally an EU region].
- Hosting: [e.g. Vercel].
- Sample videos shown during the preview load from Wikimedia Commons (upload.wikimedia.org), which receives your IP address when they play.
How long we keep data
Until you delete your account, except where the law requires longer retention (for example invoices). [retention periods]
Your rights
You can ask for access, correction, deletion, restriction, data portability, and object to processing. You can complain to the Austrian Data Protection Authority (Datenschutzbehörde, dsb.gv.at).