Privacy Policy
This is an English translation for your convenience. The legally binding version is the German Datenschutzerklärung.
Introduction
This privacy policy explains how we process your personal data (below: ”data”) in the context of our website and our services.
It applies to all data processing connected with our website, our services and our external online presences such as social media.
Last updated: March 2026
Controller
Stehrer Ventures GmbH
Schweidlgasse 36
1020 Vienna, Austria
Email: office@northstarmedia.co
Overview of processing
We process personal data in particular for the following purposes:
- providing and operating our website
- handling enquiries and communication
- marketing and analytics
- delivering our services
- ensuring IT security
Legal bases
Processing takes place under Article 6 GDPR on the basis of:
- consent (Article 6(1)(a) GDPR)
- performance of a contract (Article 6(1)(b) GDPR)
- legal obligation (Article 6(1)(c) GDPR)
- legitimate interests (Article 6(1)(f) GDPR)
Security measures
We take technical and organisational measures in line with Article 32 GDPR:
- SSL/TLS encryption
- access restrictions
- regular security reviews
Sharing of data
Your data is only shared:
- with processors such as hosting providers and tools
- where there is a legal obligation
- to perform a contract
- where there is a legitimate interest
We have data processing agreements under Article 28 GDPR in place with all processors.
International transfers
Transfers to third countries only take place in compliance with the GDPR, in particular through:
- standard contractual clauses (SCC)
- adequacy decisions of the European Commission
Retention
We keep data only as long as necessary:
- contract data: up to 7 years (Austrian tax retention requirements)
- consent records: until withdrawn
- other data: until the purpose no longer applies
Your rights
You have the following rights:
- access (Article 15 GDPR)
- rectification (Article 16 GDPR)
- erasure (Article 17 GDPR)
- restriction (Article 18 GDPR)
- data portability (Article 20 GDPR)
- objection (Article 21 GDPR)
Business services
We process client data to perform our contracts and to communicate (Article 6(1)(b) GDPR).
Website and hosting
Our website is hosted with external providers. Server log files are processed in the course of this, including IP address and time of access.
This processing serves the security and stability of the website.
Cookies and tracking
We use cookies and similar technologies.
Legal basis:
- technically necessary cookies: legitimate interest
- marketing and tracking: consent under § 165 TKG 2021 and Article 6 GDPR
You can withdraw your consent at any time through the cookie banner.
Contacting us
When you contact us by form, email or phone, we process your data in order to handle your enquiry.
Newsletter
Newsletters are only sent with consent, using double opt-in.
You can withdraw that consent at any time.
Web analytics
We use analytics tools such as Google Analytics to improve what we offer.
This processing only takes place with your consent.
Online marketing
We use marketing tools such as the Meta Pixel and Google Ads.
The following data may be processed:
- IP address
- user behaviour
- pages visited
Only with your consent.
Social media
We maintain profiles on platforms including:
Data processing takes place under Article 6(1)(f) GDPR.