1. Controller

The controller responsible for the processing of personal data in connection with this website is:

Christian Stöttner
Außerwegerstraße 20
A-4040 Neulichtenberg
Austria

Email: christian.stoettner@icloud.com

This website presents the professional acting activities of Natalie Stöttner. Website administration, technical operation and decisions concerning the processing of visitor data are managed by the controller named above.

2. Scope of this Privacy & Cookie Policy

This Privacy & Cookie Policy explains how personal data is collected, processed, stored, used and disclosed when you visit this website, submit an enquiry, interact with embedded content, use forms or access external services linked from this website.

It covers the website itself and services used in connection with it, including hosting, contact forms, analytics, consent management, embedded media, social-media links, casting and professional platforms, representation-related communication and, where activated, newsletter, marketing, advertising or workflow services.

3. Hosting and Website Platform

This website is created and hosted using Squarespace.

When the website is accessed, technical information may be processed automatically in order to deliver, secure and maintain the website. Such information may include:

IP address
browser type and version
operating system
device information
referring website or URL
pages accessed
date and time of access
technical, security and error information

The legal basis for technically necessary processing is Art. 6(1)(f) GDPR. The legitimate interests are the secure, reliable and technically functional operation of this professional website.

4. Contact Form

This website provides a contact form for casting, representation, agency, production and other professional enquiries.

The following information may be collected:

First Name
Last Name
Company / Agency / Production
Email
Subject
Message

The information is processed to receive, assess, respond to and administer the respective enquiry.

The legal basis is Art. 6(1)(b) GDPR where the enquiry concerns a potential contractual relationship or pre-contractual measures. Other legitimate professional correspondence may be processed under Art. 6(1)(f) GDPR.

Because the contact form contains a required email field, Squarespace creates a contact record and stores the submitted information in the Contacts / Form Submitters system. Form submissions are also sent to the email address configured for the form.

Submitting the contact form does not constitute consent to receive marketing communications.

5. Storage of Contact Form Submissions

Form submissions may remain stored in Squarespace until they are deleted.

Contact-form information is retained only for as long as reasonably necessary for the relevant professional purpose, communication, potential cooperation, contractual relationship, administration or establishment, exercise or defence of legal claims.

Where data is no longer required and no statutory or legitimate retention reason applies, it will be deleted.

6. Professional Enquiries and Representation

Where necessary to process a professional enquiry, relevant information may be shared with persons or organisations directly involved in the matter, including:

authorised agents or managers
casting directors and casting professionals
casting platforms
production companies
directors and producers
professional advisers
legal advisers
authorised representatives
other persons directly involved in a relevant professional project

Such disclosure takes place only where necessary for the respective enquiry, potential engagement, contractual relationship or legitimate professional purpose.

Personal data is not sold to advertisers or unrelated third parties.

7. Direct Email Communication

If you contact the website operator or Natalie Stöttner directly by email, the information contained in the communication may be processed, including:

name
email address
message content
attachments voluntarily provided
professional or organisational information included in the message

The information is processed for the purpose of managing and responding to the communication.

The legal basis is Art. 6(1)(b) or Art. 6(1)(f) GDPR, depending on the nature of the enquiry.

8. Spam Prevention and Website Security

The website and its forms use or may use technical security mechanisms designed to prevent spam, automated submissions, fraud, abuse and malicious activity.

Squarespace Form Blocks use Google reCAPTCHA by default unless it is manually disabled. reCAPTCHA may process technical information such as IP address, browser information, device information and interaction data for security purposes.

9. Cookies and Similar Technologies

This website uses or may use cookies, local storage and comparable technologies.

Cookies are small data files stored on or accessed from a visitor's device. Similar technologies may perform comparable functions.

The technologies used on this website are divided into the following categories.

9.1 Strictly Necessary Technologies

Strictly necessary technologies are required for the secure and technically functional operation of the website or for functions expressly requested by the visitor.

These may include technologies necessary for:

website security
session management
fraud and spam prevention
cookie-consent management
remembering privacy preferences
technical delivery of website functions

Under Austrian law, technically necessary technologies may generally be used without prior consent where they are strictly required to provide the requested service.

9.2 Analytics and Performance Technologies

Analytics and performance technologies may be used to understand how visitors interact with the website and to improve its performance, content and usability.

These may process information such as:

pages viewed
visit statistics
referral sources
browser and device information
approximate geographic information
website interactions
session information

Where legally required, such technologies are used only after the visitor has provided consent.

9.3 Marketing, Advertising and Conversion Technologies

The website may in the future use marketing, advertising, conversion-measurement or audience-measurement technologies where appropriate for professional promotion.

Providers may include, for example:

Google
Meta
Instagram
TikTok
YouTube
other advertising or analytics providers

Where these technologies are not strictly necessary, they will only be intentionally activated after the legally required consent has been obtained.

9.4 Third-Party and Embedded-Media Technologies

Embedded content such as YouTube or Vimeo videos, showreels, Instagram or TikTok content may use cookies, local storage or comparable technologies when loaded or activated.

Where legally required, such third-party content will only be activated after the visitor has provided the relevant consent.

9.5 Cookie Consent

Visitors are provided with cookie-consent controls that allow them to accept, reject or manage non-essential technologies.

The website may provide options such as:

Accept All
to permit all available cookie categories;

Decline All
to reject non-essential cookies;

Manage Cookies
to select individual categories where available.

Squarespace provides native controls for offering consent choices and restricting non-essential cookies until a visitor makes the relevant choice.

9.6 Changing or Withdrawing Consent

Consent is voluntary and may be changed or withdrawn at any time.

Visitors can reopen their privacy preferences through the Cookie Settings link provided on the website.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

9.7 Cookies and Technologies Used by External Providers

If a visitor activates or accesses content from an external provider, that provider may use its own cookies or similar technologies.

Such providers are responsible for their own independent processing activities.

The website operator does not control technologies independently placed by third-party providers after the visitor accesses or activates the respective external service.

9.8 Current and Future Cookie Configuration

The exact cookies and comparable technologies used depend on the website functions and services active at the relevant time.

Squarespace itself uses both necessary and analytics-related cookies. Its cookie and analytics settings can be configured to limit non-essential processing and to respect visitor consent choices.

If additional services are activated, they will be configured in accordance with applicable consent requirements.

10. Squarespace Analytics

This website may use Squarespace Analytics to understand website usage and improve content, usability and performance.

Depending on configuration and consent status, analytics may process information including:

pages viewed
visit statistics
referral sources
browser and device information
approximate geographic information
interactions with the website

Squarespace allows Analytics cookies and activity logging to be restricted or disabled where required.

Where consent is legally required, analytics processing takes place only after the visitor has provided the necessary consent.

11. Additional Analytics and Advertising Technologies

Additional analytics, conversion-measurement or advertising technologies may be used where appropriate for professional promotion or website optimisation.

These may include services provided by Google, Meta or comparable providers.

Where such technologies require consent, they will not intentionally be activated before the required consent has been obtained.

12. Social Media Links

This website may contain links to professional accounts or profiles on platforms including:

Instagram
TikTok
YouTube
Vimeo
IMDb
Spotlight
Castupload
Filmmakers
other casting, agency or professional platforms

When a visitor clicks an external link, the visitor leaves this website and the privacy terms of the respective external provider apply.

Information submitted through this website's contact form is not automatically transferred to social-media platforms merely because links to those platforms are displayed.

13. Embedded Media and Third-Party Content

This website may contain embedded videos, showreels, images, social-media posts or other content supplied by third-party platforms.

Providers may include:

YouTube
Vimeo
Instagram
TikTok
other video, social-media or professional media services

When such content is loaded or activated, the respective provider may receive information including:

IP address
browser and device information
page visited
date and time
interaction with the embedded content
account information where the visitor is logged into the external service

Where legally required, non-essential third-party media will only be activated after the necessary consent has been provided.

14. YouTube

Videos and showreels may be embedded using YouTube, a service provided by Google.

Where technically appropriate, privacy-enhanced embedding methods may be used.

Activating YouTube content may nevertheless result in data being transferred to Google and its service providers.

Where consent is required, YouTube content will be handled in accordance with the visitor's cookie preferences.

15. Vimeo

Videos and showreels may be embedded using Vimeo.

When Vimeo content is activated, Vimeo may process technical and usage information relating to the visitor.

Where consent is required, such content will only be activated after the relevant consent has been obtained.

16. Instagram, TikTok and Other Social Media Content

The website may link to or embed content from Instagram, TikTok and other social-media platforms.

Embedded content may allow the respective provider to process technical information and information relating to visitor interaction.

Where legally required, such content will only be activated following consent.

17. Casting and Professional Platforms

The website may contain links to external casting and professional platforms, including services such as:

IMDb
Spotlight
Castupload
Filmmakers
other casting, representation or professional industry platforms

When such a service is opened, the privacy terms of the respective external provider apply.

Personal information collected through this website will not be automatically transmitted to such platforms unless a specific technical integration is activated or a transfer is required for a legitimate professional purpose.

18. Newsletter and Professional Updates

If a newsletter, mailing list or professional-update function is introduced, personal data such as name and email address will only be used for that purpose where a valid legal basis exists.

Where consent is required, users will be asked to expressly opt in.

Submitting the normal contact form does not constitute consent to receive newsletters or marketing communications.

Any consent to marketing communications may be withdrawn at any time.

Newsletter functions may use Squarespace Email Campaigns, Mailchimp or another appropriate provider.

19. Additional Storage, Workflow and Integration Services

Website forms or professional workflows may be connected to additional services for storage, communication, workflow automation or professional administration.

Such services may include:

Google Drive or Google Sheets
Mailchimp
Zapier
cloud-storage providers
professional communication services
casting and representation platforms
other business-management tools

Squarespace currently supports additional form-storage and integration options including email, Google Drive, Mailchimp and Zapier.

Personal data will only be transferred where necessary for the relevant purpose and subject to applicable legal safeguards.

20. Recipients of Personal Data

Depending on the function used and the nature of an enquiry, recipients may include:

Squarespace and its subprocessors
hosting and infrastructure providers
email providers
consent-management providers
analytics providers
social-media and video providers
agents or managers
casting professionals
casting platforms
production companies
directors and producers
technical service providers
professional advisers
public authorities where disclosure is legally required

Personal data collected through this website is not sold to advertisers or unrelated third parties.

21. International Data Transfers

Some service providers may process personal data outside Austria or outside the European Economic Area, including in the United States.

Where required, international transfers are based on legally recognised safeguards such as:

adequacy decisions
the EU-U.S. Data Privacy Framework
Standard Contractual Clauses approved by the European Commission
other legally recognised transfer mechanisms

Squarespace states that it participates in the EU-U.S. Data Privacy Framework and also uses other recognised transfer safeguards, including Standard Contractual Clauses where applicable.

22. Legal Bases for Processing

Depending on the respective activity, processing may be based on:

Art. 6(1)(a) GDPR – consent

Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures

Art. 6(1)(c) GDPR – compliance with a legal obligation

Art. 6(1)(f) GDPR – legitimate interests

Legitimate interests may include:

secure website operation
professional communication
casting and representation activities
business administration
prevention of misuse and fraud
website improvement
establishment, exercise or defence of legal claims

23. Storage Periods

Personal data is retained only for as long as required for the purpose for which it was collected or where retention is required or permitted by law.

Professional enquiries and related correspondence may be retained for as long as reasonably necessary to:

respond to an enquiry
manage a professional relationship
document professional communications
pursue potential future cooperation
establish, exercise or defend legal claims
comply with statutory obligations

Squarespace form submissions with required email addresses may remain stored in Squarespace until deleted.

Stored information will be reviewed and deleted when it is no longer reasonably required, subject to statutory retention duties and legitimate professional or legal requirements.

24. Data Security

Reasonable technical and organisational measures are used to protect personal data against:

unauthorised access
unauthorised disclosure
loss
alteration
destruction
misuse

However, no electronic transmission or storage system can guarantee absolute security.

25. Automated Decision-Making and Profiling

The website does not currently make decisions producing legal or similarly significant effects solely through automated processing or profiling.

If such processing is introduced, the information required by applicable data-protection law will be provided.

26. Data Subject Rights

Subject to the applicable requirements of the GDPR, affected persons may have the right to:

request access to personal data
request correction of inaccurate information
request deletion
request restriction of processing
receive certain data in a portable format
object to processing based on legitimate interests
withdraw consent at any time for future processing
lodge a complaint with a competent supervisory authority

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

27. Austrian Data Protection Authority

A complaint concerning data protection may be submitted to:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria

Email: dsb@dsb.gv.at

28. External Websites

This website may contain links to external websites and services.

The controller is not responsible for the privacy practices, technical security or content of independently operated external websites.

Visitors should review the privacy information provided by the respective external provider.

29. Changes to this Privacy & Cookie Policy

This Privacy & Cookie Policy may be updated where necessary to reflect changes in:

website functionality
professional activities
representation arrangements
service providers
technical integrations
applicable legal requirements

The version published on this website at the relevant time applies.

30. Contact Regarding Data Protection

For questions, requests or concerns relating to this Privacy & Cookie Policy or the processing of personal data, please contact:

Christian Stöttner
Email: christian.stoettner@icloud.com

Last updated: 8 September 2026