Privacy & Cookie Policy

Protecting your personal data is important to us. This Privacy Policy explains which data is processed when you use Plato.Gallery, for what purposes and on which legal bases, and which rights you have under the General Data Protection Regulation (GDPR).

This policy applies to the publicly accessible website plato.gallery, its German- and English-language content, and the interactive functions operated by us, insofar as advertising agency dmp is responsible for the respective processing.

Last updated: 9 October 2026

1. Data Controller

The controller responsible for processing personal data in connection with this website is:

Werbeagentur dmp – Digital Motion Picture Datenverarbeitungs GmbH
Fürstenstraße 13
A-2344 Maria Enzersdorf
Austria

Phone: +43 2236 3840 41
Email: office@agentur-dmp.at
Website: https://agentur-dmp.de/

Company registration number: FN 221307 b
Company register court: Commercial Court of Vienna (Handelsgericht Wien)
VAT ID: ATU54245703

Managing directors: Janine Wald and Michael Wald.

For questions about data protection or to exercise your rights, please contact us at the email address above.

2. Scope and Role of Plato.Gallery

Plato.Gallery is a platform developed by advertising agency dmp for virtual showrooms, interactive 3D product presentations, and digital B2B decision rooms. Visitors can access information, submit project enquiries, and explore selected digital applications through the website.

The public website should be distinguished from individual Plato.Gallery installations configured for clients, which may be operated within their own infrastructure. Different data protection responsibilities, technical service providers, and data processing agreements may apply to these installations. Applicable privacy information must be provided for each specific project.

3. Website Access and Server Logs

When you visit our website, technically necessary connection and access data are processed. These may include:

  • The IP address of the accessing device
  • Date and time of access
  • URL requested and volume of data transferred
  • Browser type, operating system, and technical device information
  • HTTP status code and, where applicable, referrer URL

These data are processed to provide the website, maintain system security, analyse errors, and prevent misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our online services.

Longer storage may be necessary where specific security incidents need to be investigated or legal claims must be asserted or defended.

4. Contact and Project Enquiries

If you contact us through our contact form or by email, we process the information you provide in order to handle your enquiry and continue business communications.

This information may include your name, company, business email address, telephone number where provided, as well as details of your project, requirements, and any documents you submit.

Where an enquiry relates to entering into a contract, processing is carried out to take steps prior to entering into a contract under Article 6(1)(b) GDPR. For general business enquiries, processing is based on our legitimate interest in receiving and answering such enquiries under Article 6(1)(f) GDPR.

We do not automatically use the data you provide for newsletters or other marketing activities that require consent.

5. Cookies, Local Storage, and Similar Technologies

Our website and certain interactive functions may use cookies and similar technologies such as local storage. These mechanisms can store information on your device or retrieve information from it.

We distinguish between technically necessary functions and optional services for analytics or additional features.

5.1 Strictly Necessary Cookies

Strictly necessary cookies may be used for secure session management, protection against unauthorised access, or to remember your privacy settings, insofar as such storage is strictly necessary for the service requested.

Under Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021), separate consent is not required for storage and access operations that are strictly necessary. Where personal data are processed, the applicable legal basis may be Article 6(1)(b), (c), or (f) GDPR, depending on the specific purpose.

5.2 Analytics and Additional Features

Optional analytics and functional services may be used to better understand how visitors use our website, improve content, or provide additional interactive applications.

Where consent is required, the relevant technologies are activated only after you have agreed. The legal basis for the subsequent processing of personal data is Article 6(1)(a) GDPR.

5.3 Consent and Withdrawal

When you visit our website, you can use the cookie consent dialog to allow or reject optional categories. Strictly necessary website functions generally remain available even if you do not consent to optional services.

You may withdraw your consent at any time with effect for the future. To do so, the cookie consent dialog must remain accessible through the “Cookie Settings” function. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

You can also delete stored cookies and local website data through your browser settings. This may limit certain functions.

6. Information About Cookies and Services

Information about the cookies and similar technologies actually used on our website, including their purposes, providers, and storage periods, is available in our Cookie Settings. There, you can allow optional services using the available choices and change or withdraw your consent at any time with effect for the future.

External services that do not set cookies may also process personal data, for example through the transmission of technical connection data. Additional information about analytics, location-based functions, and voice and media features is provided in the sections below.

7. Website Analytics and Audience Measurement

Where you have given your consent, we may use analytics functions to obtain statistical information about the use of our website. This may include pages visited, frequency of use, interactions, and technical browser and device information.

Analytics are used to improve usability, content, and technical functions. Personal-data analytics that require consent must not be activated before that consent has been given.

The legal basis for analytics requiring consent is Article 6(1)(a) GDPR. You may withdraw that consent at any time.

8. IP-Based Geolocation

Certain functions may use information about the approximate geographic location of an internet connection, for example to adapt content to a region or to classify visits for statistical purposes.

The current cookie consent dialog identifies a service called IP-API for this purpose. If an external request is actually made, your IP address may be transmitted to the relevant provider. The provider may use it to determine your country, region, or an approximate location. This does not constitute precise GPS tracking.

Where geolocation is used for optional analytics or personalisation and consent is required, processing is based on Article 6(1)(a) GDPR.

9. 3D Applications, Virtual Rooms, and User Accounts

Plato.Gallery offers interactive 3D content, virtual rooms, and demonstration applications. Using these functions may involve additional technical data processing necessary to display, operate, and secure the relevant application.

Such data may include session identifiers, technical browser and device information, inputs made within the application, and information about enabled features.

If you log into a restricted area, login credentials, user identifiers, and security-related session information may also be processed. Where necessary, this is done to provide requested functions under Article 6(1)(b) GDPR or on the basis of legitimate interests in secure technical operation under Article 6(1)(f) GDPR.

For client-specific decision rooms operated separately, different data protection responsibilities may apply. The processing of participant or client data then depends on the specific technical configuration and the relevant data protection agreements.

10. Voice Functions and External Media

10.1 Digital Voice and Audio Functions

Plato.Gallery may provide digital voice features and AI-assisted speech output. When an external speech service is used, technical connection data and content necessary to generate speech may be processed.

The cookie consent dialog names a service called “Voice Maker AI”. The exact identity of the provider, any transfers of personal data, processing locations, and deletion periods must be disclosed for the integration actually in use.

10.2 Embedded Third-Party Content

If external video, presentation, or media services are embedded, loading that content may establish a connection to the servers of the respective third-party provider. Technical data such as your IP address, browser information, and the page accessed may be transmitted.

Where consent is required, such content is loaded only after your consent. The specific third-party providers and their data processing activities must be disclosed when the relevant integrations are actually active.

11. Recipients and Data Processors

Personal data are shared with recipients only to the extent necessary for the purposes described, required by law, or covered by valid consent.

Possible categories of recipients include hosting and IT service providers, technical platform operators, email and communications service providers, and providers of activated analytics or additional features.

Where service providers process personal data on our behalf, we conclude the required agreements pursuant to Article 28 GDPR.

12. Transfers of Data to Third Countries

When external technical services are used, personal data may be processed outside the European Economic Area.

Any such transfer will take place only in accordance with Chapter V GDPR. Depending on the recipient country and service provider, this may require an adequacy decision by the European Commission or appropriate safeguards such as Standard Contractual Clauses.

13. Data Retention and Deletion

Personal data are generally retained only for as long as necessary for the relevant processing purpose or as required by statutory retention obligations.

Server logs, contact enquiries, user accounts, records of consent, and optional services are subject to the retention periods specified in the relevant sections. Once the applicable period has expired, personal data are deleted or, where technically and legally possible, anonymised.

Longer retention may be necessary in particular where statutory documentation duties apply or the data are needed to establish, exercise, or defend legal claims.

14. Your Rights Under the GDPR

Where we process your personal data, you have the following rights, subject to the applicable legal requirements:

  • Access: You can request information about the processing of your personal data (Article 15 GDPR).
  • Rectification: You can request correction of inaccurate data or completion of incomplete data (Article 16 GDPR).
  • Erasure: You can request deletion of your personal data under certain conditions (Article 17 GDPR).
  • Restriction: You can request restriction of processing where the statutory requirements are met (Article 18 GDPR).
  • Data portability: Under certain conditions, you can receive your data in a structured, commonly used, machine-readable format (Article 20 GDPR).
  • Objection: You can object to processing based on legitimate interests on grounds relating to your particular situation (Article 21 GDPR).
  • Withdrawal of consent: You can withdraw consent at any time with effect for the future (Article 7(3) GDPR).

To exercise your rights, please contact office@agentur-dmp.at.

15. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a competent data protection supervisory authority.

In Austria, this is in particular the Austrian Data Protection Authority (Österreichische Datenschutzbehörde).
Website: https://www.dsb.gv.at/

16. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, manipulation, and unlawful disclosure. These include measures to restrict access, secure technical systems, and encrypt data transmission using HTTPS.

Security measures are adapted in consideration of technological developments, the nature of the data processed, and the associated risks.

17. Changes to This Privacy Policy

We may update this Privacy Policy if legal requirements, technical functions, or the processing of personal data change.

The current version will be published on this website. Material changes that require renewed consent will be addressed through the relevant consent process.

18. Data Protection Contact

For questions about the processing of your personal data, cookies, or the exercise of your data protection rights, please contact:

Werbeagentur dmp – Digital Motion Picture Datenverarbeitungs GmbH
Email: office@agentur-dmp.at
Phone: +43 2236 3840 41