Chapter 404: DPIA Statement

Core Idea

:::info Transparency statement Although published in the Remotion documentation, this assessment concerns the Remotion Pro licensing platform and its licensing telemetry.

Key Concepts

• 1. Summary of findings {#Summary}
• 2. Scope of this assessment {#Scope}
• 3. What the platform processes {#What-Telemetry-Collects}
• 4. High-risk assessment against regulatory criteria {#Risk-Assessment}
• 5. Swiss nFADP considerations {#Swiss-FADP}
• 6. Data flows and the dual role of payment processors {#Data-Flows}
• The dual role of payment processors
• 7. Mitigations and privacy-by-design measures {#Mitigations}

Reference Tables

Criterion	What it covers	Remotion's processing	Met?
Evaluation or scoring	Profiling, performance tracking, or scoring of individuals.	Telemetry only tallies render counts to determine the applicable pricing tier. No profiling or scoring of individuals.	No
Automated decisions with legal or significant effects	Automated decisions that deny a person a contract, employment, or a service.	Telemetry is non-blocking; a failed or missing license check never stops a render.	No
Systematic monitoring	Tracking behaviour, location, or activity over time, including across sites.	Data is captured only at the moment of a single render event, not across sites or over time.	No
Sensitive or special category data	Health, biometric, genetic, political, or criminal-record data.	Only standard business identifiers and basic network metadata are processed.	No
Large-scale processing	High volumes of data subjects, records, or extensive retention.	Each telemetry event is a small set of metadata attributes, not a behavioural data lake.	No
Matching or combining datasets	Merging datasets to profile people in unexpected ways.	Telemetry is not cross-referenced or combined with external marketing or profiling datasets.	No
Vulnerable data subjects	Children, employees, patients, or others in a power imbalance.	The platform is a business-to-business developer tool; it does not target children or vulnerable groups.	No
Innovative use of new technology	Novel technologies such as facial recognition or AI behavioural analysis.	License verification uses standard, well-established request logging.	No
Preventing the exercise of a right or use of a service	Processing that blocks access to a contract, service, or right.	Standard commercial licensing; it does not restrict access to alternatives or to legal rights.	No

Key Takeaways

1. Understand 1. summary of findings {#summary} when working with DPIA Statement.
2. Understand 2. scope of this assessment {#scope} when working with DPIA Statement.
3. Understand 3. what the platform processes {#what-telemetry-collects} when working with DPIA Statement.
4. Understand 4. high-risk assessment against regulatory criteria {#risk-assessment} when working with DPIA Statement.
5. Understand 5. swiss nfadp considerations {#swiss-fadp} when working with DPIA Statement.

Connects To

• Accessibility: related page in the Legal, Meta & Support section.
• dev: related page in the Legal, Meta & Support section.
• pro: related page in the Legal, Meta & Support section.