Privacy Policy
Protecting your personal data is important to us. Below we inform you, in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR), which data we process when you visit this website and for what purpose.
1. Controller
The controller responsible for data processing on this website is:
CreativeCinema GmbH
Gundstraße 13a, 91056 Erlangen, Germany
Represented by: Andreas Schulz
Phone: +49 174 8484842 · Email: [email protected]
2. Data Protection Officer
Andreas Schulz · [email protected]
3. Hosting
This website is hosted by an external service provider (one.com, one.com Group AB). The personal data collected when you visit the website is processed on the host's servers within the European Union. A data processing agreement pursuant to Article 28 GDPR is in place with the host. The legal basis is our legitimate interest in the secure and efficient provision of our website (Article 6(1)(f) GDPR).
Server log files
When you access the website, information that your browser transmits is automatically collected and stored in so-called server log files. This includes: browser type and version, the operating system used, the referrer URL, the host name of the accessing device, the time of the server request and the IP address. This data is not merged with other data sources. Processing is based on Article 6(1)(f) GDPR for the technically error-free presentation and security of our systems. The log files are stored only for as long as necessary for these purposes and then deleted.
4. SSL/TLS encryption
For security reasons, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in your browser's address bar. This means the data you transmit to us cannot be read by third parties.
5. Cookies & consent
On this website we use exclusively technically necessary cookies or local storage that are required to operate the site (e.g. to store your cookie choice). No consent is required for this pursuant to Section 25(2) TDDDG; the legal basis is Article 6(1)(f) GDPR.
We do not currently use any tracking, analysis of your usage behaviour or marketing cookies. Should optional services (e.g. reach measurement) be used in the future, this will only happen after your explicit consent via our consent banner (Article 6(1)(a) GDPR, Section 25(1) TDDDG). Your consent is voluntary and can be withdrawn at any time with effect for the future.
6. Fonts (self-hosted)
For a consistent appearance we use the fonts “Poppins” and “Source Sans 3”. These are served locally from our own server. There is no connection to Google servers and no IP address is transmitted to third parties.
7. Contact form & contact by email
If you contact us via the contact form or by email, we process the data you provide (e.g. name, email address, phone number where applicable, subject/preferred date and the content of your message) in order to handle your enquiry. Mandatory fields are marked as such; all other information is voluntary.
The legal basis is Article 6(1)(b) GDPR where your enquiry relates to the initiation or performance of a contract; otherwise Article 6(1)(f) GDPR (our legitimate interest in answering enquiries) or Article 6(1)(a) GDPR where you have given consent. The message is transmitted as an email to our mailbox [email protected] (via the email service of our host one.com).
To protect against automated misuse (spam) we use technical measures that work without external services and without tracking (a hidden honeypot field and a timing check on submission). No additional personal data is passed on to third parties in the process.
We store your enquiry until it has been fully processed and there is no further reason to retain it. Statutory retention obligations (e.g. under commercial and tax law) remain unaffected.
8. Your rights
You have the following rights with regard to your personal data:
- Right of access (Article 15 GDPR)
- Right to rectification (Article 16 GDPR)
- Right to erasure (Article 17 GDPR)
- Right to restriction of processing (Article 18 GDPR)
- Right to data portability (Article 20 GDPR)
- Right to object to processing (Article 21 GDPR)
- Right to withdraw consent with effect for the future (Article 7(3) GDPR)
To exercise your rights, an informal message to the contact details above is sufficient.
9. Right to lodge a complaint with a supervisory authority
Without prejudice to other remedies, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
10. Objection to advertising emails
We hereby object to the use of contact data published within the scope of the legal-notice obligation for sending unsolicited advertising and information material. The operators of the site expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, e.g. through spam emails.
11. Currency of this policy
This privacy policy is currently valid. Due to the further development of our website or changes in legal or regulatory requirements, it may become necessary to amend this policy.