Privacy Policy
Protecting your personal data is important to us. Below we inform you, in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR), which data we process when you visit this website and for what purpose.
1. Controller
The controller responsible for data processing on this website is:
CreativeCinema GmbH
Gundstraße 13a, 91056 Erlangen, Germany
Represented by: Andreas Schulz
Phone: +49 174 8484842 · Email: [email protected]
2. Data Protection Officer
Andreas Schulz · [email protected]
3. Hosting
This website is hosted by an external service provider (one.com, one.com Group AB). The personal data collected when you visit the website is processed on the host's servers within the European Union. A data processing agreement pursuant to Article 28 GDPR is in place with the host. The legal basis is our legitimate interest in the secure and efficient provision of our website (Article 6(1)(f) GDPR).
Server log files
When you access the website, information that your browser transmits is automatically collected and stored in so-called server log files. This includes: browser type and version, the operating system used, the referrer URL, the host name of the accessing device, the time of the server request and the IP address. This data is not merged with other data sources. Processing is based on Article 6(1)(f) GDPR for the technically error-free presentation and security of our systems. The log files are stored only for as long as necessary for these purposes and then deleted.
4. SSL/TLS encryption
For security reasons, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in your browser's address bar. This means the data you transmit to us cannot be read by third parties.
5. Cookies & consent
On this website we use exclusively technically necessary cookies or local storage that are required to operate the site (e.g. to store your cookie choice). No consent is required for this pursuant to Section 25(2) TDDDG; the legal basis is Article 6(1)(f) GDPR.
Optional services (statistics, marketing) are used exclusively after your explicit consent via our consent banner (Article 6(1)(a) GDPR, Section 25(1) TDDDG). Until you agree, no such services are loaded and no corresponding cookies are set. Section 6 lists which services these are. Your consent is voluntary and can be withdrawn at any time with effect for the future.
6. Google Tag Manager and the services loaded through it
To manage statistics and marketing tags we use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Tag Manager itself sets no cookies and stores no personal data in your browser; it is a tool that triggers the services listed below. Loading the container does, however, transmit your IP address to Google, which is technically unavoidable when the file is requested.
Important, on timing: on this website the container is only loaded after you have consented to the statistics category in the consent banner. Consenting to the marketing / external media category alone is not enough for this. That category only covers embedded maps or videos. If you decline or make no choice, no connection to Google takes place at all. In addition we use Google consent mode v2: all consent signals default to “denied” and are only set to “granted” by your choice.
The legal basis for loading the container and the services it triggers is your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG.
Through the container we load the following services, where activated there:
- Google Analytics 4 (Google Ireland Limited) for reach measurement. This sets cookies and processes usage data (including a truncated IP address, pages visited, time on page, approximate location, device and browser data). Category: statistics. Google processes this data for us as a processor; retention follows the periods configured in Google Analytics.
Transfers to third countries: with these services data may also be processed in the USA. Google LLC is certified under the EU-US Data Privacy Framework, and standard contractual clauses under Article 46 GDPR are in place in addition. Even so, a level of data protection equivalent to the European one cannot be guaranteed in third countries in every case, of which we inform you expressly as part of your consent under Article 49(1)(a) GDPR.
Withdrawal: you can withdraw your consent at any time via the cookie settings. After withdrawal no further data is transmitted to the services named; please reload the page afterwards so that scripts already loaded are removed completely. Cookies already set can be deleted in your browser settings. For Google Analytics there is also a browser add-on to opt out: tools.google.com/dlpage/gaoptout.
Further information from the providers: Google privacy policy.
7. Fonts (self-hosted)
For a consistent appearance we use the fonts “Poppins” and “Source Sans 3”. These are served locally from our own server. There is no connection to Google servers and no IP address is transmitted to third parties.
8. Contact form & contact by email
If you contact us via the contact form or by email, we process the data you provide (e.g. name, email address, phone number where applicable, subject/preferred date and the content of your message) in order to handle your enquiry. Mandatory fields are marked as such; all other information is voluntary.
The legal basis is Article 6(1)(b) GDPR where your enquiry relates to the initiation or performance of a contract; otherwise Article 6(1)(f) GDPR (our legitimate interest in answering enquiries) or Article 6(1)(a) GDPR where you have given consent. The message is transmitted as an email to our mailbox [email protected] (via the email service of our host one.com).
To protect against automated misuse (spam) we use technical measures that work without external services and without tracking (a hidden honeypot field and a timing check on submission). No additional personal data is passed on to third parties in the process.
We store your enquiry until it has been fully processed and there is no further reason to retain it. Statutory retention obligations (e.g. under commercial and tax law) remain unaffected.
9. Your rights
You have the following rights with regard to your personal data:
- Right of access (Article 15 GDPR)
- Right to rectification (Article 16 GDPR)
- Right to erasure (Article 17 GDPR)
- Right to restriction of processing (Article 18 GDPR)
- Right to data portability (Article 20 GDPR)
- Right to object to processing (Article 21 GDPR)
- Right to withdraw consent with effect for the future (Article 7(3) GDPR)
To exercise your rights, an informal message to the contact details above is sufficient.
10. Right to lodge a complaint with a supervisory authority
Without prejudice to other remedies, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
11. Objection to advertising emails
We hereby object to the use of contact data published within the scope of the legal-notice obligation for sending unsolicited advertising and information material. The operators of the site expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, e.g. through spam emails.
12. Currency of this policy
This privacy policy is currently valid. Due to the further development of our website or changes in legal or regulatory requirements, it may become necessary to amend this policy.