Skip to content
Contact

Privacy Policy

1. Data protection at a glance

The protection of your personal data is important to me. I process personal data exclusively within the framework of the applicable legal provisions, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG). This privacy policy informs you about which data is collected when you visit this website, what it is used for and what rights you have.

This website does not use any tracking or analytics services and does not set any advertising cookies. External content (YouTube videos) is only loaded after your active consent.

2. Controller

The controller within the meaning of the GDPR is:

Johann Zelkowski
filmkreativ
Birkenweg 4
74722 Buchen (Odenwald)
Germany

Email: info@filmkreativ.org

A data protection officer is not required under the applicable legal provisions.

3. Hosting

This website is hosted by an external service provider:

Webixel
Pfarrer-Schliermann-Weg 13b, 74746 Höpfingen, Germany
www.webixel.de

When you access the website, the hosting provider processes the data listed under section 4 on my behalf. The servers are located in Germany or within the European Union. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider. The use of the hosting provider is based on Art. 6 (1) (f) GDPR. My legitimate interest lies in the secure, fast and reliable provision of this website.

4. Server log files

When you access this website, information is automatically stored in so-called server log files, which your browser transmits to the server. This includes:

  • IP address (shortened or anonymised after 7 days at the latest)
  • date and time of access
  • page or file accessed
  • amount of data transferred and HTTP status code
  • referrer URL (previously visited page)
  • browser type and version, operating system

This data is not merged with other data sources. Processing is based on Art. 6 (1) (f) GDPR. My legitimate interest lies in the technically error-free presentation, stability and security of the website. Log files are deleted after 7 days at the latest, unless a security-related analysis is required.

5. Cookies and local storage

This website only uses technically necessary cookies or local storage entries. These include:

  • Session cookie of the content management system (TYPO3): only set when a function requires it (e.g. submitting the contact form) and deleted when the browser is closed.
  • Storage of your consent to load YouTube videos: stores locally in your browser that you have agreed to load external videos so that the prompt does not appear again for each video.

The legal basis is Section 25 (2) No. 2 TDDDG in conjunction with Art. 6 (1) (f) GDPR, as this storage is strictly necessary for the function you have requested. A consent banner is therefore not required. Tracking, analytics or marketing cookies are not used.

You can delete or block cookies at any time via your browser settings. This may limit the functionality of the website.

6. Contact form

If you send me an enquiry via the contact form, the following information is processed:

  • name (required)
  • email address (required)
  • telephone number (optional)
  • your message (required)
  • time of submission

The data is used exclusively to process and respond to your enquiry and for any follow-up questions. It is not passed on to third parties.

Legal basis: Processing is based on Art. 6 (1) (b) GDPR insofar as your enquiry relates to the initiation or performance of a contract. In all other cases, processing is based on your consent pursuant to Art. 6 (1) (a) GDPR, which you give by ticking the checkbox in the form, and on my legitimate interest in the effective handling of enquiries pursuant to Art. 6 (1) (f) GDPR.

You may withdraw your consent at any time by sending an informal email to info@filmkreativ.org. The lawfulness of the processing carried out up to the point of withdrawal remains unaffected.

Retention period: Your data will remain with me until you request its deletion, withdraw your consent or the purpose for storage no longer applies (e.g. once your enquiry has been dealt with). If a contract is concluded, the data is stored within the statutory retention periods (6 or 10 years under the German Commercial Code and Fiscal Code).

7. Contact by email

If you contact me by email, your details, including the contact data you provide, will be stored for the purpose of processing the enquiry and in case of follow-up questions. The legal basis and retention period correspond to the information under section 6. Please note that email transmission without end-to-end encryption may have security gaps. You should therefore not send me confidential information unprotected by email.

8. YouTube videos (two-click solution)

Reference films are embedded on this website via the YouTube platform. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

To protect your data, I use a two-click solution: when the page is loaded, only a locally stored preview image is displayed. No data is transmitted to YouTube or Google until you actively start the video. Only when you click "Play video" is a connection to YouTube's servers established and the video loaded. I use YouTube's privacy-enhanced mode (youtube-nocookie.com).

When the video is loaded, YouTube receives information that you have accessed the corresponding subpage of this website, as well as your IP address and device-related data. If you are logged in to your YouTube or Google account, Google can assign the access to your personal account. You can prevent this by logging out of your Google account before playing the video. After the video starts, YouTube may set its own cookies or use comparable technologies over which I have no control.

Legal basis: The video is loaded exclusively on the basis of your consent pursuant to Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG, which you give by clicking on the video. You can withdraw this consent at any time with effect for the future by deleting the locally stored consent in your browser.

Transfer to third countries: Google may transfer data to the USA. Google LLC is certified under the EU-US Data Privacy Framework; an adequacy decision of the EU Commission pursuant to Art. 45 GDPR therefore applies. In addition, Google uses standard contractual clauses pursuant to Art. 46 (2) (c) GDPR.

Further information on the handling of user data can be found in Google's privacy policy: https://policies.google.com/privacy?hl=en

9. Fonts and external resources

The fonts, scripts and stylesheets used on this website are delivered locally from my server. No connection is made to third-party servers (e.g. Google Fonts, Adobe Fonts, content delivery networks). Your IP address is therefore not transmitted to third parties.

10. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, such as enquiries via the contact form, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser bar. When encryption is activated, the data you transmit to me cannot be read by third parties.

11. Disclosure of data

Your personal data will not be transferred to third parties for purposes other than those stated in this policy. I only pass on your data if:

  • you have given your express consent (Art. 6 (1) (a) GDPR),
  • the disclosure is necessary for the performance of a contract with you (Art. 6 (1) (b) GDPR),
  • there is a legal obligation to disclose the data (Art. 6 (1) (c) GDPR), or
  • the disclosure is necessary for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data (Art. 6 (1) (f) GDPR).

12. Your rights as a data subject

You have the following rights with regard to the personal data concerning you:

  • Access (Art. 15 GDPR) to the data I process, its origin, recipients and the purpose of processing
  • Rectification (Art. 16 GDPR) of inaccurate or incomplete data
  • Erasure (Art. 17 GDPR), unless statutory retention obligations prevent this
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR) in a structured, commonly used and machine-readable format
  • Withdrawal of consent (Art. 7 (3) GDPR) at any time with effect for the future
  • Complaint to a data protection supervisory authority (Art. 77 GDPR)

To exercise your rights, an informal message by email to info@filmkreativ.org or by post to the address given above is sufficient.

Right to object (Art. 21 GDPR)

Where your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to the processing pursuant to Art. 21 GDPR on grounds relating to your particular situation. I will then no longer process the data unless I can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Competent supervisory authority

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
(State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg)
Lautenschlagerstraße 20
70173 Stuttgart, Germany
Phone: +49 711 61 55 41 – 0
Email: poststelle@lfdi.bwl.de
Web: www.baden-wuerttemberg.datenschutz.de

You may also contact the supervisory authority of your habitual residence or place of work.

13. Retention period and erasure

Unless a more specific retention period has been stated in this privacy policy, your personal data will remain with me until the purpose for processing no longer applies. If you make a legitimate request for erasure or withdraw your consent to data processing, your data will be deleted unless there are other legally permissible reasons for storing it (e.g. retention periods under tax or commercial law). In the latter case, the data will be deleted once these reasons no longer apply.

14. No automated decision-making

Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place on this website.

15. Validity and amendment of this privacy policy

This privacy policy is currently valid and was last updated in October 2026. Further development of this website or changes to legal or regulatory requirements may make it necessary to amend this privacy policy. The current version can be accessed at any time at https://filmkreativ.org/en/privacy.

16. Note on this translation

This English version is provided for information purposes only. In the event of any discrepancies, the German version at https://filmkreativ.org/datenschutz shall prevail.