CONTACT
CONTACT

Privacy Policy

1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data means any information relating to an identified or identifiable natural person.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Matthias Steinmetz, LESCLUSIVA PRODUCTIONS, Pirmasenser Straße 6, 66957 Vinningen, Germany, Tel.: +49 (0) 6335 / 2970331, Email: info@lesclusiva.de.

The controller of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 In the case of merely informative use of our website, meaning if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our visited website

  • Date and time at the moment of access

  • Volume of data transmitted in bytes

  • Source/referral from which you accessed the site

  • Browser used

  • Operating system used

  • IP address used (if applicable, in anonymised form)


Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively should concrete indications point to unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can identify an encrypted connection by the string https:// and the padlock icon in your browser address bar.

3) Hosting & Content Delivery Network (CDN)

3.1 Hostinger

For the hosting of our website and the display of page content, we use the system of the following provider:

Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus

(operating in conjunction with its operational technical affiliate: HOSTINGER operations, UAB, Švitrigailos str. 34, 03230 Vilnius, Lithuania).

All data collected on our website is processed on the servers of the provider. We have concluded a Data Processing Agreement (DPA) with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.

Cyprus and Lithuania are Member States of the European Union; data processing is therefore governed by the standards of the GDPR. In the event that technical connection data is routed via infrastructure outside the European Economic Area, compliance with European data protection standards is safeguarded by EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

3.2 Google Cloud CDN

We use a Content Delivery Network provided by the following service provider:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Data may also be transmitted to: Google LLC, USA

This service enables us to deliver large media files such as graphics, page content, or scripts faster via a network of regionally distributed servers. Processing is carried out to preserve our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6(1)(f) GDPR. We have entered into a Data Processing Agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework.

4) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies (small text files stored on your terminal device). Some cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device longer and allow settings to be stored (so-called "persistent cookies"). You can view the storage period in the cookie settings of your web browser.

Insofar as personal data is also processed by individual cookies implemented by us, processing is carried out either:

  • Pursuant to Art. 6(1)(b) GDPR for the performance of the contract,

  • Pursuant to Art. 6(1)(a) GDPR (or Section 25(1) TDDDG) where consent has been granted, or

  • Pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in the optimal functionality of the website as well as a customer-friendly and effective design of the site visit.

You can set your browser so that you are informed about the placement of cookies and decide individually on their acceptance, or exclude the acceptance of cookies for certain cases or in general. Please note that if cookies are not accepted, the functionality of our website may be restricted.

5) Contacting Us

5.1 Live Chat System

If you contact us via an integrated live chat service provided via our hosting infrastructure or integrated tools, personal data transmitted via the chat is processed pursuant to Art. 6(1)(b) GDPR (insofar as necessary for pre-contractual measures or contract performance) or pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in effective customer support. The data will be deleted as soon as the matter has been conclusively resolved and no statutory retention obligations conflict.

Any pseudonymised usage profiles created for statistical analysis are based on Art. 6(1)(f) GDPR. You can object to the collection and storage for the purpose of creating pseudonymised profiles at any time with future effect. A Data Processing Agreement has been concluded with our service providers.

5.2 WhatsApp Business

We offer visitors to our website the possibility of contacting us via the messaging service WhatsApp of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We use the "Business version" for this purpose.

  • For business-related inquiries: Storage and use of mobile phone number, first name, and surname pursuant to Art. 6(1)(b) GDPR to process the transaction.

  • For general inquiries: Processing based on Art. 6(1)(f) GDPR on the basis of our legitimate interest in providing a prompt response.

Note on address book access: WhatsApp Business accesses the address book of the terminal device used and transmits numbers to servers of the parent company Meta Platforms Inc. in the USA. We use a device whose address book exclusively stores contact data of persons who have previously contacted us via WhatsApp (consent pursuant to Art. 6(1)(a) GDPR granted upon initial installation of WhatsApp).

Privacy policy of WhatsApp: https://www.whatsapp.com/legal/?eea=1#privacy-policy. Certification under the EU-US Data Privacy Framework is present.

5.3 Dedicated Form for Price Proposals

If you submit price proposals via an electronic form, we collect and process your data (e.g., name, email address, price proposal) pursuant to Art. 6(1)(b) GDPR for reviewing, responding to, or submitting a counter-offer in preparation for concluding a contract. After final processing, this data will be deleted, provided that no statutory retention periods conflict.

5.4 General Contact (Contact Form / Email)

When contacting us, personal data is collected. The data collected via a contact form is apparent from the respective form itself. This data is stored and used exclusively for the purpose of responding to your inquiry or for contacting you and the associated technical administration.

The legal basis is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR if your inquiry is aimed at concluding a contract. The data will be deleted after final processing.

6) Data Processing When Opening a Customer Account and for Contract Execution

Pursuant to Art. 6(1)(b) GDPR, personal data is collected and processed when you provide it to us when opening a customer account. The required data can be seen from the input mask of the respective form. Deletion of your customer account is possible at any time (message to the controller). Following deletion, your data will be deleted, provided that contracts have been fully processed and no statutory retention periods or legitimate interests in further storage conflict.

7) Use of Customer Data for Direct Marketing

7.1 Email Newsletter (Double Opt-In)

If you subscribe to our email newsletter, we will send you regular information about our offers. The only mandatory information is your email address; further details are voluntary.

We use the so-called double opt-in procedure. The legal basis for processing after activating the confirmation link is Art. 6(1)(a) GDPR. When registering, we store the IP address as well as the date and time of registration to detect potential misuse. You can unsubscribe from the newsletter at any time via the unsubscribe link in the newsletter or by messaging us.

7.2 Rapidmail

Dispatch is carried out via: rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg, Germany.

The legal basis for disclosure is Art. 6(1)(f) GDPR (efficient email marketing).

Performance measurement / tracking: Insofar as you have consented (Art. 6(1)(a) GDPR), statistical analysis is carried out via web beacons/tracking pixels (open rates, clicks, device information). You may revoke this consent at any time with future effect. A Data Processing Agreement with rapidmail is in place.

7.3 Direct Mail Advertising (Post)

On the basis of our legitimate interest in personalised direct mail advertising (Art. 6(1)(f) GDPR), we reserve the right to store and use your first and last name, postal address, and, if applicable, your professional or industry title for postal offers. You can object to this storage and use at any time by contacting the controller.

8) Data Processing for Order and Contract Execution

8.1 Disclosure to Transport and Financial Service Providers

Insofar as necessary for contract performance (delivery/payment), data will be forwarded to transport and credit institutions pursuant to Art. 6(1)(b) GDPR.

Statutory update obligation for digital products: If we owe you updates for digital products, we process your contact details for statutory notification pursuant to Art. 6(1)(c) GDPR.

8.2 Protection of Minors and Age Verification

When ordering goods subject to age restrictions, we use an age verification procedure to ensure that the required minimum age is met. The legal basis for passing on data to the verification service provider is Art. 6(1)(f) GDPR for compliance with youth protection regulations.

8.3 Shipping Service Providers

  • Deutsche Post AG / DHL Paket (Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany): Forwarding of email/phone number for delivery notifications only upon express consent (Art. 6(1)(a) GDPR); otherwise, recipient data is provided solely for delivery (Art. 6(1)(b) GDPR).

  • DHL Express Germany GmbH (Heinrich-Brüning-Str. 5, 53113 Bonn, Germany): Same handling as above (Art. 6(1)(a) or (b) GDPR).

8.4 Payment Service Providers

  • Apple Pay (Apple Distribution International, Hollyhill, Cork, Ireland): Encrypted processing via the end device (Art. 6(1)(b) GDPR).

  • giropay (paydirekt GmbH, Stephanstr. 14–16, 60313 Frankfurt am Main, Germany): Transmission of payment data for payment execution (Art. 6(1)(b) GDPR).

  • Klarna (Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden): In the case of prepayment/purchase on account, data is transmitted for credit checks based on legitimate interests (Art. 6(1)(f) GDPR; mathematical-statistical score values).

  • Mollie (Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands): Payment execution pursuant to Art. 6(1)(b) GDPR.

  • PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg): Payment execution pursuant to Art. 6(1)(b) GDPR or credit assessment pursuant to Art. 6(1)(f) GDPR.

  • SOFORT (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany): Payment processing pursuant to Art. 6(1)(b) GDPR.

  • Direct Merchant Payment Gateway: For direct credit card processing on our website, payment data is processed directly via licensed payment processing partners in accordance with Art. 6(1)(b) GDPR.

9) Web Analytics Services

9.1 Hotjar

Provider: Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta.

Hotjar collects pseudonymised data (movement patterns, clicks, scroll depth, heatmaps, IP address, device specifications) to analyse user behaviour.

The legal basis for setting cookies and reading the terminal device is your explicit consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. Revocation is possible at any time via the cookie consent tool. A Data Processing Agreement is in place.

9.2 Polyfill

Provider: The Financial Times Ltd, Bracken House, 1 Friday Street, London, EC4M 9BT, United Kingdom.

Serves to ensure the error-free presentation of web standards on older browsers. Technical data (IP address, browser details) is transmitted in anonymised form. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in optimal presentation). The UK has an adequacy decision issued by the EU Commission.

10) Retargeting, Remarketing & Conversion Tracking

Facebook Pixel with Advanced Matching

Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Subject to consent, user behaviour is tracked via URL parameters and cookies, and data (e.g., hashed email addresses during transactions) is transmitted to Meta to deliver targeted advertisements ("Facebook Ads") and measure conversions.

The legal basis is your explicit consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

Note: Transmission to Meta Platforms Inc. in the USA is possible (certified under the EU-US Data Privacy Framework). You can revoke your consent at any time via the cookie consent tool.

11) Site Features & Media Embeds

11.1 YouTube Videos

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (transfer to Google LLC, USA possible).

When accessing or playing embedded videos, data (including IP address) is transmitted and cookies are set. Legal basis: Consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG (revocable via the cookie consent tool). Certification under the EU-US Data Privacy Framework is present.

11.2 Spotify

Provider: Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden.

Functions for music playback are integrated for the acoustic design of our website. A connection to the Spotify servers is established (transmission of the IP address). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in appealing audiovisual design).

11.3 Google reCAPTCHA

Provider: Google Ireland Limited, Dublin, Ireland.

Serves to distinguish whether inputs are made by a human or fraudulently by automated bots (spam and DDoS protection). For this purpose, IP address, dwell time, mouse movements, etc. are transmitted to Google. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protection against manipulation and misuse). A Data Processing Agreement is in place; certified under the EU-US Data Privacy Framework.

12) Cookie Consent Management

Our website uses a "Cookie Consent Tool" to obtain effective consent for cookies and tracking technologies requiring consent. The tool sets a technically necessary cookie to save your preferences.

The legal basis for this is Art. 6(1)(c) GDPR (compliance with the legal obligation to obtain and document consent) and Art. 6(1)(f) GDPR.

13) Rights of the Data Subject

13.1 Applicable data protection legislation grants you the following rights regarding the processing of your personal data by the controller:

  • Right of access (Art. 15 GDPR): Right to obtain information about your personal data processed by us.

  • Right to rectification (Art. 16 GDPR): Right to immediate rectification of inaccurate data or completion of incomplete data.

  • Right to erasure (Art. 17 GDPR): Right to erasure of your data stored by us ("right to be forgotten").

  • Right to restriction of processing (Art. 18 GDPR): Right to request restriction of the processing of your data.

  • Right to notification (Art. 19 GDPR): Right to notification of rectifications, erasures, or restrictions to all recipients.

  • Right to data portability (Art. 20 GDPR): Right to receive data in a structured, commonly used, and machine-readable format.

  • Right to withdraw consent (Art. 7(3) GDPR): You may revoke consent once granted at any time with effect for the future.

  • Right to lodge a complaint (Art. 77 GDPR): Right to lodge a complaint with a competent supervisory authority.

13.2 RIGHT TO OBJECT (Art. 21 GDPR)

WHERE WE PROCESS YOUR PERSONAL DATA WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST (ART. 6(1)(f) GDPR), YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH FUTURE EFFECT ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. IF YOU OBJECT TO PROCESSING FOR DIRECT MARKETING PURPOSES, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA FOR THESE PURPOSES.

14) Duration of Personal Data Storage

The duration of the storage of personal data is determined based on the respective legal basis, the purpose of processing, and—where applicable—the respective statutory retention period (e.g., retention periods under commercial and tax law under HGB and AO).

  • For processing based on consent (Art. 6(1)(a) GDPR), data is stored until revocation.

  • For data processed within contractual or pre-contractual obligations (Art. 6(1)(b) GDPR), data is routinely deleted after expiry of statutory retention periods, provided it is no longer required for contract fulfillment or initiation.

  • For processing based on legitimate interests (Art. 6(1)(f) GDPR), data is stored until you exercise your right to object under Art. 21(1) GDPR, unless we demonstrate compelling legitimate grounds.

  • For direct marketing under Art. 6(1)(f) GDPR, data is deleted after exercising your objection under Art. 21(2) GDPR.

Unless stated otherwise in this policy, stored personal data is deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Privacy Information for Instagram

1) Information on Data Collection and Contact Details of the Controller

1.1 In the following, we inform you about the handling of your personal data when using our Instagram presence. Personal data means any information relating to an identified or identifiable natural person.

Please carefully check which personal data you share with us via Instagram. Instagram is part of the Meta corporate group and shares infrastructure, systems, and technologies with Meta and other Meta entities (https://www.facebook.com/help/111814505650678?ref=dp). We expressly point out that Meta stores the data of its users (e.g., personal information, IP address, etc.) and may also use it for commercial purposes. For more information regarding data processing by Meta in relation to Instagram, please refer to Instagram's privacy policy at: https://help.instagram.com/519522125107875?helpref=page_content.

We have no influence on data collection and further processing by Meta. Furthermore, it is not discernible to us to what extent, at which location, and for what duration the data is stored, to what extent Meta complies with deletion obligations, which evaluations and linkings are made with the data, and to whom the data is passed on. If you wish to prevent Meta from processing personal data transmitted by you to us, please contact us by alternative means. Our full contact details can be found in our imprint on Instagram.

1.2 The controller responsible for data processing within the meaning of the GDPR is:

Matthias Steinmetz, Lesclusiva Productions, Pirmasenser Straße 6, 66957 Vinningen, Germany, Tel.: +49 (0) 6335 / 2970331, Email: info@lesclusiva.de,

insofar as we exclusively process the data transmitted by you via Meta ourselves.

Insofar as data transmitted by you via Meta is also or exclusively processed by Meta, Meta (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) is a joint controller with us for the processing of personal data within the meaning of the GDPR.

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Protection Officer

You can reach Meta's Data Protection Officer via the online contact form provided by Meta:

https://www.facebook.com/help/contact/540977946302970

3) Data Collection When Contacting Us

We collect personal data when you contact us, e.g., via contact form or Direct Message / Messenger. The specific data collected in the case of a form is apparent from the respective form. This data is stored and used exclusively for the purpose of responding to your inquiry or for contacting you and the associated technical administration.

The legal basis for processing the data is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) GDPR. If your inquiry aims at concluding a contract, an additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted after final processing of your inquiry, provided that no statutory retention obligations conflict; this is the case if it can be inferred from the circumstances that the matter has been conclusively resolved.

4) Processing Personal Data for Contract Execution

4.1 We pass your payment details on to the commissioned credit institution if this is necessary for payment processing. The legal basis is Art. 6(1)(b) GDPR (or Art. 6(1)(f) GDPR).

4.2 In the case of contracts for the delivery of goods, we pass the personal data collected by us on to the transport company commissioned with the delivery within the scope of contract execution, insofar as this is necessary for the delivery of the goods.

If we owe you updates for goods with digital elements or for digital products on the basis of a contract, we process the contact details provided during the order (name, address, email address) to inform you personally about upcoming updates within the statutory period via suitable means of communication (e.g., by post or email) pursuant to our statutory information obligation under Art. 6(1)(c) GDPR. Your contact details will be used strictly for this purpose and only to the extent necessary.

5) Use of Your Data for Direct Marketing

Postal Advertising

On the basis of our legitimate interest in personalised direct advertising, we reserve the right to store your first and last name, postal address, and—insofar as we have received these additional details from you within the scope of the contractual relationship—your title, academic degree, year of birth, and your professional, industry, or business title pursuant to Art. 6(1)(f) GDPR and use them for sending interesting offers and information about our products by letter post.

You can object to the storage and use of your data for this purpose at any time by sending a message to the controller.

6) Rights of the Data Subject

6.1 Applicable data protection legislation grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller regarding the processing of your personal data:

  • Right of access pursuant to Art. 15 GDPR

  • Right to rectification pursuant to Art. 16 GDPR

  • Right to erasure ("right to be forgotten") pursuant to Art. 17 GDPR

  • Right to restriction of processing pursuant to Art. 18 GDPR

  • Right to notification pursuant to Art. 19 GDPR

  • Right to data portability pursuant to Art. 20 GDPR

  • Right to withdraw consent granted pursuant to Art. 7(3) GDPR

  • Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR

6.2 RIGHT TO OBJECT

WHERE WE PROCESS YOUR PERSONAL DATA WITHIN THE SCOPE OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH FUTURE EFFECT ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR THESE DIRECT MARKETING PURPOSES.

7) Duration of Personal Data Storage

The duration of personal data storage is determined based on the respective statutory retention period (e.g., retention periods under commercial and tax law). After expiry of the period, the corresponding data is routinely deleted, provided that it is no longer required for contract performance or contract initiation and/or there is no continued legitimate interest on our part in further storage.

Privacy Information for YouTube

1) Information on Data Collection and Contact Details of the Controller

1.1 In the following, we inform you about the handling of your personal data. Personal data means any information relating to an identified or identifiable natural person.

Please check carefully what personal data you share with us via YouTube. We expressly point out that YouTube stores the data of its users (e.g., personal information, IP address, etc.) and may also use it for business purposes.

We have no influence on data collection and further processing by YouTube. Furthermore, it is not discernible to us to what extent, at which location, and for what duration the data is stored, to what extent YouTube complies with statutory deletion obligations, which evaluations and linkings are made with the data, and to whom the data is passed on. If you wish to prevent YouTube from processing personal data transmitted by you to us, please contact us by alternative means. Our full contact details can be found in our imprint on YouTube.

1.2 The controller responsible for data processing within the meaning of the GDPR is:

Matthias Steinmetz, Donatella Productions, Pirmasenser Straße 6, 66957 Vinningen, Germany, Tel.: +49 (0) 6335 / 2970331, Email: info@donatella.de,

insofar as we exclusively process the data transmitted to us by you via YouTube ourselves.

Insofar as data transmitted to us by you via YouTube is also or exclusively processed by YouTube, Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland is also a controller for data processing within the meaning of the GDPR alongside us.

Further information on data processing by Google Ireland Limited can be found in the privacy policy of Google Ireland Limited at: https://policies.google.com/privacy?hl=en. This privacy policy applies to all services offered by Google Ireland Limited and its affiliates, including YouTube. When using YouTube, personal data may also be transmitted to the servers of Google LLC in the USA.

For data transfers to the USA, the provider has certified under the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision of the European Commission.

The controller of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Processing When Contacting Us

We collect personal data when you contact us, e.g., via contact form or messenger. What data we collect via a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your inquiry or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) GDPR. If your inquiry aims at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted after final processing of your inquiry, provided that no statutory retention periods conflict. We assume final processing when the circumstances indicate that the matter has been conclusively resolved.

3) Data Processing for Direct Marketing

3.1 Advertising by Email

If you subscribe to our email newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an email newsletter once you have explicitly confirmed that you consent to receiving newsletters. We will then send you a confirmation email asking you to click on a link to confirm that you wish to receive newsletters in the future.

By activating the confirmation link, you grant us your consent to the use of your personal data pursuant to Art. 6(1)(a) GDPR. When registering for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to trace potential misuse of your email address at a later date. The data collected by us when registering for the newsletter will be used exclusively for advertising purposes via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by contacting the controller named above. After unsubscribing, your email address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to further data use permitted by law, which we inform you about in this policy.

3.2 Advertising by Letter Post

On the basis of our legitimate interest in personalised direct marketing, we reserve the right to store your first and last name, your postal address, and—insofar as we have received these additional details from you within the scope of the contractual relationship—your title, academic degree, year of birth, and your professional, industry, or business title pursuant to Art. 6(1)(f) GDPR and use them for sending interesting offers and information about our products by letter post.

You can object to the storage and use of your data for this purpose at any time by sending a message to the controller.

4) Rights of the Data Subject

4.1 Applicable data protection legislation grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller regarding the processing of your personal data:

  • Right of access pursuant to Art. 15 GDPR;

  • Right to rectification pursuant to Art. 16 GDPR;

  • Right to erasure pursuant to Art. 17 GDPR;

  • Right to restriction of processing pursuant to Art. 18 GDPR;

  • Right to notification pursuant to Art. 19 GDPR;

  • Right to data portability pursuant to Art. 20 GDPR;

  • Right to withdraw consent granted pursuant to Art. 7(3) GDPR;

  • Right to lodge a complaint pursuant to Art. 77 GDPR.

4.2 RIGHT TO OBJECT

WHERE WE PROCESS YOUR PERSONAL DATA WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH FUTURE EFFECT ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

5) Duration of Personal Data Storage

The duration of the storage of personal data is determined based on the respective legal basis, the purpose of processing, and—where applicable—additionally based on the respective statutory retention period (e.g., retention periods under commercial and tax law).

  • For processing of personal data based on express consent pursuant to Art. 6(1)(a) GDPR, the data concerned is stored until you revoke your consent.

  • Where statutory retention periods exist for data processed within the scope of legal or quasi-legal obligations under Art. 6(1)(b) GDPR, this data is routinely deleted after expiry of the retention periods, provided that it is no longer required for contract fulfillment or contract initiation and/or there is no continued legitimate interest on our part in further storage.

  • For processing of personal data based on Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defence of legal claims.

  • For processing of personal data for direct marketing purposes based on Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object under Art. 21(2) GDPR.

Unless stated otherwise in this policy regarding specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

All rights reserved © 2026

LEGAL | PRIVACY | CONTACT