1. Controller

The controller for the processing of personal data on this website within the meaning of the General Data Protection Regulation is:

Jascha Schulze, Gerart-von-Bure-Straße 47, 50170 Kerpen, Germany

E-mail: info@filmtonschulze.com · Phone: +49 160 7341855

No data protection officer has been appointed; the statutory conditions for this are not met.

2. Principles of this website

This website is set up so that it works without embedding any third-party services. When the page is opened, no content is loaded from third-party servers: fonts, images, the three-dimensional model on the home page and all program components are delivered exclusively from our own server. No advertising or recognition services, no social networks, no map services, no spam protection service and no content delivery network are used. No cookies are set for analytics or advertising purposes, and no transfer takes place to countries outside the European Union.

3. Visiting the website and server log files

When you visit the website, your browser transmits technically necessary information to our server. This is stored in log files:

• IP address of the requesting device
• Date and time of access
• Name and address of the retrieved file and the volume of data transferred
• Message about whether the retrieval succeeded
• Browser used, its version and the operating system
• Previously visited page, insofar as your browser transmits it

Purpose: delivery of the website, safeguarding operational security and investigating faults and misuse.

Legal basis: Article 6(1)(f) GDPR. Our legitimate interest lies in the technically fault-free and secure operation of the website.

Storage period: 7 days; the log files are then deleted automatically. This data is not combined with any other data sources.

4. Hosting

The website is operated on a server belonging to IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. The server is located in Germany. IONOS processes the data arising in the course of operation exclusively on our behalf and according to our instructions; a data processing agreement pursuant to Article 28 GDPR is in place.

The log files are held on the server we administer ourselves. A web server is placed in front of the application on that same server; it handles the encryption of the connection and distributes the requests. No external content delivery network and no upstream third-party service is used.

Legal basis: Article 6(1)(f) GDPR.

5. Audience measurement

In order to understand which content on this website is used, we employ the Umami software. We run it ourselves on the same server; no data is transmitted to the manufacturer or to any other third party.

What is processed

• Pages opened, with the date and time of access
• Referring page, insofar as your browser transmits it
• Browser, operating system, device type and screen resolution
• Country and region of origin, derived from the IP address using a locally held database
• A session identifier calculated from the IP address, the browser identifier and a regularly changing additional value

Your IP address is used to form the session identifier but is not stored. We are unable to link it to you personally, and it is not combined with any other data.

What does not happen

The audience measurement sets no cookies and sends none. It stores nothing in your browser's local storage. The session identifier is held solely in the memory of the open page and is discarded when the browser tab is closed.

A single value is read: the entry umami.disabled. This entry exists only if you have created it yourself in your browser, and it serves exclusively to respect your wish not to be measured. No access to information on your device takes place beyond this.

Legal basis: Article 6(1)(f) GDPR. Our legitimate interest lies in being able to understand the use of the website in a data-minimising way and to improve its content.

Storage period: 6 months. The individual events are then deleted automatically.

Objection. You may object to the audience measurement at any time. The simplest way is to activate the "Do Not Track" setting in your browser or to set the entry umami.disabled mentioned above to the value "true" in your browser's local storage. You may also notify us of your objection informally at the e-mail address given above. You will suffer no disadvantage as a result.

6. Contact form and getting in touch

You can send us a message via the contact form. Your e-mail address and your message are mandatory; giving your name is optional. We also process any further information you enter in the message field — please tell us only what is necessary for your enquiry there.

Your details are stored in this website's database on our own server and are additionally sent to us by e-mail. This notification is sent via the e-mail service of IONOS SE, with which a data processing agreement is in place.

Purpose: handling and answering your enquiry.

Legal basis: Article 6(1)(b) GDPR insofar as your enquiry is aimed at concluding or performing a contract, otherwise Article 6(1)(f) GDPR — our legitimate interest in answering enquiries.

Storage period: the record in this website's database is deleted automatically 3 months after receipt. We delete the e-mail correspondence as soon as your enquiry has been conclusively dealt with and no statutory retention obligations stand in the way.

The form is checked on our server before the message is accepted. No third-party spam protection service or security challenge is used; no data is transmitted to third parties for that purpose.

7. Storage periods at a glance

• Server log files: 7 days, on our own server
• Audience measurement (individual events): 6 months, on our own server
• Contact form (record in the system): 3 months, on our own server
• Contact form (e-mail correspondence): until the matter is settled, at most 6 months, in the e-mail account at IONOS

8. Recipients

As a matter of principle we do not pass your data on to third parties. The only recipient within the meaning of the General Data Protection Regulation is:

• IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany — as processor for the operation of the server and for sending the notification e-mails.

Beyond this we only pass data on where we are legally obliged to do so or where you have consented.

9. Transfer to third countries

No personal data is transferred to countries outside the European Union or the European Economic Area. All processing takes place on a server in Germany.

10. Automated decision-making

Automated decision-making, including profiling, within the meaning of Article 22 GDPR does not take place.

11. Data security

Transmission between your browser and our server is encrypted throughout (TLS). Access to the administration of the website is protected by credentials and additionally secured. We take technical and organisational measures pursuant to Article 32 GDPR to protect your data against loss, alteration and unauthorised access, and we adapt these continuously to the state of the art.

12. Your rights

You have the following rights vis-à-vis the controller:

• Access (Article 15 GDPR) to whether and which data we process about you
• Rectification (Article 16 GDPR) of incorrect or incomplete data
• Erasure (Article 17 GDPR), insofar as no retention obligations stand in the way
• Restriction of processing (Article 18 GDPR)
• Data portability (Article 20 GDPR)
• Objection (Article 21 GDPR) to processing based on a legitimate interest

An informal message to the e-mail address given above is sufficient to exercise them.

Right to object under Article 21 GDPR. Insofar as we process data on the basis of a legitimate interest — this concerns the log files and the audience measurement — you have the right to object at any time on grounds relating to your particular situation. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests.

13. Right to lodge a complaint

Without prejudice to any other legal remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular with the authority of your place of residence or with the one responsible for us. The authority responsible for us is:

North Rhine-Westphalia State Commissioner for Data Protection and Freedom of Information, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany

14. Language versions and status

This privacy policy is provided in German, English and Spanish. The German version is the authoritative one.

Status: 4 September 2026. We will amend this policy as soon as the processing or the legal situation changes.