Privacy Policy

Legally binding version: German ("Datenschutzerklärung").

1. Data protection at a glance

General information

The following information provides an overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

Responsible party

The party responsible for data processing on this website is:

Film & Photo
Susanne Panhans Production
Äußere-Brucker-Straße 90
91052 Erlangen, Germany

Phone: +49 (0)174 32 91 442
Email: kontakt@film-photo.com

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

2. General information on data processing

Legal basis

We process personal data only when there is a legal basis for doing so.

Depending on the processing, the following legal bases apply in particular:

Storage period

Unless a more specific storage period is stated in this privacy policy, we only store personal data for as long as necessary to achieve the respective processing purpose.

If you revoke consent or object to processing, we delete the affected data unless legal retention periods or other legal grounds prevent deletion.

Recipients of personal data

As part of our business activities, we work with external service providers. Personal data is transferred only when necessary for contract fulfilment, required by law, covered by a legitimate interest, or based on consent.

Where service providers process personal data on our behalf, we have concluded a data processing agreement with them in accordance with Art. 28 GDPR.

Withdrawal of your consent

Consent already given may be withdrawn at any time with future effect. The lawfulness of processing carried out up to the withdrawal remains unaffected.

3. Hosting

This website is hosted by the following provider:

IONOS SE
Elgendorfer Straße 57
56410 Montabaur, Germany
www.ionos.de

When you visit the website, the hosting provider processes data that is technically required to provide and secure the website. This may include in particular:

Processing is based on Art. 6 (1)(f) GDPR. Our legitimate interest lies in the secure, stable and error-free provision of our website.

Server log data is generally deleted after eight weeks, unless longer storage is required for security reasons.

We have concluded a data processing agreement with the hosting provider.

4. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. This prevents data you transmit to us from being read by third parties without authorisation.

You can recognise an encrypted connection by the "https://" in your browser's address bar and the lock icon.

5. Cookies and similar technologies

Our website may use cookies and similar technologies. Cookies are small data files stored on your device that contain certain information.

Technically necessary cookies are used based on § 25 (2) No. 2 TDDDG. Any resulting processing of personal data is based on Art. 6 (1)(f) GDPR. Our legitimate interest lies in the technically error-free and user-friendly provision of the website.

Non-essential cookies and similar technologies are only used with your consent under § 25 (1) TDDDG. Any associated processing of personal data is based on Art. 6 (1)(a) GDPR.

Consent given can be withdrawn at any time with future effect via this website's cookie settings.

You can also set your browser to notify you when cookies are set, to allow cookies only on a case-by-case basis, or to reject cookies entirely. Disabling technically necessary cookies may limit the website's functionality.

6. Multilingualism

This website may provide content in multiple languages. Language selection is controlled technically via a URL parameter; no cookie is set to store the language choice.

7. Contacting us

Contact by email or phone

If you contact us by email or phone, we process your request, including any personal data resulting from it, in order to handle your enquiry.

This may include in particular the following data:

If your enquiry relates to a contract or pre-contractual measures, processing is based on Art. 6 (1)(b) GDPR.

For other enquiries, processing is based on Art. 6 (1)(f) GDPR. Our legitimate interest lies in appropriately handling enquiries addressed to us.

Data is deleted once your enquiry has been fully processed and no statutory retention obligations or other legal grounds prevent deletion.

8. External links

Our website may contain links to third-party websites. When you follow such a link, you leave our website.

The respective operator is responsible for the processing of personal data on linked pages. That provider's privacy policy applies.

9. YouTube videos

Individual pages may embed videos from YouTube, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Videos are not loaded automatically. Only when you actively click "Load video" is a connection established to YouTube's servers and the video embedded. No data is transmitted to YouTube before that click.

After clicking, YouTube may process your IP address, browser information and possibly cookies, even if you do not have a YouTube account. We have no influence on the type and scope of this processing by YouTube.

Processing is based on your consent under Art. 6 (1)(a) GDPR / § 25 (1) TDDDG, given by clicking "Load video". Your decision is stored locally in your browser (localStorage) so you don't have to consent again for every video. You can reset this at any time by clearing your browser data.

More information: Google/YouTube privacy policy.

10. No automated decision-making

Automated decision-making, including profiling, in accordance with Art. 22 GDPR does not take place.

11. Your rights

Under applicable law, you have in particular the following rights:

Right of access

Under Art. 15 GDPR, you have the right to obtain information about the personal data we process about you.

Right to rectification

Under Art. 16 GDPR, you have the right to request the correction of inaccurate or the completion of incomplete personal data.

Right to erasure

Under Art. 17 GDPR, you have the right, under the statutory conditions, to request the deletion of your personal data.

Right to restriction of processing

Under Art. 18 GDPR, you have the right, under the statutory conditions, to request the restriction of the processing of your personal data.

Right to data portability

Under Art. 20 GDPR, you have the right to receive data that we process automatically based on your consent or for contract fulfilment in a common, machine-readable format, or to have it transferred to another controller.

Right to object

If we process personal data based on Art. 6 (1)(e) or (f) GDPR, you have the right under Art. 21 GDPR to object at any time to the processing for reasons arising from your particular situation.

If personal data is processed for direct marketing purposes, you may object to such processing at any time.

Withdrawal of consent

Consent given may be withdrawn at any time with future effect in accordance with Art. 7 (3) GDPR.

Right to lodge a complaint with a supervisory authority

Under Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work, or the place of the alleged infringement.

For non-public companies based in Bavaria, the following supervisory authority is generally responsible:

Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
Germany

Phone: +49 981 180093-0
Email: poststelle@lda.bayern.de
Website: www.lda.bayern.de

12. Updates to this privacy policy

We reserve the right to adapt this privacy policy if the services we use, legal requirements, or the processing of personal data change.

Last updated: September 2026