Privacy

Who is responsible

Koren Pollak Carmon, FilmLabor, business and postal address: Platanenweg 9, 63263 Neu-Isenburg, Germany, phone +49 176 87846680, koren@film-labor.de

Hosting

This website runs on our own server at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. To deliver the site, the server processes technically necessary data such as your IP address. The legal basis is Art. 6(1)(f) GDPR, and our legitimate interest is running the site securely. We have a data processing agreement with Hetzner.

Audience measurement

We measure how this site is used with GoatCounter, which we run ourselves on our own server. No cookies are set, nothing is stored on your device and no data goes to third parties. We record the page viewed, the referring page, browser, operating system, screen size, country, which sections were seen, how far a page was read, whether it stayed open for more than 30 seconds and which films, buttons or contact links were clicked. Your IP address is not stored. It is only used briefly, together with the browser, to calculate a check value that cannot be traced back to you and is deleted after a short time. The legal basis is Art. 6(1)(f) GDPR, and our legitimate interest is understanding which content is seen. GoatCounter runs regardless of the cookie notice. You can object at any time by email.

Cookies and consent

The only technically necessary part of this site is what delivers the site itself. Fonts and films come from our own server. We store your cookie choice only in your browser.

All other services start only after you agree in the cookie notice. None of them is loaded before that. The legal basis is your consent under Section 25(1) TDDDG (German telecommunications and digital services data protection act) and Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future: open cookie settings. The Statistics setting covers Google Analytics and Microsoft Clarity, the Marketing setting covers the Google Ads tag.

Google Analytics

With your consent we use Google Analytics 4 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google sets cookies and records how you use the site, such as pages viewed, scroll depth, films started and buttons clicked, as well as your approximate location, device and browser. Google does not store the full IP address in Analytics. Data may be transferred to the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework. We have a data processing agreement with Google.

Google Ads

With your consent under Marketing we use the Google Ads tag from the same provider. It measures whether you get in touch after clicking one of our ads. Cookies are set for this. Personalised advertising and retargeting of visitors are switched off, and we do not build audiences from this data. Data may be transferred to the USA, and the EU-U.S. Data Privacy Framework applies here as well.

Microsoft Clarity

With your consent we use Microsoft Clarity from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Clarity sets cookies, records mouse movements, clicks and scrolling, and creates heatmaps and recordings of visits from them, so that we can see what works on the site. Inputs are masked. We always send Clarity a refusal for advertising, so no data goes from Clarity to Microsoft Ads. Data may be transferred to the USA. Microsoft is certified under the EU-U.S. Data Privacy Framework. There is more in the Microsoft Privacy Statement.

Contact by email or WhatsApp

When you write to us, we process your details to answer your request. The legal basis is Art. 6(1)(b) GDPR if it concerns a booking, otherwise Art. 6(1)(f) GDPR. Our emails run through Google Workspace. The links to WhatsApp and Instagram lead to those providers’ sites, where their privacy rules apply.

How long data is kept

We do not keep access logs for this site. Server error messages may contain an IP address and are overwritten automatically, currently after about three months. The GoatCounter statistics contain nothing that can be traced back to you and stay stored for as long as we run the site. Google Analytics deletes usage data after 14 months at most, and its cookies stay in your browser for up to two years. The cookies of the Google Ads tag stay for 90 days. Clarity deletes recordings after 30 days, and heatmaps and recordings we have marked after 9 months. Its cookies stay in your browser for up to one year. We keep requests for as long as handling them and legal retention duties require. Your cookie choice stays in your browser until you delete it there.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Just send us an email. You can also complain to a supervisory authority. Ours is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

Right to object

Where we process data on the basis of Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation. An email to koren@film-labor.de is enough.

Last updated: November 2026