Legal
Privacy Policy
Last updated: September 2026
This translation is provided for convenience. Only the German version is legally binding.
1. Controller
The party responsible for data processing on this website is:
David Mereuta
Fenomen Films
Teichstraße 24, 77652 Offenburg, Germany
E-Mail: [email protected]
2. Overview
We only process personal data to the extent necessary to operate this website, to handle your enquiries or to comply with legal requirements. We do not use any analytics, tracking or advertising services and we do not sell data to third parties.
3. Hosting and server log files
This website is operated on a server provided by Hetzner Online GmbH, Huurrekuja 10, 04360 Tuusula, Finland. When you visit the website, information transmitted by your browser is automatically stored in so-called server log files:
- IP address
- date and time of access
- page or file requested
- referrer URL (the previously visited page)
- browser and operating system used
This processing ensures the secure and stable operation of the website and is based on Art. 6 (1) (f) GDPR. The log files are deleted after 7 days unless they are needed to investigate a security incident.
4. Cloudflare
We use services of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, to deliver the website faster and protect it against attacks. Traffic between your browser and our server is routed through Cloudflare; among other things, your IP address is processed in the course of this.
The legal basis is our legitimate interest in a secure and fast website (Art. 6 (1) (f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework. More information: cloudflare.com/privacypolicy.
5. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.
6. Cookies
We only use one technically necessary cookie called NEXT_LOCALE. It stores the website language you have chosen so that it is kept on your next visit. The cookie contains no personal information and is deleted automatically after one year.
It is stored on the basis of § 25 (2) No. 2 TDDDG and Art. 6 (1) (f) GDPR; no consent is required for this. We do not use tracking or advertising cookies.
7. Contact form
When you send us an enquiry via the contact form, we process the following information:
- name
- email address and/or phone number (if provided)
- requested service
- preferred messenger and your username or phone number there
- content of your message
We use this data exclusively to handle your enquiry and to contact you via the channel you have chosen. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in responding to enquiries).
Transmission via Telegram
For internal notification, the form data is sent to our Telegram account via the bot interface of the Telegram messenger. The provider is Telegram FZ-LLC, Dubai, United Arab Emirates. This involves transferring data to a country outside the EU for which there is no adequacy decision of the European Commission. More information: telegram.org/privacy.
Spam protection
To prevent abuse, your IP address is kept in the server’s memory for a maximum of 10 minutes when you submit the form and then discarded; it is not stored permanently.
Storage period
We delete your information as soon as your enquiry has been fully processed, unless statutory retention obligations apply or an order results from it.
8. Communication via messengers
If, at your request, we contact you via Telegram, Instagram, WhatsApp or Viber, the privacy policies of the respective provider also apply:
- Telegram — Telegram FZ-LLC, Dubai, UAE
- Instagram — Meta Platforms Ireland Ltd., Dublin, Ireland
- WhatsApp — WhatsApp Ireland Ltd., Dublin, Ireland
- Viber — Viber Media S.à r.l., Luxembourg
You choose the communication channel yourself in the contact form.
9. Fonts, videos and images
All fonts, videos and images are loaded directly from our server. No content from third-party providers such as Google Fonts, YouTube or Vimeo is embedded, so visiting this website does not establish any connection to these services.
10. Your rights
You have the right at any time to:
- access the data we hold about you (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure of your data (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to processing based on legitimate interests (Art. 21 GDPR)
To exercise your rights, an informal message to [email protected] is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority responsible for us: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart.
11. Changes
We update this privacy policy whenever the website or the legal requirements change. The version published here applies.