data protection

1. Controller

 

The controller responsible for the processing of personal data on this website is:

 

Thomas Stellmach
Thomas Stellmach Animation
Elfbuchenstrasse 22
34119 Kassel
Germany

 

Email: thomas@stellmach.com
Phone: 0049 561 9371618

 

The controller within the meaning of the General Data Protection Regulation (GDPR) is the natural or legal person who determines the purposes and means of processing personal data.

2. General Information on Data Processing

 

When you visit this website, personal data is processed insofar as this is necessary for the technical provision and security of the website. Further data is processed if you provide it yourself, for example via the contact form, or if you consent to processing, such as the use of Google Analytics or the loading of external videos.

 

The purpose, legal basis, storage period and, where applicable, the external providers involved are explained in the following sections.

 

Personal data is stored only for as long as necessary for the respective purpose. Statutory retention obligations and any storage required for the establishment, exercise or defence of legal claims remain unaffected.

3. SSL/TLS Encryption

 

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. This means that data you submit via the website is transmitted in encrypted form between your browser and the server.

 

This applies in particular to information submitted via the contact form.

4. Hosting by STRATO and Server Log Files

 

This website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.

 

When you access the website, STRATO processes technically necessary connection data. This may include, in particular, the IP address of the accessing device, the date and time of access, pages or files accessed, the amount of data transferred, browser and operating system information, and the previously visited page.

 

The processing of this data is necessary to deliver the website and to ensure its secure and reliable operation. The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the secure and reliable provision of this website.

 

STRATO may store the full IP address for security purposes, in particular to detect and prevent attacks, for a maximum of seven days. In the log files made available to me as the website operator, the host name or IP address is anonymised. These log files are available for six weeks.

 

A data processing agreement pursuant to Art. 28 GDPR has been concluded with STRATO.

5. Contact and Contact Form

 

If you contact me by email, telephone or via the contact form, the data you provide will be processed in order to handle your enquiry and, where applicable, to answer any further questions relating to it.

 

Ninja Forms is used for the contact form on this WordPress website. The data entered in the form is forwarded to me by email for the purpose of handling your enquiry. Permanent storage of form entries as so-called “Submissions” in Ninja Forms is disabled.

 

The processing is based on Art. 6(1)(b) GDPR insofar as your enquiry relates to the initiation or performance of a contract. For other enquiries, the processing is based on Art. 6(1)(f) GDPR. My legitimate interest is to respond to enquiries addressed to me and to conduct the related communication.

 

Data received in connection with an enquiry will be deleted as soon as it is no longer required for handling the enquiry and there are no statutory retention obligations or other legitimate reasons for further storage.

6. Cookies and Consent Management

 

This website uses Real Cookie Banner to obtain and document the necessary consent for the use of certain services, cookies and comparable technologies.

 

Information about your consent decision as well as technically necessary information is stored for this purpose. In particular, this serves to respect your choices and to provide evidence of consent given or refused.

 

The processing of personal data for the documentation of consent is carried out in order to comply with a legal obligation pursuant to Art. 6(1)(c) GDPR. Insofar as information is stored on or accessed from your device for consent management purposes, this is based on Section 25(2) No. 2 TDDDG.

 

Details of the cookies and comparable storage technologies used, as well as their storage periods, can be found in the cookie settings on this website.

7. Language Management with WPML

 

WPML is used to provide this website in different languages. Technically necessary cookies or information are stored on your device in order to provide the selected language and, where applicable, to enable language redirection.

 

Insofar as information is stored on or accessed from your device for this purpose, this is based on Section 25(2) No. 2 TDDDG, as this is necessary to provide the language functions requested by the user.

 

Any related processing of personal data is based on Art. 6(1)(f) GDPR. The legitimate interest lies in the technically functional provision of this website in different languages.

 

WPML is therefore used as a technically necessary service and is not subject to consent.

8. Google Analytics

 

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics is used to compile statistics about the use of this website. This allows me, for example, to see how many visitors use the website, which pages are viewed, how visitors reach the website and how they interact with its content.

 

For this purpose, Google Analytics may process information such as the IP address, approximate location, page views, interactions, time-related information, the source of the visit, browser, device type and screen resolution. Cookies or comparable technologies may be used to distinguish between users and visits.

 

Google Analytics is activated on this website only after you have given your consent. The legal basis for the processing of personal data is Art. 6(1)(a) GDPR. Insofar as information is stored on or accessed from your device, this is based on your consent pursuant to Section 25(1) TDDDG. You can withdraw your consent at any time with effect for the future via the cookie settings.

 

Google Signals and the collection of user-provided data are disabled. I do not use Google Analytics for remarketing or personalised advertising.

 

For access from the European Union or the European Economic Area, according to Google, IP addresses are used to derive certain location information but are subsequently neither logged nor stored.

 

Depending on the type of data, retention periods of 2 or 14 months are configured for data stored in Google Analytics. The Google Analytics cookies _ga and _ga_* are stored for 24 months. Further information about the cookies can be found in the cookie settings on this website.

 

When Google Analytics is used, personal data may also be processed outside the European Union or the European Economic Area. Further information about possible third countries and the safeguards used for such transfers can be found in the cookie settings on this website.

 

The data processing terms provided by Google have been accepted for the use of Google Analytics.

9. Vimeo and YouTube

 

Videos from Vimeo and YouTube are embedded on this website. They are used in particular to present excerpts from my films as well as information and examples relating to my workshops.

 

To protect your data, the external video players are not loaded when you initially access the respective webpage. Initially, only a preview hosted locally on this website is displayed. A connection to the respective video provider is established and the external player is loaded only after you actively enable the video and consent to the necessary data processing.

 

The processing is based on your consent pursuant to Art. 6(1)(a) GDPR. Insofar as information is stored on or accessed from your device, this is based on your consent pursuant to Section 25(1) TDDDG. You can withdraw your consent at any time with effect for the future via the cookie settings.

Vimeo

 

The provider is Vimeo.com Inc., 330 West 34th Street, 5th Floor, New York, New York 10001, USA.

 

Once you have enabled the video, a connection to Vimeo is established. In particular, your IP address, technical information about your browser and device, as well as information about the page accessed and your use of the video may be processed. Vimeo may use cookies or comparable technologies for this purpose.

 

If you are logged into Vimeo, Vimeo may be able to associate your use of the video with your Vimeo account.

 

Personal data may also be processed outside the European Union or the European Economic Area. Further information about possible third countries and the safeguards used for such transfers can be found in the cookie settings on this website.

YouTube

 

YouTube is a Google service. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

 

Once you have enabled the video, Google may process, in particular, your IP address, technical device and browser information, as well as information about the page accessed and your use of the video. Cookies or comparable technologies may be used for this purpose.

 

If you are logged into a Google account, Google may be able to associate your use of the video with your account.

 

When YouTube is used, personal data may also be processed outside the European Union or the European Economic Area. Further information about possible third countries and the safeguards used for such transfers can be found in the cookie settings on this website.

10. Locally Hosted Fonts and Icons

 

Google Fonts and Font Awesome are hosted locally on this website’s own web server. When the fonts and icons used on this website are loaded, no connection is established to Google or Font Awesome servers.

11. Your Rights

 

If your personal data is processed, you have the following rights in particular, subject to the applicable legal requirements:

 

  • access to the personal data stored about you;
  • rectification of inaccurate or incomplete data;
  • erasure of your personal data;
  • restriction of processing;
  • data portability, where the legal requirements are met;
  • objection to certain processing of your personal data.

 

If processing is based on your consent, you can withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal of consent remains unaffected.

 

Consent for Google Analytics, Vimeo and YouTube can in particular be changed or withdrawn via the cookie settings on this website.

12. Right to Object

 

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, you have the right to object to such processing pursuant to Art. 21 GDPR on grounds relating to your particular situation.

 

If personal data is processed for direct marketing purposes, you may object to such processing at any time.

13. Right to Lodge a Complaint

 

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection law. In particular, you may lodge a complaint with a supervisory authority at your habitual residence, your place of work or the place of the alleged infringement.

 

 

The data protection supervisory authority responsible for me is:

 

The Hessian Commissioner for Data Protection and Freedom of Information
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany