Privacy Policy
& Cookies

1) Introduction and Contact Information of the Responsible Party

1.1 We welcome your visit to our website and appreciate your interest. Below we inform you about how we handle your personal data when using our website. Personal data means all data with which you can be personally identified.

1.2 The controller responsible for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is: Stefanie Schmahl, AlefCine Pictures, Krefelder Str. 13, 10555 Berlin, Germany, Phone: +49 30 7407 1852, Email: info@alefcine.com. The responsible party is the natural or legal person who decides alone or jointly with others about the purposes and means of personal data processing.

2) Data Collection When Visiting Our Website

2.1 For purely informational use of our website, if you do not register or otherwise provide information to us, we only collect data that your browser transmits to the page server (so-called "server logfiles"). When you access our website, we collect the following data that is technically required to display the website to you:

• Our visited website
• Date and time of access
• Amount of data sent in bytes
• Source/referrer through which you reached the page
• Browser used
• Operating system used
• IP address used (if applicable: in anonymized form)

Processing occurs pursuant to Article 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. Data is not shared or otherwise used. However, we reserve the right to review server logfiles retrospectively if there are concrete indications of unlawful use.

2.2 This website uses SSL/TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the responsible party). You can recognize an encrypted connection by the string "https://" and a lock symbol in your browser address bar.

3) Hosting & Content Delivery Network

We use a hosting provider for our website and the display of page content that provides its services exclusively on servers within the European Union, either itself or through selected sub-contractors.

All data collected on our website is processed on these servers.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

4) Cookies

To make your visit to our website attractive and enable the use of certain functions, we use cookies—small text files placed on your device. Some cookies are automatically deleted when you close your browser (so-called "session cookies"), while others remain on your device longer and enable the saving of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in your web browser's cookie settings overview.

Where cookies we use process personal data, processing occurs pursuant to Article 6(1)(b) GDPR for contract performance, Article 6(1)(a) GDPR in case of given consent, or Article 6(1)(f) GDPR to protect our legitimate interests in optimal website functionality and customer-friendly, effective website design.

You can configure your browser to inform you about cookies and decide individually whether to accept them, or you can exclude cookie acceptance for specific cases or generally.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact

5.1 Calendly

For providing an online appointment booking function, we use the services of: Calendly, LLC, BB&T Tower, 271 17th St NW, Atlanta, GA 30363, USA

For appointment purposes, first and last name and email address (and if applicable, phone number for telephone appointments) are collected pursuant to Article 6(1)(b) GDPR and transmitted to the provider pursuant to Article 6(1)(f) GDPR based on our legitimate interest in effective customer management and efficient appointment scheduling, where they are stored for appointment organization.

After the appointment is held or after the agreed appointment period expires, your data is deleted by the provider.

We have concluded a data processing agreement with the provider that ensures protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has adopted the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

5.2 Microsoft Bookings

For providing an online appointment booking function, we use the services of: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

For appointment purposes, first and last name and email address (and if applicable, phone number for telephone appointments) are collected pursuant to Article 6(1)(b) GDPR and transmitted to the provider pursuant to Article 6(1)(f) GDPR based on our legitimate interest in effective customer management and efficient appointment scheduling, where they are stored for appointment organization.

After the appointment is held or after the agreed appointment period expires, your data is deleted by the provider.

We have concluded a data processing agreement with the provider that ensures protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has adopted the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

5.3 General Contact

When you contact us (e.g., via contact form or email), personal data is collected. Which data is collected in case of contact form use is shown in the respective contact form. This data is stored and used exclusively for answering your inquiry and for contact-related technical administration.

The legal basis for processing this data is our legitimate interest in answering your inquiry pursuant to Article 6(1)(f) GDPR. If your contact aims at concluding a contract, Article 6(1)(b) GDPR is an additional legal basis. Your data is deleted after your inquiry is processed. This occurs when it can be understood from the circumstances that the matter is conclusively resolved and provided no legal retention obligations apply.

6) Use of Customer Data for Direct Marketing

6.1 Newsletter Registration

If you subscribe to our email newsletter, we will send you regular information about our offers. Your email address is the only mandatory information for newsletter transmission. Providing additional data is voluntary and is used to address you personally. For newsletter distribution, we use the double opt-in procedure. This means we will only send you an email newsletter once you have expressly confirmed that you wish to receive newsletters. We then send you a confirmation email asking you to confirm by clicking a corresponding link that you wish to receive future newsletters.

By activating the confirmation link, you give us your consent for using your personal data pursuant to Article 6(1)(a) GDPR. When registering for the newsletter, we store your IP address as registered by your Internet Service Provider, as well as the date and time of registration, to enable us to trace any potential misuse of your email address later. Data collected when registering for the newsletter is used exclusively for advertising purposes via the newsletter. You can unsubscribe from the newsletter at any time using the provided link in the newsletter or by contacting the responsible party mentioned above. After unsubscription, your email address is promptly deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve further data use that is legally permitted and about which we inform you in this statement.

6.2 Newsletter Distribution to Existing Customers

If you provided us your email address when purchasing goods or services, we reserve the right to send you regular offers for similar goods or services from our assortment by email. For this, we do not need separate consent from you pursuant to Section 7(3) UWG. Data processing is based solely on our legitimate interest in personalized direct marketing pursuant to Article 6(1)(f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send emails.

You are entitled to object to the use of your email address for the aforementioned advertising purposes at any time with future effect by notifying the responsible party mentioned at the beginning. You only incur transmission costs according to standard rates. After receiving your objection, the use of your email address for advertising purposes will be immediately stopped.

6.3 MailChimp

Our email newsletters are sent via this provider: The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA

Based on our legitimate interest in effective and user-friendly newsletter marketing, we transfer your data provided during newsletter registration to this provider pursuant to Article 6(1)(f) GDPR so that it can handle newsletter distribution on our behalf.

Subject to your express consent pursuant to Article 6(1)(a) GDPR, the provider conducts statistical success evaluation of newsletter campaigns using web beacons or counting pixels in sent emails, which can measure open rates and specific interactions with newsletter content. Device information (e.g., time of access, IP address, browser type, and operating system) is collected and evaluated but not merged with other data.

You can revoke your consent to newsletter tracking at any time with future effect.

We have concluded a data processing agreement with the provider that protects our website visitors' data and prohibits disclosure to third parties.

For data transfers to the USA, the provider has adopted the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

7) Online Marketing

HubSpot

This website uses the software-based marketing service of the following provider for providing and synchronizing various customer management functions: HubSpot Ireland Ltd., 2nd Floor 30 North Wall Quay, Dublin 1, Ireland

The service enables automated processing of feed activities, management of advertising in marketing channels used, success analysis of marketing measures, as well as central email marketing and contact management.

Cookies are used to fulfill the various functions—small text files stored locally in your web browser cache on your device that enable analysis of your website use by us. Cookies capture certain information such as IP address, location, and time of page access.

All processing described above, particularly the setting of cookies to read information on your device, is only performed when you give us your express consent pursuant to Article 6(1)(a) GDPR. You can revoke given consent at any time with future effect by deactivating this service in the "Cookie-Consent-Tool" provided on the website.

Further legal bases for data processing applicable to specific service functions (such as express consent requirements for newsletters per Article 6(1)(a) GDPR) remain unaffected.

We have concluded a data processing agreement with the provider that ensures protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

8) Retargeting/Remarketing and Conversion Tracking

Meta Pixel

Within our online offering, we use the "Meta Pixel" service of the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta")

When a user clicks on an advertisement we placed on Facebook and/or Instagram, the "Meta Pixel" extends the URL of our linked page with a parameter. This URL parameter is then entered into the user's browser through a cookie set by our linked page after redirection.

This enables Meta to identify visitors of our online offering as a target audience for displaying advertisements (so-called "Ads"). Accordingly, we use the service to show Facebook and/or Instagram ads only to users who have shown interest in our online offering or who have certain characteristics (e.g., interest in specific topics or products determined by visited websites) that we transmit to Meta (so-called "Custom Audiences").

Additionally, with "Meta Pixel," it can be traced whether users were redirected to our website after clicking an advertisement and what actions they take there (so-called "Conversion Tracking").

The collected data is anonymous for us, providing no conclusions about user identity. However, Meta stores and processes the data so connection to the respective user profile is possible and Meta can use the data for its own advertising purposes.

All processing described above, particularly setting cookies to read information on your device, is only performed when you give us your express consent pursuant to Article 6(1)(a) GDPR. You can revoke given consent at any time with future effect by deactivating this service in the "Cookie-Consent-Tool" provided on the website.

We have concluded a data processing agreement with the provider that ensures protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Information generated by Meta is typically transferred to and stored on Meta servers; in this context, transfer to Meta Platforms Inc. servers in the USA may occur.

For data transfers to the USA, the provider has adopted the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

9) Page Functionalities

9.1 Vimeo

This website uses plugins for displaying and playing videos from the following provider: Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA

When you access a page of our website containing such a plugin, your browser establishes a direct connection to the provider's servers to load the plugin. Certain information, including your IP address, is transmitted to the provider.

When playback of embedded videos via the plugin is started, the provider sets cookies to collect information about user behavior, create playback statistics, and prevent misuse.

If you are logged into a user account with the provider during your website visit, your data is directly associated with your account when you click a video. If you do not want this association, you must log out before pressing play.

All processing described above, particularly setting cookies to read information on your device, occurs only if you give us express consent pursuant to Article 6(1)(a) GDPR. You can revoke given consent at any time with future effect by deactivating this service via the "Cookie-Consent-Tool" provided on the website.

For data transfers to the USA, the provider has adopted the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

9.2 YouTube

This website uses plugins for displaying and playing videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC., USA

When you access a page of our website containing such a plugin, your browser establishes a direct connection to the provider's servers at the latest when video playback begins to load content. Certain information, including your IP address, is transmitted to the provider.

When playback of embedded videos via the plugin is started, the provider sets cookies to collect information about user behavior, create playback statistics, and prevent misuse.

If you are logged into a user account with the provider during your website visit, your data is directly associated with your account when you click a video. If you do not want this association, you must log out before pressing play.

All processing described above, particularly setting cookies to read information on your device, occurs only if you give us express consent pursuant to Article 6(1)(a) GDPR. You can revoke given consent at any time with future effect by deactivating this service via the "Cookie-Consent-Tool" provided on the website.

For data transfers to the USA, the provider has adopted the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

9.3 Google Web Fonts

This page uses so-called Web Fonts from the following provider for uniform display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

When you access a page, your browser loads the required Web Fonts into your browser cache to display text and fonts correctly and establishes a direct connection to the provider's servers. Certain browser information, including your IP address, is transmitted to the provider.

Data may also be transmitted to: Google LLC, USA

Personal data processing when connecting with the font provider only occurs if you give us express consent pursuant to Article 6(1)(a) GDPR. You can revoke given consent at any time with future effect by deactivating this service via the "Cookie-Consent-Tool" provided on the website. If your browser does not support Web Fonts, a standard font from your computer is used.

For data transfers to the USA, the provider has adopted the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

Further information on Google's data protection provisions can be found here: business.safety.google/intl/de/privacy/

9.4 Google reCAPTCHA

We use the CAPTCHA service from the following provider on this website: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC, USA.

For the visual design of the CAPTCHA window, the provider uses "Google Fonts," fonts loaded from the internet by Google. No processing of additional information beyond what is already transmitted through reCAPTCHA functionality occurs here.

The service checks whether input is made by a natural person or misused through machine and automated processing, and blocks spam, DDoS attacks, and similar automated malicious access. To ensure an action is performed by a human and not an automated bot, the provider collects the IP address of the device used, detection data of the browser and operating system type used, and date and duration of the visit, transmitting these to the provider's servers for evaluation. Cookies may be used in this process—small text files stored in the device's browser.

If the processing described above occurs based on cookies, these are only set if you give us express consent pursuant to Article 6(1)(a) GDPR. You can revoke given consent at any time with future effect by deactivating this service in the "Cookie-Consent-Tool" provided on the website.

If the processing described above occurs without using cookies, the legal basis is our legitimate interest in determining individual responsibility on the internet and preventing misuse and spam pursuant to Article 6(1)(f) GDPR.

We have concluded a data processing agreement with the provider that ensures protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has adopted the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

9.5 Microsoft Teams

For conducting online meetings, video conferences, and/or webinars, we use this provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA

The provider processes various data, with the extent of processed data depending on what information you provide before or during participation in an online meeting, video conference, or webinar. Your data is processed as a communication participant and stored on the provider's servers. This may particularly include your registration data (name, email address, phone number (optional), and password) and session data (topic, participant IP address, device information, description (optional)).

Additionally, image and audio contributions of participants as well as voice inputs in chats may be processed.

For processing personal data required for contract fulfillment with you (this also applies to processing necessary for pre-contractual measures), Article 6(1)(b) GDPR serves as the legal basis. Where you have given us consent to process your data, processing occurs under Article 6(1)(a) GDPR. You can revoke given consent at any time with future effect.

Otherwise, the legal basis for data processing when conducting online meetings, video conferences, or webinars is our legitimate interest in effective conduction of the online meeting, webinar, or video conference per Article 6(1)(f) GDPR.

We have concluded a data processing agreement with the provider that ensures protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has adopted the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

10) Tools and Other

Cookie-Consent-Tool

This website uses a so-called "Cookie-Consent-Tool" to obtain effective user consents for consent-required cookies and cookie-based applications. The "Cookie-Consent-Tool" is displayed to users upon page access in the form of an interactive user interface where consents for specific cookies and/or cookie-based applications can be given by checking boxes. Through the tool's use, all consent-required cookies/services are only loaded when the respective user provides corresponding consents by checking boxes. This ensures that such cookies are only set on the user's device if consent is given.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed.

In individual cases where personal data is processed for storing, assigning, or logging cookie settings (such as IP address), this processing occurs pursuant to Article 6(1)(f) GDPR based on our legitimate interest in legally compliant, user-specific, and user-friendly cookie consent management and thus in legally compliant design of our website.

Article 6(1)(c) GDPR is a further legal basis for processing. As the responsible party, we are legally obligated to make the use of technically non-essential cookies dependent on the respective user's consent.

Where necessary, we have concluded a data processing agreement with the provider that ensures protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Further information about the operator and customization options for the Cookie-Consent-Tool can be found directly in the respective user interface on our website.

11) Rights of the Affected Person

11.1 Applicable data protection law grants you the following rights as the affected person regarding the processing of your personal data by the responsible party (information and intervention rights), with reference made to the cited legal basis for respective exercise requirements:

• Right of access pursuant to Article 15 GDPR;
• Right to rectification pursuant to Article 16 GDPR;
• Right to erasure pursuant to Article 17 GDPR;
• Right to restrict processing pursuant to Article 18 GDPR;
• Right to notification pursuant to Article 19 GDPR;
• Right to data portability pursuant to Article 20 GDPR;
• Right to withdraw given consent pursuant to Article 7(3) GDPR;
• Right to lodge a complaint pursuant to Article 77 GDPR.

11.2 Right to Object

12) Duration of Storage of Personal Data

The duration of storage of personal data is determined by the respective legal basis, processing purpose, and—if applicable—additionally by the respective legal retention period (e.g., commercial and tax law retention periods).

In processing personal data based on express consent pursuant to Article 6(1)(a) GDPR, affected data is stored until you revoke your consent.

Where legal retention periods exist for data processed within contractual and quasi-contractual obligations under Article 6(1)(b) GDPR, this data is routinely deleted after expiration of retention periods if it is no longer required for contract performance or contract initiation and/or no legitimate interest in further storage exists on our part.

In processing personal data based on Article 6(1)(f) GDPR, this data is stored until you exercise your right to object pursuant to Article 21(1) GDPR, unless we can demonstrate compelling protectable reasons for processing that outweigh your interests, rights, and freedoms, or processing serves to assert, exercise, or defend legal claims.

In processing personal data for direct marketing purposes based on Article 6(1)(f) GDPR, this data is stored until you exercise your right to object pursuant to Article 21(2) GDPR.

Except as otherwise provided in the specific processing situations described in other information in this statement, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.