Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2. Scope

This privacy policy applies to the website anteroom.de, including its German-language pages at anteroom.de/de/.

The watch pages at watch.anteroom.de, on which filmmakers offer their films, are not covered by this policy. The provider of a watch page is the respective filmmaker; the privacy information that applies there can be found on the respective watch page.

3. General information

How we collect your data

Some data is collected because you provide it to us – for example via the contact form or by email. Other data is collected automatically by our systems when you visit the website, primarily technical data such as your browser, operating system and the time of the page request.

Legal bases

Where we process personal data, we do so, depending on the purpose, on the basis of Art. 6(1)(b) GDPR (performance of a contract and pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest). The legal basis applicable in each case is stated in the following sections. This website currently does not process any data on the basis of consent; we set no cookies and show no consent dialog.

Retention

Unless a more specific retention period is stated in this privacy policy, your personal data remains with us until the purpose of the processing no longer applies. If you make a legitimate request for erasure, your data will be deleted unless statutory retention obligations prevent this.

4. Hosting and server logs

Hetzner

This website is hosted on a server operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Each time this website is accessed, Hetzner processes technical data, including your IP address, in order to deliver the website and ensure its secure operation. We have concluded a data processing agreement with Hetzner pursuant to Art. 28 GDPR.

Further information: https://www.hetzner.com/legal/privacy-policy

Server logs

The web server automatically records the following data for each page request:

• the page requested and the time of the request
• browser type and version
• operating system used
• referring website (referrer)
• IP address in shortened form

The IP address is shortened before being written to the log file – for IPv4 addresses the last octet is removed, for IPv6 addresses only the network prefix is stored. The full address is not logged. Log files are deleted after no more than 15 days.

The processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free and secure provision of the website.

5. Contact form and email

What data we process

When you write to us via the contact form, we process your name, your email address, your message and – if you provide it – the address of your website, as well as the language of the page from which you submitted the form.

How the form works technically

The form transmits your details to a server operated by us (watch.anteroom.de), which is also hosted by Hetzner in Germany. This server does not store your details; it forwards them as an email to our mailbox contact@anteroom.de.

To protect against abuse, the server limits the number of submissions per IP address. For this purpose your IP address is held in memory for no longer than 15 minutes.

Delivery via Resend

To send the email we use the service Resend, operated by Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. Resend receives the contents of the form (name, email address, website, message) together with delivery metadata. The email is dispatched via servers in the European Union (Ireland); however, Resend states that it stores account data, metadata and logs in the United States. The data is therefore transferred to a third country. We have concluded a data processing agreement with Resend; the transfer is safeguarded by the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR). Resend further states that it is certified under the EU-U.S. Data Privacy Framework.

Further information: https://resend.com/legal/privacy-policy

Contact by email

If you write to us directly by email, we process the details you provide, including your email address and the content of your message, in order to handle your enquiry.

Legal basis and retention

The processing is based on Art. 6(1)(b) GDPR where your enquiry relates to the conclusion or performance of a contract – for example, if you would like to use Anteroom for your films. In all other cases it is based on our legitimate interest in handling the enquiries addressed to us (Art. 6(1)(f) GDPR).

Your message remains in our mailbox until your enquiry has been fully dealt with and no reasons for further retention remain, until you ask us to delete it, or for as long as a statutory retention obligation exists.

6. Web analytics with Umami

What we use

We use the web analytics software Umami to understand how this website is used – which pages are viewed, how far down the page visitors read and which buttons they use. Umami runs exclusively on our own server at Hetzner in Germany. No data is transmitted to the software's maker or to any other third party.

No cookies

Umami sets no cookies and stores no information on your device. There is no access to your device within the meaning of § 25 TDDDG (German Telecommunications Digital Services Data Protection Act), which is why we do not ask for consent for this.

What data is collected

• the page viewed, the time of the request and the referring website (referrer)
• browser, operating system, device type, screen size and browser language
• approximate location (country, region, city), derived from the IP address
• events on the page, such as which section became visible or which button was clicked

How your IP address is processed

Umami does not store your IP address. To link the page views of one visit, Umami computes a hash from the IP address, the browser identifier and a random value that changes daily. Within a single day, page views can thereby be attributed to the same visitor (pseudonymous processing); once the random value changes, this attribution is no longer possible. We keep the resulting statistics without a time limit; after the end of the respective day they can no longer be attributed to any person.

Legal basis and objection

The processing is based on our legitimate interest in analysing and improving this website (Art. 6(1)(f) GDPR). You may object to the collection at any time: Umami respects your browser's "Do Not Track" setting. If it is enabled, your visit is not recorded.

Further information about Umami: https://umami.is/docs

7. No third-party content

Fonts, images and the demo film on this website are served from our own server. We do not embed content from external providers – no external fonts, no third-party video players, no maps and no social media elements. When you visit this website, your IP address is therefore not transmitted to any provider other than those named in this policy.

8. Your rights

You have the following rights with regard to the personal data concerning you:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object to processing (Art. 21 GDPR)

To exercise these rights, an email to contact@anteroom.de is sufficient.

Right to object

Where we process your personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (Art. 21(1) GDPR).

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement. The supervisory authority responsible for us is:

9. Encryption

This website uses TLS encryption. You can recognise an encrypted connection by the address bar of your browser starting with "https://" and by the padlock symbol in the browser bar. Data you send to us via the contact form therefore cannot be read by third parties in transit.

10. Changes to this privacy policy

We update this privacy policy when the legal requirements or the data processing on this website change. The version published here applies.

Authoritative version

This is a translation for convenience. In the event of any discrepancy, the German version at anteroom.de/de/datenschutz prevails.