German version is legally binding.

Draft — not legal advice, pending approval by operator/law firm

Privacy Policy

As of: 2026-09-23T00:00:00+0200 · Language: English (the German version is legally binding)

Open points in this draft (please resolve before publishing): [Is a data processing agreement in place with Strato?] · [Retention period of server log files at Strato] · [fill in company data below] · [consider a salted hash instead of a plain hash for the IP-address processing — see fact list].

1. Controller

AMP Aurora Motion Pictures
Am Thomashäusle 18, 76227 Karlsruhe-Durlach, DE
Represented by: [COMPANY DATA: representative]
Email: [COMPANY DATA: email]
Phone: [COMPANY DATA: phone]

2. Overview: what this site does not do

This site embeds no Google Fonts, map services, social-media plugins, analytics/tracking tools, video embeds, or newsletter tool. It sets no cookies for visitors. A cookie-consent banner is therefore not included.

3. Hosting and server log files

This website is hosted with Strato AG (webspace). When you access the site, the hosting provider automatically processes technical access data (including IP address, date/time, page requested, user agent) in server log files. This is technically necessary to deliver the website and to ensure system security.

• Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, functioning operation).
• Data processing agreement: a data processing agreement under Art. 28 GDPR is in place with the hosting provider [status: to be confirmed].
• Retention period of log files: [to be confirmed and added].

4. Contact form

The contact form collects your name, email address, the topic of your inquiry, and your message.

• Purpose: processing your inquiry and getting in touch.
• Legal basis: Art. 6(1)(b) GDPR (initiating/performing a contract or pre-contractual measure), alternatively Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).
• Processing and storage: Form data is not stored in a database. It is checked server-side and forwarded by email to the responsible party within the company. The email itself is subject to retention in the respective mailbox [retention periods there — to be confirmed].
• Brief technical intermediate storage: After submission, any error messages and the values you entered are technically held for a very short time (a few minutes) so they can be shown to you again after a redirect, and are then deleted automatically.
• Abuse/spam protection: to prevent automated mass submissions, the number of requests from a given sender IP address is limited within a short time window (around ten minutes). The IP address is not stored in plain text for this purpose, only processed in pseudonymized (hashed) form. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in abuse/spam prevention). A further, purely technical mechanism without any personal-data component (a hidden form field, a minimum fill time) also runs against automated submission, without involving a third-party service such as reCAPTCHA.
• Voluntary nature: providing the data is voluntary, but without it your inquiry cannot be processed.

5. Contact by email

If you contact us by email, the data you provide (including your email address, and where applicable your name and message) is stored to process your inquiry. Legal basis: Art. 6(1)(b) or (f) GDPR.

6. No cookies, no tracking, no analytics

No cookies are set, and no analytics/statistics tools (e.g. Google Analytics, Matomo) or tracking pixels are used. A requirement of consent under § 25 TDDDG (the German act implementing the ePrivacy rules on storing information on, or accessing information from, the user's terminal equipment) does not apply, since no such storage or access takes place.

7. Self-hosted fonts

The fonts used on this website are self-hosted. There is no connection to Google Fonts or any other external font server, so loading fonts transmits no data (in particular no IP address) to third parties.

8. External links (YouTube)

Some pages include plain outbound links to YouTube videos. These videos are not embedded; no data is transmitted to YouTube/Google unless and until you click such a link. Only by clicking do you leave this website, and the respective provider's privacy policy applies.

9. Your rights

Under the GDPR you have the right to:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
• Lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise these rights, please use the contact address given above.

10. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

11. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the "https://" prefix in the address bar.

12. Version and changes

Version of this privacy policy: 2026-09-23T00:00:00+0200. Changes to the website may require an update of this policy.