Controller for the processing of personal data within the meaning of Art. 4(7) GDPR is:
Jennifer Heruday
PTB – Production Team Berlin
Warschauer Str. 23
10243 Berlin, Germany
Email: mail@ptb-filmservice.de
Phone: +49 30 2146 0984
We are not legally required to appoint a Data Protection Officer (Section 38(1) BDSG). For questions regarding data protection, please use the contact details above.
We only process personal data to the extent necessary for providing our website and services. Processing takes place either with your consent or based on a legal permission under Art. 6(1) GDPR.
Our website is operated on a server rented and administered for us by Sakura Solutions UG (haftungsbeschränkt). The physical server infrastructure is provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (data centres Falkenstein/Nuremberg).
When you access our website, technically necessary data is recorded in server log files:
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in stability, security and functionality of the website).
Data Processing Agreement: We have data processing agreements pursuant to Art. 28 GDPR with Sakura Solutions UG and Hetzner Online GmbH. Data is processed exclusively on servers located within the Federal Republic of Germany.
Storage period: Server log files are automatically deleted after 14 days, unless security incidents require longer retention.
When you contact us via our project request wizard, the following data is collected and processed:
Submission requires your express consent to this Privacy Policy via the mandatory checkbox in the form.
Legal basis: Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (pre-contractual measures).
Storage period: Data is stored in our database and deleted after completion of the project or after 3 years at the latest, unless statutory retention obligations (e.g. Section 257 HGB, Section 147 AO) apply.
Confirmation and notification emails are sent via our own mail server, operated by Sakura Solutions UG (haftungsbeschränkt) using the open-source solution Mailcow. The mail server is hosted on Hetzner Online GmbH servers in Germany.
Your data is not transmitted to external email service providers (e.g. SendGrid, Resend, Mailchimp).
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in efficient communication).
Our website uses cookies and similar technologies. The storage of cookies that are not strictly necessary for the operation of the website is based on your consent pursuant to Section 25(1) TTDSG in conjunction with Art. 6(1)(a) GDPR.
On your first visit, you will be informed via a cookie banner and asked for your consent. You can withdraw or modify your consent at any time via the "Cookie Settings" link in the footer.
| Name | Purpose | Provider | Duration |
|---|---|---|---|
| ptb_cookie_consent | Stores your cookie consent | PTB (own domain) | 12 months |
| ptb_consent_id | Pseudonymous ID for consent documentation | PTB (own domain) | 12 months |
| _ga | Web analytics (only with consent) | Google Ireland Ltd. | 2 years |
| _ga_* | Session and user identification for GA4 (only with consent) | Google Ireland Ltd. | 2 years |
These cookies are technically required for the operation of the website (Section 25(2)(2) TTDSG). They store your cookie consent and cannot be disabled.
With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (joint controller with Google LLC, USA, within the meaning of Art. 26 GDPR).
Google Analytics 4 uses cookies and similar technologies to analyse your use of our website. Collected data includes:
Third-country transfer: Despite Google Ireland Limited's EU seat, a transfer of data to Google LLC in the USA cannot be excluded. This transfer is based on the EU-US Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023). Google LLC is certified under the DPF (dataprivacyframework.gov). Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR are in place as additional safeguards.
Data Processing Chain: The Google Analytics account is operated by our IT service provider Sakura Solutions UG (haftungsbeschränkt). A data processing agreement pursuant to Art. 28 GDPR exists between us (controller) and Sakura Solutions UG (processor). Sakura Solutions UG in turn entered into a Data Processing Amendment with Google pursuant to Art. 28 GDPR on 17 February 2023, under which Google is bound as a sub-processor to comply with the GDPR.
Legal basis: Art. 6(1)(a) GDPR in conjunction with Section 25(1) TTDSG (consent via cookie banner).
Withdrawal: You can withdraw your consent at any time via the "Cookie Settings" link in the footer or install the browser add-on to disable Google Analytics: tools.google.com/dlpage/gaoptout.
More information on Google's data processing: policies.google.com/privacy.
We currently do not use any marketing or advertising cookies. For this reason, no corresponding option is available in the cookie banner. Should we use marketing tools in the future, we will inform you separately and obtain your consent.
To document your consent pursuant to Art. 7(1) GDPR, we store your cookie decision both locally in your browser (localStorage, 12-month retention) and on our server. The following data is stored:
Legal basis: Art. 6(1)(c) GDPR (legal obligation to demonstrate consent under Art. 7(1) GDPR) and Art. 6(1)(f) GDPR (legitimate interest in record-keeping).
Storage period: 12 months from consent. After that, you will be asked for renewed consent.
Data collected via our contact form and cookie consent system is stored in a MariaDB database on a server administered by Sakura Solutions UG (haftungsbeschränkt) at Hetzner Online GmbH (Germany). The database connection is SSL-encrypted. Access is restricted by password protection, IP restrictions and multi-factor authentication.
For security reasons and to protect confidential transmissions, this site uses TLS encryption (SSL). You can recognise an encrypted connection by the lock symbol in your browser's address bar and the "https://" prefix.
Under the GDPR you have the following rights:
To exercise your rights, please contact us informally by email at mail@ptb-filmservice.de. We will process your request within the statutory period of one month (Art. 12(3) GDPR).
Competent supervisory authority:
Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstr. 219, 10969 Berlin, Germany
Phone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de
This privacy policy is dated April 2026. Updates may become necessary due to website development or changes in legal/regulatory requirements. The current version is always available at ptb-filmservice.de/en/privacy.