As the operator of this website, we take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations. With this privacy statement, we would like to inform you about the nature, extent and purpose of the personal data we process.

Responsible for data protection in accordance with Art. 4 (7) of the European General Data Protection Regulation (GDPR) is:

The Sweetspot GmbH
Rutschbahn 11
DE-20146 Hamburg
Mail: hello[at]thesweetspot.co
Managing Partners: Felix Antretter, Daniel Kottirsch

Contact person for data protection matters:
Daniel Kottirsch
hello[at]thesweetspot.co

Visitors to our website
Each time you access our website, our system automatically collects the following information from the computer system of the accessing computer: used browser type and version user’s operating system date and time of access user’s Internet Service Provider user’s IP address amount of data transferred notification of successful access website from which the user’s system accesses our website website accessed by the user’s system via our website. The legal basis for the temporary processing of this information is Art. 6 para. 1 lit. f GDPR (processing is necessary for the purposes of the legitimate interests pursued by the data controller). The temporary storage of this data is necessary to enable the user to use the website in a fully functional manner. In addition, we use the data for the technical optimization of the website and to ensure the security of our information technology systems. We also have a legitimate interest in these purposes.

The data is generally deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collected for the provision of the website, this is the case at the end of the respective session. Log file information is stored for a maximum of 7 days for security purposes (e.g. to investigate misuse or fraud) and is then deleted. Data that must be retained for evidentiary purposes will not be deleted until the incident has been resolved.

Contact
When you send us a message, such as an e-mail, we process the following information that you provide to us: name, e-mail address, and any other personal information you provide in your message to us. The legal basis for the collection of data in the context of contacting us is Art. 6 par. 1 sentence 1 lit. b GDPR (processing is necessary for the performance of a contract with the data subject) if a contractual relationship is sought or already exists. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR (processing is necessary for the purposes of the legitimate interests pursued by the controller) if no contractual relationship exists or is intended, e.g. if the contact is of a general nature. In the latter case, our legitimate interest is to respond to your request in an appropriate manner.

The data will be deleted as soon as they are no longer required for the purpose for which they were collected or for documentation purposes. Mandatory legal provisions – in particular retention periods – remain unaffected.

Newsletter
On our website we offer you the possibility to subscribe to our newsletter. We will only inform you regularly about our productions, events, offers and other news from our company if you have given your explicit consent. To subscribe to the newsletter, you must click on the button in the corresponding newsletter registration menu. A confirmation email will be sent to the email address entered for the first time by a data subject for the newsletter mailing using the double opt-in procedure. This confirmation e-mail is used to verify that the owner of the e-mail address, as the data subject, has authorized the receipt of the newsletter. We then process the e-mail address you confirmed when you registered and, if applicable, your first name and surname.

The legal basis for the processing described above for the purpose of sending our e-mail newsletter is Art. 6 para. 1 sentence 1 lit. a GDPR (consent of the data subject). You may revoke your consent at any time and unsubscribe from the newsletter. If you withdraw your consent, you will no longer receive any newsletters from us. To withdraw your consent, you can click on the unsubscribe link contained in each newsletter. The data will be deleted as soon as it is no longer required for the purpose for which it was collected or for documentation purposes, or if you object to the processing.

Videos
Videos that you can view on our website are delivered through a content delivery network (CDN). For this purpose, the following data is processed: IP address, user agent and low-resolution geolocation data derived from the IP address. The legal basis for the aforementioned data processing is Art. 6 par. 1 sentence 1 lit. f GDPR (processing is necessary for the purposes of the legitimate interests pursued by the controller). As an advertising film production company, we present the films we have produced on our website to give interested parties an impression of our portfolio. This is also our legitimate interest. The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected or for documentation purposes.

Analysis of website behavior
We use the Fathom analytics service to analyze user behavior on our website. This service processes the following personal information about you: IP address and user agent. Unlike other analytics tools, Fathom does not use cookies and anonymizes and aggregates the above data prior to analysis. The legal basis for the aforementioned data processing is Art. 6 para. 1 sentence 1 lit. f GDPR (processing is necessary for the purposes of the legitimate interests pursued by the controller). We have a legitimate interest in the anonymous analysis of user behavior in order to optimize both the website and our marketing campaigns.

Some of the service providers and third party services we use may transfer personal data outside the EU/EEA to third countries (in particular to the USA). The level of data protection in these third countries is generally not comparable to that in the EU/EEA. However, in order to ensure an adequate level of data protection, we ensure that the service providers we use are certified in accordance with the EU-US Data Privacy Framework Program and enter into so-called EU standard clauses, according to which the respective service provider undertakes to comply with the standards set by the EU Commission for the protection of your personal data. We also select service providers based on their ability to provide additional assurances, such as obtaining privacy certifications and/or demonstrating additional and appropriate technical and organizational measures to protect your personal information (e.g., data encryption).

Please note that you will not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

The provision of personal information is not required by law or contract, nor is it necessary to enter into a contract. Therefore, you are under no obligation to provide such personal information. However, in order to be able to use our website (see the description of the respective services in Section 2), it is necessary to provide the personal data required for this.

You have the following rights with regard to your personal data:

• Right of access (Art. 15 GDPR)
• Right of rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR; “right to be forgotten”)
• Right to restrict processing (Art. 18 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to data portability (Art. 20 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority in the Member State where you have your habitual residence or place of work, or where the alleged breach occurred, concerning the processing of your personal data by us if you consider that the processing of personal data relating to you is unlawful.

If you have given us your consent to process your data, you may withdraw your consent at any time with effect for the future. This will not affect the lawfulness of the processing of your data until you withdraw your consent. If you wish to exercise your rights or have any other data protection concerns, you may contact us at any time using the contact details set out in Section 1 above and/or the contact details set out in our legal notice.

We would also like to point out that if your personal data are processed on the basis of a legitimate interest in the context of the balancing of interests pursuant to Art. 6 para. 1 sentence 1 f) GDPR, you have the right to object to the processing of your personal data at any time.