PRIVACY & COOKIES
Contents
1. Name and Address of the Data Controller
2. General Information on Data Processing
3. Collection of Personal Data When Visiting Our Website
4. Use of Cookies
5. Use of WireDrive
6. Social Media
7. Email Contact
8. Data Processing in the Context of Customer Relationships
9. Data Processing in the Context of Your Job Application
10. Rights of the Data Subject
11. Updates and Changes to This Privacy Policy
The data controllers within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states, as well as other data protection regulations, are:
What If Studio GmbH, represented by the managing directors: Juliane Ellrich and Frank Siegl, Waldowstrasse 64, 13053 Berlin, Germany. Tel.: +49 (0)30 403 633 60, Fax: +49 (0)30 403 633 601, Email: elli@whatif.film
The two controllers are hereinafter jointly referred to as "Controller" or "we."
You can contact our Data Protection Officer for both companies at FINIENS DATA GmbH, Attn: Data Protection Officer, Markgrafenstr. 4, D-60497 Frankfurt am Main, Tel. +49 (0)69 209 758 900 or by email at datenschutz@zauberbergproductions.com.
2.1. Scope of Personal Data Processing
We generally process our users' personal data only to the extent necessary to provide a functional website as well as our content and services. Otherwise, the processing of our users' personal data takes place only with the user's consent.
2.2. Legal Basis for the Processing of Personal Data
To the extent that we obtain the consent of the data subject for the processing of personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) of the GDPR serves as the legal basis. If the processing is necessary to safeguard a legitimate interest of our company or a third party, Article 6(1)(f) of the GDPR serves as the legal basis.
2.3. Data Erasure and Retention Period
The data subject's personal data will be erased or blocked as soon as the purpose for which it was stored no longer applies. Data will also be blocked or deleted when a retention period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.
3.1. Informational Use of the Website
When you view our website, we or our hosting provider collect the following data:
For this purpose, we use the services of Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Privacy policy: https://vercel.com/legal/privacy. DPA: https://vercel.com/legal/dpa. The data is stored for fourteen days and then deleted.
This website does not use any type of cookies that process personal data or enable the identification of individuals through other methods.
We use WireDrive to display videos. When you access a video, a connection is established with WireDrive servers. WireDrive is operated by SHIFT Media Holdings, Inc., 374 Congress Street, Suite 506, Boston, MA 02210, USA. Further information: https://www.wiredrive.com/privacy-terms/.
We use Instagram and LinkedIn links on our website (two-click solution). No personal data is passed on until you click the link. The Instagram service is provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Privacy Policy: http://instagram.com/about/legal/privacy/.
The LinkedIn service is provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Dublin 2, Ireland. Privacy Policy: https://www.linkedin.com/legal/privacy-policy.
You can contact us via the email address(es) provided on our website. The user's personal data transmitted with the email will be stored and used exclusively for handling the correspondence. The legal basis is Article 6(1)(a) and (f) of the GDPR.
We process data pertaining to customers, service providers, suppliers, and third parties in accordance with Article 6(1)(b) of the GDPR to provide our contractual or pre-contractual services. Data will only be disclosed to third parties if necessary to fulfill contractual obligations.
We process personal data about you for the purpose of your application for employment, to the extent necessary for the decision regarding the establishment of an employment relationship with us. The legal basis is Section 26(1) in conjunction with Section 8(2) of the BDSG (new).
The data you provide will be stored only for the duration of the evaluation and deleted upon completion, unless further retention is needed. Application data is generally retained for up to 6 months.
10.1. Right of access
You may request confirmation as to whether personal data concerning you is being processed, and request details on its purposes, categories, recipients, storage periods, and origin.
10.2. Right to Rectification
You have the right to request rectification of inaccurate or incomplete personal data concerning you.
10.3. Right to Restriction of Processing
You may request restriction of processing of your personal data under certain conditions, including if you contest its accuracy or object to its processing.
10.4. Right to Erasure
You may request immediate erasure of your personal data if it is no longer necessary for the purposes for which it was collected, consent has been withdrawn, or the data has been unlawfully processed.
10.5. Right to be Informed
The controller is obligated to notify all recipients of your personal data of any rectification, erasure, or restriction of processing.
10.6. Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
10.7. Right to Object
You have the right to object at any time to the processing of personal data concerning you based on Article 6(1)(e) or (f) of the GDPR. To exercise your right to object, send an email to datenschutz@zauberbergproductions.com.
10.8. Right to Withdraw Consent
You have the right to withdraw your consent under data protection law at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
10.9. Automated Decision-Making
You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you.
10.10. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority in the Member State of your habitual residence, place of work, or the place of the alleged infringement.
This Privacy Policy is currently valid and effective as of March 2026. It may be amended due to ongoing development of our website or changes in legal requirements.