Privacy

Data controller

editz Filmproduktion GmbH
Lohacker 15, 82335 Berg, Germany
Email: hello@zimablue.blog

Further operator details are available in the Legal notice.

Which data, and for what purpose?

When you visit a page, the server processes your IP address, the request target and HTTP headers. When you contact us, we process your email address and the contents of your message.

For the planned members’ access, we need your email address to send a one-time code; you cannot sign in without it. The access database stores a protected comparison value derived from the address, a reader identifier, the confirmation time, the end of the five free days and the access status. These data are pseudonymised, not anonymous. To prevent abuse, protected comparison values derived from the email and network addresses, along with request times, are also processed.

Article 6(1)(b) GDPR is the intended legal basis for access and contract-related enquiries. Secure operation, abuse prevention and responses to other enquiries serve our legitimate interests under Article 6(1)(f) GDPR.

Cookies and storage

Only when you sign in is a confirmation cookie set for up to ten minutes, followed by an access cookie for up to seven days. The code is valid for ten minutes. Signing out ends the session and removes the cookies. Section 25(2), no. 2 TDDDG applies to strictly necessary cookies for a service you have expressly requested.

The validity period is not a guaranteed database deletion period: request data older than 15 minutes and used or expired codes are removed when the next code is requested; expired sessions are removed during subsequent sign-in processes. Account data and access rights remain stored for the account and archive; the trial period does not delete them. Binding deletion periods, including for the contact mailbox, hosting logs and backups, have yet to be defined.

Service providers and external content

The website is hosted by Hetzner. The contact mailbox is with Dynadot. Resend is intended for sign-in codes and Stripe for the later one-off access purchase for 5 euros. Recipients, data protection roles, retention periods and any transfers outside the EU or EEA, including their legal bases or safeguards, will be specified before activation. An EU sending region alone does not mean that all processing takes place in the EU.

There is currently no analytics or advertising tracking, no externally loaded fonts and no embedded YouTube videos. The YouTube link opens a third-party website only when you click it.

Your rights

Subject to the GDPR, you may request access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. You may withdraw any consent you have given with effect for the future.

To do so, write to hello@zimablue.blog. You may also lodge a complaint with a data protection supervisory authority, in particular the Bayerisches Landesamt für Datenschutzaufsicht.