Agency for analog & digital presences

Privacy Policy

1. Data Protection, Data Controller, and Data Protection Officer

The following information explains how we collect personal data when you use our website. Personal data includes any information that can be linked to you personally, such as your name, address, email addresses, phone number, and user behavior.

The entity responsible for processing your personal data through this website is the


Die Medien Werkstatt
Owner: Nicola Hieber
Mühlenweg 8, D-54597 Auw bei Prüm
Tel.: +49 (0) 151 158 988 14
Email: info@die-medien-werkstatt.de

You can contact our Data Protection Officer at the email address datenschutz@die-medien-werkstatt.de or at our mailing address, with the note “Attn: Data Protection Officer.”

2. Notice Regarding the Transfer of Data to the United States

Our website incorporates, among other things, tools and plugins from companies based in the United States. When these are active, your personal data may be transferred to the U.S. servers of the respective companies. Please note that the United States is not a “safe third country” under EU data protection law. U.S. companies are required to disclose personal data to law enforcement agencies, and you, as the data subject, would have no legal recourse against this. It therefore cannot be ruled out that U.S. authorities (e.g., intelligence agencies) may process, analyze, and permanently store your data located on U.S. servers for surveillance purposes. We have no control over this processing.

3. Personal Data

(a) When you use the website for informational purposes only—that is, if you do not register or otherwise provide us with information—we collect only the personal data that your browser transmits to our server. When you view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (the legal basis is Article 6(1), first sentence, lit. f of the GDPR):

  • IP address
  • Date and time of the request
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access Status/HTTP Status Code
  • amount of data transferred in each case
  • Website from which the request originates
  • Browser
  • Operating system and its user interface
  • Language and version of the browser software.

For security reasons (e.g., to investigate cases of misuse or fraud), log file information is stored for a maximum of 7 days and then deleted. Data that must be retained for evidentiary purposes is exempt from deletion until the respective incident has been fully resolved. The legal basis for this is Article 6(1)(f) of the GDPR.

(b) Furthermore, we collect personal data only if and to the extent that you voluntarily provide such data to us, for example, when contacting us or submitting a job application. We treat this data as confidential and use it only for the original reason and purpose for which it was provided, typically to process and handle your inquiry. As a general rule, the data is not disclosed to third parties unless required or permitted by law, you have given us your consent, or there is an official order to do so. If your inquiry is directed to one of our group companies, we will, of course, forward your inquiry to that company. If you contact us via email, your email will be stored in our email system. We may store your inquiry and the associated data in our CRM system. The emails themselves are not stored with their content encrypted. Our contact form uses SSL/TLS transport encryption, which you can recognize by the “https” before the URL. Our mail server also supports the standard transport encryption protocols. The legal basis for this is Article 6(1)(b) of the GDPR.

4. Google Analytics

This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables website operators to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, time spent on the site, operating systems used, and the user’s location. Google may aggregate this data into a profile associated with the respective user or their device. Google Analytics uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google regarding the use of this website is generally transmitted to a Google server in the United States and stored there.

The use of this analytics tool is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If consent has been requested (e.g., consent to the storage of cookies), processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR; consent may be withdrawn at any time.

Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses.

You can find details here: https://privacy.google.com/businesses/controllerterms/mccs/.

IP Anonymization

We have enabled the IP anonymization feature on this website. This means that Google truncates your IP address within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before it is transmitted to the United States. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google.

Browser Plugin

You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more information on how Google Analytics handles user data, please see Google’s Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de.

Order Processing

We have entered into a data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities regarding the use of Google Analytics.

Demographic Characteristics in Google Analytics

This website uses the “demographic characteristics” feature of Google Analytics to display relevant ads to website visitors within the Google advertising network. This allows for the creation of reports that provide insights into the age, gender, and interests of site visitors. This data comes from Google’s interest-based advertising as well as from visitor data provided by third parties. This data cannot be linked to any specific individual. You can disable this feature at any time via the ad settings in your Google Account or generally prevent Google Analytics from collecting your data as described in the section “Objecting to Data Collection.”

5. Hosting with Ionos

We host our website with Ionos. The provider is Ionos SE by 1&1, part of the publicly traded company United Internet AG, with its registered office at Elgendorfer Str. 57, 56410 Montabaur (hereinafter: Ionos). When you visit our website, your personal data is processed on Ionos’s servers. In this process, personal data may also be transferred to Ionos’s parent company. The data transfer is based on the EU Standard Contractual Clauses. Details can be found here:  https://www.ionos.de/terms-gtc/terms-privacy

SSL or TLS encryption

For security reasons and to protect the transmission of confidential information—such as orders or inquiries you send to us as the website operator—this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock icon in your browser’s address bar.

If SSL or TLS encryption is enabled, the data you send to us cannot be intercepted by third parties.

6. Video Content

YouTube and Vimeo

We embed videos on our website. The content of these videos is stored directly on the platforms and embedded on our site. When you view such a video, your IP address, technical information such as your browser, operating system, and basic device information, as well as the webpage you visited, are transmitted. In addition, we have embedded the YouTube videos in a privacy-friendly manner using “Enhanced Privacy Mode.”

Personal data is not transmitted until you play a video. Only then is a server connection established with YouTube and Vimeo, and a corresponding cookie is set to save your settings. When you play the videos, you leave our site and enter the external platforms of YouTube and Vimeo, which are beyond our control.

Before you play a video, you will be notified of this again. If you have an account with the video service provider, they may be able to identify you. You can prevent this by logging out of your account before playing a video.

The legal basis for enabling these videos is your consent pursuant to Article 6(1)(a) of the GDPR, which is linked to your consent to the use of cookies.

The provider of the YouTube platform
is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For more information on Google/YouTube’s privacy policy, click here: https://www.google.com/policies/privacy/. You can opt out of advertising in general here:
https://adssettings.google.com/authenticated.

The provider of the Vimeo platform
is Vimeo, LLC, 555 West 18th Street, New York, NY 10011, USA. For more information on Vimeo’s privacy policy, please visit: https://livestream.com/legal/cookie-preferences.

7. Use of AI Tools

As part of our services, we use AI-powered tools, including ChatGPT/OpenAI, Claude/Anthropic, Midjourney, Perplexity, HeyGen, Gemini/Google, and Make. These tools assist us in creating text, images, code, or other content as part of fulfilling orders for our clients.

To the extent that personal data is processed in this context, such processing is based on Article 6(1)(b) of the GDPR (performance of a contract) or Article 6(1)(f) of the GDPR (legitimate interest in the efficient and timely provision of services).

Where necessary, we have entered into data processing agreements with the respective providers of the AI tools we use, in accordance with Article 28 of the GDPR.

Some of the AI providers we use are headquartered or have server locations in the United States or other third countries outside the EU/EEA. Unless an adequacy decision (e.g., the EU-U.S. Data Privacy Framework) applies, data transfers are based on the European Commission’s EU Standard Contractual Clauses. In this regard, the same information applies as in Section 2 of this Privacy Policy regarding data transfers to the U.S. (see above)

Personal data of customers or third parties (e.g., from briefings or customer documents) is entered into AI tools only if it is necessary for the provision of services and does not conflict with the legitimate interests of the data subjects. Particularly sensitive data (Art. 9 GDPR) is generally not entered into AI tools.  

Any client may expressly object to the use and application of AI before the project begins. 

8. Your Rights

(1) Right of Access: You have the right at any time, pursuant to Article 15 of the GDPR, to request information regarding whether we process your personal data. If this is the case, we are subject to additional obligations to provide information.

(2) Right to Rectification: You also have the right to have your data rectified under Article 16 of the GDPR, to have your data erased under Article 17 of the GDPR, and to have the processing of your data restricted under Article 18 of the GDPR, provided that no other legal requirements preclude this.

(3) Right to erasure: Of course, you may withdraw your consent to the processing of your data, which you provided pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR, at any time without providing a reason. This does not affect the lawfulness of the processing prior to the withdrawal.

(4) Right to restriction of processing: In the following cases, you may contact us regarding a restriction of processing in accordance with Article 18 of the GDPR:

  • They have disputed the accuracy of the data, and we are not to use it further in the meantime, pending a final review.
  • The processing is unlawful, but you do not wish to have the data erased; instead, you prefer that the processing be restricted
  • We no longer need the data and would like to delete it, but you still need it to assert, exercise, or defend legal claims.
  • You have filed an objection to the data processing, but it is still under review.

In the event of a restriction, we ensure that we cannot further process or modify the personal data. If the restriction on processing has been imposed in accordance with the above conditions, the controller will notify you before the restriction is lifted.

(5) Right to Data Portability: You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format and, where applicable, to transmit it to third parties. The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, in accordance with Article 20 of the GDPR.

(6) Right to Object: In addition, particularly in cases where processing is based on Article 6, paragraph 1, subparagraph (e) or (f) of the GDPR, you have the right under Article 21 of the GDPR to object to the processing of your data. If you exercise this right to object, please explain the reasons why we should not process your personal data as we currently do. In the event of a justified objection, we will review the situation and either cease or adjust the data processing, or explain to you our compelling legitimate grounds on the basis of which we will continue the processing.

(7) Right to File a Complaint: You also have the right to file a complaint with the supervisory authority responsible for you, which you can find here (https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html). In our case, the State Commissioner for Data Protection and Freedom of Information in Rhineland-Palatinate (LfDI RLP), P.O. Box 30 40, 55020 Mainz, Germany, is the appropriate contact.

The rights described in Section 8 (including the right to access, rectification, erasure, and objection) also apply to personal data processed in connection with the use of AI tools. If you have any questions regarding processing in connection with AI tools, you may contact the Data Protection Officer listed in Section 1.

9. Data Collection on This Website

Cookies

Our website uses so-called “cookies.” Cookies are small data packets that do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser deletes them automatically.

Cookies may be set by us (first-party cookies) or by third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain third-party services into websites (e.g., cookies used to process payment services).

Cookies serve various purposes. Many cookies are technically necessary, as certain website features would not work without them (e.g., the shopping cart feature or the display of videos). Other cookies may be used to analyze user behavior or for advertising purposes.

Cookies that are necessary for carrying out the electronic communication process, for providing certain functions you have requested (e.g., the shopping cart function), or for optimizing the website (e.g., cookies for measuring website traffic) (necessary cookies), are stored on the basis of Art. 6(1)(f) of the GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically flawless and optimized provision of its services. If consent to the storage of cookies and similar recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG); consent may be revoked at any time.

You can configure your browser to notify you when cookies are set and to allow cookies only on a case-by-case basis, to block cookies in specific cases or generally, and to enable the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website.

If other cookies and services are used on this website, you can find that information in this Privacy Policy.

You can revoke or change your selection at any time in Settings.

Contact Form

If you submit inquiries to us via the contact form, we will store the information you provide in the inquiry form—including the contact information you provide there—for the purpose of processing your inquiry and in case we have follow-up questions. We will not share this information without your consent.

The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your inquiry is related to the performance of a contract or is necessary for the implementation of precontractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR), provided that consent was requested; consent may be withdrawn at any time.

The data you enter in the contact form will remain with us until you request that we delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions—in particular retention periods—remain unaffected.

Inquiries by email, phone, or fax

If you contact us by email, phone, or fax, we will store and process your inquiry, including all personal data contained therein (name, inquiry), for the purpose of handling your request. We will not disclose this data without your consent.

The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your inquiry is related to the performance of a contract or is necessary for the implementation of precontractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR), provided that consent was requested; consent may be withdrawn at any time.

The data you send us via contact requests will remain with us until you request that we delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory legal provisions—in particular statutory retention periods—remain unaffected.

10. Fonts

Google Fonts (local hosting)

This site uses so-called Google Fonts, provided by Google, to ensure consistent font display. The Google Fonts are installed locally. No connection is made to Google’s servers.

For more information about Google Fonts, visit https://developers.google.com/fonts/faq and see Google’s Privacy Policy: https://policies.google.com/privacy?hl=de.

Font Awesome (local hosting)

This site uses Font Awesome to ensure consistent font display. Font Awesome is installed locally. No connection is made to servers operated by Fonticons, Inc.

For more information about Font Awesome, please see the Font Awesome Privacy Policy at: https://fontawesome.com/privacy.

11. Note on Preparation

This Privacy Policy was prepared with the support of DGD Deutsche Gesellschaft für Datenschutz EOOD – Website: https://dg-datenschutz.de – Email: info@dg-datenschutz.de(which is known as External Data Protection Officer based in Ingolstadt, in cooperation with the IT and data protection law attorney Christian Solmecke drafted this document and, in some cases, supplemented or expanded it. Free information was also provided by the source  https://www.e-recht24.de is used.

As of June 2026

Scroll to Top