Privacy policy
1 Data protection at a glance
1.1 General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information can be found in the sections below.
1.2 Who is responsible for the data collection on this website?
The data processing on this website is carried out by the website operator, whose contact details can be found in section 3.2 and in the legal notice.
1.3 How do we collect your data?
Some data is collected when you send it to us, for example by email. Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. browser, operating system, time of the page request).
1.4 What do we use your data for?
The data is used to provide the website without errors and to protect it against attacks, and to answer your enquiries. This website does not use any tracking, analysis or advertising tools.
1.5 What rights do you have?
You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, deletion or restriction of the processing of this data, and the right to lodge a complaint with the competent supervisory authority. Details can be found in section 3.
2 Hosting
This website is hosted by DomainFactory GmbH, c/o WeWork, Neuturmstraße 5, 80331 Munich, Germany („DomainFactory“). When you visit this website, the personal data collected (e.g. IP addresses, page requests, meta and communication data) are processed on DomainFactory’s servers in Germany.
The use of DomainFactory is based on Art. 6 (1) (f) GDPR. We have a legitimate interest in a reliable, secure and efficient presentation of our website. For details, please refer to DomainFactory’s privacy policy: df.eu/de/datenschutz.
Data processing agreement
We have concluded a data processing agreement (DPA) with DomainFactory in accordance with Art. 28 GDPR. It ensures that DomainFactory processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.
3 General information and mandatory information
3.1 Data protection
We take the protection of your personal data very seriously and treat it confidentially and in accordance with the statutory data protection regulations and this privacy policy. Please note that data transmission over the internet (e.g. by email) may have security gaps. Complete protection of data against access by third parties is not possible.
3.2 Controller
The controller responsible for data processing on this website is:
Gold Berlin
Agentur für Schauspieler
Cornelia Otte & Kristina Richter
Marienburger Straße 8
10405 Berlin
Phone: +49 30 32664427
Email: kontakt@goldberlin.de
The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
3.3 Storage period
Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose of the processing no longer applies. If you request deletion or revoke your consent, your data will be deleted unless we have other legally permissible reasons for storing it (e.g. retention periods under tax or commercial law).
3.4 Revocation of your consent
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The lawfulness of the data processing carried out until the revocation remains unaffected.
3.5 Right to object to data processing in special cases and to direct advertising (Art. 21 GDPR)
IF THE DATA PROCESSING IS BASED ON ART. 6 (1) (E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 (1) GDPR). IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THIS AT ANY TIME (ART. 21 (2) GDPR).
3.6 Right to lodge a complaint with a supervisory authority
In the event of violations of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged violation. For us, the competent authority is the Berlin Commissioner for Data Protection and Freedom of Information.
3.7 Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format.
3.8 Information, correction and deletion
Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipients and the purpose of the data processing at any time, and, if applicable, a right to correction or deletion of this data.
3.9 Right to restriction of processing
You have the right to request the restriction of the processing of your personal data, in particular if you dispute the accuracy of the data, if the processing is unlawful, if we no longer need the data but you need it to assert, exercise or defend legal claims, or if you have lodged an objection pursuant to Art. 21 (1) GDPR and it has not yet been determined whose interests prevail.
3.10 SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by „https://“ in the address line of your browser and the lock symbol.
3.11 Objection to advertising emails
We hereby object to the use of the contact data published in the legal notice for sending unsolicited advertising and information material.
4 Data collection on this website
4.1 Cookies
This website does not set any cookies for analysis, marketing or advertising purposes for its visitors. Technically necessary cookies are only set when the editorial team logs into the website administration. Their use is based on Art. 6 (1) (f) GDPR and § 25 (2) TDDDG.
4.2 Server log files
Our hosting provider automatically collects and stores information in server log files that your browser transmits to us automatically: browser type and version, operating system, referrer URL, host name of the accessing computer, time of the server request and IP address. This data is not merged with other data sources. It is collected on the basis of Art. 6 (1) (f) GDPR; we have a legitimate interest in the technically error-free presentation and the security of our website.
4.3 Enquiries by email or phone
If you contact us by email or phone, your enquiry including all resulting personal data (name, enquiry, application documents if applicable) will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent. The processing is based on Art. 6 (1) (b) GDPR if your enquiry is related to the performance of a contract or necessary for pre-contractual measures (e.g. an application for representation); otherwise on our legitimate interest in handling enquiries (Art. 6 (1) (f) GDPR). The data remains with us until you ask us to delete it or the purpose no longer applies; mandatory statutory provisions remain unaffected.
5 Website security: Wordfence
To protect this website against attacks, we use the WordPress security plugin Wordfence. The provider is Defiant, Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA. The firewall runs on our server and checks requests to the website; in doing so it processes in particular IP addresses, requested URLs, browser information and the time of access. To keep its protection up to date, the plugin connects to Defiant’s servers; in this process, data such as IP addresses of attackers may be transmitted to the USA. The use is based on Art. 6 (1) (f) GDPR; we have a legitimate interest in protecting our website against attacks. Data transfers to the USA are based on the EU standard contractual clauses. Further information: wordfence.com/privacy-policy.
6 Instagram
On our home page we show our latest Instagram posts. The images are retrieved by our server and stored and delivered on our own server. When you view the website, no connection is established to Instagram or Meta. Only when you click on a post or our profile name will you be taken to Instagram, a service of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. From that point on, Instagram’s privacy policy applies: privacycenter.instagram.com/policy.
Links to the Instagram, Facebook or IMDb profiles of the actors and actresses are plain links. Data is only transmitted to the respective provider when you click on them.
7 Fonts
This website uses the fonts Poppins and Quicksand. They are stored on our own server and loaded from there. No connection to Google or other third-party servers is established.