← Back to the film

Privacy Policy

Short version: this site sets no cookies, runs no analytics, and contacts no third party until you click a play button. Signing up for the newsletter happens on a page of our email service, Brevo (section 6). A few functional settings are stored in your browser, each only when you ask for it (section 5).

1. Controller

Stefan Nitzsche, Schangstraße 2, 45259 Essen, Germany
hello@ambimyth.com

2. Hosting and Server Logs

This site is served from a server operated by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany, on our behalf under a data processing agreement (Art. 28 GDPR). netcup uses further processors within its group — Anexia Holding GmbH and Anexia Cloud Solutions GmbH, in Klagenfurt, Austria, and in Karlsruhe — so the processing stays inside the European Union and no third-country transfer takes place.

Delivering a page necessarily involves your IP address — no server can answer a request without knowing where to send the answer — but this site keeps no access log, so it is not written down. What the server does record is:

The error log is rotated weekly and the last four are kept, so an entry is gone after five weeks at the latest. Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in operating a secure website.

3. Fonts

The typeface neue Serie57 is served from our own server.

4. Embedded Video and Music (YouTube, Spotify)

The trailer and the soundtrack player are shown as placeholders. Only when you click “Play” does your browser connect to one of these providers:

From that moment the provider processes your IP address and may set cookies under its own responsibility. YouTube data may be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework. Spotify AB may transfer data within its corporate group to the United States, safeguarded by EU standard contractual clauses. Legal basis: your consent, Art. 6 (1) (a) GDPR and § 25 (1) TDDDG — for the transfers described, additionally Art. 49 (1) (a) GDPR.

You can withdraw your consent at any time: press “Change” on the player and untick “Remember my choice”, and the placeholder returns on your next visit; closing or leaving the page ends a running embed. Withdrawing does not affect the lawfulness of the processing that happened before it.

If you tick “Remember my choice”, a flag is stored in your browser’s localStorage under the key tiwiwtd:embeds until you delete it (section 5). It contains no personal data and is never transmitted anywhere.

5. Settings Stored in Your Browser

Three functional settings live in your browser’s localStorage. Each is written only when you ask for it, none contains personal data, none is ever transmitted anywhere, and all of them are yours to delete in your browser settings at any time:

Storing them is strictly necessary for the function you explicitly requested (§ 25 (2) no. 2 TDDDG), which is why no consent banner stands in front of them.

6. Newsletter

Our newsletter brings news about the film: its release on YouTube and Esfera, screenings and festivals, the soundtrack, and the occasional look behind the scenes. A few emails a year. It is sent through Brevo, operated by Sendinblue SAS, 17 rue Salneuve, 75017 Paris, France, registered in the Paris Trade and Companies Register under number 498 019 298; for customers in Germany the contract, including the data processing agreement, is signed by its German subsidiary Brevo GmbH, Köpenicker Str. 126, 10179 Berlin.

You do not sign up on this site, and this site transmits nothing. The “Sign up” button takes you to a sign-up page that Brevo hosts for us. There you enter your email address and give your consent. Brevo then sends you an email asking you to confirm (the “double opt-in”); only once you have clicked the link in it are you on our list. Until then nothing is sent to you and no sign-up exists. Brevo processes your address, your consent and the times of sign-up and confirmation on our behalf under a data processing agreement (Art. 28 GDPR). Legal basis: your consent, Art. 6 (1) (a) GDPR.

To keep automated sign-ups out, the sign-up page uses Cloudflare Turnstile, a check that runs in your browser without puzzles. For it, Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, processes your IP address, your browser identification and technical characteristics of your connection. Cloudflare does this on our behalf and, according to its own terms, also as a controller of its own to improve its bot detection. Legal basis: our legitimate interest in protecting the sign-up from misuse, Art. 6 (1) (f) GDPR; reading this information from your browser is strictly necessary for the sign-up you asked for (§ 25 (2) no. 2 TDDDG). Cloudflare is certified under the EU-US Data Privacy Framework. Cloudflare Turnstile privacy addendum

Brevo processes your data inside the European Union, but it uses sub-processors outside it — among them Cloudflare, Inc. (USA), which provides the content delivery and firewall layer in front of the sign-up form your data passes through. Those transfers are safeguarded by standard contractual clauses and, where the provider is certified, by the EU-US Data Privacy Framework. Brevo lists its sub-processors in full in its terms of use.

You can unsubscribe with the link in every email or by writing to us; your data is then deleted. Brevo privacy policy

7. Contact by Email

If you write to us, we store your message to answer it. Legal basis: Art. 6 (1) (b) or (f) GDPR. Messages are deleted when the matter is closed, unless statutory retention periods apply.

Links to other websites (e.g. streaming services, Esfera, YouTube) lead to providers with their own privacy policies.

9. Your Rights

Under Art. 15–21 GDPR you have the right to:

You also have the right to lodge a complaint with a supervisory authority — for us the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.

Last updated: 29 August 2026.