← Back to the film

Privacy Policy

Short version: this site sets no cookies, runs no analytics, and contacts no third party until you click a play button or submit the notification form. A few functional settings are stored in your browser, each only when you ask for it (section 5).

1. Controller

Stefan Nitzsche, Schangstraße 2, 45259 Essen, Germany
hello@ambimyth.com

2. Hosting and Server Logs

This site is served from a server operated by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany, on our behalf under a data processing agreement (Art. 28 GDPR). netcup uses further processors within its group — Anexia Holding GmbH and Anexia Cloud Solutions GmbH, in Klagenfurt, Austria, and in Karlsruhe — so the processing stays inside the European Union and no third-country transfer takes place.

Delivering a page necessarily involves your IP address — no server can answer a request without knowing where to send the answer — but this site keeps no access log, so it is not written down. What the server does record is:

The error log is rotated weekly and the last four are kept, so an entry is gone after five weeks at the latest. Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in operating a secure website.

3. Fonts

The typeface neue Serie57 is served from our own server.

4. Embedded Video and Music (YouTube, Spotify)

The trailer and the soundtrack player are shown as placeholders. Only when you click "Play" does your browser connect to one of these providers:

From that moment the provider processes your IP address and may set cookies under its own responsibility. YouTube data may be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework. Spotify AB may transfer data within its corporate group to the United States, safeguarded by EU standard contractual clauses. Legal basis: your consent, Art. 6 (1) (a) GDPR and § 25 (1) TDDDG — for the transfers described, additionally Art. 49 (1) (a) GDPR.

You can withdraw your consent at any time: press "Change" on the player and untick "Remember my choice", and the placeholder returns on your next visit; closing or leaving the page ends a running embed. Withdrawing does not affect the lawfulness of the processing that happened before it.

If you tick "Remember my choice", a flag is stored in your browser’s localStorage under the key tiwiwtd:embeds until you delete it (section 5). It contains no personal data and is never transmitted anywhere.

5. Settings Stored in Your Browser

Three functional settings live in your browser’s localStorage. Each is written only when you ask for it, none contains personal data, none is ever transmitted anywhere, and all of them are yours to delete in your browser settings at any time:

Storing them is strictly necessary for the function you explicitly requested (§ 25 (2) no. 2 TDDDG), which is why no consent banner stands in front of them.

6. Release Notification (Newsletter)

If you enter your email address under "Get notified", it is transmitted to our newsletter service, Brevo. Brevo is operated by Sendinblue SAS, 17 rue Salneuve, 75017 Paris, France, registered in the Paris Trade and Companies Register under number 498 019 298; for customers in Germany the contract, including the data processing agreement, is signed by its German subsidiary Brevo GmbH, Köpenicker Str. 126, 10179 Berlin. Brevo first sends you an email asking you to confirm the sign-up (the "double opt-in"), and only once you have clicked that link are you added to our list and sent the release notification. Until you confirm, nothing is sent to you and no sign-up exists.

Submitting the form connects your browser to Brevo directly, which transmits your IP address and browser identification along with what you typed; the same happens on the confirmation page Brevo shows you afterwards. Brevo processes your address, your confirmation and the time of sign-up on our behalf under a data processing agreement. Legal basis: your consent, Art. 6 (1) (a) GDPR.

Brevo processes your data inside the European Union, but it uses sub-processors outside it — among them Cloudflare, Inc. (USA), which provides the content delivery and firewall layer in front of the sign-up form your data passes through. Those transfers are safeguarded by standard contractual clauses and, where the provider is certified, by the EU-US Data Privacy Framework. Brevo lists its sub-processors in full in its terms of use.

You can unsubscribe with the link in every email or by writing to us; your data is then deleted. Brevo privacy policy

7. Contact by Email

If you write to us, we store your message to answer it. Legal basis: Art. 6 (1) (b) or (f) GDPR. Messages are deleted when the matter is closed, unless statutory retention periods apply.

Links to other websites (e.g. streaming services, Esfera, YouTube) lead to providers with their own privacy policies.

9. Your Rights

Under Art. 15–21 GDPR you have the right to:

You also have the right to lodge a complaint with a supervisory authority — for us the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.

Last updated: 29 August 2026.