Privacy Policy
Effective as of: 27 June 2025
Thank you for your interest in MeinFilmLab. Protecting your personal data is very important to us. Below, we provide detailed information about the collection, processing, and use of your data in connection with our website and services, in accordance with the EU General Data Protection Regulation (GDPR).
1. Controller according to Art. 4(7) GDPR
MeinFilmLab
Jörg Bergs
Broichstraße 5
52393 Hürtgenwald
Germany
Phone: +49 (0)2429 9090566
Email: office@meinfilmlab.de
2. Collection and Processing of Personal Data
We process personal data for the fulfillment of contractual obligations (Art. 6(1)(b) GDPR), for the protection of legitimate interests (Art. 6(1)(f) GDPR), for the fulfillment of legal obligations (Art. 6(1)(c) GDPR), and based on your consent (Art. 6(1)(a) GDPR).
Processed data includes:
-
Name, address, email address, phone number (for communication & invoicing)
-
Payment data (for accounting and legal retention)
-
IP address, browser data (log files)
-
Order details (type of film, scan options, special requests)
3. Data Processing in the Context of Orders
To fulfill contractual obligations, we process the order data you provide. The completed scans are either made available via an individual download link online or—upon explicit request—sent by post on a data carrier (e.g., USB stick). The files remain available for download for 20 business days. After this period, they are completely deleted from both our internet server and internal IT systems. A permanent archive of image data is not maintained.
TIFF files are delivered exclusively on data carriers. Shipping is handled via DHL or Deutsche Post. Our express service covers only the prioritized processing up to the point of online availability of the scans; the shipping process is not partof the express service.
Image data provided for print orders is also deleted after 20 business days.
4. Storage of Analog Material
Submitted materials (negatives, films) are handled as specified on the order form:
-
Stored until the end of the year for a storage fee
-
Returned to the customer, or
-
Destroyed after processing
There is no legal obligation to retain films or developed negatives.
5. Server Log Files and Hosting
Our hosting is provided by DomainFactory GmbH. With every page visit, the following data is automatically collected:
-
IP address (anonymized)
-
Browser type and version
-
Operating system
-
Referrer URL
-
Date and time of access
These log files are stored for 7 days to ensure operational security and then deleted.
6. Newsletter
We offer a newsletter to inform you about new services and offers. This requires your explicit consent pursuant to Art. 6(1)(a) GDPR.
-
Registration follows the double opt-in procedure
-
Stored data: email, name, IP address, registration date
-
Newsletter tracking (e.g., open rate, clicks) is performed
-
You may unsubscribe at any time; your data will then be deleted
7. Web Tracking and Cookies
Our website uses:
-
Google Tag Manager
-
Google Analytics (IP anonymization enabled)
-
Facebook Pixel (Meta Platforms Ireland Ltd.)
These services are only activated with your consent via the cookie banner (Art. 6(1)(a) GDPR).
We use a consent management tool that records and stores your selection. You may revoke or adjust your settings at any time using the cookie banner.
8. Social Media (Facebook, Instagram)
We operate active accounts on Facebook and Instagram.
Provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. Meta may process data outside the EU.
Please note that your use of these platforms is at your own responsibility. The privacy policy of Meta applies:
https://www.facebook.com/policy.php
Integration of Instagram Content
Our website includes features and content from Instagram (provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland). When you visit a page with embedded Instagram content, your IP address is transmitted to Meta. If you are logged in to Instagram, the platform may associate your visit to our website with your Instagram user account.
For more information, please refer to Instagram’s Privacy Policy.
9. Data Processors & Third-Party Transfers
-
Hosting: DomainFactory GmbH
-
Shipping: Deutsche Post / DHL
-
Accounting: Certified tax advisor via DATEV
All service providers are bound by data processing agreements in accordance with Art. 28 GDPR.
10. Data Retention and Deletion
| Data Type | Retention Period |
|---|---|
| Scans / Files | 20 business days from availability |
| Films (storage) | Up to 12 months if requested |
| Accounting data | 10 years (in accordance with AO / HGB) |
| Log files | 7 days |
| Newsletter data | Until revoked |
| Customer communication | 3 years |
11. Your Rights
You have the following rights at any time:
-
Right of access (Art. 15 GDPR)
-
Right to rectification (Art. 16 GDPR)
-
Right to erasure (Art. 17 GDPR)
-
Right to restriction of processing (Art. 18 GDPR)
-
Right to data portability (Art. 20 GDPR)
-
Right to object to processing (Art. 21 GDPR)
-
Right to withdraw consent (Art. 7(3) GDPR)
Please direct your request to: office@meinfilmlab.de
12. Right to Lodge a Complaint
You have the right to lodge a complaint with the relevant data protection authority:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Kavalleriestraße 2-4, 40213 Düsseldorf
Website: https://www.ldi.nrw.de
13. Updates to This Privacy Policy
This privacy policy is effective as of 27 June 2025.
We reserve the right to update it to reflect legal, technical, or service-related changes.