YOUR DATA

Privacy

Last updated: 7 October 2026

Data controller

FF Pictures GmbH, Max-Planck-Str. 17, 85716 Unterschleißheim, Germany. For questions about your data: kontakt@ff.de, phone +49 89 / 122 287 141.

Website access and hosting

This website is hosted by Hostinger. Access involves processing technically necessary connection data, including IP address, time, requested URL, browser information and status messages. This supports the delivery, stability and security of the website. The legal basis is Article 6(1)(f) GDPR. Details about the hosting provider’s processing are available in Hostinger’s privacy policy.

Your enquiry

When you contact us, we process your email address and message, plus optional details such as your name, device model, postcode and desired package. This allows us to handle your enquiry and prepare a quotation. The legal basis is Article 6(1)(b) GDPR for pre-contractual or contractual enquiries, or Article 6(1)(f) GDPR for responding to other contact requests.

Form submissions are stored with access protection on our hosting and sent to the responsible FF Pictures mailbox. Recipients are service providers or staff involved in hosting, email operations and handling enquiries. We do not use your enquiry to sign you up for a newsletter or sell your contact details.

Technical form protection

The enquiry form uses a necessary session cookie to securely link the form visit and submission. It expires after no more than one hour. To limit misuse, a short protection log containing a hashed IP address is kept temporarily and removed on the next form visit after 24 hours. The legal basis is Article 6(1)(f) GDPR; the necessary cookie supports the explicitly requested form function under section 25(2) TDDDG.

Retention periods

Each form visit removes technical protection data older than 24 hours and entries in the additional form archive older than 90 days. Enquiries in the email mailbox are deleted when no longer needed for processing, unless statutory retention duties or legitimate grounds require otherwise. Statutory retention duties may apply to contractual and business records.

Analytics only with your consent

With your consent, we use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to understand page visits and how our service is used. Data includes visited pages, language, device and browser information, and selected interactions: package selection, revealing contact details, the comparison slider and successfully stored enquiries. Message contents, contact details and enquiry references are not sent to Analytics. URLs are transmitted without query parameters or fragments.

We do not load any Google analytics service before you consent. Advertising features and Google Signals are disabled. After consent, Analytics stores its identifiers in cookies for up to 180 days. Your choice is also saved for 180 days in a necessary cookie. The legal basis is Article 6(1)(a) GDPR and section 25(1) TDDDG. You can refuse or withdraw consent for the future at any time via “Privacy settings” in the footer. Withdrawal does not affect processing that has already taken place.

Google may also process data in the United States. For transfers, Google relies in particular on the EU-US Data Privacy Framework and, where applicable, standard contractual clauses. Further information is available in Google’s privacy policy. We use the existing retention settings of the FF Pictures Analytics property: two months for event data and 14 months for user data, with that period restarting on new user activity; aggregated reports may be retained longer.

For linked service pages, we also submit a fixed service or creative identifier and source category with your enquiry. These help us understand its context and contain no freely entered search terms. With your analytics consent, we also record these categories for page views, opening and starting the form, and successfully stored enquiries.

Local content and revealing contact details

Fonts and images are served locally. On service pages, email addresses and phone numbers are loaded from our own server only after a click. This does not prevent all automated access. Mandatory contact details remain directly accessible in the imprint. External links are subject to the privacy information of the respective provider.

Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction of processing and data portability. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. You can withdraw consent for future processing. You may also complain to a data protection supervisory authority, such as the Bavarian State Office for Data Protection Supervision.