Privacy Policy
This site sets no cookies, measures no traffic and loads nothing from third-party servers when you open it. What happens beyond that is set out here.
Last updated: September 2026
1. Privacy at a glance
General information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to the full privacy policy below this text.
Data collection on this website
Who is responsible for collecting data on this website?
Data processing on this website is carried out by the website operator. You will find the operator's contact details in the legal notice (Impressum) of this website.
How do we collect your data?
Some of your data is collected because you provide it to us, for example through our request form. Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. browser, operating system or the time the page was accessed). It is collected automatically as soon as you enter this website.
What do we use your data for?
Part of the data is collected to ensure that the website is provided without errors. Other data is used to process the requests you send through the request form. Your user behaviour is not analysed.
What rights do you have regarding your data?
You have the right, at any time and free of charge, to obtain information about the origin, recipients and purpose of your stored personal data. You also have the right to request that this data be corrected or deleted. If you have given consent to data processing, you can withdraw that consent at any time with effect for the future. You also have the right to request that the processing of your personal data be restricted in certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority. For this and for any other questions on data protection, you may contact us at any time at the address given in the legal notice.
2. Hosting
We host the content of our website with the following provider:
netcup
The provider is netcup GmbH, Emmy-Noether-Strasse 10, 76131 Karlsruhe, Germany (hereinafter "netcup"). When you visit our website, netcup records various log files including your IP address. For details, please see netcup's privacy policy: https://www.netcup.com/de/kontakt/datenschutzerklaerung
netcup is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in our website being displayed as reliably as possible. Where corresponding consent has been requested, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as that consent covers the storage of cookies or access to information on the user's device within the meaning of the TDDDG. Consent may be withdrawn at any time.
Data processing agreement
We have concluded a data processing agreement (DPA) with the provider named above. This is a contract required by data protection law which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
3. General information and mandatory disclosures
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with statutory data protection regulations and this privacy policy. When you use this website, various items of personal data are collected. This privacy policy explains what data we collect, what we use it for and how this is done. We point out that data transmission over the internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.
Controller
The controller responsible for data processing on this website is:
Supergreen Studio GbR
Represented by: Tobias Schult, Robin Kater
Wilhelmhallen
Kopenhagener Str. 60-68
13407 Berlin, Germany
Phone: +49 151 155 859 05
E-mail: booking@supergreenstudio.de
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
Storage period
Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for processing it no longer applies. If you assert a justified request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing it (e.g. retention periods under tax or commercial law); in the latter case, deletion takes place once those grounds no longer apply.
General information on the legal bases for data processing on this website
Insofar as you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR. In the case of explicit consent to the transfer of personal data to third countries, processing additionally takes place on the basis of Art. 49(1)(a) GDPR. Insofar as you have consented to the storage of cookies or to access to information on your device, processing additionally takes place on the basis of Section 25(1) TDDDG. Consent may be withdrawn at any time. Where your data is required for the performance of a contract or for pre-contractual measures, we process it on the basis of Art. 6(1)(b) GDPR. We also process your data where this is necessary to fulfil a legal obligation, on the basis of Art. 6(1)(c) GDPR. Processing may furthermore take place on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.
Note on data transfer to the USA
A service operated by a company based in the USA is integrated into our website (Google Maps). When this service is active, your personal data may be transferred to that company's US servers. The USA is not a safe third country within the meaning of EU data protection law. US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities process, evaluate and permanently store your data held on US servers for surveillance purposes. We have no influence over these processing activities.
Withdrawal of your consent to data processing
Many data processing operations are only possible with your explicit consent. You may withdraw consent you have already given at any time. The lawfulness of the data processing carried out prior to withdrawal remains unaffected by the withdrawal.
Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)
If data processing takes place on the basis of Art. 6(1)(e) or (f) GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (objection pursuant to Art. 21(1) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement. This right exists without prejudice to any other administrative or judicial remedy. The competent supervisory authority for Berlin is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.
Information, deletion and correction
Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, where applicable, a right to correction or deletion of this data. You may contact us at any time for this purpose at the address given in the legal notice.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. You may contact us at any time for this purpose at the address given in the legal notice. The right exists in particular while the accuracy of your data is being verified after you have disputed it, in the case of unlawful processing, where you need the data to assert legal claims although we no longer require it, or for as long as an objection pursuant to Art. 21(1) GDPR has not yet been decided.
SSL / TLS encryption
For security reasons and to protect the transmission of confidential content, such as requests you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser's address line changes from "http://" to "https://" and by the lock symbol in your browser line. When SSL or TLS encryption is active, the data you transmit to us cannot be read by third parties.
4. Data collection on this website
Cookies
This website sets no cookies of its own and uses no comparable storage technologies such as local storage or session storage. There is no audience measurement and no statistical or marketing evaluation.
Cookies can only be set if you actively load the Google Maps map view (see the "Google Maps" section). This happens only after your consent pursuant to Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. As long as you do not load the map, no cookies are set.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- browser type and browser version
- operating system used
- referrer URL
- host name of the accessing computer
- time of the server request
- IP address
This data is not merged with other data sources. It is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website; server log files must be recorded for this purpose.
Request form
On this website you can send us a studio request using a request form. The details you enter (name or company, e-mail address, optionally a phone number, preferred dates, type of production, number of people as well as your voluntary notes on equipment and remarks) are transmitted to our mailbox address.
The details are sent by e-mail only. They are not stored in a database and not stored on the web server. They are not passed on to third parties; the e-mail is sent via our hosting provider (see the "Hosting" section). We automatically send a copy of your request to the e-mail address you provided as a confirmation of receipt.
To protect against automated submissions, the form contains a hidden field and a timing check. Both evaluate technical characteristics of the submission process only; no profiling takes place.
This data is processed on the basis of Art. 6(1)(b) GDPR where your request relates to the performance of a contract (e.g. a studio booking) or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling the enquiries addressed to us (Art. 6(1)(f) GDPR).
The data you send remains in our e-mail mailbox until you ask us to delete it, you withdraw your consent, or the purpose for storing it no longer applies (e.g. once your booking request has been dealt with). Mandatory statutory retention periods, such as commercial and tax law obligations in the case of bookings that have been concluded, remain unaffected.
Enquiry by e-mail or telephone
If you contact us by e-mail or telephone, your enquiry including all resulting personal data will be stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent. The legal bases and deletion periods stated in the preceding section apply accordingly.
5. Social media
On this website we link to our profile on the Instagram service, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
This is a plain link, not an embedding of Instagram content. Simply visiting our website does not transmit any data to Instagram. Only when you click the link and open the Instagram page does Instagram process your data as an independent controller. We have no influence over this processing.
You can find information about this in Instagram's privacy policy: https://privacycenter.instagram.com/policy
6. Plugins and tools
Google Fonts (hosted locally)
This site uses so-called Google Fonts, provided by Google, for a consistent display of typefaces. The Google Fonts are installed locally on our server. No connection to Google servers takes place in the process.
Further information on Google Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=en
Google Maps
This site uses the map service Google Maps. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
The map is not loaded automatically. When you open our website, no connection to Google is established at first. Only when you actively load the map with a click is a connection to Google's servers established. Your IP address is transmitted to Google in the process; this information is generally transferred to a Google server in the USA and stored there. We as the provider of this site have no influence over this data transfer.
The legal basis for loading the map is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG, which you give by actively loading the map. Consent may be withdrawn at any time with effect for the future; simply reload the page without activating the map.
The transfer of data to the USA is based on the European Commission's standard contractual clauses. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/
For more information on how user data is handled, please see Google's privacy policy: https://policies.google.com/privacy?hl=en
No analytics or tracking tools
No analytics, tracking or audience measurement tools are used on this website. Your user behaviour is not evaluated.
This privacy policy was created on the basis of a template by e-recht24.de and adapted to the services actually used by Supergreen Studio.