NASSKUNST

Privacy

Updated: 24 October 2026

Data controller

FF Pictures GmbH, Max-Planck-Str. 17, 85716 Unterschleißheim, Germany. Managing Director: Florian Friedrich. Contact:

Visiting the website

When you visit this website, our hosting provider processes connection data required for technical purposes, including your IP address, the time of the request, the address requested, browser information and, where applicable, the page you visited previously. This serves to deliver the website, keep it secure and diagnose errors. The legal basis is our legitimate interest in providing a secure, functioning website under Article 6(1)(f) GDPR.

The website is hosted by Hostinger. Hostinger processes hosting data on our behalf. Technical log data is retained only for as long as required for the relevant operational and security purposes.

Project film and YouTube link

The project film and its preview image are served directly by nasskunst.com. Loading and playing the film does not establish a connection to YouTube. Delivery of the video file is covered by the information on hosting and server logs above.

The “Watch directly on YouTube” link takes you to the external YouTube website. You only visit YouTube when you follow that link. Google’s Privacy Policy applies there.

Optional analytics with Google Analytics

If you choose “Allow analytics” in the analytics section, we use Google Analytics 4 to understand how this website is used. Without your permission, neither the Google tag nor an analytics connection to Google is loaded. The website, film controls and enquiry form also work without analytics. Fonts and page styles are served locally.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. After you consent, the data processed may include device and browser information, pages visited, language, approximate region and selected interactions, such as opening an artwork view, starting the film or visiting and using the enquiry form. Names, email addresses and messages entered in the form are not sent to Google. Our events do not transmit arbitrary URL parameters. After consent, the website briefly retains selected interactions in the open tab’s session storage so they survive a page change. It does not create a separate visitor identifier. Google Signals, advertising personalisation and user-provided data collection are not used.

The legal bases are your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. Your analytics choice is stored in a cookie on this domain for up to six months; Analytics cookies are limited to up to 60 days. User and event data retention in the property is two months. You can change your choice at any time through “Analytics settings” in the footer. Withdrawing consent disables measurement, deletes this website’s Analytics cookies and reloads the page. This does not retrieve data already transmitted.

Google LLC may process data in the United States. Google LLC is certified under the EU–US Data Privacy Framework; Google also uses standard contractual clauses. Further information: Google’s privacy policy and Google Analytics and EU privacy.

Contact form and email

When you use our enquiry form, we process your email address, your message, the subject you select and, if you choose to provide it, your name. When you write to us, we use your information to handle your enquiry and, where applicable, to prepare or perform a contract (Article 6(1)(b) GDPR). For other enquiries, processing is based on our legitimate interest under Article 6(1)(f) GDPR. We delete correspondence when it is no longer needed, unless statutory retention obligations require us to keep it.

The form uses a technically necessary session cookie to protect against submissions from other websites and duplicate submissions. It is used solely to operate the form (Section 25(2) no. 2 TDDDG), rather than to measure visits. The session is limited to one hour. We store short-term counters to limit abuse; the form processing does not maintain its own list of IP addresses.

Accepted enquiries are saved on our hosting outside the public website directory and forwarded by email to the address provided in the contact section. This technical backup is removed when the form is next accessed after a maximum retention period of 90 days. Subsequent correspondence is subject to the processing and retention purposes described above.

Your rights

Subject to the applicable legal requirements, you have the right of access, rectification, erasure, restriction of processing and data portability, as well as the right to object to processing based on legitimate interests. You may withdraw your consent at any time with effect for the future. Please use the contact option provided above. You may also lodge a complaint with a data protection supervisory authority; the authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht).