Privacy Policy

1. Introduction

IOA Documentary Films ("we", "us", or "our") operates this website in accordance with the European General Data Protection Regulation (GDPR / DSGVO) and the German Federal Data Protection Act (BDSG). This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website or use our services.

2. Responsible Party

Responsible for data processing on this website within the meaning of the GDPR is:

IOA Documentary Films
[Filmmaker Name]
[Street Address]
[Postal Code] [City], Germany
Email: info@ioadocumentaryfilms.com

3. Data We Collect

We collect and process the following categories of personal data:

• Contact data: Name and email address when you submit an inquiry via our contact form.
• Rental data: Name, email, and payment information when you rent a film. Payment is processed via PayPal; we do not store your credit card details.
• Donation data: Name, email, and donation amount when you make a contribution.
• Review data: Name and review content when you submit a film review.
• Technical data: IP address, browser type, and usage data collected automatically when you visit our site.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under Art. 6 GDPR:

• Art. 6(1)(b): For the performance of a contract (e.g., film rentals).
• Art. 6(1)(f): Our legitimate interest in operating the website and responding to inquiries.
• Art. 6(1)(a): Your consent (e.g., for reviews or display in donor credits).

5. Purpose of Processing

Your data is processed to:

• Respond to project inquiries and provide commissioned services.
• Process rental payments and grant time-limited access to films.
• Process and acknowledge donations.
• Publish reviews and donor credits (where consent is given).
• Ensure the security and functionality of the website.

6. Data Sharing and Third Parties

We do not sell your personal data. We share data with third-party service providers only where necessary to operate the website:

• PayPal — for processing rental payments (subject to PayPal's privacy policy).
• Hosting provider — for hosting and maintaining the website.

All third parties are bound by GDPR-compliant data processing agreements.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by German tax and commercial law (e.g., § 147 AO, § 257 HGB, typically 6–10 years). Inquiries are deleted after 24 months unless a business relationship has been established.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure / "right to be forgotten" (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent at any time (Art. 7(3) GDPR)

To exercise these rights, contact us at info@ioadocumentaryfilms.com. You also have the right to lodge a complaint with the competent supervisory authority (Bayerisches Landesamt für Datenschutzaufsicht or your local data protection authority).

9. Cookies

This website uses only technically necessary cookies to ensure basic functionality. No tracking or advertising cookies are set without your consent. Necessary cookies cannot be disabled as they are essential for the website to function.

10. Data Security

We employ appropriate technical and organizational measures (TOMs) to protect your personal data, including TLS/SSL encryption for data transmission, access controls, and regular security reviews.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in legal requirements or our data practices. The current version is always available on this page.