← Back to home

Privacy notice

This notice explains which personal data is processed when you visit this site or order a film, and applies under the EU General Data Protection Regulation (GDPR) because the operator is based in Germany.

1. Controller

Thomas de Vos
Lucrata
Hohes Land 1a
46414 Rhede
Germany

Phone: +49 2872 9204517
Email: kontakt@lucrata.de

A data protection officer has not been appointed because the legal requirements for this are not met.

2. No third-party content, no tracking

This site loads no content from third-party servers when you view it. Fonts, images and videos are hosted on this server. There are no analytics tools, advertising networks, social media plugins or embedded players. No cookies are set and no tracking takes place, which is why no consent banner is needed.

3. Hosting and server log files

When you visit this site, the hosting provider automatically records information your browser transmits: IP address, date and time of access, the file requested, the amount of data transferred, browser type and version, operating system and the referring page.

Purpose: a stable connection, the security and stability of the system. Legal basis: Article 6(1)(f) GDPR, legitimate interest in the secure operation of the site. Logs are kept only as long as needed for these purposes.

Hosting provider: Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA, acting as processor under Article 28 GDPR. The site is delivered through a global network, so connection data may also be processed outside the EU, in particular in the United States. Netlify bases such transfers on the EU Standard Contractual Clauses under Article 46(2)(c) GDPR and on its certification under the EU-US Data Privacy Framework. More at netlify.com/privacy.

4. Language setting on your device

If you choose a language, this choice is stored in your browser's local storage so the site appears in that language on your next visit. The value is not transmitted to us or anyone else. Storing it is strictly necessary for the function you requested (§ 25(2) no. 2 TDDDG). You can delete it at any time in your browser settings.

5. Payment via Stripe

When you click the payment button, you leave this site and are taken to a payment page operated by Stripe. There Stripe collects your email address, name, company name, billing address, VAT ID where applicable, payment details and, if you choose to provide it, your listing URL. We receive this data, except full card details, to fulfil your order and issue the invoice.

Legal basis: Article 6(1)(b) GDPR, performance of the contract, and Article 6(1)(c) GDPR, legal obligations under tax and commercial law. Provider: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. For fraud prevention and payment processing Stripe also acts as an independent controller. Data may be transferred to Stripe, Inc. in the United States. Stripe bases such transfers on the EU Standard Contractual Clauses and its certification under the EU-US Data Privacy Framework. More at stripe.com/privacy.

Retention: invoice and booking records are kept for the periods required by German tax and commercial law, usually eight to ten years.

6. Your photos and email

After payment you send us your listing photos by email or file transfer. We use them solely to produce your film and to handle revisions. Please do not send photos showing identifiable people. If such content is included, we blur it or leave it out.

Legal basis: Article 6(1)(b) GDPR. Retention: we delete your photos and the working files 90 days after delivery, unless you ask us to delete them earlier. The finished film is kept for the same period so we can resend it.

Email to kontakt@lucrata.de is handled through Google Workspace. Provider for users in the European Economic Area: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, acting as processor under Article 28 GDPR. Processing outside the EU, including in the United States, cannot be excluded and is based on the EU Standard Contractual Clauses under Article 46(2)(c) GDPR.

To produce the film we use AI video generation services. Your photos are transmitted to these services only as far as needed to generate the film.

7. No automated decision-making

No automated decision-making, including profiling, under Article 22 GDPR takes place.

8. Your rights

• Right of access (Article 15 GDPR)
• Right to rectification (Article 16 GDPR)
• Right to erasure (Article 17 GDPR)
• Right to restriction of processing (Article 18 GDPR)
• Right to data portability (Article 20 GDPR)
• Right to object (Article 21 GDPR)

An informal message to the contact details above is enough to exercise any of these rights.

9. Right to complain

You may lodge a complaint with a data protection supervisory authority. The authority responsible for the controller is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, ldi.nrw.de.

Last updated: 23 September 2026.