Privacy Policy

Last updated: October 2026

1. Overview

This policy explains what personal data is processed when you visit boatstreetfilms.com, why, on what legal basis, and what rights you have. It is based on the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

In short: this website does not use advertising or tracking cookies, does not load fonts or scripts from Google, and only collects the data you choose to send us (for example through the contact form or newsletter sign-up), plus the technical data needed to deliver the website to your device.

2. Who is responsible (controller)

Mark Whiteley
Boatstreet Films
Stuttgart
Germany
Email: data@boatstreetfilms.com

We are not legally required to appoint a data protection officer. For any privacy question, please contact us at the email address above.

3. Hosting and server log data

This website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (via Cloudflare Germany GmbH as its European entity). When you open a page, your browser automatically transmits technical information which is processed by Cloudflare to deliver the site and protect it against attacks: your IP address, date and time of the request, the page requested, the referring page, browser type and version, operating system and the amount of data transferred.

Legal basis: Art. 6(1)(f) GDPR. We have a legitimate interest in delivering the website securely and reliably. We do not combine this data with other sources or use it to identify you.

Transfer to the USA: Cloudflare is certified under the EU–U.S. Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection (Art. 45 GDPR). We have also concluded a data processing agreement with Cloudflare (Art. 28 GDPR).

4. Contact form and email

If you contact us using the contact form, we process the details you enter (first and last name, email address, phone number if provided, and your message) in order to answer your enquiry. The form is delivered to us by Formspree, Inc., USA, which forwards the message to our email inbox.

If you email us directly, we process your email address and the content of your message for the same purpose.

Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to a contract or a potential project, otherwise Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries).

Storage: We delete enquiries once they have been dealt with, unless statutory retention obligations (for example under German commercial and tax law) require us to keep them longer.

Transfer to the USA: Formspree processes data in the USA. Where data is transferred to a country outside the EU, this takes place on the basis of appropriate safeguards under Art. 44 et seq. GDPR, in particular the EU Standard Contractual Clauses and/or certification under the EU–U.S. Data Privacy Framework.

5. Newsletter (Mailchimp)

You can subscribe to our newsletter using the sign-up form on the website. We use Mailchimp, a service of The Rocket Science Group LLC d/b/a Mailchimp, an Intuit company, 405 N Angier Ave NE, Atlanta, GA 30308, USA. When you subscribe, your email address, the date and time of sign-up, your IP address and a tag showing that you signed up through this website are stored with Mailchimp.

After signing up you will receive an email asking you to confirm your subscription (double opt-in). You will only receive the newsletter once you have confirmed. Mailchimp may record whether newsletter emails are opened and which links are clicked, so that we can understand what readers find interesting.

Legal basis: your consent, Art. 6(1)(a) GDPR and § 7(2) of the German Unfair Competition Act (UWG). You can withdraw your consent at any time by using the unsubscribe link in every newsletter or by emailing us. Withdrawal does not affect the lawfulness of processing before it.

Storage: we keep your data until you unsubscribe. After unsubscribing, your email address may be kept on a block list so that we do not contact you again.

Transfer to the USA: Intuit/Mailchimp is certified under the EU–U.S. Data Privacy Framework (Art. 45 GDPR), and we have concluded a data processing agreement with Mailchimp.

6. Videos, images and fonts

All videos, the video player and all fonts on this website are stored on our own hosting. No data is sent to YouTube, Vimeo or Google Fonts when you watch videos or view pages.

7. Storage on your device (cookies and similar)

This website does not set advertising, tracking or analytics cookies. We store only a small amount of information in your browser's local storage, and only where it is either strictly necessary or you have agreed to it. Details are in our Cookie Policy.

Legal basis: § 25(2) No. 2 TDDDG for strictly necessary storage (for example remembering your cookie choice), and § 25(1) TDDDG with Art. 6(1)(a) GDPR for anything that requires your consent.

8. Your rights

Under the GDPR you have the right to:

  • request information about the personal data we hold about you (Art. 15 GDPR);
  • have incorrect data corrected (Art. 16 GDPR);
  • have your data deleted (Art. 17 GDPR) or its processing restricted (Art. 18 GDPR);
  • receive your data in a structured, machine-readable format (Art. 20 GDPR);
  • withdraw any consent you have given, with effect for the future (Art. 7(3) GDPR).

Right to object (Art. 21 GDPR): where we process your data on the basis of our legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. We will then stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

To exercise any of these rights, simply email us at data@boatstreetfilms.com.

9. Right to complain to a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20, 70173 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de

10. Security

This website is delivered exclusively over an encrypted HTTPS connection, which you can recognise by the padlock symbol in your browser's address bar.

11. Changes to this policy

We may update this policy when our website or the services we use change, or when the law requires it. The current version is always available on this page.