legal notice · information pursuant to § 5 DDG (German Digital Services Act)

Matthias Graatz
film editor
Nogatstraße 38
12051 Berlin
Germany

contact

mail@matthiasgraatz.com

vat identification number

pursuant to § 27a UStG (German VAT Act): DE297280242

films

The films on this site are shown as work samples. All rights remain with the respective clients, production companies, directors and rights holders.

privacy policy

This site is a portfolio. It sets no cookies, runs no analytics and loads nothing from third parties until you open a film. Below is what happens with your data when you visit, as required by the General Data Protection Regulation (GDPR).

controller

Matthias Graatz, Nogatstraße 38, 12051 Berlin, Germany, mail@matthiasgraatz.com. There is no obligation to appoint a data protection officer.

hosting and server logs

The site is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. When you open a page, your browser sends technical data to Netlify's servers: your IP address, date and time, the requested file, the referring page and your browser and operating system. Netlify processes this data on my behalf as a processor under a data processing agreement, to deliver the site and to keep it secure and stable. Legal basis: my legitimate interest in a fast and secure site, Art. 6(1)(f) GDPR. Netlify serves the site through a global content delivery network, so data may be processed in the United States. Netlify is certified under the EU-US Data Privacy Framework and additionally uses the EU standard contractual clauses (Art. 46(2)(c) GDPR). Server logs are kept by Netlify for a limited period for security purposes and are not used to identify you. Details: netlify.com/privacy.

cookies and local storage

This site does not set cookies and uses no tracking or analytics. It may keep one technical flag in your browser's session storage so that the opening animation runs only once per visit. The flag contains no personal data and is deleted when you close the tab (§ 25(2) no. 2 TDDDG).

films (vimeo)

The films are hosted on Vimeo (Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA). Nothing is loaded from Vimeo until you open a film. When you do, the Vimeo player loads and your IP address and technical data (browser, device, which video you play) are transmitted to Vimeo, which may process them in the United States. The player is embedded in Vimeo's privacy-enhanced mode ("do not track"), so Vimeo does not set tracking cookies and does not record your session for analytics. If you are logged into a Vimeo account, Vimeo may still link the view to your account. Legal basis: the player is loaded only at your request, Art. 6(1)(f) GDPR and § 25(2) no. 2 TDDDG. Vimeo is certified under the EU-US Data Privacy Framework. Vimeo's privacy policy: vimeo.com/legal/privacy/policy.

contact by email

If you write to me, I process your email address, your name and the content of your message to answer you. Legal basis: Art. 6(1)(b) GDPR where the request concerns a job or a contract, otherwise my legitimate interest in answering, Art. 6(1)(f) GDPR. I keep correspondence as long as needed to handle your request; business correspondence is kept for the statutory retention periods under German commercial and tax law (up to ten years).

fonts, images, links

Fonts and images are served from this site itself, not from Google or another third party. The site links to external sites (my agency, directors, Instagram, Vimeo). No data is sent to them until you follow a link; their own privacy policies apply there.

your rights

You have the right to access the personal data I hold about you, to have it corrected or erased, to restrict its processing, to receive it in a portable format and to object to processing based on legitimate interest (Art. 15 to 21 GDPR). Where processing is based on consent, you may withdraw it at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority; the authority responsible for me is the Berlin Commissioner for Data Protection and Freedom of Information, datenschutz-berlin.de. To exercise your rights, write to mail@matthiasgraatz.com. I make no automated decisions and do not profile visitors.

status

September 2026. I will update this policy when the site or the law changes.