Legal
Privacy Policy
How we handle your personal data.
This English version is provided for convenience. The German version is legally binding.
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Tonka Film & Consult Oliver Mahrdt
Bergheimer Str. 149
69115 Heidelberg, Germany
Email: oliver.mahrdt@gmail.com
2. General
We process personal data only to the extent necessary to provide a functional website and our content and services. The legal bases are in particular Art. 6(1)(a) GDPR (consent), (b) (contract and pre-contractual measures), (c) (legal obligation) and (f) (legitimate interests).
3. Hosting
This website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. When you visit the website, the host processes the access data listed below on our behalf. A data processing agreement pursuant to Art. 28 GDPR is in place. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and reliable provision of the website.
4. Server log files
Each time the website is accessed, information transmitted by your browser is recorded automatically: browser type and version, operating system, referrer URL, page accessed, date and time of access, and IP address. This data is used solely to ensure the trouble-free operation and security of the website. It is not combined with other data sources and is deleted or anonymised once the host’s retention period has expired. The legal basis is Art. 6(1)(f) GDPR.
5. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.
6. Contact by email
If you contact us by email, we process the information you provide (e.g. name, email address, content of your message) to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures, otherwise Art. 6(1)(f) GDPR. The data is deleted once your enquiry has been fully dealt with, unless statutory retention obligations apply.
7. Cookies
This website does not use tracking, analytics or marketing cookies. The WordPress content management system sets technically necessary cookies only for logged-in editors (Section 25 (2) no. 2 TDDDG). Only when you actively start a YouTube video may YouTube use cookies or similar technologies (see section 10).
8. Fonts
The fonts used on this website are loaded locally from our server. No connection is made to servers operated by Google or other third parties.
9. Journal and comments
The comment function in the journal is disabled, so no comment data is collected.
10. YouTube videos
We embed videos from the YouTube platform on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The videos are embedded in privacy-enhanced mode (youtube-nocookie.com) and only load when you click the preview image. No connection to YouTube is made before that; the preview image is hosted on our own server.
After your click, a connection to YouTube’s servers is established. In particular, your IP address, information about your browser and the page visited are transmitted; YouTube may use cookies or similar technologies. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework. The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR, Section 25 (1) TDDDG). More information: policies.google.com/privacy.
11. Links to other websites
Our website contains links to external websites, such as film websites. When you follow such a link, the privacy policy of the respective provider applies; we have no influence on their data processing.
12. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21). You may withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR). Simply contact us by email.
13. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
Last updated: October 2026
