Privacy policy

Privacy policy of COPENHAGEN STUDIOS GmbH

We welcome you to our website and appreciate your interest in our company. We take the protection of your personal data very seriously. We process your data in accordance with the applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR) and the national implementing laws that apply to us. This privacy policy provides you with comprehensive information about how COPENHAGEN STUDIOS GmbH processes your personal data and about your rights.

Personal data is information that allows a natural person to be identified. This includes in particular name, date of birth, address, telephone number and email address, as well as your IP address.

Anonymous data exists where no personal reference to the user can be established.

Controller and Data Protection Officer
COPENHAGEN STUDIOS GmbH
Hafenweg 46-48 48155
Münster
Germany

Contact information
www.copenhagenstudios.com
Tel: 0251-59064686
hello@copenhagenstudios.com

Data protection contact:
datenschutz@copenhagenstudios.com

Your rights as a data subject
First, we would like to inform you about your rights as a data subject. These rights are set out in Articles 15 to 22 of the EU General Data Protection Regulation (GDPR). They include:

  • The right of access (Article 15 GDPR),
  • The right to erasure (Article 17 GDPR),
  • The right to rectification (Article 16 GDPR),
  • The right to data portability (Article 20 GDPR),
  • The right to restriction of processing (Article 18 GDPR),
  • The right to object to processing (Article 21 GDPR).

    To exercise these rights, please contact: datenschutz@copenhagenstudios.com. The same applies if you have questions about how we process data or wish to withdraw a consent you have given. You also have the right to lodge a complaint with a data protection supervisory authority.

Rights to object
Please note the following regarding your rights to object:

If we process your personal data for the purposes of direct marketing, you have the right to object to this processing at any time and without giving reasons. This also applies to profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. Objecting is free of charge and does not require any particular form. Please preferably send your objection to: datenschutz@copenhagenstudios.com.

Where we process your data on the basis of our legitimate interests, you may object to this processing at any time on grounds relating to your particular situation. This also applies to profiling based on these provisions.

We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.


Purposes and legal bases of data processing
When processing your personal data, we comply with the provisions of the GDPR and all other applicable data protection regulations. The legal bases for processing arise in particular from Article 6 GDPR.

We use your data to initiate business relationships, to fulfil contractual and statutory obligations, to perform the contractual relationship, to offer products and services, and to strengthen the customer relationship, which may also include analyses for marketing purposes and direct marketing. Specifically, we need your personal details to provide the following functions and services:

  • Provision of the website
  • Order and payment processing
  • Customer account and registration
  • Customer service and support
  • Marketing and newsletter dispatch

    Your consent to data processing may also constitute a legal basis under data protection law. Before you give consent, we will inform you of the purpose of the data processing and of your right to withdraw consent.


Disclosure to third parties
We will only disclose your data to third parties within the scope of statutory provisions or with your corresponding consent. Otherwise, data is not passed on to third parties unless we are obliged to do so by mandatory legal provisions (disclosure to external bodies such as supervisory authorities or law enforcement agencies).

Recipients of data / categories of recipients
Within our company, we ensure that only those persons who need your data to fulfil our contractual and statutory obligations receive it.

In certain cases, service providers support our specialist departments in carrying out their tasks. We have concluded all necessary data protection agreements with our service providers (e.g. shipping service providers, email marketing service providers, payment service providers).

Transfers to third countries / intention to transfer to third countries
Data is only transferred to third countries (outside the European Union or the European Economic Area) insofar as this is necessary for the performance of the contractual relationship, is required by law, or you have given us your consent.

We do not transfer your personal data to any service provider outside the European Economic Area.

Storage period of data
We store your data for as long as it is needed for the respective processing purpose. Please note that numerous retention periods require data to continue to be stored. This particularly concerns commercial and tax retention obligations (e.g. under the German Commercial Code (HGB), the German Fiscal Code (AO), etc.). Where no further retention obligations apply, the data is routinely deleted once the purpose has been fulfilled.

In addition, we may retain data if you have given us your permission to do so, or if legal disputes arise and we use evidence within the statutory limitation periods, which can be up to thirty years; the regular limitation period is three years.

Secure transmission of your data
To protect the data stored with us as effectively as possible against accidental or intentional manipulation, loss, destruction or access by unauthorised persons, we use appropriate technical and organisational security measures. Security levels are continuously reviewed in cooperation with security experts and adapted to new security standards.

Data exchange to and from our website is always encrypted. For our website, we offer HTTPS as the transfer protocol, in each case using current encryption protocols. In addition, alternative means of communication are available (e.g. email).

Obligation to provide data
Various personal data are necessary for establishing, performing and terminating the contractual relationship and for fulfilling the associated contractual and statutory obligations. The same applies to the use of our website and the various functions it provides.

We have summarised details on this in the section above. In certain cases, data must also be collected or provided on the basis of statutory provisions. Please note that we cannot process your enquiry or carry out the underlying contractual relationship without the provision of this data.

Categories, sources and origin of the data
Which data we process depends on the specific context: for example, whether you place an order online, submit an enquiry via our contact form, send us a job application or submit a complaint.

Please note that for special processing situations, we may also provide information separately at an appropriate place, for example when uploading application documents or when making a contact enquiry.

When you visit our website, we collect and process the following data:

  • Information about the website from which you visit us
  • Web browser and operating system used
  • The IP address assigned to you by your internet service provider
  • Information about the web pages you access on our site, including date and time
  • For reasons of technical security (in particular to defend against attempted attacks on our web server), this data is stored in accordance with Article 6(1)(f) GDPR.

    As part of the ordering process, we process the following data:
  • First name and surname
  • Delivery address
  • Billing address
  • Email address

    For newsletters, we collect and process the following data:
  • Email address

Automated individual decision-making
We do not use any purely automated processing to reach a decision.

Cookies (Article 6(1) sentence 1 points (a) and (f) GDPR, Section 25(1) and (2) TDDDG)
Our website uses so-called cookies in several places. They are designed to make our offering more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved locally by your browser on your hard drive. On the basis of our legitimate interest (Article 6(1) sentence 1 point (f) GDPR), we use technically necessary cookies, which are required for the operation of the website and to ensure its functionality. Depending on their purpose, these are stored permanently, including after the end of the session (so-called persistent cookies, e.g. opt-out cookies), or deleted when the browser is closed (so-called session cookies, which are only valid for one browser session).

In addition, with your consent, we also set further cookies. These cookies allow us to analyse how users use our websites. This enables us to design the website content to meet visitors’ needs. The cookies also allow us to measure the effectiveness of a particular advertisement and to place it, for example, based on users’ thematic interests. The legal basis for this is your consent (Article 6(1) sentence 1 point (a) GDPR).

If you have given your consent, you may withdraw it at any time without giving reasons here: https://www.copenhagenstudios.com/cookie-policy/



Cookie Policy

Google Tag Manager (Article 6(1) point (a) GDPR, Section 25(1) TDDDG)
This website uses Google Tag Manager, provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. This service allows website tags to be managed via an interface. The Tag Manager tool itself, which implements the tags, is a cookie-free domain. This means that, in principle, no cookies are used and no personal data is collected. Google Tag Manager triggers other tags, which may in turn collect data. However, Google Tag Manager does not access this data. If a deactivation has been set at domain or cookie level, it remains in place for all tracking tags implemented with Google Tag Manager. Further information can be found at http://www.google.com/tagmanager/use-policy.html

Google Fonts (Article 6(1) point (a) GDPR)
This website uses so-called web fonts, provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), to display fonts consistently. When you open a page, your browser loads the required web fonts into its browser cache in order to display text and fonts correctly.

For this purpose, the browser you use must connect to Google’s servers. This may also result in personal data being transmitted to the servers of Google LLC in the United States. In this way, Google becomes aware that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Article 6(1) point (f) GDPR. If your browser does not support web fonts, a standard font from your computer will be used.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/

Creation of user profiles and use of non-strictly functional cookies (Article 6(1) point (a) GDPR)

Google Analytics (Article 6(1) point (a) GDPR, Section 25(1) TDDDG)
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), on the basis of your consent (Article 6(1) sentence 1 point (a) GDPR, Section 25(1) TDDDG). Google Analytics uses so-called “cookies”. These are text files that are stored on your device and enable an analysis of your use of the website. The information stored in this way is generally transmitted to and stored on a Google server in the United States. Where IP anonymisation is active, your IP address is shortened by Google. Unshortened evaluation by Google only takes place in exceptional cases.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities, and to provide further services relating to website and internet use to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Users’ personal data is deleted or anonymised after 26 months.

You may withdraw your consent at any time with effect for the future here.

We have concluded a data processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our website visitors and not to pass it on to third parties.

This service may transfer the data collected to another country. Please note that this service may transfer data outside the European Union and the European Economic Area, to a country that does not provide an adequate level of data protection. If data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and surveillance purposes, and you may not have legal remedies available. However, we take the possible and data-protection-compliant measures required under Article 44 et seq. GDPR to establish a level of data protection in the third country.

Detailed information on how Google uses your personal data when you give your consent on our website can be found directly in Google’s privacy policy at: https://business.safety.google/privacy/

Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html and https://policies.google.com/?hl=de


Criteo (Article 6(1) point (a) GDPR, Section 25(1) TDDDG)
Using Criteo SA’s technology, 32 Rue Blanche, 75009 Paris, France (“Criteo”), this website collects, stores and analyses information about visitors’ browsing behaviour in pseudonymised form, using “cookie” text files. Using an algorithm, Criteo analyses browsing behaviour and can then display targeted product recommendations as personalised advertising banners on other websites (so-called publishers). Under no circumstances can the data collected be used to identify the visitor to this website personally. It is not used for any other purpose or passed on to third parties. The data is stored for up to 13 months and then deleted automatically.

For data collection, we rely on your consent under Article 6(1) point (a) GDPR for the corresponding data processing, which you may of course withdraw at any time here.
Further information on Criteo’s technology can be found in Criteo’s privacy policy: http://www.criteo.com/de/privacy/

Facebook / Instagram (Facebook Pixel) (Article 6(1) point (a) GDPR, Section 25(1) TDDDG)
This website uses the “Facebook Pixel” of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”) or, if you are resident in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

If you have given explicit consent, this allows user behaviour to be tracked after users have seen or clicked on a Facebook or Instagram advertisement. This procedure serves to evaluate the effectiveness of advertisements for statistical and market research purposes and can help optimise future advertising measures. The data collected is anonymous to us, so it does not allow us to draw conclusions about the identity of users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible, and Facebook may use the data for its own advertising purposes in accordance with Facebook’s Data Policy (https://www.facebook.com/about/privacy/).

You can enable Facebook and its partners to display advertisements on and off Facebook. A cookie may also be stored on your computer for these purposes.

The Facebook Pixel also collects the following data from your use of our website: email address, gender, city, region, postcode, country, first and last name, telephone number, date of birth. This enables Facebook to assign your data to a specific Facebook profile and display suitable advertising there.

For data collection, we rely on your consent under Article 6(1) point (a) GDPR for the corresponding data processing, which you may of course withdraw at any time here.

If you withdraw your consent, your data will no longer be used for this purpose and will be deleted, unless statutory retention periods apply. Without withdrawal, data is stored for 180 days and then deleted automatically.

This service may transfer the data collected to another country. Please note that this service may transfer data outside the European Union and the European Economic Area, to a country that does not provide an adequate level of data protection. If data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and surveillance purposes, without you potentially having any legal remedies available. However, we take the possible and data-protection-compliant measures required under Article 44 et seq. GDPR to establish a level of data protection in the third country.

TikTok (Article 6(1) point (a) GDPR, Section 25(1) TDDDG)
We use the TikTok Pixel on our website for conversion tracking for advertisers. The service provider is the Chinese company TikTok. For the European region, the company TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland) is responsible.

The TikTok Pixel is a tool that enables us to understand and track the activities of visitors to our website. We use the pixel in conjunction with an API connection and other tracking technologies. For this purpose, the TikTok Pixel collects and processes information about visitors to our website or the devices they use (so-called event data), for example user content, date of birth, profile information, profile picture, usage data, device information, smartphone-related information, last name, first name, internet service provider, IP address, email address and browser history. Usage data is also collected that allows conclusions to be drawn about how you use our website and its functions (e.g. wishlist, shopping cart or checkout process), as well as various IDs (click ID, cookie ID, event ID, order ID, shopping cart ID and user ID). This data is used in particular to determine the performance of marketing campaigns, to suggest products and services to you as part of retargeting, and to display advertisements or measure their effectiveness.

The event data collected via the TikTok Pixel is used for targeting our advertisements, to improve ad delivery and for personalised advertising. For this purpose, the event data collected on our website by means of the TikTok Pixel is transmitted to TikTok.

The data is stored for 24 months.

The legal basis for our collection and transmission of personal data to TikTok is therefore Article 6(1) point (a) GDPR, Section 25(1) TDDDG. You may withdraw your consent at any time in the privacy settings.

TikTok may share the data collected with other third-party companies. We have no influence over this and no further knowledge of it, as this is TikTok’s own responsibility. Further information on data protection at TikTok can be found here: https://www.tiktok.com/legal/privacy-policy-eea?lang=de

Please note that in this context, personal data may be processed in a third country, in particular China. Contractual arrangements and guarantees ensure that the European level of data protection is maintained for data transfer and processing in third countries. Data processing or storage in third countries may also take place on the basis of your consent (Article 49(1) sentence 1 point (a) GDPR); in this case, you will be informed of this separately when your consent is obtained, as well as of the option to withdraw it.


Social media
Our website contains links to Instagram’s social media services. You can recognise links to the social media services’ websites by the respective company logo. If you follow these links, you will reach COPENHAGEN STUDIOS GmbH’s presence on the relevant social media service. When you click on a link to a social media service, a connection is established to the servers of that social media service. This transmits to the social media service’s servers the information that you have visited our website. In addition, further data is transferred to the provider of the social media service. This includes, for example:

  • The address of the web page on which the activated link is located
  • The date and time you accessed the web page or activated the link
  • Information about the browser and operating system used
  • Your IP address

    If you are already logged in to the relevant social media service at the time you activate the link, the provider of the social media service may be able to use the transmitted data to identify your username and possibly even your real name, and to assign this information to your personal user account with the social media service. You can prevent this assignment to your personal user account by logging out of your user account before activating the link.

    The servers of the social media services are located in the United States and other countries outside the European Union. The provider of the social media service may therefore also process the data in countries outside the European Union. Please note that companies in these countries are subject to data protection laws that generally do not protect personal data to the same extent as in the Member States of the European Union.

    Please note that we have no influence over the scope, nature or purpose of the data processing carried out by the provider of the social media service. Further information on how your data is used by the social media services integrated on our website can be found in the privacy policy of the respective social media service.

Privacy notice for social media
COPENHAGEN STUDIOS GMBH maintains a presence on social media, specifically on Facebook, Instagram, LinkedIn, TikTok and Pinterest. Where we have control over the processing of your data, we ensure that the applicable data protection regulations are complied with.

Below you will find the most important information on data protection law in relation to our social media presences.

Alongside us, the following companies are responsible for the company pages within the meaning of the EU General Data Protection Regulation (GDPR) and other applicable data protection provisions:

  • Facebook (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
  • Instagram (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
  • LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)
  • Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA)
  • TikTok (musical.ly Inc., 10351 Santa Monica Blvd #310, Los Angeles, CA 90025, USA)

    However, you use these platforms and their functions under your own responsibility. This applies in particular to the use of interactive features (e.g. commenting, sharing, rating).

    We further point out that your data may be processed outside the European Union.


Purpose and legal basis
We operate our fan pages ourselves in order to communicate with visitors to these pages and to inform them about our offerings.

We also collect data for statistical purposes, so that we can develop and optimise our content and make our offering more attractive. The data required for this (e.g. total number of page views, page activity and data provided by visitors, interactions) is compiled by the social networks and made available to us. We have no influence over how this data is generated or displayed.

In addition, your personal data is processed by the social media providers for market research and advertising purposes. For example, usage profiles may be created based on your usage behaviour and the interests derived from it. This allows, among other things, advertisements that match your interests to be displayed within and outside the platforms. Cookies are generally stored on your computer for this purpose. Independently of this, data that is not collected directly on your devices may also be stored in your usage profiles. Storage and analysis also take place across devices; this applies in particular, but not exclusively, where you are registered as a member and logged in to the respective platforms.

We process your personal data on the basis of our legitimate interests in effective information and communication, in accordance with Article 6(1) sentence 1 point (f) GDPR.

If you are asked for consent to data processing, i.e. if you declare your agreement by confirming a button or similar (opt-in), the legal basis for the processing is Article 6(1) sentence 1 point (a) and Article 7 GDPR.


Your rights / possibility to object
If you are a member of a social network and do not want the network to collect data about you through our page and link it to your stored membership data at that network, you must:

  • log out of the relevant network before visiting our fan page,
  • delete the cookies on your device, and close and restart your browser.
    However, once you log in again, the network will recognise you as a specific user once more.
    For a detailed description of the respective processing and the options to object (opt-out), please refer to the following links:


Facebook
Privacy policy: https://www.facebook.com/about/privacy/
Opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com

Instagram
Privacy policy: https://help.instagram.com/519522125107875
Opt-out: https://optout.networkadvertising.org/ and http://www.youronlinechoices.com

LinkedIn
Privacy policy: https://www.linkedin.com/legal/privacy-policy
Opt-out: https://www.linkedin.com/legal/cookie-policy and http://www.youronlinechoices.com

Pinterest
Privacy policy: https://about.pinterest.com/de/privacy-policy
Opt-out: https://about.pinterest.com/de/privacy-policy

TikTok
Privacy policy: https://www.tiktok.com/de/privacy-policy
Opt-out: http://www.youronlinechoices.com


Overall, you have the following rights with regard to the processing of your personal data:
Right of access; right to rectification; right to erasure; right to restriction of processing; right to object; right to data portability; and the right to lodge a complaint with the competent data protection authority about unlawful processing of your personal data.

However, as we do not have full access to your personal data, you should contact the social media providers directly when exercising your rights, as they each have access to their users’ personal data and can take appropriate measures and provide information.

Should you nevertheless need assistance, we will of course try to support you. Please contact datenschutz@copenhagenstudios.com


Notes on copyright and right to one’s own image
If you wish to publish images, texts, plans, videos, music, etc. on our social media presence, please be aware that you may be transferring all rights of use to the network, which could have legal consequences for you if you are not the author or rights holder yourself.

Advertising on ChatGPT
We place advertisements on the ChatGPT service through the advertising services of OpenAI (provider: OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland). As part of campaign management, we may in particular process information about the campaign, the advertising material, the target audience, the budget and delivery.

In connection with the delivery and measurement of ChatGPT advertising, OpenAI processes data in accordance with its applicable privacy policies and terms of service. According to the information currently published, advertisers do not have access to users’ chats, chat history, stored memories or personal details. Instead, advertisers may be provided with summarised or aggregated performance data for campaign evaluation (ad impressions and clicks). Conversation content is not passed on to us as an advertiser.

Insofar as OpenAI processes personal data to provide, personalise or measure the success of its advertising services, OpenAI is independently responsible for this under its privacy policies. We do not receive any personal conversation content from ChatGPT and do not attempt to identify individual ChatGPT users on the basis of their conversations.

Further information on data processing by OpenAI can be found in OpenAI’s privacy policy (https://openai.com/policies/eu-privacy-policy/) and in the information on advertising in ChatGPT (https://help.openai.com/en/articles/20001047-ads-in-chatgpt).

ChatGPT Ads Pixel and success measurement
To measure the effectiveness of our advertisements placed on ChatGPT, we use an advertising and conversion pixel provided by OpenAI (OpenAI Ireland Limited, based at 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland) (the “ChatGPT Ads Pixel”). The pixel enables us to record the delivery of and interaction with our advertisements, as well as any subsequent actions, such as a visit to our website or the completion of a specific action, and to assign them to the respective campaign.

In particular, technical information, information about the device and browser used, timestamps, a pseudonymous identifier, campaign information, and data on interactions and conversion events may be processed. Depending on the technical implementation, the pixel may be triggered when our website or individual subpages are accessed, or after a specific user action. In principle, we only receive the reports and key figures intended for campaign evaluation. Chat histories, ChatGPT inputs or other conversation content are not transmitted to us.

The pixel is only activated after you have given your consent to marketing or conversion technologies via our consent management tool. Without consent, the pixel is not loaded and no data is transmitted through it for advertising or conversion purposes. You may change or withdraw your consent at any time with effect for the future here. The lawfulness of processing carried out before withdrawal remains unaffected.

Further details on the cookies and similar technologies used, their storage periods and recipients can be found in our section “Cookies and similar technologies”, or in the information from the respective provider linked there.


Legal basis
The processing of personal data by the ChatGPT Ads Pixel, and the associated storage of or access to information on your device, takes place, where legally required, on the basis of your consent under Article 6(1) point (a) GDPR and Section 25(1) TDDDG. Consent is voluntary and may be withdrawn at any time with effect for the future here (https://www.copenhagenstudios.com/cookie-policy/).

Data processed by us in connection with the use of the ChatGPT Ads Pixel will be deleted once the purpose has been achieved, unless we are legally required to retain it for longer. Please note that the storage and deletion periods set by OpenAI apply to data processed by OpenAI.

Where, following effective consent, aggregated campaign and performance data is also analysed, this is done to measure success and optimise our advertising measures.

With regard to the personal data processed via the ChatGPT Ads Pixel, we and OpenAI are, in principle, each independent controllers.

As part of the use of the ChatGPT Ads Pixel, processing of personal data by OpenAI in third countries cannot be ruled out. Please note that OpenAI may transfer the data collected outside the EU and the EEA, to a country that does not provide an adequate level of data protection. If data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and surveillance purposes, without you potentially having any legal remedies available. For processing or storage of data in third countries, OpenAI relies on adequacy decisions of the European Commission or on standard contractual clauses (“SCCs”) approved by the European Commission. Further details can be found in OpenAI’s privacy policy at https://openai.com/de-DE/policies/eu-privacy-policy/.


Newsletter (Article 6(1) point (a) GDPR)
A free newsletter can be subscribed to on our website. The email address provided when subscribing to the newsletter is used to send the newsletter.

The principle of data minimisation and data avoidance is observed, as only the email address is marked as a mandatory field. For technical reasons and for legal protection, your IP address is also processed when you subscribe to the newsletter.

For sending newsletters by email, we use the so-called double opt-in procedure. This means that you will only receive advertising by email if you have first expressly confirmed that we should activate the newsletter service. We do this by sending you a notification email and asking you to confirm, by clicking a link contained in that email, that you wish to receive our newsletter at this email address.

You may of course end your subscription at any time via the unsubscribe option provided in the newsletter, thereby withdrawing your consent. You can also unsubscribe from the newsletter at any time directly via our website.


Webshop (Article 6(1) point (b) GDPR)
We process the data you provide in the order form only for the purpose of carrying out and processing the contractual relationship, unless you consent to further use.

The principle of data minimisation and data avoidance is observed in that you only need to provide the data that we absolutely require to perform the contract or to fulfil our contractual obligations (i.e. your name, address, email address and the payment data required for the chosen payment method), or that we are legally obliged to collect.

In addition, your IP address is processed for technical reasons and for legal protection. Without this data, we regret that we will have to refuse to conclude the contract, as we would then be unable to perform it or may need to terminate an existing contract. Of course, you may also provide further data if you wish.

Registration / customer account (Article 6(1) points (a) and (b) GDPR)
On our website, we offer users the option to register by providing personal data. The advantage is that you can view your order history in particular, and that the details you provide are saved for the order form. When you order again, you do not need to enter them again.

Registration is therefore either necessary or possible in order to perform a contract with you (via our online shop) or to carry out pre-contractual measures.
The principle of data minimisation and data avoidance is observed, as only the data necessary for registration is marked as a mandatory field with an asterisk (*). These include, for example, the email address as well as the password, including password confirmation.

To deliver orders in our online shop, we also require billing address details (title, first name, last name, address). If the delivery address differs from the billing address, the above details must also be provided for the delivery address.

By registering on our website, the user’s IP address, as well as the date and time of registration, are also stored (technical background data). By clicking the “Register now” button, you give your consent to the processing of your data.

Please note: the password you choose is stored by us in encrypted form. Employees of our company cannot read this password. We are therefore unable to provide you with information if you have forgotten your password.

In this case, please use the “Forgot password” function, which sends you an automatically generated new password by email. No employee is authorised to ask you for your password by phone or in writing. Therefore, never disclose your password if you receive such requests.

Once the registration process is complete, your data is stored with us so that you can use the protected customer area. As soon as you log in to our website with your email address as username and your password, this data is made available for any actions you carry out on our website (e.g. orders in our online shop). Completed orders can be viewed in your order history. You can enter changes to your billing or delivery address here.

Registered persons are free to make changes or corrections to their billing or delivery address independently in the order history. Our customer service is also happy to make changes or corrections if you contact them. Of course, you can also cancel your registration or delete your customer account at any time.


Payment systems (Article 6(1) points (a) and (b) GDPR), credit check (Article 6(1) point (f) GDPR)
In our online shop, you can pay by credit card, PayPal or Klarna. For this purpose, the relevant payment data is collected so that we can process your order and payment. For technical reasons and for legal protection, your IP address is also processed.

The principle of data minimisation and data avoidance is observed in that you only need to provide the data that we absolutely require to process the payment and thus perform the contract, or that we are legally obliged to collect.

Without this data, we regret that we will have to refuse to conclude the contract, as we would then be unable to perform it.

The payment system we use employs SSL encryption to protect the transmission of your data.

Note on Klarna: Klarna is a company of Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. If the data subject selects “Klarna” as the payment option during the ordering process in our online shop, data relating to the data subject is automatically transmitted to Klarna.

By selecting this payment option, the data subject consents to the transmission of personal data required for payment processing. The personal data transmitted to Klarna is generally first name, last name, address, email address, IP address, telephone number, mobile phone number or other data necessary for payment processing.

Personal data relating to the respective order is also necessary for the performance of the purchase contract. Details on data protection at Klarna can be found at: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy

Note on credit card payments: As is customary with credit card payments, the credit card details are verified.

Note on PayPal: PayPal is a company of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. If the data subject selects “PayPal” as the payment option during the ordering process in our online shop, data relating to the data subject is automatically transmitted to PayPal.

By selecting this payment option, the data subject consents to the transmission of personal data required for payment processing. The personal data transmitted to PayPal is generally first name, last name, address, email address, IP address, telephone number, mobile phone number or other data necessary for payment processing.

Personal data relating to the respective order is also necessary for the performance of the purchase contract. Details on data protection at PayPal can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-prev (for the legal position as of 25 May 2018).


Marketing to existing customers (Article 6(1) point (f) GDPR)
COPENHAGEN STUDIOS GmbH is interested in maintaining its customer relationship with you and sending you information and offers about our products and services. We therefore process your data in order to send you relevant information and offers by email or post.

If you do not wish this, you may object at any time to the use of your personal data for direct marketing purposes; this also applies to profiling to the extent that it is related to direct marketing. If you object, we will no longer process your data for this purpose.

The objection can be made free of charge and without giving reasons, and does not require any particular form. It should preferably be addressed by telephone to 0251-59064686, by email to datenschutz@copenhagenstudios.com, or by post to COPENHAGEN STUDIOS GmbH, Hafenweg 46-48, 48155 Münster.

Online services for children
Persons under the age of 16 may not transmit personal data to us or give a declaration of consent without the consent of their parents or legal guardians. We ask parents and legal guardians to actively take part in their children’s online activities and interests.

Links to other providers
Our website also contains links, clearly recognisable as such, to the websites of other companies. We have no influence over the content of linked websites. We therefore cannot accept any guarantee or liability for this content. The respective provider or operator of the linked pages is always responsible for their content.

At the time of linking, the linked pages were checked for possible legal violations and recognisable infringements. No unlawful content was recognisable at the time of linking. However, permanent monitoring of the content of linked pages is not reasonable without concrete evidence of an infringement. Upon becoming aware of any infringement, such links will be removed immediately.