Privacy Policy
The controller responsible for data processing on this website under the EU General Data Protection Regulation (GDPR) is:
Anna Thalmayr – Anna Production
Grimm 15, 20457 Hamburg
Email: info@anna-production.com
Phone: +49 (0) 152 55787890
I have not appointed a data protection officer, as I am not legally required to do so.
-
Overview
This policy explains what personal data is processed when you visit anna-production.com or get in touch with me, why, and what rights you have. Personal data is any information that can identify you, such as your name, email address or IP address.
I process personal data on the following legal bases under Art. 6(1) GDPR:
-
Consent (point a), for example for optional cookies
-
Contract or pre-contractual steps (point b), for example when you enquire about a project
-
Legal obligations (point c), for example tax retention periods
-
Legitimate interests (point f), for example running a secure, functioning website
Where storing or accessing information on your device requires consent, § 25 of the German TDDDG (Telecommunications Digital Services Data Protection Act) also applies.
-
Hosting and server log files
This website is built and hosted with Wix, provided by Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel. Wix processes data on my behalf under a data processing agreement (Art. 28 GDPR).
When you visit the website, Wix automatically collects technical data in server log files, including:
-
IP address
-
Date and time of access
-
Browser type and version, operating system
-
Referrer URL (the page you came from)
-
Pages visited
This data is needed to deliver the website securely and reliably and to detect misuse. The legal basis is my legitimate interest (Art. 6(1)(f) GDPR). The data is not combined with other sources.
This website uses SSL/TLS encryption, which you can recognise by “https://” and the lock symbol in your browser.
-
Cookies and statistics
This website uses cookies, small text files stored on your device.
Essential cookies are needed for the website to work, for example for security, load balancing and saving your cookie choice. They are set on the basis of § 25(2) TDDDG and my legitimate interest (Art. 6(1)(f) GDPR).
Optional cookies, such as statistics and analytics cookies (Wix Analytics), are only set if you agree in the cookie banner (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). They help me understand how visitors use the website, for example which pages are viewed. You can change or withdraw your consent at any time via the cookie settings on the website.
You can also block or delete cookies in your browser settings. Some features may then not work properly.
-
Contact form, email and phone
If you contact me via the contact form, by email or by phone, I process the details you provide (such as name, email address, company, phone number and your message) to answer your enquiry and, where relevant, to prepare and carry out a project.
The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or pre-contractual steps, and otherwise my legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
Contact form entries are stored in my Wix account. I delete your data once your enquiry has been fully dealt with, unless statutory retention periods apply (for example for business correspondence relating to a contract).
-
Links to Instagram and LinkedIn
This website contains simple links to my profiles on Instagram (Meta Platforms Ireland Ltd.) and LinkedIn (LinkedIn Ireland Unlimited Company). These are plain links, not embedded plugins, so no data is sent to these platforms just by visiting my website.
Only when you click a link are you taken to the platform, where its own privacy policy applies:
-
Instagram: privacycenter.instagram.com/policy
-
LinkedIn: linkedin.com/legal/privacy-policy
-
Data transfers outside the EU
Wix is based in Israel and uses service providers and servers in other countries, including the USA. Data may therefore be processed outside the European Union.
-
Israel has an adequacy decision from the European Commission, confirming an adequate level of data protection.
-
USA: transfers take place on the basis of the EU-US Data Privacy Framework, where the recipient is certified, or otherwise on the basis of the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
You can find more information in Wix’s privacy policy: wix.com/about/privacy
-
Retention, your rights and changes
Retention. I store personal data only as long as needed for the purpose it was collected for. Statutory retention periods under German commercial and tax law (generally 6 or 10 years) remain unaffected.
Your rights. Under the GDPR you have the right to:
-
access your data (Art. 15)
-
have incorrect data corrected (Art. 16)
-
have your data deleted (Art. 17)
-
restrict processing (Art. 18)
-
receive your data in a portable format (Art. 20)
-
object to processing based on legitimate interests (Art. 21)
-
withdraw your consent at any time, with effect for the future (Art. 7(3))
To exercise your rights, just email info@anna-production.com.
Right to complain. You can lodge a complaint with a data protection supervisory authority. The authority responsible for me is: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Straße 22, 20459 Hamburg, datenschutz-hamburg.de
Changes. I may update this privacy policy when the website or the law changes. The current version always applies.
Last updated: October 2026