​

Last update: 20/09/2025

Status as of: 20/09/2025

Controller

Controller within the meaning of Art. 4(7) GDPR
Eastside-Produktions

Viola Woigk
Am Schlosspark 8
13187 Berlin

Germany
Email: eastside-productions@live.de
· Phone: +49 3047558097

Legal basis notice: This statement fulfills the information obligations under Arts. 13/14 GDPR; data subject rights under Arts. 15–22 GDPR; and the right to lodge a complaint under Art. 77 GDPR.
EUR-Lex

Hosting, Content Delivery & Processing Under Contract

Hosting/platform: Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel
We use Wix as our website platform and hosting service. In doing so, Wix processes inventory, usage, and communications data on our behalf (e.g., IP address, timestamps, form inputs) for the operation, security, and delivery of our pages. A data processing agreement (Art. 28 GDPR) is in place with Wix. Transfers to third countries take place pursuant to Standard Contractual Clauses and/or on the basis of an adequacy decision.

Further information is available in Wix’s Privacy Center.

Provision of the Website & Server Log Files

When our website is accessed, the browser automatically transmits data to our server/platform operator and this data is stored in server log files (e.g., IP address, date/time, requested file/URL, referrer URL, user agent).
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in technical provision/security).
Retention period: Log data is stored for 30 days and then deleted, unless longer retention is required for evidence purposes.

Cookies & Similar Technologies (Consent Under the TDDDG)

We use cookies and/or similar technologies (e.g., local storage, pixels). Where not strictly necessary, these are used only with your consent (via a consent banner).
Legal basis for access to terminal equipment: Section 25(1) TDDDG (formerly TTDSG) — consent for storing/reading information on your device; exceptions apply for technically necessary operations (Section 25(2) TDDDG).
Gesetze im Internet

Legal basis under the GDPR: Art. 6(1)(a) GDPR (consent) for data processing; for necessary cookies Art. 6(1)(f) GDPR (legitimate interests).

You can withdraw/modify your consent at any time in the cookie settings center.

Contact (Form, Email, Telephone)

When you contact us, we process the data you provide (e.g., name, email, message, phone number) to handle your inquiry.
Legal bases: Art. 6(1)(b) GDPR (pre-/contractual communication), alternatively Art. 6(1)(f) GDPR (legitimate interest in efficient communication).
Retention period: Inquiries are retained for 6–24 months; statutory retention periods remain unaffected.

Newsletter (optional)

If you subscribe to our newsletter, we process your email address and any voluntary information. Double opt-in, logging of the subscription, and revocation at any time.
Legal basis: Art. 6(1)(a) GDPR; proof of consent pursuant to Art. 7 GDPR.
EUR-Lex

Integration of Third-Party Content
7.1 YouTube Videos

We embed videos from YouTube. We prefer to use the “privacy-enhanced mode” (youtube-nocookie.com). In this mode, YouTube only sets cookies/technologies upon playback (interaction); nevertheless, data may be transferred to YouTube/Google. For non-essential components, we obtain prior consent via the consent banner (Section 25(1) TDDDG). Further information: Google/YouTube Help on “Privacy-Enhanced Mode.”
Google Help

Legal bases: Section 25(1) TDDDG (access to terminal equipment) and Art. 6(1)(a) GDPR (consent).

7.2 Audio Players / Streaming (e.g., Spotify, SoundCloud, Bandcamp)

When embedded players are played, the providers’ servers are contacted (IP address, device/usage data). Non-essential components are only loaded after consent.
Legal bases: Section 25(1) TDDDG; Art. 6(1)(a) GDPR.

7.3 Maps (e.g., Google Maps)

To display locations, we may use map services. Content is loaded only after consent; in doing so, data may be transferred to the provider.
Legal bases: Section 25(1) TDDDG; Art. 6(1)(a) GDPR.

Social Media Presences (Fan Pages)

We operate profiles/pages on [Facebook/Instagram/YouTube/TikTok]. For these pages, we are joint controllers with the platform provider to the extent that we co-determine purposes/means (e.g., Insights statistics). Further information is available in each provider’s privacy notices. This is based, inter alia, on the CJEU’s case law on Facebook fan pages.
curia.europa.eu

Deletion Periods

We process personal data only as long as necessary for the respective purposes or as long as statutory retention obligations exist. We then delete or anonymize the data.

Disclosure of Data / Recipients

Data is transmitted to third parties only

within the scope of processing under contract (Art. 28 GDPR),

for performance of a contract (Art. 6(1)(b) GDPR),

on the basis of consent (Art. 6(1)(a) GDPR),

to comply with legal obligations (Art. 6(1)(c) GDPR), or

on the basis of legitimate interests (Art. 6(1)(f) GDPR).

For transfers to third countries, we ensure an adequate level of data protection (Art. 45 GDPR) or appropriate safeguards (Art. 46 GDPR, e.g., EU Standard Contractual Clauses).
EUR-Lex

Rights of Data Subjects

Subject to the conditions of the GDPR, you have the right to

access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18),

data portability (Art. 20), and to object to processing (Art. 21),

withdraw consent with effect for the future (Art. 7(3)).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
GDPR

Contact for exercising your rights: info@violaconpadrinos.de

Please note that we may request additional information to verify your identity.

Data Security

We implement technical and organizational measures to secure your data (e.g., TLS encryption, access restrictions, backups). When using Wix, the security measures implemented there also apply.
wix.com

Minors

Our offering is not directed at children under 16 years of age. If we become aware of processing of minors’ data without the required consent, we will delete such data without delay.

Automated Decision-Making / Profiling

Automated decision-making, including profiling, does not take place.