Privacy Information

This online shop offers licensed downloads of media works. We process personal data only as far as necessary for your order or if you optionally consent to local storage in your browser.

The following information gives a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified.

The controller responsible for data processing on this website is:

KOMBINAT kombiniert Tanz und Film gemeinnützige UG (haftungsbeschränkt)
Sirko Knüpfer (Managing Director), Paula E. Paul
Reiterweg 1
14469 Potsdam

Email: post@kombinat-tanz-film.de
Phone: Paula E. Paul (+49 172-3862516), Sirko Knüpfer (+49 163-3141584)

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

This website is hosted by Uberspace (netzhaus AG / netzguys GmbH, Germany).

The hosting provider automatically collects and stores information in server log files transmitted by your browser. This may include:

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing device
• Time of the server request
• IP address

Server log data is not merged with order data for profiling purposes.

For paid downloads we process in particular:

Retention periods follow statutory obligations (especially commercial and tax law). Specific periods should be agreed with your legal adviser.

Depending on the payment method chosen:

PayPal
You are redirected to PayPal where payment takes place. We receive transaction IDs and payment status, not PayPal credentials or full card data.
Privacy information: paypal.com/webapps/mpp/ua/privacy-full

Credit card (Stripe)
The card field is embedded via Stripe (Stripe.js/Elements). Payment data is sent directly to Stripe. We retain PaymentIntent ID and payment status.
Privacy information: stripe.com/privacy

For EU business customers, the VAT ID you enter may be transmitted to the EU VIES interface of the European Commission for plausibility checks. The result (valid/invalid) is documented in the order. VIES does not permanently store the data for us.

For shop operation we use a technically required session (Kirby session cookie). It may store among other things:

• Your selection / cart (ww.merx.cartItems)
• Checkout stash during partial selection
• Session flags for «Remember selection», B2B tax state
• Temporarily entered checkout fields (checkout_form)

Cookie lifetime matches the session duration (typically about two hours).

Without «Remember selection», the server-side selection is cleared on a new browser start (cart/clear-ephemeral) unless remember is active.

Checkout form storage

When you enter contact and address details in the checkout, we temporarily store them on the server for the duration of your current session so you do not have to re-enter them if the process is interrupted. This includes email, name, address and – for business customers – VAT ID; payment card data is not stored.

You may optionally consent to also store the same details locally in your browser (localStorage) so they can be pre-filled on your next visit. Consent is given by checking the corresponding option in the checkout; this constitutes your agreement to storage as described in these privacy information. You can end local storage at any time by unchecking the option or clearing site data for this domain in your browser.

On the «My Selection» page or in the checkout, you may also consent to store your selection (works, variants, checked/unchecked state of items) locally in your browser (localStorage). The purpose is to restore your selection beyond the current session and to show the item count in the header. Stored data includes product and variant identifiers and selection state; no payment data. Consent is given by checking «Remember selection» or the corresponding checkout option.

Withdrawal of consent: uncheck the option or clear site data for this domain in your browser.

After successful payment we provide time-limited, signed download URLs (default: 30 days, configurable in the shop). Downloads are provided as ZIP with media file and licence PDF. The first download access per line item may be logged in the order.

We send order confirmations, invoices and download information by email via the configured mail server (SMTP/Uberspace). Sender: shop@neopoetik.de (or the invoice email configured in the Panel).

In the checkout you may optionally consent to the newsletter via a separate checkbox. There is no automatic newsletter subscription. On opt-in, a notification is sent to the admin user configured in the Panel. No mailing tool is integrated in the shop; double opt-in via an external newsletter service – if used – must be handled separately.

We operate our own, cookie-free visitor statistics (kosmar-analytics plugin). On page views we server-side record among other things:

• page URL visited
• device type, browser and OS family (aggregated)
• language, referrer, UTM parameters
• viewport buckets (rounded)
• funnel steps (e.g. purchase)

No personal data is stored; the IP address is only briefly processed to derive a pseudonymous, daily-rotating identifier and is not retained.

Data is stored in an SQLite database under site/storage/analytics/, linked to a pseudonymous daily hash (rotated daily, derived from the IP address and browser signature; the IP address itself is not stored). Panel visits and logged-in editors are not tracked. The final legal basis (e.g. legitimate interest) should be confirmed with your legal adviser. You can object to this processing at any time — use the switch in the visitor statistics section below.

The Kirby session is technically required for shop operation. Analytics does not set an additional tracking cookie category; the statistics work without any cookie or server-side session. Optional localStorage entries (remember selection/checkout) are only set when you actively check the box.

You have the right at any time to:

• free information about your stored personal data
• rectification of inaccurate data
• erasure of your data stored with us
• restriction of processing
• data portability
• object to the processing of your data
• lodge a complaint with a supervisory authority

For privacy inquiries, contact:
post@kombinat-tanz-film.de

This site uses SSL encryption for security and to protect the transmission of confidential content. An encrypted connection is indicated when the browser address bar changes from «http://» to «https://».

We reserve the right to adapt these privacy information so that they always meet current legal requirements or reflect changes to our services.

Last updated: May 2026