Okapi Digital

Privacy Policy

Last updated: May 2025

Translation for convenience. The German version is legally binding.

1. Privacy at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to the sections below.

Data Collection on This Website

Data processing on this website is carried out by the website operator. You can find their contact details in the section "Controller" of this privacy policy.

When you visit this website, certain technical data is collected automatically (e.g., server logs, IP addresses). You may also provide us with data via the contact form. We use this data to ensure the operation of the website, to respond to enquiries, and — with your explicit consent — to improve the website using analytics tools.

Your Rights

You have the right at any time to obtain free information about the origin, recipient, and purpose of your stored personal data, as well as the right to rectification, deletion, or restriction of processing. You also have the right to object to processing and the right to data portability. If data processing is based on consent, you may withdraw it at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority. Contact us at any time: bluecalafilms@gmail.com.

2. Hosting and Infrastructure

This website is hosted by Vercel Inc., 340 Pine Street, Suite 701, San Francisco, CA 94104, USA. When you visit our website, technical data — in particular IP addresses, server log files, and page requests — is processed on Vercel's servers.

The use of Vercel is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the reliable and secure provision of our website. Where consent has been obtained, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR.

A data processing agreement has been concluded with Vercel pursuant to Art. 28 GDPR. Further information can be found in Vercel's privacy policy: https://vercel.com/legal/privacy-policy.

3. SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content — such as enquiries you send to us as the site operator. You can recognise an encrypted connection by the fact that the browser address bar changes from "http://" to "https://" and by the lock symbol in your browser bar. When SSL/TLS encryption is active, the data you transmit to us cannot be read by third parties.

4. General Information and Mandatory Disclosures

4.1 Data Protection

Protecting your personal data is a priority for us. We treat your personal data confidentially and in accordance with applicable data protection regulations and this privacy policy. We note that data transmission over the internet may have security vulnerabilities. Complete protection against access by third parties is not possible.

4.2 Controller

The controller for data processing on this website is:

Blue Cala Films
Steigerwaldweg 15
65760 Eschborn
Germany
Email: bluecalafilms@gmail.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

4.3 Retention Period

Unless a more specific retention period is stated in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing it (e.g., tax or commercial retention obligations of up to ten years); deletion will occur once those reasons cease to apply.

4.4 Legal Bases for Processing

Where you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR for special categories of data under Art. 9(1) GDPR. For explicit consent to transfer personal data to third countries, processing is additionally based on Art. 49(1)(a) GDPR. Where you have consented to cookies or device access (e.g., fingerprinting), processing is also based on § 25(1) TTDSG. Consent may be withdrawn at any time. Where data is required for the performance of a contract, processing is based on Art. 6(1)(b) GDPR. Where processing is necessary to comply with a legal obligation, it is based on Art. 6(1)(c) GDPR. Processing may also be based on our legitimate interest under Art. 6(1)(f) GDPR. The specific legal bases applicable in each case are identified in the relevant sections below.

4.5 Right to Lodge a Complaint

In the event of GDPR violations, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work, or place of the alleged infringement. This right of complaint exists without prejudice to other administrative or judicial remedies.

The supervisory authority responsible for us is:

The Hessian Commissioner for Data Protection and Freedom of Information (HBDI)
PO Box 3163
65021 Wiesbaden, Germany
www.datenschutz.hessen.de

4.6 Right to Data Portability

You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract, in a structured, commonly used, and machine-readable format, for yourself or for transfer to a third party. Direct transfer to another controller will only be carried out where technically feasible (Art. 20 GDPR).

4.7 Access, Rectification, and Erasure

You have the right, within the applicable legal framework, to obtain free information at any time about your stored personal data, its origin and recipients, and the purpose of processing, and — where applicable — the right to rectification or erasure (Arts. 15, 16, 17 GDPR). Please contact us for this and for any other questions about personal data.

4.8 Right to Restriction of Processing

You have the right to request restriction of processing of your personal data (Art. 18 GDPR). You may contact us at any time for this purpose. The right to restriction applies in the following cases: if you contest the accuracy of your personal data, we need time to verify this — during which you may request restriction. If processing was or is unlawful, you may request restriction instead of erasure. If we no longer need the data but you require it for the establishment, exercise, or defence of legal claims, you may request restriction instead of erasure. If you have objected under Art. 21(1) GDPR and the outcome of the balancing of interests is pending, you may request restriction in the meantime.

4.9 Right to Object

Where processing of your personal data is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data (Art. 21 GDPR). The applicable legal basis is set out in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims (Art. 21(1) GDPR).

4.10 Withdrawal of Consent

Many data processing operations are only possible with your explicit consent. You may withdraw consent already given at any time. The lawfulness of processing carried out before the withdrawal is not affected. You may withdraw consent informally by email to bluecalafilms@gmail.com. For analytics cookie consents, you may also adjust settings in our cookie banner at any time.

5. Data Collection on This Website

5.1 Cookies

Our website uses cookies — small text files stored by your web browser on your device. Cookies are harmless and contain no viruses. We distinguish between two types:

  • Technically necessary cookies: Required for the operation of the website (e.g., cookie consent status). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in smooth operation) and § 25(2) TTDSG.
  • Analytics cookies (Google Analytics): Enable analysis of website usage. These are set only with your explicit consent. Legal basis: Art. 6(1)(a) GDPR in conjunction with § 25(1) TTDSG.

You can adjust your cookie settings at any time via our cookie banner or in your browser settings. Note that disabling certain cookies may impair the functionality of this website.

5.2 Server Log Files

The hosting provider of this website automatically collects and stores information in server log files transmitted by your browser. This includes:

  • Browser type and version
  • Operating system
  • Referrer URL
  • Hostname of the accessing device
  • Time of the server request
  • IP address

This data is not merged with other data sources. Legal basis: Art. 6(1)(f) GDPR — we have a legitimate interest in the technically flawless presentation, optimization, and security of our website. Data is typically deleted automatically after 7–14 days.

5.3 Contact Form

When you submit a contact form enquiry, the information provided — including the contact details you supply (name, email address, message, timestamp) — is stored by us for the purpose of processing your enquiry and for follow-up correspondence.

Processing is based on Art. 6(1)(b) GDPR where your request relates to the performance of a contract or pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling enquiries directed to us (Art. 6(1)(f) GDPR). Data is deleted upon final resolution of your enquiry unless statutory retention obligations apply. Your data will not be shared with third parties without your consent.

5.4 Email Contact

When you contact us by email, your enquiry including all resulting personal data (name, enquiry) is stored and processed by us for the purpose of handling your request. Legal basis: Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR. Data remains with us until you request deletion, withdraw consent to storage, or the purpose for data storage no longer applies. Mandatory statutory provisions — in particular statutory retention periods — remain unaffected.

6. Analytics Tools

6.1 Google Tag Manager

We use Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tag management system that allows us to centrally manage measurement codes and associated code snippets (tags) on our website. The Tag Manager itself (without activated tags) does not process any personal data and does not set cookies. It serves solely to manage other tracking tools (such as Google Analytics). Tags — in particular analytics cookies — are only activated with your consent via our cookie banner.

Legal basis: Art. 6(1)(a) GDPR (consent). A data processing agreement has been concluded with Google Ireland Limited pursuant to Art. 28 GDPR. For further information, see Google's privacy policy: https://policies.google.com/privacy.

6.2 Google Analytics 4

This website uses Google Analytics 4 (GA4), provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose: Website analytics and improvement of the user experience.

Data processed: IP address (anonymized), browser type and version, operating system, referrer URL, pages visited, session duration, device information, and approximate city-level location.

IP anonymization: We have enabled IP anonymization in Google Analytics. Your IP address is therefore truncated by Google within EU member states or other EEA contracting states before transmission.

Legal basis: Google Analytics is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 25(1) TTDSG. It is activated exclusively after you have given explicit consent via our cookie banner. You may withdraw consent at any time by selecting "Reject" in the cookie banner.

Retention period: User data is deleted after 2 months and event data after 14 months, in accordance with our GA4 settings.

Third-country transfers: Data generated by Google Analytics is transferred to and stored on Google LLC servers in the USA. Google LLC is certified under the EU–U.S. Data Privacy Framework (European Commission adequacy decision of 10 July 2023). Standard Contractual Clauses (SCCs) have additionally been agreed pursuant to Art. 46(2)(c) GDPR.

Data processing agreement: A data processing agreement has been concluded with Google Ireland Limited pursuant to Art. 28 GDPR.

Opt-out: You can prevent Google Analytics from collecting your data by selecting "Reject" in our cookie banner. Alternatively, you can install the Google Analytics browser opt-out add-on: https://tools.google.com/dlpage/gaoptout.

For more information on how Google Analytics handles user data, see Google's privacy policy: https://policies.google.com/privacy.

7. Your Rights at a Glance

With respect to your personal data stored by us, you have the following rights:

  • Right of access (Art. 15 GDPR): You have the right to request confirmation of whether we process personal data about you, and to obtain information about that data.
  • Right to rectification (Art. 16 GDPR): You may request immediate correction of inaccurate or completion of incomplete personal data.
  • Right to erasure (Art. 17 GDPR): You may request deletion of your personal data where the legal conditions are met.
  • Right to restriction of processing (Art. 18 GDPR): You may request restriction of processing of your personal data.
  • Right to data portability (Art. 20 GDPR): You may request that your data be provided to you in a structured, commonly used, and machine-readable format.
  • Right to object (Art. 21 GDPR): You may object to processing of your personal data where it is based on Art. 6(1)(e) or (f) GDPR.
  • Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint at any time with the competent data protection supervisory authority (see section 4.5).

To exercise your rights, please contact: bluecalafilms@gmail.com