Southline.

Production Studio

Legal

Privacy Policy

Thanks for stopping by. This page explains which personal data is processed when you visit this website, for what purpose and on what legal basis. In short: we collect as little as possible, and Google Analytics only runs if you explicitly agree.

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Jonas Schuffert
Southline Productions
Bietigheimer Straße 39
71691 Freiberg am Neckar
Germany

Phone: +49 175 8613874
Email: jonas.schuffert@southlineproductions.com

Below, we refer to ourselves as “we” or “us”. We are not required to appoint a data protection officer.

2. Legal bases and storage period

We only process personal data if one of the following legal bases applies:

  • Consent (Art. 6(1)(a) GDPR and, where information is stored on your device, Section 25(1) TDDDG, the German Telecommunications Digital Services Data Protection Act), e.g. for Google Analytics,
  • Contract or pre-contractual measures (Art. 6(1)(b) GDPR), e.g. when you contact us about working together,
  • Legal obligation (Art. 6(1)(c) GDPR), e.g. statutory retention or documentation duties,
  • Legitimate interest (Art. 6(1)(f) GDPR), e.g. in providing this website securely and reliably.

We only store personal data for as long as necessary for the respective purpose or as required by statutory retention periods. After that, it is deleted. You will find the specific periods in the individual sections.

3. Hosting and delivery of the website (Cloudflare)

This website is hosted on Cloudflare Pages and delivered via Cloudflare’s global content delivery network (CDN). The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”).

When you visit this website, Cloudflare automatically processes technical data transmitted by your browser (so-called server log files). This includes in particular:

  • IP address,
  • date and time of access,
  • page or file requested,
  • referrer URL (the previously visited page),
  • browser and operating system used,
  • amount of data transferred and HTTP status code,
  • security-related signals used to defend against attacks (e.g. DDoS) and abuse.

This data is technically necessary to display the website, deliver it quickly and protect it against attacks. The legal basis is our legitimate interest in providing the website securely, reliably and efficiently (Art. 6(1)(f) GDPR). We do not combine this data with other data.

Cloudflare processes the data on our behalf under a data processing agreement (Data Processing Addendum) pursuant to Art. 28 GDPR. Data may be transferred to the USA in the process. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, which is covered by an adequacy decision of the European Commission (Art. 45 GDPR). In addition, Cloudflare uses the European Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR). Cloudflare only stores the log files for as long as necessary for the purposes mentioned.

More information: Cloudflare Privacy Policy.

4. Language selection based on your location

This website is available in German and English. To show you the right language automatically, Cloudflare determines the country you are visiting from based on your IP address. If you visit from Germany, we redirect you to the German version; otherwise, you see the English version. The country is only used for this redirect. We do not store it or use it to build a profile. The legal basis is our legitimate interest in showing you the website in your language (Art. 6(1)(f) GDPR).

If you deliberately switch languages using the language switcher (“DE” or “EN”) at the top of the page, we save your choice in a cookie named “lang” (value: “de” or “en”, lifetime: 1 year), so you are not redirected again on your next visit. This cookie is only set when you use the language switcher. It contains no other data and is not used for analytics or advertising. It is strictly necessary to provide the function you have explicitly requested (Section 25(2) No. 2 TDDDG). The legal basis for the processing is Art. 6(1)(f) GDPR. You can delete the cookie at any time in your browser settings.

5. Encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the padlock icon in your browser’s address bar. This means that data you send to us cannot be read by third parties.

6. Consent and storage of your choice (cookie banner)

On your first visit, a banner asks whether you allow Google Analytics. You are free to agree with “Accept” or refuse with “Decline”. Without your consent, Google Analytics is not loaded.

So that we do not ask you again on every page, we store your choice locally in your browser’s storage (localStorage, entry “southline-consent”). Only your choice (accepted or declined), a version number and the time of your decision are stored. No cookie is set for this, and this information is not transmitted to us or any third party.

This storage is strictly necessary to respect your decision (Section 25(2) No. 2 TDDDG). The legal basis for the related processing is our legal obligation to be able to demonstrate consent (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). The entry remains stored until you delete it in your browser settings.

Withdrawal: You can change your choice at any time via the “Cookie Settings” link at the bottom of every page and withdraw your consent with effect for the future (Art. 7(3) GDPR). If you withdraw your consent, the Google Analytics cookies are deleted and no further data is sent to Google.

7. Web analytics with Google Analytics 4 (only with your consent)

If you agree, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). This helps us understand how our website is used so we can improve it.

What is collected:

  • pages viewed and time spent on the site,
  • interactions such as clicks on contact buttons, the email address, the phone number or the Instagram link,
  • automatically collected interactions (Google Analytics “enhanced measurement”), such as whether you scroll to the end of a page and whether you click links to other websites,
  • how you found the website (e.g. via Instagram or a search engine),
  • technical details about your device, browser, operating system and screen size,
  • approximate location (country, region or city).

Privacy-friendly settings: Your approximate location is derived from your IP address. According to Google, Google Analytics 4 only uses IP addresses briefly for this purpose for visits from the EU and then discards them; they are not logged or stored. We use Google Consent Mode v2 and only allow analytics storage (“analytics_storage”). Advertising purposes are excluded (“ad_storage”, “ad_user_data” and “ad_personalization” remain denied). Google Signals and ad personalisation are disabled. We do not link the data to your name or any other profiles.

Cookies: Google Analytics sets the following cookies on your device:

  • _ga: distinguishes visitors from one another, lifetime up to 2 years,
  • _ga_FHGVJKD410: stores the session state, lifetime up to 2 years.

Some browsers additionally limit the lifetime of such cookies.

Legal basis is your consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). Without your consent, the Google Analytics script is not loaded and no connection to Google is established.

Data processing agreement and international transfers: We have concluded a data processing agreement with Google (Art. 28 GDPR). Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, which is covered by an adequacy decision of the European Commission (Art. 45 GDPR).

Storage period: Analytics data is automatically deleted from Google Analytics after 14 months. Aggregated, non-personal statistics may be kept longer.

Withdrawal: at any time via “Cookie Settings” at the bottom of every page (see section 6).

More information: Google Privacy Policy and Google Analytics data privacy in the EU.

8. Contact by email or phone

If you contact us by email or phone, we process the information you provide (e.g. name, email address, phone number, company and the content of your message) in order to answer your enquiry and, where applicable, to prepare a collaboration. There is no contact form on this website.

The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or a potential collaboration (e.g. an application for a case study). In all other cases, the processing is based on our legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR).

We delete your data once your enquiry has been fully dealt with, unless statutory retention obligations apply (e.g. retention periods of up to 10 years for business correspondence under German commercial and tax law). We use an email provider that processes messages on our behalf to send and receive emails.

9. Links to Instagram

Our website links to our Instagram profile. This is a simple link, not an embedded plugin. Simply visiting our website therefore does not transmit any data to Instagram.

Only when you click the link are you redirected to Instagram. From then on, data processing by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland applies. For details, see Instagram’s Privacy Policy. With your consent, Google Analytics only records that the link was clicked (see section 7).

10. Fonts and scripts

The fonts used on this website (Oswald, Inter, IBM Plex Mono) and all scripts are loaded locally from our own server. There is no connection to Google Fonts or other external providers. No third-party content is embedded (e.g. no YouTube videos, maps or social media posts).

11. No automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

12. Your rights

You have the following rights regarding your personal data at any time:

  • Access to the data we process about you (Art. 15 GDPR),
  • Rectification of inaccurate data (Art. 16 GDPR),
  • Erasure of your data (Art. 17 GDPR),
  • Restriction of processing (Art. 18 GDPR),
  • Data portability (Art. 20 GDPR),
  • Withdrawal of consent with effect for the future (Art. 7(3) GDPR), e.g. via “Cookie Settings”.

Right to object (Art. 21 GDPR): Where we process data based on our legitimate interest (Art. 6(1)(f) GDPR), you can object to the processing at any time on grounds relating to your particular situation.

For any request, an informal message to jonas.schuffert@southlineproductions.com is sufficient.

Right to lodge a complaint (Art. 77 GDPR): You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
(State Commissioner for Data Protection and Freedom of Information Baden-Württemberg)
Lautenschlagerstraße 20
70173 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de

13. Changes

We update this privacy policy whenever the website or the legal situation changes. The version published here applies.

Last updated: October 2026