Privacy Policy

We appreciate your interest in our website. Protecting your privacy is very important to us. Below, we provide a transparent overview of how we handle your personal data in accordance with the EU General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for data processing on this website is:

André Schlechte

Königsworther Str. 21

30167 Hannover

Germany

Email: mail@andreschlechte.com

Website: https://andreschlechte.com

2. Web Hosting (STRATO)

This website is hosted by STRATO AG, Otto-Ostrowski-Str. 7, 10249 Berlin, Germany. STRATO processes data on our behalf under a Data Processing Agreement (Art. 28 GDPR).

When visiting this website, STRATO logs access data (such as IP address, browser type, date/time) in server log files for security and stability. These logs are deleted regularly and are not linked to individual users.

More info: https://www.strato.com/privacy-policy/

3. Personal Data Collection and Use

Visiting our website is generally possible without submitting personal data. If you contact us via email or contact form, we collect your name, email address, and message content. These details are used solely to respond to your inquiry and are not shared without consent.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual communication) and Art. 6(1)(f) GDPR (legitimate interest in communication).

4. Contact Form (Squarespace)

Our contact form is provided by Squarespace Inc., USA. When using the form, your data is processed by Squarespace, which may involve data transfers outside the EU.

Details: https://www.squarespace.com/privacy

5. Embedded and Delivered Video Content (VidFlow, Dropbox, Vimeo)

We host and deliver videos to clients using:

• VidFlow (VidFlow LLC, USA)

• Dropbox (Dropbox Inc., USA)

• Vimeo (Vimeo Inc., USA)

When accessing a video, your IP address and technical data may be transmitted to the respective provider. These services may process data in the USA, where no GDPR-equivalent protection exists.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in presenting high-quality audiovisual content).

VidFlow: https://vidflow.co/privacy

Dropbox: https://www.dropbox.com/privacy

Vimeo: https://vimeo.com/privacy

6. Cloud Storage and Project Collaboration Tools (Google Drive, Dropbox, Adobe Creative Cloud, Blackmagic Cloud, DaVinci Cloud, Notion)

To securely store and manage project files (e.g., footage, edits, documents), we use:

• Google Drive

• Dropbox

• Adobe Creative Cloud

• Blackmagic Cloud

• DaVinci Resolve Cloud / Project Server

• Notion

These providers may process data outside the EU. Access is restricted to personnel directly involved in the project. Only the minimum necessary data is stored.

7. Payment and Accounting Services (Wise, Lexoffice, Smarta)

We use:

• Wise

• Lexoffice

• Smarta

These services may process personal billing data such as name, address, invoice details, and payments.

Wise: https://wise.com/privacy

Lexoffice: https://www.lexoffice.de/datenschutz/

Smarta: https://smarta.com/de/datenschutz/

8. AI-Assisted Tools (ChatGPT, Wispr Flow, Pieces.ai)

We use AI tools to support text development, organization, and workflow optimization:

• ChatGPT (OpenAI)

• Wispr Flow

• Pieces.ai

Only text-based content is processed. No sensitive project materials such as video files, photos, audio, or identifiable client footage are uploaded unless the client explicitly permits it.

The processing may occur outside the EU.

ChatGPT: https://openai.com/policies/privacy-policy

Wispr Flow: https://www.wispr.ai/privacy

Pieces: https://pieces.app/privacy

Clients may request that no AI tools be used for their project.

9. Cookies

This website uses only essential cookies necessary for core functionality and security. These cookies do not store personal data and do not require consent under the ePrivacy Directive.

Cookies can be managed or blocked via browser settings.

10. Your Rights Under GDPR

You have the following rights:

• Access (Art. 15 GDPR)

• Rectification (Art. 16 GDPR)

• Erasure (Art. 17 GDPR)

• Restriction of Processing (Art. 18 GDPR)

• Data Portability (Art. 20 GDPR)

• Objection (Art. 21 GDPR)

To exercise these rights, contact us using the details above.

11. Right to Lodge a Complaint

If you believe your data is being processed unlawfully, you may file a complaint with a data protection authority (Art. 77 GDPR).

12. Data Sharing With Third Parties

Data is shared only when necessary for:

• contract execution (e.g., video delivery, payment processing)

• legal obligations

• tools explicitly listed in this policy

There is no other data sharing.

13. Objection to Promotional Emails

We object to the use of publicly available contact information for unsolicited advertising or informational materials. Legal action may be taken in case of unsolicited promotional communication (spam).