Privacy policy

Data protection declaration

As of: July 2026

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on the subject of data protection can be found in the following sections.

Data collection on this website

Who is responsible for data collection?

Data processing on this website is carried out by the website operator. You can find their contact details in Section 3 (“Note on the responsible body”).

How do we collect your data?

Your data is collected on the one hand when you provide it to us – for example by entering it into the contact or booking form. Other data is automatically collected by our IT systems when you visit the website, in particular technical data such as browser type, operating system or time of page access.

What do we use your data for?

Some of the data is used to ensure that the website is provided error-free. We use additional data for data-saving range measurement and to process your inquiries and appointment bookings.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipient and purpose of your stored personal data. You also have the right to correct or delete this data, to restrict processing, to data portability and the right to object. You can revoke your consent at any time with future effect. You also have the right to lodge a complaint with a data protection supervisory authority (see Section 6).

Privacy-friendly website

We do not use analytics or marketing cookies and do not integrate external analytics, tracking or advertising services. Only the technically necessary NEXT_LOCALE cookie may be set for the language you select. As no non-essential storage or comparable access to your device takes place, no consent banner is required for these functions.

2. Hosting

Hetzner Online GmbH

This website is operated on a dedicated server provided by the following provider:

Hetzner Online GmbH

Industriestr. 25

91710 Gunzenhausen

Germany

When you access this website, technically necessary connection data (see Section 4, “Server log files”) is processed on this server. The servers are located in Germany; There is no data transfer to third countries outside the EU/EEA.

The legal basis for using the hosting provider is our legitimate interest in the secure, stable and efficient provision of our online offering (Art. 6 Para. 1 lit. f GDPR). There is a contract for order processing with Hetzner Online GmbH in accordance with Art. 28 GDPR.

Content management system and CRM

The content management system used (Synapse CMS) and the customer management system (Formline CRM) - both developed by Gawenda Studio (https://gawenda-studio.com) - are operated exclusively on the server mentioned above. There is no transfer of data to external cloud or SaaS services. To the extent that Gawenda Studio receives access to personal data as part of maintenance and technical support, this is done on the basis of an order processing contract in accordance with Art. 28 GDPR.

3. General information and mandatory information

Data protection

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

Note on the responsible body

The responsible body for data processing on this website is:

DoManh SFX – Special Effects

Tom DoManh

Hauptstraße 22

25721 Eggstedt

Germany

Telephone: 0176 46136374

E-mail: kontakt@domanh-sfx.com

The responsible body is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data decides.

Data protection officer

We are not legally obliged to appoint a data protection officer. If you have any questions about data protection, please contact the responsible body mentioned above directly.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke any consent you have already given at any time. The lawfulness of the data processing carried out up to the revocation remains unaffected by the revocation.

Right to object to data collection (Art. 21 GDPR)

If data is processed on the basis of Art. 6 Para. 1 lit. f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. We will then no longer process the data in question unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

SSL or TLS encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection when the browser's address bar changes from "http://" to "https://” changes and the lock symbol in your browser line. If encryption is activated, the data you transmit to us cannot be read by third parties.

4. Data collection on this website

Server log files

The server automatically collects and stores information in so-called server log files, which your browser automatically transmits. These are:

• Browser type and browser version

• Operating system used

• Referrer URL

• Host name of the accessing computer

• Time of the server request

• IP address

This data will not be merged with other data sources. This data is collected on the basis of Article 6 Paragraph 1 Letter f GDPR. The website operator has a legitimate interest in the technically error-free presentation and security of his website; For this purpose, the recording of the server log files is mandatory.

Storage period: The server log files are automatically deleted after 7 days at the latest, unless, in exceptional cases, they are needed longer to clarify a specific security incident (e.g. attack on the server infrastructure).

Range measurement without cookies

We measure the use of this website with a self-developed solution that is operated exclusively on our own server. No cookies are set, no information is stored or read on your device, and no data is passed on to third parties. Audience measurement is carried out exclusively with our own solution and without an external analytics service.

The following are recorded exclusively:

• the page accessed

• the referring source (referrer)

• browser

• operating system

• device type

• screen size

• language setting

• the country derived from the IP address

Your IP address is used exclusively processed fleetingly in memory to derive an irreversible check value (hash) and is not saved. A regularly rotating key is included in this test value, so that recognition beyond the time of rotation is impossible. No cross-device or cross-person profiles are created.

The evaluation is carried out exclusively in aggregated form. Individual visitors cannot be identified; There is no longer any personal reference after the aggregation.

The legal basis is our legitimate interest in a data-saving, aggregated analysis of website usage (Art. 6 Para. 1 lit. f GDPR). Since neither information is stored on your device nor read from it, consent according to § 25 TDDDG is not required.

Storage period: Personal data is not permanently accumulated during range measurement because the IP address is not stored and the test value is regularly invalidated. The remaining aggregated statistical values no longer have any personal reference and are therefore not subject to any data protection deletion period.

Objection: You can object to the reach measurement at any time informally by email to kontakt@domanh-sfx.com object.

Contact form

If you send us inquiries using the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent.

Legal basis:

• Article 6(1)(b) GDPR where your enquiry relates to performance of a contract or is necessary to take steps before entering into a contract;

• in all other cases, Article 6(1)(f) GDPR — our legitimate interest in efficiently handling enquiries addressed to us — or Article 6(1)(a) GDPR where you have given consent.

Storage period: The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies - for example after your request has been processed. If a contractual relationship is concluded, the statutory retention periods apply (in particular commercial and tax law periods of 6 or 10 years). Mandatory legal provisions - in particular retention periods - remain unaffected.

Inquiry by email or telephone

If you contact us by email or telephone, your inquiry, including all resulting personal data, will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent. Legal bases and storage period correspond to the information in the “Contact form” section.

Online appointment booking

We use our own booking system, operated on our European infrastructure. We process your name, email address, optional telephone number and message, as well as the selected appointment, duration and time zone. The data is used to book, confirm, manage and, where applicable, cancel the appointment, including the calendar invitation. No external scheduling service is embedded.

The legal basis is Article 6(1)(b) GDPR (steps prior to entering into a contract or performance of a contract). Booking data is deleted once the appointment has been fully handled and no statutory retention obligations remain.

5. Links to social networks

There are links to our Instagram profile on this website. These are only simple hyperlinks, not embedded social media plugins or integrated content. When you visit our website, no data is transmitted to the provider and no connection is established to their servers.

Only when you actively click on such a link will you be redirected to the provider's website. From this point on, its data protection declaration applies; We have no influence on data processing there.

The provider of Instagram is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

Data protection declaration: https://privacycenter.instagram.com/policy

6. Your rights as a data subject

You have the following rights towards us with regard to the personal data concerning you:

• Information (Art. 15 GDPR)

• Correction (Art. 16 GDPR)

• Deletion (Art. 17 GDPR)

• Restriction of processing (Art. 18 GDPR)

• Data portability (Art. 20 GDPR)

• Objection to processing (Art. 21 GDPR)

• Revocation of consent given with effect for the future (Art. 7 Para. 3 GDPR)

To exercise these rights, an informal message to kontakt@domanh-sfx.com.

Right to complain to the responsible supervisory authority

In the event of data protection violations, you have the right to complain to a supervisory authority, in particular in the member state of your usual place of residence, your place of work or the place of the alleged violation. We are responsible for:

Independent State Center for Data Protection Schleswig-Holstein (ULD)

Holstenstraße 98

24103 Kiel

Telephone: 0431 988-1200

E-mail: mail@datenschutzzentrum.de

Web: https://www.datenschutzzentrum.de

7. Currentness and changes to this data protection declaration

Videos on project pages (YouTube, two-click solution)

On individual project pages we embed videos from YouTube. These videos are not loaded automatically. Opening the page establishes no connection to Google; at first you only see a preview image served from our own server together with a notice.

Only when you click the play button is the video loaded. This establishes a connection to Google (YouTube) servers and transmits your IP address and technical details about your device to the provider. We use the extended data protection mode (youtube-nocookie.com), in which, according to YouTube, information is stored on your device only once playback starts.

The legal basis for this transfer is your consent under Art. 6(1)(a) GDPR, which you give by clicking the button. You can use the page in full without loading the video. The provider is Google Ireland Limited. Further information on the provider’s data processing is available at https://policies.google.com/privacy.

This data protection declaration is currently valid and is valid as of July 2026. Due to the further development of our website or due to changed legal or official requirements, it may become necessary to adapt this data protection declaration. The current version can be accessed at any time at https://www.domanh-sfx.com/datenschutz.