1. Controller

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Arcanimotion
Owner: Daniel Bockhorst
Deverhafen 2, 26871 Papenburg
Email: kontakt@arcanimotion.de

2. General information and legal bases

The protection of your personal data is important to the provider. Data is treated confidentially and in accordance with statutory data protection regulations (GDPR, BDSG, TTDSG) and this privacy policy.

Using the website is generally possible without providing personal data. If personal data (e.g. name, address or email addresses) is collected on these pages, this is done — where possible — on a voluntary basis or to fulfil a contract.

3. Type and scope of data processing

The provider processes personal data that arises when using the website or when you commission a service:

Note on IT / remote support: If remote maintenance, screen sharing or device setup is carried out as part of IT and support services, only the data required for diagnosis, troubleshooting or setup is processed. Access credentials are — where possible — used only temporarily and are not stored permanently. Logs/notes are created only to the extent required for documentation and billing.

• Inventory data (e.g. names, addresses)
• Contact data (e.g. email, phone numbers)
• Content data (e.g. text entries, photographs, videos, audio files, project descriptions)
• Usage data (e.g. access times, pages visited)
• Meta/communication data (e.g. IP addresses, device information)

3.1 Server log files

The hosting provider (STRATO AG) automatically collects and stores information in so-called server log files which your browser transmits automatically. This includes:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing device
• Time of the server request
• IP address (anonymised)

This data cannot be assigned to specific persons. The data is not merged with other sources. The collection is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of the website.

3.2 Contact requests (email / form)

If you send us enquiries via the contact form or email, your details from the enquiry form — including the contact data you provide there — will be stored for processing the enquiry and in case of follow-up questions. We do not pass this data on without your consent.

4. Purposes and legal bases of processing

We process your data on the following legal bases:

• Contract performance (Art. 6(1)(b) GDPR): to prepare offers, perform orders (animation, image editing) and issue invoices.
• Consent (Art. 6(1)(a) GDPR): if you provide files for processing using AI systems or accept cookies.
• Legitimate interest (Art. 6(1)(f) GDPR): for technical security, website operation and anonymised analysis of user behaviour to improve our services.
• Legal obligation (Art. 6(1)(c) GDPR): e.g. statutory retention obligations for invoices.

5. Disclosure to third parties and third-party providers

5.1 Hosting

We host our website with STRATO AG (Pascalstraße 10, 10587 Berlin, Germany). A data processing agreement (DPA) has been concluded with the provider to ensure processing only on our instructions and in compliance with the GDPR.

5.2 Use of generative AI (Artificial Intelligence)

To fulfil orders (creation of animations, videos, voiceovers, text optimisation), the provider uses specialised AI services. Customer-uploaded image, video, text or audio files may be transferred to the servers of the respective providers and processed there.

Services used may include, among others:

• Wavespeed (aggregator for various AI models)
• Luma AI (video generation)
• Kling AI (video generation)
• PixWith.ai (image generation/editing)
• ElevenLabs.io (audio/voiceover)
• ChatGPT (OpenAI) & Gemini (Google) (text and concept support)

Note on transfers to third countries: These services may process data on servers outside the European Union (e.g. in the USA). Providers generally aim to ensure an adequate level of protection via standard contractual clauses or participation in the Data Privacy Framework. By commissioning the service, the customer expressly consents pursuant to Art. 49(1)(a) GDPR to the transfer of files necessary for the order.

5.3 Payment service provider

For payments via PayPal, payment data is transmitted to PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal’s privacy policy applies.

6. Analytics tools and advertising

Google Analytics

This website uses functions of the web analytics service Google Analytics. Provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of visitors. The operator receives various usage data such as page views, time on site, operating systems used and the user’s origin. This data is not used to personally identify visitors or create individual profiles, but only for general statistical evaluation to improve the website.

IP anonymisation:
IP anonymisation is enabled on this website. Your IP address is shortened by Google within EU member states or other EEA states before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Google Analytics cookies are stored and this analytics tool is used on the basis of Art. 6(1)(a) GDPR; consent can be revoked at any time.

7. Social media presences

This website contains links to social networks (YouTube, Instagram, TikTok, Facebook). These are static links, not embedded plugins that transmit data when the page loads.

Data is only transferred when you actively click the respective button and are redirected to the provider’s website. From that point onward, the privacy policy of the respective network applies.

8. Storage period and deletion

Personal data is deleted as soon as the purpose for storage no longer applies:

• Project files (source material): usually deleted 30 days after project completion unless reference use has been agreed.
• Invoice data: stored in accordance with statutory retention periods (10 years).
• Email correspondence: archived as part of business correspondence for up to 6 years.

9. Data security

This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the change from “http://” to “https://” in your browser’s address bar and the lock symbol.

10. Your rights as a data subject

You have the right at any time to:

• request access to your personal data processed by us (Art. 15 GDPR);
• request the rectification of inaccurate data or completion of your stored data (Art. 16 GDPR);
• request the erasure of your personal data stored by us (Art. 17 GDPR);
• request the restriction of processing of your personal data (Art. 18 GDPR);
• receive your personal data in a structured, commonly used and machine-readable format (data portability, Art. 20 GDPR);
• withdraw your consent at any time (Art. 7(3) GDPR).

If you wish to exercise your right of withdrawal or objection, simply send an email to: kontakt@arcanimotion.de

11. Status and changes to this privacy policy

This privacy policy is currently valid and dated January 2026. Further development of our website or changes in legal/official requirements may make it necessary to update this privacy policy.