Legals
This page constitutes our complete legal notice regarding data processing and privacy. For business contact information and company details, please see our Impressum.
Privacy Policy (Datenschutzerklärung)
1. Data Controller
NOFOMO.TV GmbH
Sanderstraße 29-30
12047 Berlin
Germany
Email: [email protected]
Phone: +49 1573 4875344
2. General Information
We take the protection of your personal data seriously. This privacy policy explains what personal data we collect when you visit our website and how we use it. This policy complies with the EU General Data Protection Regulation (GDPR) and German Federal Data Protection Act (BDSG).
3. Data We Collect
3.1 Server Log Data
When you visit our website, our server automatically collects the following technical data:
- IP address (anonymized after processing)
- Browser type and version
- Operating system
- Pages visited on our website
- Date and time of access
- Referring website
Legal Basis: Article 6(1)(f) GDPR (legitimate interest)
Purpose: Website security, performance optimization, and basic usage statistics
Retention Period: Server logs are retained for 90 days, then automatically deleted
3.2 Video Content Delivery
We use Bunny CDN (Cesta Komandanta Staneta 4a, 1215 Medvode, Slovenia) to deliver video content showcasing our work. When you view videos, the following data may be processed:
- IP address for content delivery
- Browser information
- Video playback statistics (buffering, quality metrics)
Legal Basis: Article 6(1)(f) GDPR (legitimate interest)
Purpose: Reliable video delivery and performance optimization
Data Processing Location: EU only (Frankfurt, Germany)
Data Processor: Bunny CDN operates under a signed Data Processing Agreement compliant with Article 28 GDPR
4. Cookies and Tracking
We do not use cookies or any tracking technologies on our website. All analytics are performed server-side without storing any data on your device.
5. Data Sharing
We do not sell, rent, or share your personal data with third parties except:
- With Bunny CDN for video content delivery (covered by Data Processing Agreement)
- When required by law or legal process
6. Data Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. This includes:
- Encrypted data transmission (SSL/TLS)
- Secure server infrastructure
- Regular security updates
- Access controls and monitoring
7. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of Access (Article 15): Request information about data we process about you
- Right to Rectification (Article 16): Correct inaccurate personal data
- Right to Erasure (Article 17): Request deletion of your personal data
- Right to Restrict Processing (Article 18): Limit how we use your data
- Right to Data Portability (Article 20): Receive your data in a portable format
- Right to Object (Article 21): Object to processing based on legitimate interest
To exercise these rights, contact us at [your-email].
8. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR. The competent authority in Germany is your local data protection authority (Landesdatenschutzbeauftragte) or the Federal Commissioner for Data Protection and Freedom of Information (BfDI).
9. Changes to This Policy
We may update this privacy policy to reflect changes in our data processing practices or legal requirements. The current version is always available on this page.
Last Updated: 30 July 2025
Data Processing Agreements
Bunny CDN Data Processing Agreement
In accordance with Article 28 GDPR, we have concluded a Data Processing Agreement (DPA) with Bunny CDN for video content delivery services. This agreement ensures:
- Processing only occurs on our documented instructions
- Appropriate technical and organizational security measures
- EU-only data processing through routing filters
- Assistance with data subject rights requests
- Data breach notification procedures
- Regular security assessments
The DPA documentation is maintained for supervisory authority review and can be provided upon request.
Contact for Data Protection Inquiries
For questions about this privacy policy or your data rights:
Email: [email protected]
Subject Line: Data Protection Inquiry
Response Time: We will respond within 30 days as required by GDPR