Privacy
1. Controller
Kevin Herrling, Schloßstraße 16, 79780 Stühlingen, Germany. Email: kherrling@gmx.net
2. Overview
This site processes personal data only as far as necessary for operation, security and the features described here. There is no advertising, no tracking for advertising purposes and no sharing with ad networks.
3. Hosting and server log files
The site is hosted by STRATO AG (Otto-Ostrowski-Straße 7, 10249 Berlin, Germany) under a data processing agreement. When you visit the site, the server automatically records browser type and version, operating system, referrer URL, host name of the accessing computer, time of the request and IP address. These data are not merged with other data sources and are stored only as long as necessary for operation and security. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).
4. Cookies and local storage
Only technically necessary or functional storage is used, which is permitted without consent (§ 25(2) TDDDG, Art. 6(1)(f) GDPR):
• Session cookie (PHPSESSID): form security and spam protection for comments; deleted when you close the browser.
• Language cookie (lang): remembers your chosen language when you switch it; lifetime 1 year.
• Login cookie (kk_remember): set only for the site owner and authors in the login area.
• Browser storage (sessionStorage, entry "kk_seen"): only remembers that the intro animation already played in this browser session; nothing is sent to the server.
• Browser storage (localStorage, entry "kk_consent"): remembers your choice in the Google Analytics notice so we don't ask on every visit; nothing is sent to the server.
• Google Analytics cookies (_ga, _ga_…): only set if you agree in the notice banner (see section 5a).
5. Audience measurement (anonymous, cookie-free)
To see how often the site and individual posts are viewed, the site uses its own privacy-friendly statistics on its own server. No cookies are set and no IP addresses are stored. To count individual visitors, a short code is briefly derived from the IP address and browser identifier using a random key that changes daily; the key is irreversibly deleted after 24 hours at the latest, so the code can no longer be linked to a person afterwards. At the moment of the request, the visitor's country is determined from the IP address using a locally stored database (source: Regional Internet Registries / NRO, CC BY 4.0); the IP address itself is neither stored nor passed on to third parties. For each page view the following is stored: time, page, country, device type (computer or phone/tablet), site language, browser language, the domain of a referring site and the approximate time spent on the page; to show "online now", the open page sends a heartbeat every 15 seconds, without cookies. These individual records are deleted after 14 months; daily counters (views, visitors, trailer starts) remain as plain numbers. Bots, the logged-in owner and authors, and visitors with "Do Not Track" or "Global Privacy Control" enabled are not counted. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in evaluating usage). You can object by enabling "Do Not Track" or "Global Privacy Control" in your browser.
5a. Google Analytics (only with your consent)
If you click "Accept" in the notice banner, this website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Without your consent, no Google code is loaded and no Google cookies are set.
After consent, cookies (_ga, _ga_…) are set and information about your use of the website (e.g. pages viewed, time spent, approximate location, device and browser details) is transmitted to and processed by Google. Google Analytics 4 does not store full IP addresses. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. The data is deleted after 14 months.
The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw it at any time via the "Cookie settings" link at the bottom of every page; the Google cookies are then deleted. Logged-in owners and authors are not tracked. More: https://policies.google.com/privacy
6. Comments
When you post a comment, your chosen name (a pseudonym is fine), the comment text and the time are stored. Comments are shown publicly only after review and approval. Your IP address is not stored with the comment. Legal basis: your consent by submitting (Art. 6(1)(a) GDPR). You may withdraw it at any time with effect for the future and request deletion of your comment (contact see section 1). Comments are kept until you request deletion or the related post is removed.
7. YouTube trailers
Film pages embed a YouTube trailer directly (enhanced privacy mode via youtube-nocookie.com). As soon as such a page is opened, your browser connects to YouTube. In doing so, e.g. your IP address and browser information are transmitted to YouTube, and cookies or similar technologies may be set. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; a transfer to Google LLC in the USA may take place on the basis of the EU-US Data Privacy Framework. Legal basis: my legitimate interest in an appealing presentation of the film pages (Art. 6(1)(f) GDPR). More: https://policies.google.com/privacy
7a. Actor photos (TMDB)
Film pages show photos of actors that come from The Movie Database (TMDB, themoviedb.org). When you open a film page, your browser loads these images directly from TMDB's servers (image.tmdb.org); in doing so, e.g. your IP address and browser information are transmitted to TMDB. Legal basis: my legitimate interest in an appealing presentation (Art. 6(1)(f) GDPR). More: https://www.themoviedb.org/privacy-policy – Links to Google searches on actor names lead to Google only after you click. Photos: TMDB. This product uses the TMDB API but is not endorsed or certified by TMDB.
7b. Links to Instagram and Facebook
The site contains plain links to our profiles on Instagram and Facebook (Meta Platforms Ireland Ltd.). These are not embedded plugins: no data is transferred to Meta when you visit this website. Only when you click a link are you taken to the respective platform, where Meta's privacy policy applies.
8. Authors and login area
Reviews are written by the site owner and by authors. Each review shows the author's name (display name, not the login username) and, if the author wishes, a small profile picture. The name and picture are shown publicly with the author's consent (Art. 6(1)(a) GDPR, or in the context of the collaboration Art. 6(1)(b) GDPR). Authors can change or have their picture and display name removed at any time and may withdraw consent with effect for the future (contact see section 1). The login area is for the owner and authors only. To fend off automated attacks, failed login attempts briefly store the IP address, which is discarded after 15 minutes (Art. 6(1)(f) GDPR).
9. Encryption
Data is transmitted using SSL/TLS encryption (recognisable by "https://" and the padlock icon).
10. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability, the right to object to processing based on legitimate interests and to withdraw consent. Please contact the email address in section 1. You may also lodge a complaint with a data protection supervisory authority, e.g. the one responsible for your place of residence or for the site owner [for Baden-Württemberg: the State Commissioner for Data Protection and Freedom of Information (LfDI), www.baden-wuerttemberg.datenschutz.de – please check that this applies to your place of residence].
Status: October 2026