Rat Pack Film
We use a third party service to embed our videos on our website. Only if you give your consent will the videos be displayed, a connection to the Vimeo server established, personal data (e.g. your IP address) transmitted and cookies be set. Before accepting, please note Vimeo’s privacy policy. More information and your options for revocation can be found in our Data Protection Declaration.


Rat Pack Filmproduktion GmbH attaches great importance to protecting your privacy and your personal data as well as the requisite data security and therefore collects, processes and uses your personal data exclusively in accordance with the principles described below and the provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) applicable to Rat Pack Filmproduktion GmbH.

Table of contents

I. Name and address of the controller
II. Name and address of the data protection officer
III. Your personal data
IV. General information on data processing
V. Provision of the website and creation of log files/journal files
VI. Use of cookies
VII. Communication
VII.1 General contact enquiries and use of the contact form
VIII. Plugins & Tools
VIII.1 Use of Vimeo for the integration of videos
IX. Rights of the data subject
X. Automated decision-making and profiling
XI. Links to other websites
XII. Security
XIII. Availability and changes

I. Name and address of the controller

The controller within the meaning of the EU General Data Protection Regulation (“GDPR”) and other national data protection laws of the EU Member States as well as other applicable data protection provisions for the operation of the website www.ratpack-film.de (hereinafter referred to as the “website”) is:

Rat Pack Filmproduktion GmbH
Beethovenplatz 2
80336 München

Phone: +49 (0)89 121148 700
Fax: +49 (0)89 121148 777
Mail: info@ratpack-film.de 

represented by 

Christian Becker, Bernd Bünseler, Oliver Nommsen, Gero Worstbrock, Thomas Derr (hereinafter referred to as “Rat Pack” or “We”).

If you would like to object to the collection, processing or use of your data by us according to this Data Protection Declaration as a whole or for individual measures, you can send your objection to the aforementioned contact details or to our data protection officer by email, fax or letter. Under the specified contact details you can also obtain information about your personal data at any time free of charge.

II. Name and address of the data protection officer

The data protection officer of the controller can be contacted at:

Dirk Seeburg
BAY GmbH Wirtschaftsprüfungsgesellschaft Rechtsanwaltsgesellschaft
Hultschiner Straße 8
86177 Munich

Phone: +49 (0)89 90 420 49 62
Mail: EU-DSGVO-Team@constantin.film

III. Your personal data

Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as the “Data Subject”). We processes your personal data exclusively to provide the Website to you. Only personal data such as your name and your email address will be recorded if you have provided this information voluntarily or have agreed to it being recorded. For technically-required data, we refer to the explanations under “V. Provision of the Website and creation of log files/protocol files” as well as “VI. Use of cookies”.

IV. General information on data processing

1. Scope of the processing of personal data

We process the personal data (hereinafter also referred to as “Data”) of Data Subjects, i.e. of visitors to the Website, via our Website to the extent necessary to provide a functioning Website as well as our contents and services. The processing of personal Data generally only takes place with the consent of the user. Exceptions include cases where the processing of Data is permitted by law, is required to fulfil a contract or is technically necessary.

2. Legal basis for the processing of personal data

If we have obtained the consent of the Data Subject for processing operations involving personal data, Art. 6 (1) (a) GDPR serves as the legal basis.

As for the processing of personal data which is necessary for the performance of a contract to which the Data Subject is party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations which are necessary to carry out pre-contractual measures.

When the processing of personal data is necessary in order to achieve compliance with a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis.

If the processing of personal data is necessary in order to protect the vital interests of the Data Subject or of another natural person, Art. 6 (1) (d) GDPR serves as the legal basis.

If processing is necessary to safeguard the legitimate interests of our company or of a third party, and such interests are not outweighed by the interests or fundamental rights and freedoms of the Data Subject, Art. 6 (1) (f) GDPR serves as the legal basis for processing.

3. Erasure of Data and storage duration

The personal data of the Data Subject shall be erased or blocked as soon as the purpose of storage ceases to be applicable. Storage may also take place if this is provided for by European or national legislators in EU directives, laws or other regulations to which the controller is subject. Blocking of further Data processing or erasure of Data shall also take place if a legally prescribed storage period has expired, unless there is a need for further Data storage for fulfilment of the contract.

V. Provision of the Website and creation of log files / protocol files

1. Description and scope of Data processing

When the Website is used merely for information purposes, we only collect the personal data which your browser transmits to our server or provider and which are technically necessary for us to show you our Website and to ensure its stability and security.

We have engaged IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (hereinafter referred to as “IONOS”) for the hosting and technical provision of our Website. We have concluded with IONOS the agreement on commissioned processing of personal data required under data protection law in accordance with Art. 28 GDPR. According to this agreement, IONOS undertakes to guarantee the necessary protection of your Data and to process them exclusively on our behalf and as instructed by us in accordance with the applicable data protection provisions. Further information on IONOS is available on their website at: https://www.ionos.de/.

The following Data are in log files or protocol files provided by IONOS within the framework of hosting:

(1) browser type and version used, if you have consented to transmission within your browser settings;
(2) operating system and user’s Internet service provider;
(3) date and time of server query;
(4) previously visited website, only if this linked to our Website and the visitor clicked on this link;
(5) user’s IP address;
(6) volume of sent/transferred Data.

The Data are stored by IONOS on servers hosted in Germany. IONOS uses this information for the purpose specified in our order. There is no independent use of Data by IONOS or unauthorised disclosure to third parties. Storage of this Data together with the user’s other personal data does not take place.

2. Legal basis for Data processing

The legal basis for the temporary storage of Data and log files is Art. 6 (1) sentence 1 (f) GDPR.

3. Purpose of the Data processing

Temporary storage of the IP address by the system is necessary to deliver the Website or the contents to the user’s computer. To do this, the user’s IP address must be stored for the duration of the session.

Storage of all the above information ((1) – (6)) in log files or protocol files is done to ensure the functionality of the Website. In addition, the Data is used to optimise the Website and to ensure the necessary security of our IT systems. An evaluation of the Data for marketing purposes does not take place in this context. We also have a legitimate interest in processing Data for these purposes in accordance with Art. 6 (1) (f) GDPR.

4. Duration of storage

User’s IP addresses are made anonymous as soon as they are no longer required to achieve the purpose of their collection. This is the case at the end of the user’s respective session. It is then no longer possible to assign the accessing client.

The storage duration of the log files for the above-mentioned purposes is at the most 7 days.

5. Objection and removal option

The recording of Data to provide the Website and the storage of Data in log files is essential to operate a website. The user has no possibility to object.

VI. Use of cookies

1. Description and scope of Data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. Cookies cannot execute programs or transfer viruses to your computer. When a user calls up a website, a cookie may be stored on the user's terminal device. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. Some of the cookies we use are deleted at the end of the browser session, i.e. after you close your browser (so-called "session cookies"). Other cookies remain on your terminal device and allow us to recognize your browser the next time you visit, should you have consented to this.

In the following, we will give you an overview of the cookies used, their validity period and the respective opt-out options. If you allow us to use cookies through your browser settings, the following cookies may be used on our websites and in the store:

(a)Technically necessary cookies (essential):

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The following essential or technically necessary cookie is stored on your terminal device and transmitted to us each time you access a page:

(1) kirby_session: a unique, randomly generated user ID that is used to identify the user in the internal administrator login area. (Validity period: session).

In addition, due to the use of various plugins on our website, third-party providers may set so-called third-party cookies on your terminal device. For a description of the technically necessary cookies, the mode of operation, the purpose and the objection options, please refer to the explanations under "VIII Plugins & Tools".

2. Legal basis for Data processing

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) (f) GDPR in conjunction with § 25 para. 2 (2) TTDSG.

3. Purpose of the Data processing

The purpose of using technically necessary cookies is to enable the use of our websites for the users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change. The user data collected through technically necessary cookies are not used to create user profiles.

4. Duration of storage, objection and removal option

Cookies are stored on the user's computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

VII. Communication

VII.1 General contact enquiries 

1. Description and scope of Data processing

On our website, it is possible to contact us via a provided phone number or email address. In all cases, the user’s transmitted personal data are stored. The scope of the processed personal data and the personal data processed in each individual case may vary depending on contact. This includes, in particular, the following data:

(1) your first name and surname;
(2) your communication details (email address);
(3) resulting correspondence.

Your Data and the resultant correspondence are only processed by us. There is no forwarding of Data to third parties. The Data are only used for the conversation started by the user, in order to contact you by phone, post or email about your enquiry. 

2. Legal basis for Data processing

The legal basis for processing Data transmitted in the course of sending an email or via the phone is Art. 6 (1) (a) GDPR. If the user’s aim when making contact is to conclude a contract, the legal basis for processing is Art. 6 (1) (b) GDPR.

3. Purpose of the Data processing

We process the personal data that you have sent us voluntarily by email or by phone purely to make contact or to answer your questions about our productions.

4. Duration of storage

All contact requests are forwarded to the responsible contact person within Rat Pack Filmproduktion GmbH.

The Data are erased as soon as they are no longer required to achieve the purpose of their collection. For personal data sent by email or via phone, this is then the case when the respective conversation with the user has ended. The conversation has ended when the circumstances indicate that the matter concerned has been finally resolved.

5. Revocation and removal option

Users can revoke their consent to the processing of personal data at any time. If users contact us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. Revocation can be made at any time using the contact details under I. and II. See also IX. All personal data stored in the course of making contact will be erased in this case.

VIII. Plugins & Tools

We use extensions, plugins and offers from third-party providers on our website for its uniform presentation. In doing so, personal data are frequently forwarded or automatically transmitted to third-party providers. The following lists and explains the nature, scope and purpose of this processing of personal data:

VIII.1 Use of Vimeo for the integration of videos

1. description and scope of data processing

We use plugins from the provider Vimeo LLC, 555 West 18th Street, New York 10011 (hereinafter "Vimeo") on our website to integrate videos. The content of the plugin is transmitted directly from Vimeo to your browser through a connection to the Vimeo servers and integrated into the website by the latter. As a result, your visit to the website is transmitted to Vimeo.

If you are logged in to Vimeo with your user account, Vimeo can assign the information obtained to your respective account through the use of the plugin. In this case, the information is transmitted to your personal user account at Vimeo and stored there by Vimeo.

Since Vimeo collect data in particular via cookies, we additionally recommend that you delete all cookies via the security settings of your browser.

By default, we have integrated Vimeo videos with the "Do-No-Track" setting. This means that the provider cannot set any third-party cookies or marketing cookies on your end device via the plugin. Vimeo or the CDN Cloudflare used by Vimeo then sets the session cookie "cfbm" exclusively to distinguish whether the user is a human or a bot.

We also implement the integration of the plugins with a so-called 2-click solution, which means that Vimeo only receives information about your visit to our website when you have agreed to the integration of the Vimeo content and the setting of cookies by Vimeo either when calling up the website via our consent banner or have actively clicked on the respective plugin to play the respective video. Thus, no data is transmitted to Vimeo by simply visiting our website.

Your consent is stored for one year in the following two cookies:

(1) vimeo: Stores whether you have consented to the use of Vimeo embeds (1) or whether this has been rejected (0); validity period: 1 year.

(2) vimeo-global-answered: Stores whether you have agreed (1) or not (0) to use via the global consent banner; validity period: 1 year.

We have no influence on the data and data processing operations collected by Vimeo, nor is the full extent of the data collection, the purposes of the processing, the storage periods and the storage location known. There is also no information available on the deletion of the collected data by Vimeo. Further information on the purpose and scope of data processing, as well as your rights in this regard and setting options for protecting your privacy, can be found in Vimeo's terms of use and privacy policy at.


2. purpose and legal basis for data processing

The legal basis for the processing of personal data, based on your consent in this regard by voluntarily using or clicking on the plugin content provided, is Art. 6 (1) (a) GDPR.

It is important to us to make the website attractive and to increase the interaction with visitors and customers with the help of the plugin.

3. possibility of objection, revocation and removal.

According to European and German law, you have the right to object to the creation of user profiles or the assignment, whereby you must contact the plugin provider or Vimeo directly to exercise this right. In addition, we point out that you can prevent this assignment by logging out of your Vimeo profile before visiting the website and deleting the cookies used by the provider.

You can revoke your consent given via our consent banner at any time for the future via the following link: Revocation. The consent banner will then be displayed again the next time you access it.

IX. Rights of the Data Subject

When your personal data is processed you are a Data Subject within the meaning of the GDPR and have the following rights with respect to the controller:

1. Right to information

You may request the controller to confirm whether your personal data is processed by them. If such processing occurs, you can request the following information from the controller:

(1) the purpose for which the personal data are processed;
(2) the categories of personal data being processed;
(3) the recipients or categories of recipients to whom the personal data have been or will be disclosed;
(4) the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
(5) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing;
(6) the existence of the right to lodge a complaint with a supervisory authority;

You have the right to request information about whether your personal data will be transferred to a third country or international organisation. In this context, you can request information about the appropriate safeguards relating to the transfer pursuant to Art. 46 GDPR.

To exercise your right to free information, please contact us directly using the contact details in our Imprint or contact our data protection officer (see Section I and II).

2. Right to rectification

You have a right to rectification and/or completion with respect to the controller if your processed personal data is incorrect or incomplete. The controller must rectify the Data without undue delay.

3. Right to restriction of processing

You may request the restriction of processing of your personal data under the following conditions:

(1) if you contest the accuracy of your personal data for a period enabling the controller to verify the accuracy of your personal data;
(2) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
(3) the controller no longer needs the personal data for the purposes of the processing, but you require them for the assertion, exercise or defence of legal claims;
(4) if you have objected to the processing pursuant to Article 21 (1) GDPR and it is not yet certain whether the legitimate interests of the controller outweigh your interests.

If processing of your personal data has been restricted, this Data may – with the exception of Data storage – only be used with your consent or for the purpose of assertion, exercise or defence of legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If the processing has been restricted according to the aforementioned conditions, you shall be informed by the controller before the restriction of processing is lifted.

4. Right to erasure

a) Obligation to erase

You may request that the controller erase your personal data without undue delay, and the controller is obligated to do so immediately if one of the following applies:

(1) your personal data are no longer required for the purposes for which they were collected or otherwise processed;.
(2) you revoke your consent on which the processing is based pursuant to Art. 6 (1) (a) and there is no other legal basis for processing the Data.
(3) according to Art. 21 (1) GDPR, you object to the processing of the Data and there are no overriding legitimate grounds for processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
(4) your personal data have been unlawfully processed;
(5) your personal data have to be erased for compliance with a legal obligation in Union or Member State law, to which the controller is subject;
(6) your personal data was collected in relation to information society services offered pursuant to Article 8 (1) GDPR.

b) Information to third parties

Where the controller has made your personal data public and is obligated to erase the personal data pursuant to Art. 17 (1) GDPR, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers who are processing the personal data that you, as the Data Subject, have requested the erasure by such controllers of any links to, or copy or replication of, such personal data.

c) Exceptions

The right to erasure does not exist if the processing is necessary;

(1) for exercising the right of freedom of expression and information;
(2) for compliance with a legal obligation which requires processing by Union or Member State law, to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for the assertion, exercise or defence of legal claims.

5. Right to information

If you have asserted the right of rectification, erasure or restriction of processing over the controller, the controller is obligated to notify all recipients to whom your personal data have been disclosed of the rectification or erasure of the Data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort.

You reserve the right to be informed about the recipients of your Data by the controller.

6. Right to Data portability

You have the right to receive your personal data provided to the controller in a structured, commonly used and machine-readable format and have the right to transmit such Data to another controller without hindrance from the controller, provided;

(1) the processing is based on consent in accordance with Art. 6 (1) (a) GDPR; and
(2) the processing is carried out by automated means.

In exercising this right, you shall also have the right to have your personal data transmitted directly from one controller to another, where technically feasible. Freedoms and rights of other persons may not be affected hereby.

The right to Data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority vested in the controller.

7. Right to object

You have the right to object, at any time, to the processing of your personal data for reasons that arise from your particular situation pursuant to Art. 6 (1) (e) or (f) GDPR, including profiling based on those provisions.

In addition, you have the right to object at any time to the processing of your personal data for direct marketing purposes; this also includes profiling to the extent that it is related to such direct marketing.

The controller shall no longer process your personal data unless it can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of assertion, exercise or defence of legal claims.

8. Right to withdraw the data protection consent declaration

You have the right to withdraw your data protection consent declaration at any time. The withdrawal of consent does not affect the legality of the processing carried out on the basis of the consent until withdrawal.

9. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, workplace or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.

The data protection authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Germany, further information is available online at www.lda.bayern.de

X. Automated decision-making and profiling

As a responsible company, we do not use your Data for profiling or automated decision-making.

XI. Links to other websites

This Data Protection Declaration applies exclusively to the Internet presence of Rat Pack Filmproduktion GmbH. The webpages in this Internet presence may contain links to third-party websites or social media platforms. Our Data Protection Declaration does not cover these websites or providers. When you leave our website, it is recommended that you carefully read the data protection provisions of each website that collects personal data.

XII. Security

We take the necessary security measures to protect your personal data from unlawful or unintended access or erasure, modification or loss or unauthorised disclosure. We encrypt your Data during transmission via our website and use SSL (Secure Socket Layer) and TLS (Transport Layer Security) connections. We protect our website and our other systems and personal data by means of appropriate technical and organisational measures against, in particular, loss, destruction, unauthorised access, modification or disclosure to third parties.

XIII. Availability and changes

You can view this Data Protection Declaration at https://ratpack-film.de/en/datenschutzerklaerung. In addition, you can store or print out this Data Protection Declaration by using the corresponding functions of your Internet browser.

We reserve the right to amend this Data Protection Declaration from time to time or to adapt it to legal requirements and therefore request that you check the current status of our Data Protection Declaration each time you visit our website.

Version: January 2023