Privacy Policy

1. Data Controller

CON Productions GmbH
Krossener Straße 23
12045 Berlin, Germany

Managing Director: Aleksej Schön
Email: schoen@meta-venues.de

2. General Information on Data Processing

We process personal data in accordance with the applicable data protection laws, in particular the General Data Protection Regulation and the German Federal Data Protection Act (BDSG).

Our processing follows these principles:

• Lawfulness, fairness, and transparency
• Purpose limitation and data minimization
• Accuracy and storage limitation
• Integrity, confidentiality, and security

3. Hosting and Server Log Files

Our website is hosted by STRATO AG (Germany).

Each time our website is accessed, the following data is automatically collected:

• IP address (anonymized/shortened where possible)
• Date and time of access
• Browser type and version
• Operating system
• Referrer URL

This data is required to ensure the technical operation and security of the website.

Legal basis: Art. 6(1)(f) GDPR

A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR is in place.

4. Cookies and Consent Management

We use a consent management tool provided by Complianz B.V.

Users can manage consent for:

• Essential cookies
• Statistical cookies
• Marketing / third-party content

Legal basis: Art. 6(1)(a) GDPR

Consent can be withdrawn at any time.

5. Contact Requests

When contacting us (via form or email), we process:

• Name
• Email address
• Message content

Purpose: handling inquiries and initiating business relationships

Legal basis:

• Art. 6(1)(b) GDPR (contractual/pre-contractual)
• Art. 6(1)(f) GDPR (legitimate interest)

Retention period: up to 12 months unless legal retention obligations apply.

6. Drone Operations, Photo and Video Production

As part of our services (drone flights, FPV filming, 3D scanning), visual data may be processed.

This includes:

• Buildings and properties
• Spatial structures (e.g. digital twins, point clouds)
• Photo and video material

We do not intentionally capture identifiable individuals.
If incidental capture occurs, it is handled in compliance with applicable data protection laws.

Legal basis:

• Art. 6(1)(b) GDPR (contract performance)
• Art. 6(1)(f) GDPR (legitimate interest in documentation, marketing, and project execution)

All operations are conducted in accordance with applicable aviation and data protection regulations.

7. 3D Scans, Digital Twins and Project Data

Within our services, we process structured spatial and building data (e.g. Matterport scans, photogrammetry, point clouds).

Such data may include:

• Room structures
• Surface and dimension data
• Technical conditions

Processing is strictly project-based and carried out on behalf of our clients.

Legal basis: Art. 6(1)(b) GDPR

8. Embedded Services

a) YouTube (Google Ireland Ltd.)

When playing videos, personal data may be transmitted to Google.

Legal basis: Art. 6(1)(a) GDPR

b) Matterport Inc.

When loading 3D tours, a connection to Matterport servers is established.

Legal basis: Art. 6(1)(a) GDPR

c) Google reCAPTCHA

Used to protect against spam and automated abuse.

Legal basis: Art. 6(1)(a) GDPR

9. International Data Transfers

When using third-party services (e.g. Google, Matterport), personal data may be transferred to countries outside the European Union (e.g. the United States).

Such transfers are carried out based on appropriate safeguards in accordance with Art. 46 GDPR, including:

• EU Standard Contractual Clauses (SCCs)
• adequacy decisions where applicable

Please note that data protection standards in third countries may differ from those in the European Union, and access by public authorities cannot be fully excluded.

10. Your Rights

You have the right to:

• access your data (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing (Art. 21 GDPR)

Contact: schoen@meta-venues.de

11. Data Security

We implement appropriate technical and organizational measures (TOMs), including:

• SSL/TLS encryption
• access control mechanisms
• secure hosting infrastructure

12. Changes to this Policy

We reserve the right to update this privacy policy to ensure ongoing compliance with legal requirements.