Privacy notice

Privacy and data protection

Who is responsible?

Borsu Highson Productions is responsible for the processing of personal data on this website. For privacy questions, email info@borsu.org. The proprietor’s full identity, postal address, and further contact details are available in our Impressum.

Website delivery and hosting

This website is provided by an external web-hosting service. Delivering website content requires technical information such as your IP address, requested page or file, time of access, browser and operating-system information, and information transmitted with the request. Hosting and security systems may record this information in server logs.

The purpose is to deliver the website reliably, investigate errors, and protect against misuse. The legal basis for necessary operational processing is Article 6(1)(f) GDPR: our legitimate interests in providing and securing the website. Data is kept only for as long as required for these purposes or applicable legal obligations. Retention depends on the relevant website-delivery and security purposes, any incidents requiring investigation, and legal retention duties. For questions about particular records, please contact us.

The hosting provider processes website data under contractual data-protection arrangements to deliver and secure this website.

Contacting us

If you contact us by email or telephone, we process the details you provide, such as your name, contact details, company, and the content of your inquiry, to respond and handle the matter.

Where an inquiry concerns a contract or steps requested before entering a contract, the basis is Article 6(1)(b) GDPR. Other ordinary business inquiries are handled on the basis of our legitimate interest in responding under Article 6(1)(f) GDPR. Where statutory recordkeeping applies, Article 6(1)(c) GDPR also applies.

We retain correspondence for as long as needed to handle the inquiry and any resulting business relationship, applicable retention requirements, or legal claims. This website offers an email link rather than a website contact form. A form-specific notice will be added if a form is introduced.

Cookies and optional services

The rebuilt pages use no optional analytics or advertising services, no embedded video players, and system fonts rather than fonts requested from an external provider. WordPress and hosting tools may use necessary technical cookies for security and authenticated sign-in. Storage or access strictly necessary for a service expressly requested by the user is assessed under Section 25(2) TDDDG. If optional services are introduced, they must be disclosed and blocked until any required consent has been given.

Privacy controls: the notice and settings panel explain that only necessary functions are used. When you choose “Necessary functions only” or “Save and close,” the browser stores your acknowledgment locally under bhp_privacy_notice_v1 for up to 180 days. It contains a policy version and timestamp, with no user identifier, and is not sent to us or an external service. It prevents the notice from reappearing on every page. You can reopen the panel through “Privacy settings” in the footer or remove the acknowledgment through your browser’s website-storage settings. If local storage is unavailable, the pages and controls remain usable.

Video and social links

The rebuilt homepage uses images hosted on this website and ordinary links to YouTube, Instagram, Facebook, and film viewing services. These links open the respective external service; the rebuilt pages do not embed a YouTube player or social feed.

When you follow an external link, the destination processes your connection and interaction data under its own privacy notice. If you are signed into that service, it may associate your visit with your account. External links do not automatically make the destination a processor acting on our behalf.

Recipients and international processing

Authorized personnel and service providers involved in website hosting, technical maintenance, and business communications may process data where necessary for those purposes. Disclosure to other recipients can occur where required by law or necessary to handle a request you make.

Hosting and technical support may involve processing in the United States and other countries outside the European Economic Area. Where no applicable adequacy decision covers a transfer, the hosting provider’s data-protection terms provide for the European Commission’s Standard Contractual Clauses as safeguards. Information about recipients and a copy of the applicable safeguards are available on request at info@borsu.org.

Your rights

Subject to the conditions in the GDPR, you may request access to your personal data, correction, erasure, restriction of processing, and data portability. Where processing is based on consent, you may withdraw that consent without affecting the lawfulness of earlier processing.

You may object, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. You may object to processing for direct marketing at any time. Send requests to info@borsu.org.

You may also lodge a complaint with a supervisory authority, including Der Landesbeauftragte für den Datenschutz Niedersachsen, the data protection authority for Lower Saxony: lfd.niedersachsen.de.

Updates

We update this notice when material changes to the website or the processing described here make this necessary. Last updated: November 2, 2026.