Last updated: October 2026. This is a translation for convenience. The German version is legally binding.
We are not required to appoint a data protection officer. For any privacy questions, contact us at the email address above.
We only process personal data as far as needed to run this website, answer your enquiries and measure reach in a data-minimising way. We do not use cookies, advertising or social media trackers, and we do not embed third-party content. Fonts, images and videos are served from our own web space.
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, under a data processing agreement pursuant to Art. 28 GDPR. When you visit the site, the server processes data your browser sends automatically: IP address, date and time, requested page or file, referrer URL, browser, operating system and amount of data transferred. This is needed to deliver the website and keep it secure and stable (Art. 6(1)(f) GDPR). The host deletes the log files after seven days at the latest. Connections are encrypted via TLS (HTTPS).
When you contact us via the form or by email, we process the details you provide: name, email address and optionally company or event, date, type of production and your message. Form data is sent by email to our STRATO mailbox and not stored in a database. We use it solely to handle your enquiry and send you a quote (Art. 6(1)(b) GDPR where your enquiry aims at a contract, otherwise Art. 6(1)(f) GDPR). We delete the data once your enquiry is settled unless statutory retention periods apply. A hidden field and a timing check protect the form against spam without storing additional data.
We count page views with our own script running on our web space. No cookies are set, nothing is stored on or read from your device, and no data is shared with third parties. For each view we store: time (rounded to the minute), page and language version, referring domain if any, device type (mobile or desktop, derived from the browser identifier), clicks on the Instagram link, language switch and sent enquiries as events, and a pseudonymous visitor ID. The visitor ID is a hash of IP address, browser identifier and a random key that is regenerated daily and then deleted. The IP address itself is not stored, so visitors can only be counted within one day and cannot be tracked across days or identified. Legal basis is Art. 6(1)(f) GDPR (our legitimate interest in improving our website). Data is deleted automatically after 14 months. You may object at any time, for example by email.
We link to our Instagram profiles @rope_media and @rochapedro.media. No Instagram content is loaded on our website. Only when you click a link are you taken to Instagram (Meta Platforms Ireland Limited), where Meta's privacy policy applies.
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we process data based on Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21). An informal message to kontakt@rope-media.com is sufficient. You may also lodge a complaint with a supervisory authority; ours is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.
You are not obliged to provide personal data, but we cannot answer an enquiry via the form without your name and email address. There is no automated decision-making or profiling.