Privacy Policy
Last updated: October 2026
The controller within the meaning of the General Data Protection Regulation ("GDPR") and other national data protection laws of the Member States as well as other data protection provisions is:
Media4me GmbH
Managing directors: Mark Robach, Michael Michailenko
Hardenbergstraße 28
10623 Berlin
Germany
E-mail: info@media-4-me.de
Website: media-4-me.de · hoodscreens.com
This privacy policy applies to the websites media-4-me.de and hoodscreens.com. Processing that takes place only on hoodscreens.com is described separately in the section "Data processing on hoodscreens.com".
General data processing
Scope and legal basis for the processing of personal data
We collect and use personal data of our users only to the extent necessary to provide a functional website and our content and services. Personal data of our users is regularly collected and used only with the user's consent.
An exception applies where obtaining prior consent is not possible for practical reasons and the processing of the data is permitted by law.
The legal basis for processing personal data where the data subject has given prior consent is Art. 6(1)(a) GDPR. For processing that is necessary for the performance of a contract or for pre-contractual measures, the legal basis is Art. 6(1)(b) GDPR. For processing necessary to comply with a legal obligation, the legal basis is Art. 6(1)(c) GDPR. Where processing is necessary to protect the vital interests of the data subject or another natural person, Art. 6(1)(d) GDPR serves as the legal basis. Where processing is necessary to safeguard a legitimate interest of our company or a third party, and the interests, fundamental rights and freedoms of the data subject do not override that interest, Art. 6(1)(f) GDPR is the legal basis for processing.
Data erasure and retention period
The personal data of the data subject is erased or blocked as soon as the purpose of storage no longer applies. Data may also be stored where this is provided for by a legal provision. In that case the data is blocked or erased when the statutory retention period expires, unless further storage is required for the conclusion or performance of a contract.
Data processing when using our website
Visiting our website
When you access our website, the browser on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is recorded without any action on your part and stored until it is automatically deleted: IP address of the requesting computer, date and time of access, name and URL of the file retrieved, the website from which access was made (referrer URL), the browser used and, where applicable, the operating system of your computer and the name of your access provider.
We process this data for the following purposes: ensuring a smooth connection to the website, ensuring convenient use of our website, evaluating system security and stability, and for other administrative purposes.
The legal basis for this processing is Art. 6(1) sentence 1 (f) GDPR. Our legitimate interest follows from the purposes listed above. Under no circumstances do we use the collected data to draw conclusions about your person.
Hosting
Our websites are hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. The servers are located in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with IONOS. According to IONOS, the log file data referred to under "Visiting our website" is stored for 8 weeks; the IP address is anonymised at the time of collection.
Contact by e-mail
You can contact us via the e-mail addresses provided on our website. In this case, the personal data transmitted with the e-mail is stored. The data is not passed on to third parties in this context. The legal basis for processing this data is Art. 6(1)(f) GDPR. If the e-mail contact is aimed at concluding a contract, Art. 6(1)(b) GDPR is an additional legal basis for processing.
Disclosure of data
Your personal data is not transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if you have given your express consent pursuant to Art. 6(1) sentence 1 (a) GDPR; if the disclosure is necessary pursuant to Art. 6(1) sentence 1 (f) GDPR to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed; if there is a legal obligation to disclose pursuant to Art. 6(1) sentence 1 (c) GDPR; or if this is legally permissible and necessary pursuant to Art. 6(1) sentence 1 (b) GDPR for the performance of contractual relationships with you.
Use of cookies
This website does not set cookies and does not use any tools for audience measurement, analytics or profiling. A consent banner is therefore not required.
Third-party services
If we embed content, services or offerings from other providers on the website (e.g. maps, videos, fonts), the transmission of the IP address to the respective provider may be necessary to deliver this content. We endeavour to use only providers that use the IP address solely for the purpose of delivering the content. On media-4-me.de we currently do not embed any such third-party services. On hoodscreens.com a map is embedded; see the section "Data processing on hoodscreens.com".
Data processing on hoodscreens.com
The following information applies in addition to the website hoodscreens.com, through which we market the Hoodscreens advertising network.
Enquiry form
You can send us an enquiry about the Hoodscreens network via the form in the "Calculate your spot" section.
Data processed: company, name, e-mail address, phone number, your message, the configuration you selected (spot length, frequency, period), the language you selected (German/English), date and time of submission and the IP address of the submitting device.
Purpose and legal basis: We process this data exclusively to handle your enquiry and to prepare an offer for you. The legal basis is Art. 6(1)(b) GDPR insofar as the enquiry is aimed at concluding a contract; otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in responding to enquiries about our services. Company, name, e-mail address, phone number and message are required; without this information the form cannot be submitted. We process the IP address to protect the form against misuse (Art. 6(1)(f) GDPR).
Recipients: Your details are sent by e-mail to our internal address info@media-4-me.de and handled there by the responsible staff. In addition, you receive an automatic confirmation of your enquiry at the e-mail address you provided, in the language you selected. E-mails are sent via the mail servers of IONOS SE. Your data is not passed on to any other third parties.
Technical fallback log: If the e-mail to us cannot be delivered for technical reasons, your enquiry is stored instead in a log file on the server so that it is not lost. This file is located outside the area accessible via the internet. The entry is deleted as soon as the enquiry has been processed. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in reliably receiving enquiries addressed to us.
Retention period: We delete your data as soon as your enquiry has been fully processed and no further communication is expected. If a contractual relationship arises from the enquiry, the statutory retention periods under commercial and tax law of six or ten years apply (Section 257 of the German Commercial Code, HGB, and Section 147 of the German Fiscal Code, AO).
Spam protection for the enquiry form
To protect the form against automated submissions, we use a hidden honeypot field, a timing check and a proof-of-work captcha (Altcha). When you submit the form, your browser solves a small computational puzzle in the background, which is generated and verified on our own server. No image or click challenge is shown, and no behavioural data is analysed. None of these measures involve a third-party service; no data is transmitted to external servers and no cookies are set.
Rejected submissions may be recorded in a server-side log file outside the publicly accessible area, containing the time of the attempt and a pseudonymised identifier derived from the IP address (truncated hash); the IP address itself is not stored. This log is used solely to prevent abuse and is deleted after 14 days. The legal basis is Art. 6(1)(f) GDPR.
Map display
On hoodscreens.com we display the locations of the network on an interactive map. The map software Leaflet is delivered from our own server. The map imagery (the individual map tiles) is retrieved from CARTO, operated by CartoDB Inc., 307 Fifth Avenue, Floor 9, New York, NY 10016, USA. When the map is loaded, your IP address is transmitted to CARTO's servers, as this is technically necessary to deliver the map tiles to your browser. Information about the selected map section and zoom level is also transmitted, together with our API key for the basemap service (which does not contain any personal data).
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in a clear visual presentation of our locations. According to CARTO, the IP address contained in tile requests is truncated at the point of ingestion. The transfer to the USA is based on CARTO's certification under the EU-U.S. Data Privacy Framework and, in addition, on the EU Standard Contractual Clauses. Further information: https://carto.com/privacy/
Fonts and software libraries
All fonts and software libraries used on hoodscreens.com are delivered from our own server. No connection is established to Google Fonts or external content delivery networks.
Language selection
hoodscreens.com is available in German and English. Your selected language is stored in your browser's local storage so that it is retained on subsequent visits. This is strictly necessary to provide the function you requested (Section 25(2) no. 2 TDDDG); no consent is required. No data is transmitted to us or to third parties in this process.
Rights of the data subject
You have the right:
- pursuant to Art. 15 GDPR, to request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, where applicable, meaningful information about its details;
- pursuant to Art. 16 GDPR, to request without undue delay the rectification of inaccurate personal data or the completion of your personal data stored by us;
- pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless processing is necessary to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to assert, exercise or defend legal claims;
- pursuant to Art. 18 GDPR, to request the restriction of processing of your personal data if you contest the accuracy of the data, if the processing is unlawful but you object to its erasure and we no longer need the data but you need it to assert, exercise or defend legal claims, or if you have objected to processing pursuant to Art. 21 GDPR;
- pursuant to Art. 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller;
- pursuant to Art. 7(3) GDPR, to withdraw your consent at any time. As a result, we may no longer continue the processing based on this consent in the future;
- pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your habitual residence or place of work, or of our company's registered office. The supervisory authority responsible for us is: Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information), Alt-Moabit 59–61, 10555 Berlin, Germany.
Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Where personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling insofar as it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
In connection with the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
(1) is necessary for entering into, or the performance of, a contract between you and the controller, (2) is authorised by Union or Member State law to which the controller is subject and which lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or (3) is based on your explicit consent.
However, these decisions may not be based on special categories of personal data referred to in Art. 9(1) GDPR, unless Art. 9(2)(a) or (g) applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
In the cases referred to in (1) and (3), the controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
As a responsible company, we do not use automated decision-making or profiling.
Data security
We use the widespread TLS (Transport Layer Security) encryption method on our website, with an encryption strength that corresponds to the current state of the art. You can recognise the encrypted transmission by the padlock symbol in your browser's address bar and the "https://" prefix of the URL.
We use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
Currency and amendment of this privacy policy
This privacy policy is currently valid and was last updated in October 2026.
Due to the further development of our website and offerings, or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy. You can access and print the current privacy policy at any time at this address.