Privacy policy
Exercise your privacy rights
Submit a data subject request or opt out of the sale or sharing of personal information where applicable.
1. Controller
The controller responsible for data processing on this website is BrightFlixx L.L.C, Mainzer Landstrasse 50, 60325 Frankfurt am Main, Germany.
2. Collection of data
When you visit this website, technically necessary data (e.g. IP address, browser type, time of access) is processed to enable delivery and security of the page. Additional data is processed only where you provide it (e.g. contact or privacy request forms) or where you consent (e.g. analytics or embedded media).
3. Contacting us
If you contact us via a form or email, we process your information to handle your request and to keep records required by law.
4. Legal bases
You have the right to information, correction, deletion and restriction of the processing of your personal data. Use our form at /privacy/request to submit a corresponding request.
Your rights under the GDPR (EU / EEA)
If the GDPR applies to you, you may exercise the following rights subject to statutory conditions and exceptions:
- Access Obtain confirmation whether we process your personal data and receive a copy of that data.
- Rectification Have inaccurate personal data corrected and incomplete data completed.
- Erasure Request deletion of your personal data where the GDPR provides a right to be forgotten.
- Restriction Request restriction of processing in the cases set out in Art. 18 GDPR.
- Portability Receive personal data you provided to us in a structured, commonly used and machine-readable format, and transmit it to another controller where applicable.
- Objection Object to processing based on legitimate interests, including profiling, and to processing for direct marketing.
- Withdraw consent Withdraw consent at any time where processing is based on consent, without affecting prior lawful processing.
- Complaint Lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement.
Your rights under the CCPA / CPRA (California)
If you are a California resident, the CCPA/CPRA may provide you with the following rights (subject to exceptions):
- Know / access Request disclosure of the categories and specific pieces of personal information we have collected about you, and the categories of sources, purposes and third parties.
- Delete Request deletion of personal information we collected from you, subject to statutory exceptions.
- Correct Request correction of inaccurate personal information we maintain about you.
- Opt out of sale / sharing Direct us not to sell or share your personal information for cross-context behavioural advertising. Use the “Do not sell” page or Global Privacy Control (GPC) where honoured.
- Limit use of sensitive personal information Request that we limit use and disclosure of sensitive personal information to purposes permitted by the CPRA.
- Non-discrimination Not be discriminated against for exercising your CCPA/CPRA rights.
Your rights under the LGPD (Brazil)
If the Brazilian LGPD applies to you, you may request, among other things:
- Confirmation and access Confirmation of the existence of processing and access to your data.
- Correction Correction of incomplete, inaccurate or outdated data.
- Anonymisation, blocking or deletion Anonymisation, blocking or deletion of unnecessary or excess data, or of data processed in non-compliance with the LGPD.
- Portability Portability of data to another service provider, in accordance with ANPD regulations.
- Information on sharing Information about public and private entities with which we share data.
- Revocation of consent Revocation of consent, without affecting processing carried out before revocation.
Contact the Data Protection Officer
For privacy questions or to exercise your rights, contact our Data Protection Officer (DPO) or privacy team. You may also use the “Request my data” form on this website.
Privacy / DPO email: privacy@brightflixx.com
Data retention
We retain personal data only as long as necessary for the purposes described in this policy, including legal, accounting and reporting requirements. Contact and privacy-request records are typically kept for up to 24 months after closure unless a longer period is required by law. Analytics events are stored in aggregated or hashed form where possible and purged or anonymised according to our retention settings. Cookie consent records may be kept for the duration needed to demonstrate compliance.
International transfers
BrightFlixx operates from Germany and may use service providers in the EU and other countries. Where personal data is transferred outside the EEA, UK or Switzerland, we use appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms, and implement supplementary measures where required.
Cookies and similar technologies
We use strictly necessary cookies for security and basic site functions. Analytics and marketing / media cookies (e.g. Google Analytics, YouTube embeds) load only with your consent where required by law. You can change your choices at any time via “Cookie settings”. California residents may also use “Do not sell” or a Global Privacy Control (GPC) signal where honoured. Details of categories and purposes are shown in the cookie banner.