The protection and security of your personal data is important to us. This privacy policy describes how we treat the personal data you provide to us on our website and helps you understand what personal data we request from you, why we request this data, what we do with it, and how long we store it.
1. Responsibility and contact details
The controller responsible for data processing on our website is:
NewMotion GmbH
Schönhauser Allee 8
10119 Berlin
Email: info@newmotion.world
2. Processing on our website
When you visit our website and use its features, we process personal data. Unless otherwise stated, you are not obliged to provide us with personal data. However, in this case, we will generally be unable to provide you with our website and the services offered on it.
In the following sections, we explain what data we process, for what purposes, for how long, and on what legal basis. You will also learn to whom we pass on your data. At the end of the privacy policy, you will also find information on the storage period, general recipients, and automated decision-making.
2.1 General use of the website
Purposes: When you visit our website, we process certain data to enable you to use the website and its functions.
Categories of data: The data processed in connection with the use of the website regularly includes the IP address, which is necessary to deliver the content of online offers to your end device, as well as all entries you make within our website (e.g., language selection, entries in forms, search functions, or similar).
Recipient:
- Webgo GmbH, Heidenkampsweg 81, 20097, Hamburg
- Privacy policy:https://www.webgo.de/datenschutz/.
- BUZZWOO! GmbH & Co. KG, Alexanderstraße 81, 70182 Stuttgart
- Privacy policy:https://www.buzzwoo.de/datenschutzerklaerung.
Legal basis: The legitimate interest in pursuing the aforementioned purposes (Art. 6 (1) (f) GDPR).
Storage period: We do not permanently store any personal data for the purposes mentioned.
2.2 Collection of access data and log files
Purposes: We ourselves or our web hosting provider collect data on every access to the server, so-called server log files. The server log files can be used for security purposes, e.g., to prevent server overload, and to ensure server utilization and stability.
Categories of data: Content data (e.g., entries in online forms), usage data (e.g., websites visited, interest in content, access times), meta/communication data (e.g., device information, IP addresses).
Recipient:
- Webgo GmbH, Heidenkampsweg 81, 20097, Hamburg
- Privacy policy:https://www.webgo.de/datenschutz/.
- BUZZWOO! GmbH & Co. KG, Alexanderstraße 81, 70182 Stuttgart
- Privacy policy:https://www.buzzwoo.de/datenschutzerklaerung.
Legal basis: The legitimate interest in pursuing the aforementioned purposes (Art. 6 (1) (f) GDPR).
Storage period: The server log files are stored for 7 days and then deleted.
2.3 Registration on the website
Purposes: Film enthusiasts and film companies can register on our website. Alternatively, the Google Single Sign-On authentication service can also be used for registration.
When you create an account with us, we process your personal data for the purpose of creating, managing, and maintaining your account.
As part of account management, system emails will also be sent to you when you register for the first time, reset your password, or want to change your email address. We will also inform you by email about important changes, such as changes to the scope of services, technically necessary changes, or before your account is deleted.
Categories of data: Data you provide when registering, in particular your first and last name and email address. If you register with Google, you must enter your Google name and password. Google will identify you and confirm your identity to our website.
Recipient:
- BUZZWOO! GmbH & Co. KG, Alexanderstraße 81, 70182 Stuttgart
- Privacy policy:https://www.buzzwoo.de/datenschutzerklaerung.
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
- Third country transfers: Data may be transferred to third countries, in particular the USA. Google LLC is certified under the Data Privacy Framework, which means that an adequate level of protection is currently ensured during processing. Standard contractual clauses have also been concluded.
- Privacy policy: https://policies.google.com/privacy?hl=de
Legal basis: The data entered during registration is processed for the purpose of implementing the user relationship established by the registration and, if necessary, for initiating further contracts (Art. 6 (1) (b) GDPR).
Storage period: The data will generally be processed for as long as you maintain your account with us. Your data will be deleted after the customer account is terminated. User accounts will be deleted if they are inactive for a period of 24 months. Before deletion, users will be informed by email and given the opportunity to continue using their account. Statutory retention periods remain unaffected.
2.4 Job shadowing
Purposes: We process personal data to enable job shadowing and to support both applicants and film companies during the process. This initially includes registering users on our website (see section 2.3 ) and receiving, reviewing, and processing the submitted application documents. In this context, we also process the data in order to communicate with applicants or film companies (e.g., by email or telephone), for example to clarify queries, issue invitations to initial interviews, or send rejections.
In addition, we process the data in order to find a suitable match between applicants and the shadowing or entry-level positions advertised by film companies in terms of professional and organizational requirements. On this basis, we invite suitable applicants to an initial digital interview via the “SimplyMeet” tool, while applicants who are not invited to an interview are initially placed on a waiting list.
After a successful initial interview, we use the data to place the applicant with the respective film company, including sending relevant information to the company and organizing and supporting the shadowing. After the shadowing has been completed, we process the data in order to organize and document a final feedback interview.
In addition, applicants have the option of voluntarily joining our alumni pool. The data processed for this purpose is used exclusively for the purpose of informing them about suitable offers from the film industry in the future.
Categories of data: In particular, the data provided in the application form and deal memo (contact and communication data, profile information such as date of birth, gender), voluntary additional information, and organizational data in the context of placement and implementation.
Recipients:
- Film companies to which suitable applicants are referred.
- SimplyBook.me Ltd., 21 Karaiskaki Str., Oasis Center, 3032 Limassol, Cyprus.
Legal basis: Your data is processed for the purpose of reviewing and processing your application and arranging job shadowing (Art. 6 (1) (b) GDPR). Inclusion in the alumni pool is based exclusively on your express consent (Art. 6 (1) (a) GDPR).
Storage period: We generally process your application and profile information for as long as is necessary to arrange and carry out the job shadowing. As placement processes can sometimes take time, we will retain your data until a final decision has been made or until the job shadowing has been carried out. The data provided by the film companies will be processed until the respective shadowing or entry-level offer or the account has been deleted.
In the event of rejection or withdrawal of your application, we reserve the right to store your data on the basis of our legitimate interests (Art. 6 (1) (f) GDPR) for up to six months after the end of the application process (rejection or withdrawal of the application). The data will then be deleted. The storage serves in particular for verification purposes in the event of a legal dispute. If it is apparent that the data will be required after the six-month period has expired (e.g., due to an impending or pending legal dispute), deletion will only take place when the purpose of further storage no longer applies.
The data from the alumni pool will be processed until you revoke your consent in this regard.
2.5 “Skillmatcher” tool
Purposes: We provide an AI-based tool called “Skillmatcher” on our website. It makes suggestions to users for suitable film professions based on their input. The questions are generated dynamically and partially automated. The career suggestions determined on the basis of your input are then stored in your application form.
Categories of data: IP addresses.
Legal basis: Processing is based on our legitimate interest (Art. 6 (1) (f) GDPR). We have a legitimate interest in offering users interactive and low-threshold support in selecting suitable shadowing areas in order to improve the application process as a whole.
Storage period: The professions entered in the application form will generally be processed for as long as you maintain your account with us. Your data will be deleted after you cancel your account.
2.6 Contact
Purposes: When you contact us (via contact form or email), the details of the person making the inquiry are processed to the extent necessary to respond to the contact request and any requested actions.
We use Pipedrive, a CRM system, for managing contacts and communicating with users, among other things.
Categories of data: Basic data (e.g., names, addresses), contact details (e.g., email, phone numbers), content data (e.g., entries in online forms).
Recipients:
- united-domains GmbH, Gautinger Straße 10, 82319 Starnberg.
Legal basis: Responding to contact requests within the framework of contractual or pre-contractual relationships is done to fulfill our (pre-)contractual obligations (Art. 6 (1) (b) GDPR). Otherwise, it is based on our legitimate interest (Art. 6 (1) (f) GDPR) in responding to inquiries effectively.
Storage period: We store your inquiries for as long as is necessary to respond to the inquiry.
2.7 Newsletter
Purposes: You have the option of subscribing to our newsletter, in which we regularly inform you about new developments and promotions.
We use the double opt-in procedure for ordering our newsletter, i.e., we will only send you our newsletter once you have confirmed that you are the owner of the specified means of communication by clicking on a link in a message. If you confirm the address, we will store the address or number, the time of registration, and, if applicable, the IP address used for registration for verification purposes until you unsubscribe from the newsletter.
We use technologies in our newsletters that allow us to measure interactions with the newsletters (e.g., opening of the email, links clicked). We use this data for general statistical evaluations and to optimize and further develop our content and customer communication. This is done with the help of small graphics embedded in the newsletters (so-called pixels).
Categories of data: Consent data (name, email address/phone number or other identifier, time, IP address), usage data (messages opened, links clicked), personalization data.
Legal basis: We process your data on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.
Storage period: The data will be processed until you revoke your consent.
2.8 Consent management
Purposes: When you visit our website, we ask for your consent to store information on your device (e.g., cookies) and to process your data for specific purposes. Consent is documented in order to comply with our obligation to provide evidence, and the setting of cookies is controlled technically. Cookies are also used for this purpose. You can adjust your settings at any time and/or revoke your consent.
Categories of data: Your IP address, the date of your consent, a pseudonymous ID, and your selected settings are stored for the purpose of obtaining, managing, and tracking your consent.
Recipient:
- Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany
- Privacy policy:https://de.borlabs.io/datenschutz/
Legal basis: The legitimate interest in pursuing the aforementioned purposes (Art. 6 (1) (f) GDPR).
Storage period: The data is stored for 2 years and then deleted.
2.9 Web analysis, monitoring, and optimization
Purposes: Web analysis is used to evaluate visitors to our online offering and may include information on the behavior, interests, or demographic characteristics of visitors, such as gender, in pseudonymous form. This enables us, for example, to identify at what time our online offering or its functions and content are used most frequently. In addition, we can use this information to identify areas that need optimization. In addition to web analysis, we can also use test procedures to test and optimize different versions of our online offering or its components, for example.
The use of Google recaptcha serves primarily to distinguish whether an entry is made by a natural person or abusively by machine and/or automated processing.
Categories of data: In particular, usage data (e.g., content accessed, elements used and technical information, access times, IP address, meta/communication data (e.g., device information), system data (e.g., error messages).
Google reCAPTCHA processes information about browser interactions, number of mouse movements and keystrokes, time spent on websites, IP address of the website visitor, date, referrer URL (the address of the page from which the visitor comes), installed browser plugins, information about the operating system and settings of the end device (e.g., language settings, location, browser, etc.).
Service providers used:
- Google Analytics and Google recaptcha
- Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
- Third country transfers: Data may be transferred to third countries, in particular the USA. Google LLC is certified under the Data Privacy Framework, which means that an adequate level of protection is currently ensured during processing. Standard contractual clauses have also been concluded.
- Privacy policy: https://policies.google.com/privacy?hl=de.
- Facebook & Instagram Pixel
- Provider: Meta Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
- Third country transfers: Data may be transferred to third countries, in particular the USA. Meta is certified under the Data Privacy Framework, which means that an adequate level of protection is currently ensured during processing. Standard contractual clauses have also been concluded.
- Privacy policy: https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/privacy/
2.10 Plugins and tools
Purposes: We use various integrated third-party content to make our website more user-friendly.
This website embeds videos from YouTube. When you visit one of these websites that embeds YouTube, a connection to YouTube’s servers is established. This tells YouTube’s server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account. We use YouTube in extended data protection mode. According to YouTube, videos played in extended data protection mode are not used to personalize browsing on YouTube. Ads played in extended data protection mode are also not personalized. No cookies are set in extended data protection mode. Instead, however, so-called local storage elements are stored in the user’s browser, which, similar to cookies, contain personal data and can be used for recognition. Details on extended data protection mode can be found here: https://support.google.com/youtube/answer/171780.
This website uses plugins from the video portal Vimeo. When you visit one of our pages equipped with Vimeo videos, a connection to the Vimeo servers is established. The Vimeo server is informed which of our pages you have visited. Vimeo also obtains your IP address. However, we have set Vimeo so that Vimeo will not track your user activities and will not set any cookies.
Recipient:
- Vimeo.com, Inc. 330 West 34th Street, 10th Floor, New York, New York 10001, USA. Vimeo is certified under the Data Privacy Framework, ensuring an adequate level of protection during processing. In addition, we have concluded standard contractual clauses of the European Union with Vimeo as appropriate safeguards. You can access the standard contractual clauses here and here.
- Privacy policy:https://vimeo.com/legal/privacy/policy.
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google LLC is certified under the Data Privacy Framework, ensuring an adequate level of protection during processing.
- Privacy policy: https://policies.google.com/privacy?hl=de
Legal basis: Processing is based on our legitimate interest (Art. 6 (1) (f) GDPR). Our legitimate interest is to provide users with an interactive and engaging website.
Storage period: We do not store any personal data.
3. Presence on social networks (social media)
We have profiles on social networks. Our social media accounts complement our website and offer you the opportunity to interact with us. As soon as you access our social media profiles on social networks, the terms and conditions and data processing guidelines of the respective operators apply. The data collected about you when using the services is processed by the networks and, if necessary, also transferred to countries outside the European Union where there is no adequate level of protection for the processing of personal data. We have no influence on data processing in social networks, as we are users of the network just like you. We use the following social networks:
3.1 Facebook and Instagram
Our page is available at: https://www.facebook.com/people/NewMotion/61561217515952/ andhttps://www.instagram.com/newmotion_program/.
The operator of the network is: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Network privacy policy: https://www.facebook.com/about/privacy and https://privacycenter.instagram.com/
3.2 TikTok
Our page is available at: https://www.tiktok.com/@newmotion_program.
The network is operated by: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
Network privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/en.
3.3 LinkedIn
Our page can be accessed at: https://www.linkedin.com/company/newmotion-programm/.
The network is operated by: LinkedIn Ireland Unlimited Company, Wilton Place,
Dublin 2, Ireland
Network privacy policy: https://www.facebook.com/about/privacy and https://de.linkedin.com/legal/privacy-policy?trk=content_footer-privacy-policy.
3.4 Joint responsibility
Purposes: We process personal data as our own controller when you send us inquiries via social media profiles. We process this data in order to respond to your inquiries. In addition, we are jointly responsible with the following networks and for the following processing operations (Art. 26 GDPR). When you visit our profile on LinkedIn, Facebook, Instagram, and TikTok, the network collects aggregated statistics (“insights data” or “analytics data”) created from certain events logged by their servers when you interact with our profiles and the associated content. We receive these aggregated and anonymous statistics from the network about the use of our profile. We are generally unable to assign the data to specific users. To a certain extent, we can specify the criteria according to which the network generates these statistics for us. We use these statistics to make our profiles more interesting and informative for you.
For more information about this data processing on Facebook and Instagram, please refer to the Joint Controller Agreement at: https://www.facebook.com/legal/terms/information_about_page_insights_data
Further information on this data processing by Tiktok can be found in the Joint Controller Agreement at:https://www.tiktok.com/legal/page/global/tiktok-analytics-joint-controller-addendum/en
Further information on this data processing by LinkedIn can be found in the joint controller agreement at: https://legal.linkedin.com/pages-joint-controller-addendum. Otherwise, the network is solely responsible for the processing of your data.
Legal basis: The processing is based on our legitimate interest (Art. 6 (1) (f) GDPR). The interest lies in the respective purpose.
Storage period: We do not store any personal data ourselves within the scope of joint responsibility. With regard to contact requests outside the network, the above information on establishing contact applies accordingly.
A wide range of data processing transactions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.
4. General information about recipients
When we process your data, it may be necessary to transfer or disclose your data to other recipients. In the sections on processing above, we name the specific recipients as far as we can. If recipients are located in a country outside the EU, we indicate this separately under the individual points listed above. Unless we expressly refer to an adequacy decision, no adequacy decision exists for the respective recipient country. In these cases, we will agree on appropriate safeguards in the form of standard contractual clauses to ensure an adequate level of data protection (unless other appropriate safeguards, such as binding corporate rules, are in place). You can access the current versions of the standard contractual clauses at https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj.
In addition to these specific recipients, transfers to other categories of recipients may also occur. These may be internal recipients, i.e., persons within our company, but also external recipients. Possible recipients may include, in particular:
With authorities in order to comply with our legal and reporting obligations.
- Our employees who are responsible for processing and storing the data and whose employment relationship with us is governed by a confidentiality obligation.
- Service providers who act as processors bound by our instructions. These are primarily technical service providers whose services we use when we cannot provide certain services ourselves or when it does not make sense for us to do so.
- Third-party providers who support us in providing our services in accordance with our terms and conditions. For example: payment service providers or marketing service providers.
- With authorities in order to comply with our legal and reporting obligations.
5. General information on the storage period
We generally process your personal data for the storage period described above. However, data is often processed for more than one purpose, so that even after the storage period has expired, we may continue to process your data for another purpose. In this case, the storage period specified for this purpose applies. Once the last storage period has expired, we will delete your data immediately.
6. Automated decision-making and obligation to provide data
We do not use automated decision-making that has a legal effect on you or similarly significantly affects you.
7. What rights do you have with regard to the personal data you provide to us?
You have the following rights, provided that the legal requirements are met. To exercise these rights, you can contact us at the address you know.
- Art. 15 GDPR – Right of access by the data subject:
- You have the right to request confirmation from us as to whether personal data concerning you is being processed and, if so, what this data is and the circumstances of the data processing.
- Art. 16 GDPR – Right to rectification:
- You have the right to request that we correct inaccurate personal data concerning you without delay. Taking into account the purposes of the processing, you also have the right to request that incomplete personal data be completed, including by means of a supplementary statement.
- Art. 17 GDPR – Right to erasure:
- You have the right to request that we erase personal data concerning you without undue delay.
- Art. 18 GDPR – Right to restriction of processing:
- You have the right to request that we restrict processing.
- Art. 20 GDPR – Right to data portability:
- In the event of processing based on consent or for the performance of a contract, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format and to transmit those data to another controller without hindrance from us or to have the data transmitted directly to the other controller, where technically feasible.
- Art. 77 GDPR in conjunction with § 19 BDSG – Right to lodge a complaint with a supervisory authority:
- You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes applicable law.
8. In particular, right to object and withdrawal of consent
- Art. 21 GDPR – Right to object:
- You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is necessary for the purposes of our legitimate interests or for the performance of a task carried out in the public interest or in the exercise of official authority.
- If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
- If we process your personal data for direct marketing purposes, you have the right to object to the processing at any time. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
- You can lodge your objection at any time with effect for the future via one of the contact addresses known to you.
- Revocation of consent:
- You can revoke your consent at any time with future effect via one of the contact addresses known to you.
9. Obligation to provide data
You are under no contractual or legal obligation to provide us with personal data. However, without the data you provide, we are unable to offer you our services.
10. Cookie policy
10.1 Why do we use cookies (and similar technologies)?
For the purposes mentioned above, we also store information on your device and access information stored on your device. This is done with the help of cookies or similar technologies such as local storage (hereinafter referred to collectively as cookies for the sake of simplicity).
Some of these cookies are absolutely necessary for us to provide our services to you (Section 25 (2) No. 2 TDDDG). We only use cookies that are not absolutely necessary for our services with your express consent (Section 25 (1) TDDDG), which you can revoke at any time via our
Privacy Preference Center
and revoke it with effect for the future.
You can also see which cookies are stored and how long these cookies remain stored on your device in the Privacy Preference Center. There you will also find the assignment of cookies to the above-mentioned processing purposes and providers used.
10.2 What types of cookies do we use?
We use persistent and temporary cookies (“session cookies”). Session cookies remain on your device only until you end your browser session. Persistent cookies remain stored on your device until they expire or are deleted.
10.3 Strictly necessary cookies
These cookies enable basic functions and are essential for the proper functioning of the website.
10.4 Statistics cookies
If you consent to the “Statistics” category, cookies will be set and personal data will be processed in order to analyze your use of our offerings, improve our service for you, avoid bugs, and test new features. Pseudonymized profiles about your use are also created, e.g., using a cookie ID. These profiles primarily contain information about your activities on our site and interactions with its elements. The success of advertising campaigns, e.g., from radio and television, can also be measured.
10.5 Functional cookies
If you activate the “Functional cookies” category, cookies are set and personal data is processed in order to provide additional functions on the website.
10.6 Marketing cookies
If you activate the “Marketing cookies” category, cookies are set and personal data is processed in order to show you relevant sponsored content about our services and to be able to target you with our ads on third-party sites and offers. Here, too, only pseudonymized profiles are generally created, which contain information about your activities, interests, demographic information, or information about your location. This information may also be combined with information from other sources, either from us or from third parties. Information may also be processed across devices.
11. Comments or questions
We take every conceivable precaution to protect and secure your data. We welcome your questions and comments about data protection. If you have any questions about the collection, processing, or use of your personal data, or if you wish to request information, correction, blocking, or deletion of data, or revoke consent you have given, please contact us using the contact details provided above.
As of: December 2025