Privacy Notice
This Privacy Notice is designed to provide you with information about how we (the “controller”) process your personal data when you (the “data subject”) use our website. As the controller, we carry out the processing of your personal data (e.g. your name, address, e-mail address and telephone number as a data subject) in keeping with statutory provisions and in particular in accordance with the requirements stipulated in the EU’s General Data Protection Regulation (GDPR) and Germany’s Federal Data Protection Act (Bundesdatenschutzgesetz or BDSG). Please note: this English-language translation of our Privacy Notice is provided solely for your reading convenience. In the case of any conflict, the original German text (Datenschutzerklärung) shall be the sole authoritative and legally binding text.
I. The controller
Within the meaning contained in the GDPR and as part of the national data protection laws of EU Member States and other data protection regulations, the controller in this case is the following:
Bündnis internationaler Produktionshäuser (Alliance of International Production Houses)
Jarrestraße 20
22303 Hamburg
Germany
Tel.: +49 30 2000506138
E-mail: kontakt@produktionshaeuser.de
II. General information on the processing of personal data
Personal data is defined as any information that relates to an identified or identifiable natural person. This includes such things as your name and e-mail address. The phrase “processing of data” refers in particular to the collection, storage and transfer of your data or personal information.
Insofar as we obtain your consent as a data subject for the processing of your personal data, Art. 6 (1)(b) of the GDPR shall serve as the legal basis.
When processing any personal data necessary for the performance of a contract to which you (the “data subject”) are a party, Art. 6 (1)(b) of the GDPR shall serve as the legal basis. This also applies to processing operations necessary for the performance of any pre-contractual measures.
To the extent that the processing of personal data is necessary for the performance of a legal obligation to which our company is subject, Art. 6 (1)(c) of the GDPR shall serve as the legal basis.
In the event that the vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1)(c) of the GDPR shall serve as the legal basis.
If the processing of personal data is necessary to safeguard a legitimate interest on the part of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not override the aforementioned legitimate interest, then Art. 6 (1)(f) of the GDPR shall serve as the legal basis for the processing.
The personal data of data subjects will be deleted or blocked as soon as the purpose of the storage no longer applies. The data may be stored after the purpose of the storage no longer applies if this storage is provided for by law. The data will also be blocked or erased if the storage period prescribed by the aforementioned standards expires, unless the further storage of the data is necessary for the performance or conclusion of a contract.
Further information on the legal basis for the processing of personal data as well as on the storage period for specific personal data can be found in the relevant subsection below.
III. Rights of the data subject
1.
If your personal data is processed, you become a data subject within the meaning contained in the GDPR and are granted the following rights vis-à-vis the controller (where applicable, additional requirements set out in the relevant provisions must be met):
- Right of access (Art. 15 GDPR),
- Right to rectification and right to erasure (‘right to be forgotten’) (Art. 16, 17 GDPR),
- Right to restriction of processing (Art. 18 GDPR),
- Right to cancellation if you have consented to the processing (of data),
- Right to data portability (Art. 20 GDPR).
2.
If we process your personal data in the manner described above in order to safeguard our legitimate interests, which override yours in the context of a weighing of interests, you have the right to object to this processing with effect for the future, but only if there are reasons relating to your particular situation (Art. 21 GDPR). If the processing is carried out for direct marketing purposes, you can exercise this right at any time, even if there are no grounds for doing so. Once you have exercised your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or if we can show that the processing serves the establishment, exercise or defence of legal claims. This restriction does not apply if the processing is carried out for direct marketing purposes.
3.
If you feel we are not respecting your rights to the extent that we are obliged to do so, you have the right to lodge a complaint with a data protection supervisory authority concerning the processing of your personal data by us. Before you do so, however, we ask that you inform us about your criticism prior to lodging the complaint so that we can remedy the cause of the complaint ourselves.
IV. Visiting the website and log files
1. Scope of the processing of personal data
Every time you access our website, our system automatically collects the following data and information from the computer system of the device used to access our site:
(1) The user’s browser type and version
(2) The user’s operating system
(3) The user’s internet service provider
(4) The user’s IP address
(5) The date and time of the user’s access
(6) The websites from which the user’s system accessed our website
(7) The websites that were accessed by the user’s system via our website
Any storage in the log files of our system takes place solely in anonymised form.
2. Legal basis for the processing of personal data
The legal basis for the collection and storage of your data is Art. 6 (1)(f) of the GDPR
3. Purpose of the processing of personal data
The temporary storage of your IP address is necessary in order to be able to display the website. In order to do so, your IP address must remain stored for the duration of the session. The other data is collected for technical reasons, that is, in order to ensure stability and security.
This also results in the legitimate interest necessary for the processing of personal in accordance with Art. 6 (1)(f) of the GDPR.
4. Duration of storage
Your data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the purpose of making the website available to you, your data will be deleted as soon as the respective session has ended.
V. Cookies
1. Scope of the processing of personal data
Our website uses technically necessary cookies. Cookies are text files that are saved on your computer system. We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser be able to be identified even after the user has gone to another webpage.
2. Legal basis for the processing of personal data
The legal basis for the processing of your personal data using cookies is Art. 6 (1)(f) of the GDPR as well as § 25 of the Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz or TDDDG).
3. Purpose of the processing of your data
The purpose of our use of technically necessary cookies is to simplify the use of our website for you. Some functions on our website cannot be offered without the use of cookies. For such functions, it is necessary for the user’s browser to be able to be recognised even after the user has gone to another webpage.
The user data collected by technically necessary cookies will not be used to create user profiles.
4. Duration of storage
Technically necessary cookies are usually deleted when you close your browser, that is, at the end of your session. You can also delete any cookies that have already been saved whenever you like.
VI. Contact request
1. Scope of the processing of personal data
When you contact us via e-mail, via regular mail, via a contact form or in any other manner, the data you provide (e.g., your e-mail address, name and telephone number) will be processed by us in such a way that makes it possible for us to process and/or respond to your enquiry.
2. Legal basis for the processing of personal data
If you send us your data prior to entering into a contract – for example, if you request that we send you an offer or if you send us questions about our products – the legal basis for this shall be Art. 6 (1)(b) of the GDPR. If you give us your consent to contact you, the legal basis for this shall be Art. 6 (1)(a) of the GDPR. In all other cases, the legal basis for this shall be Art. 6 (1)(f) of the GDPR.
3. Purpose of the processing of personal data
The processing of personal data is carried out solely for the purpose of processing the contact request. When relevant, this may also constitute our necessary legitimate interest in the processing of your data.
4. Duration of storage
Your data will be deleted when it can be inferred from the circumstances that your enquiry and/or the matter in question has been conclusively clarified.
VII. YouTube
1.Scope of the processing of personal data
We have integrated YouTube videos on our website. YouTube is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). YouTube videos are deactivated by default when you visit our website. A direct connection to Google’s servers is only established if you consent to the use of YouTube.
In general, if you consent to the use of YouTube, your IP address, at the least, will be transmitted to Google servers (including in the USA) and stored, and a cookie will be saved on your end device. We have no influence on this data transfer or on any further processing after YouTube has been activated. For more information on the handling of user data in Google’s privacy policy, please visit https://www.google.de/intl/de/policies/privacy/.
2. Legal basis for the processing of personal data
The legal basis for the processing of personal data is your consent in accordance with Art. 6 (1)(a) of the GDPR.
3. Recipient
The video platform known as YouTube is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. When you use the platform, personal data and your IP address, at the least, are transferred to this company. This data may also be transferred to a third country.
4. Purpose of the data processing
The processing of personal data serves the purpose of making the YouTube videos available to you.
5. Duration of storage
We do not store your data. If data is stored by Google, we have no influence over the duration of storage or on any deletion in the sense described above.
VIII. Vimeo
1. Scope of the processing of personal data
This website uses plugins from the video portal Vimeo. The provider of these plugins is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. When you visit a page with an embedded video from Vimeo, a connection to the Vimeo servers will be established. Your IP address will then be transmitted to the Vimeo server as well as information about which of our pages you are visiting. This will take place even if you are not logged into Vimeo and even if you do not have an account with Vimeo. If you are logged into your Vimeo account, you make it possible for Vimeo to ascribe your surfing behaviour directly to your personal profile. You can prevent this by logging out of your Vimeo account.
Vimeo videos are deactivated by default when you visit our site. A direct connection to the Vimeo servers is only established if and when you consent to the use of Vimeo.
2. Legal basis for the processing of personal data
The legal basis for the processing of personal data is your consent in accordance with Art. 6 (1)(a) of the GDPR.
3. Recipient
The video platform Vimeo is a service provided by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. When you use the platform, your personal data, your IP address at the least, is transmitted to this company. Data is also regularly transmitted to third countries.
4. Purpose of the processing of personal data
The processing of personal data serves the purpose of making the Vimeo videos available to you.
5. Duration of storage
We do not store your data. If data is stored by Vimeo, we have no influence over the duration of storage or on any deletion in the sense described above.
IX. Matomo
We use Matomo on our website. Matomo is an application used for the purposes of web analysis and reach measurement. When using Matomo, we do not issue cookies nor do we save them on your end device. The user data collected when using Matomo is anonymised.
X. Categories of recipients of personal data
Your personal data will only be transferred to third parties in the cases mentioned in this Privacy Notice or if we expressly inform you of this elsewhere. In addition, we sometimes use external contracting processors (Art. 28 GDPR) to provide our services (e.g. host providers, e-mail providers). These external contracting processors process personal data exclusively within the European Union.