DATA PROTECTION

1.1.    Introduction

Thank you for visiting our website. We take privacy very seriously and strive to protect your personal information as part of our website offer.

By personal data we understand all data about the personal and factual circumstances of a natural person. Personal data collected on our website are used exclusively for our own purposes.

1.2.    Legal bases of data processing

The legal basis of the data processing in the context of the EU data protection basic regulation results for our data processing from kind 6 DS-GVO. In detail, depending on the situation in which we process your data, different legal bases may arise.

Consent

Insofar as your consent has been obtained for the processing of personal data, Article 6 I a) of the GDPR is the legal basis for the processing of data. A given consent can be withdrawn at any time with effect for the future.

Contract

In the processing of personal data collected for the performance of a contract of which you are a party, Article 6 I b) of the GDPR is the legal basis. This also applies to processing operations required to carry out pre-contractual measures.

Legal Duty

Insofar as the processing of personal data is necessary to fulfill a legal obligation that our company is subject to, Article 6 (c) of the GDPR serves as the legal basis.

Vital interests

In the event that vital interests of you or any other natural person require the processing of personal data, Article 6 (d) GDPR is the legal basis.

Authorized interest

If processing is necessary to safeguard the legitimate interests of our company or a third party and if the interests, fundamental rights and freedoms of the person concerned do not outweigh the former interest, then Article 6 (f) of the GDPR serves as the legal basis for the processing. The legitimate interest of our company lies in the execution of our business activities.

1.3.    Affected rights

As part of our data processing, personal data is processed by you. You are entitled to the rights from the third chapter of the DS-GVO to our company.

We respect the rights to information, correction, restriction of processing, deletion or transferability of your personal data. You can claim these rights as follows:

Right on information

You have the right to ask us for confirmation as to whether we are processing personal information concerning you. If this is the case, you have a right to information about this personal data and to the following information:

1. a) the processing purposes;
2. b) the categories of personal data being processed;

(c) the recipients or categories of recipients to whom the personal data have been or are being disclosed, in particular in the case of beneficiaries in third countries or international organizations;

(d) if possible, the planned duration for which the personal data are stored or, if this is not possible, the criteria for determining that duration;

(e) the right to rectify or erase the personal data relating to you or to restrict the processing or to refuse processing by the controller;

(f) the existence of a right of appeal to a supervisory authority;

1. g) if the personal data are not collected from the data subject, all available information on the source of the data;

(h) the existence of automated decision-making, including profiling, as referred to in Article 22 (1) and (4) and, at least in such cases, meaningful information about the logic involved and the scope and intended impact of such processing on the data subject.

If personal data are transmitted to a third country or to an international organization, you have the right to be informed of the appropriate safeguards under Article 46 of the DS-GVO in connection with the transfer.

We provide you with a copy of the personal data that is the subject of the processing. For any additional copies you request, we may charge a reasonable fee based on administrative costs. If you submit the request for information electronically, we must provide the information in a standard electronic format, unless you specify otherwise.

The right to receive a copy must not affect the rights and freedoms of others.

Right of access

You have the right to obtain from us confirmation as to whether or not personal data concerning you is being processed by us. Where that is the case, you have a right of access to such personal data and the following information:

1. i) the purposes of processing;
2. j) the categories of personal data concerned;
3. k) the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organizations;
4. l) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
5. m) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing;
6. n) the right to lodge a complaint with a supervisory authority;
7. o) where the personal data is not collected from the data subject, any available information as to its source;
8. p) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

Where personal data is transferred to a third country or to an international organization, you have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.

We provide you a copy of the personal data undergoing processing. For any further copies requested by you, we are entitled to charge a reasonable fee based on administrative costs. Where you make the request by electronic means, and unless otherwise requested by you, we must provide the information in a commonly used electronic format.

The right to obtain a copy must not adversely affect the rights and freedoms of others.

Right to rectification

Moreover, you have the right to obtain without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to erasure (“Right to be forgotten”)

You have the right to obtain from us the erasure of personal data concerning you without undue delay and we have the obligation to erase personal data without undue delay where one of the following grounds applies:

1. g) the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
2. h) you withdraw consent on which the processing is based according to point (a) of Article 6(1) GDPR, or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing;
3. i) you object to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2);
4. j) the personal data has been unlawfully processed;
5. k) The erasure of personal data is required in order to fulfill a legal obligation under EU law or the law of the EU member states to which we are subject.
6. l) the personal data has been collected in relation to the offer of information society services referred to in Article 8(1).

(2) Where we have made the personal data public and are obliged pursuant to paragraph 1 to erase the personal data, we, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data. This does not apply in cases where processing is necessary: (a) for exercising the right of freedom of expression and information; (b) for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us; (c) for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9(2) as well as Article 9(3); (d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or (e) for the establishment, exercise or defence of legal claims.

Right to restriction of processing

(2)     You have the right to obtain from us restriction of processing where:

1. e) the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data;
2. f) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;
3. g) we no longer need the personal data for the purposes of the processing, but it is required by you for the establishment, exercise or defence of legal claims; or
4. h) you have objected to processing pursuant to Article 21(1) pending the verification whether our legitimate grounds override yours.

(3)     Where processing has been restricted under paragraph 1, such personal data may, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. 04/05/2016 L 119/44 Official Journal of the European Union EN

(4)     A data subject who has obtained restriction of processing pursuant to paragraph 1 shall be informed by the controller before the restriction of processing is lifted.

Notification obligation regarding rectification or erasure of personal data or restriction of processing

We communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 to all recipients to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. We inform you about these recipients if you request it.

Right to data portability

(1)     You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit such data to another controller without hindrance from us to whom the personal data has been provided, where

1. c) the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) or on a contract pursuant to point (b) of Article 6(1); and
2. d) the processing is carried out by automated means.

(2)     In exercising your right to data portability pursuant to paragraph 1, you have the right to have the personal data transmitted directly from us to another controller, where technically feasible.

(3)     The exercise of the right referred to in paragraph 1 of this Article is without prejudice to Article 17. That right does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

(4)     The right referred to in paragraph 2 must not adversely affect the rights and freedoms of others.

Moreover, you may contact our data protection officer with regard to the aforementioned rights as well as all issues related to processing of your personal data.

Right to lodge a complaint

Moreover, you may assert your right to lodge a complaint with the competent supervisory authorities.

Right to objection

You have the right, at any time for reasons arising out of your particular situation, to object to the processing of personal data concerning you pursuant to Article 6 (I) (e) or (f); this also applies to profiling based on this provision. The controller then no longer processes the personal data unless it can prove compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of your person, or the processing is for the purpose of asserting, exercising or defending legal claims.

2) If your personal data is processed to operate direct mail, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling insofar as it is associated with such direct mail.

3) If you object to the processing for direct marketing purposes, your personal data will no longer be processed for the purposes.

4) Regardless of Directive 2002/58 / EC, in the context of the use of information society services, you can exercise your right to object through automated procedures that use technical specifications.

5) You have the right, for reasons arising from your particular situation, against processing of personal data relating to you for scientific or historical research purposes or for statistical purposes. Article 89 (1) is to lodge an objection unless the processing is necessary to fulfill a public interest task.

Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority if you believe that the processing of your personal data in breach of the DS-GVO.

1.4.    Webserverlogs

As part of the use of our Internet offer, the connection information is stored in the server log files.

This information includes:

• IP address of the calling system
• Browser information such as used operating system and

screen resolution

• Called website
• Origin website
• Time of the call

The web server logs are processed for security purposes only.

We use the log data only for statistical evaluations for the purpose of operation, safety and optimization of the offer. However, we reserve the right to retrospectively check the log data if, on the basis of concrete evidence, the legitimate suspicion of unlawful use exists.

1.5.    Cookies

This website uses cookies. Cookies are text files that are stored on your device. Cookies can be read out, transferred and changed when the website is accessed from the website. We only use cookies with random, pseudonymous identification numbers. These identification numbers are used to evaluate your usage behavior on our website. At no time is the usage profile assigned to the name of a natural person. If you use special functions (such as the shopping cart or “stay logged in”) on our website, cookies will also be used for these functions.

It is always possible to object to the setting of cookies by changing the setting in the Internet browser. Set cookies can be deleted. It should be noted that disabling cookies may not fully exploit all features of our website.

The exact functions of the cookies can be found in the more detailed information contained in this privacy policy.

Note: Deleting your cookies will cause the deactivation cookie of that service to also be deleted and re-enabled the next time you visit..

1.6.    Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will be truncated by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by Google Analytics within the framework of Google Analytics will not be merged with other data provided by Google. You can prevent the storage of cookies by a corresponding setting of your browser software; however, we point out that in this case you may not be able to use all the functions of this website in full. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading the browser plug-in available under the following link and install http://tools.google.com/dlpage/gaoptout?hl=en. ”

We have entered into a contract with Google Germany GmbH – GOOGLE ANALYTICS GERMANY, which ensures that the personal data are processed in accordance with our instructions, as a rule, within Europe. On our website the IP anonymisation (IP mask method) is activated, whereby the IP address is automatically anonymized.

For more information about Google Analytics and privacy, visit https://www.google.com/intl/de/analytics/privacyoverview.html

1.7.    YouTube Videos

The website uses videos and plugins from the service provider YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is legally represented by Google Inc., located at 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

As soon as a video is displayed in the still image via our website, a communication link is established to the YouTube server, through which the service receives various data. This information includes the IP address of your computer, any cookies already stored on your computer, and information stored as part of previous contacts with YouTube. If no data has been saved yet, the service first saves cookies on your computer. When contacting YouTube, the service also receives information about a user account that they may have on YouTube. Further information on the interaction with the video such as Clicking on the Start, Pause or End button will also be transmitted to the provider. You can stop the data processing if you visit a page without video and delete all cookies from your computer.

Please see https://policies.google.com/privacy for more information about data processing and YouTube privacy

1.8.    Google Maps

For better illustration, we embed a map on our website provided by Google Inc. via the Google Maps API. When you view the map, it connects to the Google server, which, among other things, transmits the IP address to Google. Google can evaluate the uses of the Google Maps feature by the website visitor. Furthermore, there is the possibility for Google to write and read cookies. These cookies may be Google User cookies that are directly related to you. For more information about Google Maps, please see the Google Privacy Policy and Terms of Use: https://policies.google.com/privacy?hl=en

1.9.    Privacy contact

Responsible for data processing within the meaning of Art. 4 No. 7 DS-GVO

Geißendörfer Film- und Fernsehproduktion GmbH & Co. KG
Neue Weyerstraße 9
D-50676 Köln, Deutschland

Tel: +49 221 66997327

Mail: info@gff.film

 

Legal representatives
Hans W. Geißendörfer & Hana Geißendörfer

 

Data Protection Officer

Sicoda GmbH
Oliver Gönner
Rochusstr. 198
53123 Bonn
Tel: 0228 286 140 60
Mail: dsb@sicoda.de