Filmförderung Hamburg Schleswig-Holstein GmbH
T: + 49 40 398 37 0
Chairman of the Supervisory Board:
Dr Carsten Brosda, Senator for Culture and Media of the Free and Hanseatic City of Hamburg
Hamburg Local Court HRB 52065
Responsible for the content of these pages within the meaning of the MDStV: Claudia Hartmann
Online editorial office: Daniel Szewczyk
Design & Programming: Never Final
Brand Design: Hansen/2
Team photos: Jasper Ehrich Photography
Despite careful control of the content, we accept no liability for the content of external links. The operators of externally linked pages are solely responsible for their content.
Notes on data protection
Name and contact details of the controller and representative
Filmförderung Hamburg Schleswig-Holstein GmbH
T: + 49 40 398 37 0
CEO authorised to represent the company: Helge Albers
Contact details of the data protection officer: firstname.lastname@example.org
"personal data" means any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
"Processing" is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
"Restriction of processing" is the marking of stored personal data with the aim of restricting its future processing.
"Pseudonymisation" is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
"File system" is any structured collection of personal data that is accessible according to specific criteria, regardless of whether this collection is organised centrally, decentrally or according to functional or geographical aspects.
"Responsible person" is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
"Processor" is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
"Receiver" is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular enquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
"Third" is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
"Consent" is the freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
We collect and process the following personal data about you:
Contact and address information, if you have provided us with your contact information or registered on our site,
Funding documents (scripts, production schedules, cast and crew lists, financing information, contracts)
Online identifiers (e.g. your IP address, browser type and browser version, the operating system used, the referrer URL, the IP address, the file name, the access status, the amount of data transferred, the date and time of the server request)
Social media identifiers.
We process your data for the following purposes:
for the contact requested by you,
for the planning and realization of events,
for the allocation of funding,
to expand our network,
to offer contacts to film locations via our Location Guide,
to send you the e-mail newsletter, if you have registered for this,
for quality assurance and
for our statistics.
Legal basis for data processing
Your data is processed on the following legal bases:
your consent pursuant to Art. 6 para. 1 lit. a) GDPR,
for the performance of a contract with you pursuant to Art. 6 para. 1 lit. b) GDPR
for the fulfillment of legal obligations pursuant to Art. 6 para. 1 lit. c) GDPR or
for a legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR.
If we base the processing of your personal data on legitimate interests within the meaning of Art. Art. 6 para. 1 lit. f) GDPR, such interests are
the improvement of our offer,
protection against misuse and
the management of our statistics.
We receive the data from you (including via the devices you use). If we do not collect the personal data directly from you, we will also inform you of the source from which the personal data originates and, if applicable, whether it originates from publicly accessible sources.
Recipients or categories of recipients of the personal data
When processing your data, we work together with the following service providers who have access to your data:
Providers of web analysis tools,
Web hosting providers,
Event organizers, in particular providers of event rooms
Data is transferred to third countries outside the European Union. This takes place on the basis of contractual regulations provided for by law, which are intended to ensure adequate protection of your data and which you can view on request.
In the event of a positive funding decision, this will also be published.
We only store your personal data for as long as it is necessary to fulfil the purpose for which it was processed or for as long as it is subject to a statutory retention period.
We store your data,
if you have consented to the processing, at most until you withdraw your consent,
if we need the data for the performance of a contract, at most for as long as the contractual relationship with you exists or statutory retention periods apply,
if we use the data on the basis of a legitimate interest, at most for as long as your interest in erasure or anonymization does not prevail.
You have the right - in some cases under certain conditions,
to request information about the processing of your data free of charge and to receive a copy of your personal data. Among other things, you can request information about the purposes of the processing, the categories of personal data being processed, the recipients of the data (if a transfer takes place), the duration of the storage or the criteria for determining the duration;
to rectify your data. If your personal data is incomplete, you have the right to complete the data, taking into account the purposes of the processing;
to have your data erased or blocked. Reasons for the existence of a right to erasure/blocking may include the withdrawal of consent on which the processing is based, the data subject objects to the processing, the personal data has been processed unlawfully;
to have the processing restricted;
object to the processing of your data;
to withdraw your consent to the processing of your data for the future and
complain to the competent supervisory authority about unlawful data processing.
Requirement or obligation to provide data
Unless expressly stated at the time of collection, the provision of data is not required or mandatory. Such an obligation may arise from legal requirements or contractual regulations.
Further information on data protection
DocuSign and IDnow (e-signature/QES)
In order to sign legally compliant electronic contracts, we use the system of DocuSign Germany GmbH, Neue Rothofstraße 13-19, 60313 Frankfurt (hereinafter "DocuSign"). The legal basis for the use of Docusign is Art. 6 para. 1 lit. b and f GDPR, justified by our interest in providing you with uncomplicated document management. DocuSign cooperates with IDnow GmbH, Germany (hereinafter "IDnow"), for the verification of signatories. Although the above-mentioned documents must be transferred to DocuSign for the signing process, DocuSign itself does not utilise them and only stores them for later queries and legal reasons. DocuSign collects the following data during the signing process: Metadata of the signatory such as the browser used, the time, the IP address, the full name of the signatory, the e-mail address and mobile phone number stored by the signatory for verification purposes. IDnow GmbH also stores the signatory's e-mail address, mobile phone number, encrypted password and any other verification documents such as the official passport document for verification purposes. Further information can be found in the privacy policies of DocuSign and IDnow: www.docusign.de,www.idnow.io
If you subscribe to our newsletter, we will use the data required for this or separately provided by you to send you our e-mail newsletter on a regular basis. Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described above or via the unsubscribe link provided for this purpose in the newsletter.
We have taken extensive technical and organisational measures to protect your data against possible risks, such as unauthorised access, unauthorised disclosure, modification or dissemination, as well as against loss, destruction or misuse.
In order to protect your personal data from unauthorised access by third parties during transmission, we secure data transmissions using SSL encryption where necessary. This is a standardised encryption method for online services, especially for the web.
Every time our website is accessed, usage data is transmitted by the respective Internet browser and stored in log files, the so-called server log files. The stored data records contain the following data: Domain from which the user accesses the website, date and time of access IP address of the accessing computer Website(s) visited by the user within the scope of the offer, amount of data transferred, browser type and version, operating system used, name of the Internet service provider, message as to whether the access was successful. These log file data records are evaluated in anonymised form in order to improve the offer and make it more user-friendly, to find and correct errors and to control the utilisation of servers.
Data-saving usage analysis
We process various personal data in order to analyse the use of our website. This includes in particular your IP address and how our website is used, e.g. which button or link is clicked on a certain web subpage, from which subpage you have reached the current subpage and how long you remain on a certain web subpage. for this purpose, an identification number is created when the website is called up, which is linked to the IP address with which you visit our website for a period of 7 days. We will not store your IP address for longer than is technically necessary, so that the identification number can no longer be assigned to you as a person after a short time (anonymisation).
Plugins from the Vimeo video portal of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA are integrated on our website. When you access a page on our website that contains such a plugin, your browser establishes a direct connection to the Vimeo servers. The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the page. Through this integration, Vimeo receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is transmitted directly from your browser to a Vimeo server in the USA and stored there. If you are logged in to Vimeo, Vimeo can directly associate your visit to our website with your Vimeo account. If you interact with the plugins (e.g. by clicking the start button of a video), this information is also transmitted directly to a Vimeo server and stored there. The purpose and scope of the data collection and the further processing and use of the data by Vimeo as well as your rights in this regard and setting options to protect your privacy can be found in Vimeo's data protection information: http://vimeo.com/privacy