Imprint & Data protection

Privacy policy of Filmförderung Hamburg Schleswig-Holstein GmbH

Notes on data protection

With this privacy policy, we would like to inform you about how we process personal data and inform you about your rights. We are aware of the importance of processing personal data for you as the affected user and therefore comply with all relevant legal requirements. The protection of your privacy is of the utmost importance to us. We process your personal data in compliance with the General Data Protection Regulation and the national data protection regulations.

Name and contact details of the controller and representative

Filmförderung Hamburg Schleswig-Holstein GmbH
Friedensallee 14-16
22765 Hamburg
T: + 49 40 398 37 0

CEO authorised to represent the company: Helge Albers

Contact details of the data protection officer: datenschutz@moin-filmfoerderung.de

Definitions

This privacy policy uses the terminology of the General Data Protection Regulation (GDPR).

"personal data" means any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

"Processing" is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

"Restriction of processing" is the marking of stored personal data with the aim of restricting its future processing.

"Pseudonymisation" is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

"File system" is any structured collection of personal data that is accessible according to specific criteria, regardless of whether this collection is organised centrally, decentrally or according to functional or geographical aspects.

"Responsible person" is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

"Processor" is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

"Receiver" is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular enquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.

"Third" is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

"Consent" is the freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Processing operations

We collect and process the following personal data about you:

• Contact and address information, if you have provided us with your contact information or registered on our site,

• Funding documents (scripts, production schedules, cast and crew lists, financing information, contracts)

• Online identifiers (e.g. your IP address, browser type and browser version, the operating system used, the referrer URL, the IP address, the file name, the access status, the amount of data transferred, the date and time of the server request)

• Social media identifiers.

Processing purposes

We process your data for the following purposes:

• for the contact requested by you,

• for the planning and realization of events,

• for the allocation of funding,

• to expand our network,

• to offer contacts to film locations via our Location Guide,

• to send you the e-mail newsletter, if you have registered for this,

• for quality assurance and

• for our statistics.

Legal basis for data processing

Your data is processed on the following legal bases:

• your consent pursuant to Art. 6 para. 1 lit. a) GDPR,

• for the performance of a contract with you pursuant to Art. 6 para. 1 lit. b) GDPR

• for the fulfillment of legal obligations pursuant to Art. 6 para. 1 lit. c) GDPR or

• for a legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR.

Legitimate interests

If we base the processing of your personal data on legitimate interests within the meaning of Art. Art. 6 para. 1 lit. f) GDPR, such interests are

• the improvement of our offer,

• protection against misuse and

• the management of our statistics.

Data sources

We receive the data from you (including via the devices you use). If we do not collect the personal data directly from you, we will also inform you of the source from which the personal data originates and, if applicable, whether it originates from publicly accessible sources.

Recipients or categories of recipients of the personal data

When processing your data, we work together with the following service providers who have access to your data:

• Auditing companies

• Providers of web analysis tools,

• Web hosting providers,

• Event organizers, in particular providers of event rooms

Data is transferred to third countries outside the European Union. This takes place on the basis of contractual regulations provided for by law, which are intended to ensure adequate protection of your data and which you can view on request.

In the event of a positive funding decision, this will also be published.

Storage duration

We only store your personal data for as long as it is necessary to fulfil the purpose for which it was processed or for as long as it is subject to a statutory retention period.

We store your data,

• if you have consented to the processing, at most until you withdraw your consent,

• if we need the data for the performance of a contract, at most for as long as the contractual relationship with you exists or statutory retention periods apply,

• if we use the data on the basis of a legitimate interest, at most for as long as your interest in erasure or anonymization does not prevail.

Your rights

You have the right - in some cases under certain conditions,

• to request information about the processing of your data free of charge and to receive a copy of your personal data. Among other things, you can request information about the purposes of the processing, the categories of personal data being processed, the recipients of the data (if a transfer takes place), the duration of the storage or the criteria for determining the duration;

• to rectify your data. If your personal data is incomplete, you have the right to complete the data, taking into account the purposes of the processing;

• to have your data erased or blocked. Reasons for the existence of a right to erasure/blocking may include the withdrawal of consent on which the processing is based, the data subject objects to the processing, the personal data has been processed unlawfully;

• to have the processing restricted;

• object to the processing of your data;

• to withdraw your consent to the processing of your data for the future and

• complain to the competent supervisory authority about unlawful data processing.

Requirement or obligation to provide data

Unless expressly stated at the time of collection, the provision of data is not required or mandatory. Such an obligation may arise from legal requirements or contractual regulations.

Further information on data protection

DocuSign and IDnow (e-signature/QES)
In order to sign legally compliant electronic contracts, we use the system of DocuSign Germany GmbH, Neue Rothofstraße 13-19, 60313 Frankfurt (hereinafter "DocuSign"). The legal basis for the use of Docusign is Art. 6 para. 1 lit. b and f GDPR, justified by our interest in providing you with uncomplicated document management. DocuSign cooperates with IDnow GmbH, Germany (hereinafter "IDnow"), for the verification of signatories. Although the above-mentioned documents must be transferred to DocuSign for the signing process, DocuSign itself does not utilise them and only stores them for later queries and legal reasons. DocuSign collects the following data during the signing process: Metadata of the signatory such as the browser used, the time, the IP address, the full name of the signatory, the e-mail address and mobile phone number stored by the signatory for verification purposes. IDnow GmbH also stores the signatory's e-mail address, mobile phone number, encrypted password and any other verification documents such as the official passport document for verification purposes. Further information can be found in the privacy policies of DocuSign and IDnow: www.docusign.de,www.idnow.io

E-mail newsletter

If you subscribe to our newsletter, we will use the data required for this or separately provided by you to send you our e-mail newsletter on a regular basis. Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described above or via the unsubscribe link provided for this purpose in the newsletter.

Data backup

We have taken extensive technical and organisational measures to protect your data against possible risks, such as unauthorised access, unauthorised disclosure, modification or dissemination, as well as against loss, destruction or misuse.
In order to protect your personal data from unauthorised access by third parties during transmission, we secure data transmissions using SSL encryption where necessary. This is a standardised encryption method for online services, especially for the web.

Logfiles

Every time our website is accessed, usage data is transmitted by the respective Internet browser and stored in log files, the so-called server log files. The stored data records contain the following data: Domain from which the user accesses the website, date and time of access IP address of the accessing computer Website(s) visited by the user within the scope of the offer, amount of data transferred, browser type and version, operating system used, name of the Internet service provider, message as to whether the access was successful. These log file data records are evaluated in anonymised form in order to improve the offer and make it more user-friendly, to find and correct errors and to control the utilisation of servers.

Data-saving usage analysis

We process various personal data in order to analyse the use of our website. This includes in particular your IP address and how our website is used, e.g. which button or link is clicked on a certain web subpage, from which subpage you have reached the current subpage and how long you remain on a certain web subpage. for this purpose, an identification number is created when the website is called up, which is linked to the IP address with which you visit our website for a period of 7 days. We will not store your IP address for longer than is technically necessary, so that the identification number can no longer be assigned to you as a person after a short time (anonymisation).

Each time a subpage or certain other actions (e.g. clicking on certain buttons) are called up on our website, a further number is generated with the help of the identification number, the time of the action and a value permanently assigned to the respective action. In this way, the action can be assigned to the identification number and its path on our website can be traced anonymously. This creates a user profile. In contrast to many other analysis tools, however, the user profile is very short-lived and only exists for as long as it is needed to enable us to track the use of our website by its visitors. Your visitor behaviour is not tracked beyond the boundaries of our website, used for targeted advertising or shared with third parties. We also strictly protect the integrity of your end device. We neither read data stored on your end device nor do we store data on your device (no cookies).the legal basis for processing is our legitimate interest in optimising our website for use by our users (Art. 6 para. 1 lit. f) GDPR).we use the data protection-friendly toolreportic of the provider never final GbR (Eifflerstraße 43, 22769 Hamburg). All personal data that we transmit to never final is processed exclusively on servers in Germany. You can find reportic's privacy policy and an opt-out option here.

Cookies

This website uses so-called cookies. A cookie is a text file with an identification number that is transmitted to the user's computer together with the other data actually requested when the website is used and stored there. The file is stored there for later access and serves to authenticate the user. As cookies are only simple files and not executable programmes, they pose no danger to the computer. Depending on the settings selected by the user, the Internet browser automatically accepts cookies. However, this setting can be changed and the storage of cookies deactivated or set in such a way that the user is notified as soon as a cookie is set. However, if the use of cookies is deactivated, some functions of the website may not be available or may only be available to a limited extent. You can prevent the setting of cookies by our website at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Cookies that are already active can be deleted at any time via an Internet browser or other software programmes. We work together with partners who help us to make our website more interesting for you. For this purpose, third-party cookies are also stored on your hard drive when you visit our website. If we work with the aforementioned partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case in the following paragraphs.

Google Maps

On our website we use Google Maps (API) from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Maps is a web service for displaying interactive (land) maps in order to visualise geographical information. By using this service, you are shown our location and it is easier for you to find us. Information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there as soon as you access the subpages in which the Google Maps map is integrated. This takes place regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyses them. Such distribution is carried out in particular in accordance with Art. 6 para. 1 lit.f GDPR on the basis of Google's legitimate interests in the display of personalised advertising, market research and/or the needs-based design of its website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. Detailed information on data protection in connection with the use of Google Maps can be found on the Google website ("Google Privacy Policy"): http://www.google.de/intl/de/policies/privacy/.

Google Fonts

We use Google Fonts, a service provided by Google Inc ("Google"). These web fonts are integrated by a server call, usually a Google server in the USA. This tells the server which of our web pages you have visited. The IP address of the browser of the end device of the visitor to this website is also stored by Google. You can find more information in Google's privacy policy, which you can access here: www.google.com/fonts#AboutPlace:about www.google.com/policies/privacy/.

Vimeo

Plugins from the Vimeo video portal of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA are integrated on our website. When you access a page on our website that contains such a plugin, your browser establishes a direct connection to the Vimeo servers. The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the page. Through this integration, Vimeo receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is transmitted directly from your browser to a Vimeo server in the USA and stored there. If you are logged in to Vimeo, Vimeo can directly associate your visit to our website with your Vimeo account. If you interact with the plugins (e.g. by clicking the start button of a video), this information is also transmitted directly to a Vimeo server and stored there. The purpose and scope of the data collection and the further processing and use of the data by Vimeo as well as your rights in this regard and setting options to protect your privacy can be found in Vimeo's data protection information: http://vimeo.com/privacy

Youtube

This website uses the YouTube embedding function to display and play videos from the provider YouTube, which belongs to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). The extended data protection mode is used here, which, according to the provider, only initiates the storage of user information when the video(s) is/are played. If the playback of embedded YouTube videos is started, the provider "YouTube" uses cookies to collect information about user behaviour. According to information from "YouTube", these are used, among other things, to record video statistics, improve user-friendliness and prevent abusive behaviour. If you are logged in to Google, your data will be assigned directly to your account when you click on a video. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyses them. Such distribution is carried out in particular in accordance with Art. 6 para. 1 lit. f GDPR on the basis of Google's legitimate interests in the display of personalised advertising, market research and/or the needs-based design of its website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. Irrespective of any reproduction of the embedded videos, a connection to the Google "DoubleClick" network is established each time this website is accessed, which may trigger further data processing operations without our influence. Google LLC, based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. Further information on data protection at "YouTube" can be found in the provider's privacy policy at https://www.google.de/intl/de/policies/privacy

Status of this privacy policy

June 2018

We reserve the right to amend this privacy policy at any time with effect for the future.