We are notifying you of the conditions under which we store personal data for users of our website, and the services we provide online.
1. General Information
Data Protection Officer:
Data Protection Officer as specified in Article 37 (2) of the GDPR for the Bavaria Film Group, which includes Bavaria Studios GmbH you can contact him/her by writing to “zu Händen der Datenschutzbeauftragten” as follows:
Bavaria Film GmbH
Bavariafilmplatz 7
82031 Geiselgasteig
datenschutz@bavaria-film.de
If you have any questions or comments about data protection you can send an e-mail to datenschutz@bavaria-film.de.
Personal Data
Our Data Protection Regulations relate to your personal data (e.g. name, postal or email or IP address, telephone number). As described in the EU General Data Protection Regulation (GDPR) and the new German Data Protection Law (BDSG neu), “personal data” refers to all information relating to an identified or identifiable natural person.
A natural person is regarded as identifiable if that person can be identified, directly or indirectly, in particular by correlating a name, reference number, location data or online identification.
A natural person is also identifiable if that person can be identified by correlating one or more particular characteristics of that person, such as expressions of psychological, physiological, genetic, psychic, commercial, cultural or social identity.
We store and employ your personal data exclusively within the conditions of the EU General Data Protection Regulation (GDPR) and the new German Data Protection Law (BDSG neu). We take very seriously the protection of your personal data within our company; our staff are obliged to regard such matters as strictly confidential and to adhere to all relevant data protection regulations. Naturally we also impose this obligation on any third party organizations we commission for any purpose.
2. Your Rights
You have the following rights with respect to the personal data we store which relates to you:
- the right to Information
- the right to correction or deletion
- the rights to limiting data processing
- the right to refuse permission for data processing
- the right to data transferability.
If you give us your permission to utilize your data you also have the right to withdraw that permission at any time. In such cases, all data processing which we have undertaken up to the moment this permission is withdrawn remains legal. You are informed about the possibility of withdrawing your permission and the concrete steps which need to be taken to exercise that right at the place where we obtain your permission.
You also have the right to make any complaints to a data protection supervisory authority about the way we process your personal data.
You can find the supervisory authority responsible for the Bavaria Film Group here: https://www.rundfunkdatenschutz.de
3. Collecting Personal Data from Visitors to our Website
We only obtain personal data from users of our website who do not register with us and do not transfer information to us which is supplied by your browser to our server. In such cases we collect the following data, which is necessary for the purposes of the legitimate interests we pursue (in accordance with GDPR, Article 1, Section 1 (f)).
- IP address
- date and time of enquiry
- time difference to Greenwich Mean Time
- content of request (concrete page)
- access status/HTTP status Code
- data quantity transferred
- website where the request originated
- browser
- operating system and its Interface
- language version of browser Software
We only collect any other personal data if you inform us of this data (e.g. in the course of a newsletter registration or filling in a contact form) and even in this case only insofar as it is permitted to us according to the authorization you have provided or the relevant legal stipulations (further information on this can be found under the section Legal Basis of Data Processing). At the appropriate place within our website we will request explicit permission from you for this purpose.
You are not legally or contractually obliged to transfer your personal data. However, it is possible that certain functions of our website depend upon the transfer of personal data. In such cases, if you do not transfer this personal data, it may lead to the functions not working or only working to a limited extent.
4. Security
We employ appropriate technical and organizational security measures to protect the personal data you provide us with from manipulation, loss, destruction, misuse and access by unauthorized individuals. We constantly improve our security measures in line with the relevant technological development.
5. Legal Basis of Data Processing
If you have authorized us to process your personal data for specific purposes, the legal basis for such processing is outlined in GDPR, Article 1, Section 1 (a).
The legal basis for the processing of personal data for the purpose of initiating or concluding a contract with you is stipulated in GDPR, Article 1, Section 1 (b).
Should the processing of your personal data be required for the compliance with a legal obligation on our part (e.g. for storing data), the situation is covered by GDPR, Article 1, Section 1 (c).
In addition, we employ your personal data for the purpose of maintaining our legitimate interests and the legitimate interests of third parties in accordance with GDPR, Article 1, Section 1 (f). Such legitimate interests include for example the maintenance of the functionability of our IT systems and also the marketing of our own and third party products and services and the authorized provision of documentation from commercial contacts.
6. Deletion of Your Personal Data
After seven days we delete your IP address and the name of your Internet service provider, which we only store for that period for security reasons. Otherwise we delete your personal data as soon as the purpose for which we have collected this data and processed it no longer applies. After this point in time data will only be stored if it is required in accordance with the laws, regulations or other rules of the European Union, or of a member state of the European Union, which we are obliged to comply with.
7. Use of Cookies
When you use our website, cookies are stored on your computer. Cookies are small text files which are stored on the hard disk of the browser you use and which allow the transmission of certain information to the organization which places the cookies (in this case, us). Cookies cannot execute any programs or transfer viruses to your computer. They serve purely to make the Internet service we provide more user-friendly and efficient.
This website uses the following types of cookies, which are explained here in terms of their characteristics and function:
- Transient Cookies
Transient cookies are automatically deleted when you close the browser. These include in particular session cookies, which store a session ID: this is used to allocate the enquiries made by your browser during a session. In this way your computer can be recognized when you return to our website. Session cookies are deleted when you log out or close your browser. - Persistent Cookies
Persistent cookies are automatically deleted after a stipulated period, which can be different for each cookie. You can delete the cookies at any time from the security settings of your browser.
You can configure your browser settings in accordance with your personal wishes and, for example, refuse to accept third-party cookies or all cookies. This may mean that you are unable to use all functions of this website.
8. Web Analysis and Website Optimization
This website employs the component Matomo (www.matomo.org) to gather and store data for purposes of marketing and optimization. This data can be used to compile a user profile on the basis of a pseudonym. For this purpose cookies are utilised which facilitate statistical analysis of the way the website is used by its visitors.
Data processing in this context is pursued on the basis of the legal stipulations in Article 6 1 (f) (legitimate interest) of the GDPR. Our legitimate interest in the sense of the GDPR is the optimization of our online services and our web activities. Since the private sphere of our visitors is important to us, any data which may permit a connection to be made to the individual person – such as IP address, registration or device recognition – will be anonymized or pseudonymized at the earliest possible opportunity. Other usage or connection with other data from Google Analytics, or transfer of said data to third parties, will not take place.
You may at any time withhold consent for the data processing as described above insofar as it is related to your person.
Withholding concerned for the use of Google Analytics cookies