Names and contact details of the responsible:
all-in-production Gesellschaft für Film- und TV-Produktion mbH
Tel: +49 – (0)89 – 1890 819 00
Fax: +49 – (0)89 – 1890 819 22
represented by: Zeljko Karajica
Contact to data protection officer: firstname.lastname@example.org
This data protection declaration uses the terms of the Genral Data Protection Regulation (GDPR).
‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
‘controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
‘processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
‘recipient’ means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. 2However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
We collect and process the following personal data about you:
- Contact information
- Social media identifiers
- Online identifiers
We process your personal data for the following purposes:
- Communication (mailings)
- For information about our productions
- For execution of TV- and cinematic productions
- Quality assurance
- E-Mail-Newsletter, in case you have registered for this
Legal basis of data processing
We process your data on the following legal basis:
- Your consent, Art. 6 (1) a) GDPR
- For the performance of a contract with you, Art. 6 (1) b) GDPR
- Legitimate interests, Art. 6 (1) f) GDPR (see below)
When processing your data, we pursue the following legitimate interests:
- Improving our offer
- Protection against abuse
Sources of data
We receive the data from you (including the equipment you use). If we do not collect personal data directly from you, we will also inform you from which source the personal data originates and, if applicable, whether it originates from publicly accessible sources.
Recipients or categories of recipients of personal data
When processing your data, we work with the following service providers who have access to your data:
- Web hosting providers
- Tax accountant
- Commissioning network / buyer
- Collecting societies
Duration for which the personal data are stored:
We store your data
- if you have consented to its processing, at most until you revoke your consent;
- if we need the data to perform a contract, at most as long as the contractual relationship with you exists or legal retention periods are running;
- if we use the data on the basis of a legitimate interest, at most for as long as your interest in deletion or anonymisation does not become more important.
Data transmission to third countries
Data are transmitted to third countries outside the European Union. This is done on the basis of statutory contractual provisions that are intended to ensure adequate protection of your data, and which you can examine upon request.
You have the right – sometimes under certain conditions – to
- request information about the processing of your data,
- correct your data,
- have your data deleted or blocked,
- have processing of your data limited,
- object to the processing of your data,
- receive your data in a transferable format and transmit it to a third party,
- revoke your consent for the processing of your data for the future, and
- complain to the competent supervisory authority about inadmissible data processing. The competent supervisory authority is the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI).
Requirement or obligation to provide data:
Unless specifically stated at the time your data is elicited, you are not required or under any obligation to provide data.
Further information on data protection
The contact form on our website is an easy way to contact us quickly. To enable us to contact you, some fields are marked as mandatory. If you fill in the fields and choose “Send”, you agree that your data will be sent to us with the message by e-mail. The data is not stored on the web server.
If you register for our newsletter, we use the data required for this or separately communicated by you in order to send you our e-mail newsletter on a regular basis. You can unsubscribe from the newsletter at any time and either by sending a message to the contact option described above or via the unsubscribe link provided in the newsletter.
Automatic storage of access data
Each time you access pilot’s website, the access data for the transaction is automatically saved in a log file. This concerns general information such as the page from which the file was requested, the name of the retrieved file, the date and time of the request, the amount of data transferred, the protocol used and the own descriptions sent by the Internet browser and possibly the operating system.
This general information will be anonymised, so it will not be stored together with your personal data that may be available at pilot and will not be merged with it in any other way. They are only evaluated for statistical purposes and used to improve the content and functionality of the website. There shall be no transfer of this data to third parties for other non-commercial or commercial purposes. The access data in the log file are stored for a maximum of 4 weeks.
Our website includes functions of the “Xing” service, which is operated by XING AG, Gänsemarkt 43, 20354 Hamburg, Germany. When you activate and use the plugin, your browser establishes a direct connection to Xing’s servers. The content of the plugin is transmitted by Xing directly to your browser and integrated into the website. By activating the plugins, Xing receives the information that you have accessed the corresponding page of our website. If you are logged in to Xing, Xing can assign the visit to your Xing account. The purpose and scope of the data collection and the further processing and use of the data by Xing as well as your relevant rights and setting options can be found here: https://privacy.xing.com/de/datenschutzerklaerung.
Our pages include functions of the Instagram service. These functions are provided by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account you can link the contents of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We would like to point out that, as the provider of the pages, we are not aware of the content of the transmitted data or its use by Instagram.
We use YouTube for the integration of videos. YouTube is operated by YouTube LLC, headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Inc. based at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you access the plugged pages of our website – for example our media library – a connection to the YouTube servers is established and the plugin is displayed. This transmits to the YouTube server which of our Internet pages you have visited. If you are logged in as a YouTube member, YouTube assigns this information to your personal user account. When using the plugin, e.g. clicking the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your YouTube account and other user accounts of YouTube LLC and Google Inc. and deleting the corresponding cookies of the companies before using our website. Further information on data processing and privacy protection by YouTube (Google) can be found at www.google.de/intl/de/policies/privacy/.
We use Hotjar, an analysis software of Hotjar Ltd. on our website (https://www.hotjar.com, Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Juli-an’s STJ 1000, Malta, Europe). With Hotjar it is possible to measure and evaluate the usage behaviour (clicks, mouse movements, scroll heights, etc.) on our website. The information generated by the “tracking code” and “cookie” about your visit to our website is transmitted to and stored on Hotjar servers in Ireland. This section describes in detail how Hotjar collects information from your browser and device when you visit our website. For the purposes of the services provided by Hotjar for this website, Hotjar acts as a contract data processor. Hotjar processes all personal data exclusively in accordance with the instructions Hotjar receives from us as the website provider. This includes how Hotjar collects data from the end user’s browser and terminal device when an end user visits this website. In addition, we have concluded a corresponding order data processing agreement with Hotjar, which ensures the lawful and sensitive handling of personal data.
To protect your orders via internet form we use the service reCAPTCHA of the company Google Inc. (Google). The query serves to differentiate whether the input is made by a person or abusively by automated, machine processing. The query includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google. For this purpose your input will be transmitted to Google and used there. By using reCaptcha you agree that the recognition you have made will be incorporated into the digitisation of old works. However, if IP anonymisation is activated on this website, Google will reduce your IP address in member states of the European Union or in other signatory states to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser within the scope of reCaptcha is not merged with other Google data. The deviating data protection regulations of the company Google apply to this data. For more information about Google’s data protection policies, please visit: https://www.google.com/intl/de/policies/privacy/.
Last updated: June 04th 2018