1. Notification concerning the Collection of Personal Data
1.1. Below we are informing you how we collect personal data when you use our website. ‘Personal data’ means any data relating to you personally, e.g. name, address, email addresses, user behaviour.
1.2. The ‘Controller’ within the meaning of Art. 4 (7) of the EU General Data Protection Regultion (GDPR) is
filmtank GmbH
Lippmannstrasse 53
D-22769 Hamburg
ph.: +49 (0) 40 431 861 0
fax.: +49 (0) 40 431 861 11
filmtank@filmtank.de
1.3. If we use commissioned service providers to perform individual functions of our offer, or wish to use your data for advertising purposes, we will inform you of these processes in detail below. In this context, we will also state the set criteria for the storage duration.

2. Your rights
2.1. You have the following rights concerning your personal data in relation to us:
– Right of access,
– Right to rectification or erasure,
– Right to restriction of processing,
– Right to object to the processing,
– Right to data portability.

To exercise your rights, please contact us using the above Controller contact details.

2.2. In addition, you have the right to lodge a complaint regarding processing of your personal data by us with a supervisory authority.

3. Object to or revoke processing of your data
3.1. If you have given your consent to processing of your data, you may revoke this at any time. Such revocation influences whether processing of your personal data is permissible after you have notified us of the revocation.
3.2. If processing of your personal data is based on a consideration of interests, you can object to the processing. This is the case particularly if the processing is not required to perform a contract with you, which we outline in the relevant subsequent description of the functions. When you exercise your objection, we ask you to provide reasons why you do not wish us to process your personal data in the way that we process data. If your objection is justified, we examine the circumstances and either cease or adjust data processing or provide you with our compelling legitimate grounds for continuing the processing.

4. Collection of personal data when you use our website
4.1. If you use our website for information purposes only, meaning you do not register or send us information in any other way, we only collect the personal data which your browser sends to our server. If you wish to view our website, we collect the following data, which we need for technical reasons in order to display the website to you and to ensure stability and security (the legal basis is Art. 6 (1) 1 lit. f GDPR):

– IP address
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the request (specific page)
– Access status/HTTP status code
– The website sending the request
– Websites which the user’s system calls via our website
– Transferred bytes of the requested URL
– Browser
– Operating system and its GUI
– Browser software language and version.

We save these data in a so-called log file for the duration of 9 weeks using an anonymised IP address. Then the data are deleted.

4.2. In addition to the data mentioned above, cookies are saved on your computer when you use our website. Cookies are small text files which are saved on your hard drive and allocated to the browser used by you, and which provide the site setting the cookie (in this case us) with specific information. Cookies cannot execute programs or transfer viruses to your computer. Their purpose is to make the website more user-friendly and more effective overall.

4.3. Use of cookies:
4.3.1. This website uses the following types of cookies whose scope and functionality are outlined below:
– Transient cookies (see 4.3.2.)
– Persistent cookies (see 4.3.3.).
4.3.2. Transient cookies are deleted automatically when you close your browser. In particular, these include session cookies. These save a so-called session ID which can be used to allocate different requests from your browser to the joint session. This makes it possible to recognise your computer if you return to our website. Session cookies also include cookies which we use to ensure that the website is displayed correctly on the used end device. The session cookies are deleted if you log out or close your browser.
4.3.3. Persistent cookies are automatically deleted after a specific duration, which can vary depending on the cookie. You can delete the cookies in your browser security settings at any time.
4.3.4. You can configure your browser settings as required and e.g. reject third-party cookies or all cookies. We would like to inform you that this might prevent you from enjoying all functions on this website.

5. Contact by email
5.1. When you contact us by email, we save the data that you send to us (your email address, if applicable the date of your query, your name, your phone number and your message) in order to respond to your query. We delete the data collected in this context once they no longer need to be saved, or we restrict the processing, if statutory storage durations apply.
5.2. We process these data in order to be able to deal with your query. Data processing to respond to your queries is in our legitimate interest (Art. 6 (1) 1 lit. f GDPR), because it enables satisfying communication.

6. Newsletter
6.1. You can give your consent and subscribe to our newsletter which keeps you up-to-date of current projects.

6.2. We use the so-called double-opt-in process for subscriptions to our newsletter. This means that, after you sign up, we send an email to your email address asking you to confirm that you wish to subscribe to the newsletter. If you do not confirm your subscription, you will not be included in our subscription list. We also save the IP addresses used and the times of the registration and confirmation. The purpose of this process is to provide evidence of your subscription and if applicable to be able to clarify a potential misuse of your personal data. The above purpose constitutes our legitimate interest. The legal basis is Art. 6 (1) 1 lit. f GDPR.

6.3. After you have confirmed, we will save your email address to send you the newsletter. The legal basis is Art. 6 (1) 1 lit. a GDPR.

6.4. You may revoke your consent for us to send the newsletter and analyse your user behaviour at any time by unsubscribing from the newsletter. You can state your revocation by clicking on the link provided in each newsletter email, by email to filmtank@filmtank.de or by sending a message to the contact details provided under Company Information. If you revoke your consent, we will delete your consent and email address as well as the associated user data.

6.5. We use the service MailChimp, a service by Rocket Science Group LLC, to manage and send out our newsletter. MailChimp is a provider from the USA; Rocket Science Group has signed up to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. If you access the registration form for our newsletter, and consent to its delivery, we transfer to data provided by you to MailChimp. In addition, the IP address and the time and place of your subscription will be saved. MailChimp is involved because we want to give you the opportunity to consent to receiving the newsletter and the above-mentioned contents, and in order to document your consent and, if applicable, trace how consent was given in case of queries. The above purpose constitutes our interest. The legal basis is Art. 6 (1) 1 lit. f GDPR. An Order Processing Agreement has been concluded obligating MailChimp to handle your data in accordance with the GDPR and to take suitable technical and organisational data protection measures. Please also refer to the MailChimp Data Privacy Notice: https://mailchimp.com/legal/privacy/

7. Use of Google Analytics
7.1. This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files which are saved on your computer and allow an analysis of the use of the website. The information generated by the cookie about your use of this website is normally transferred to a server of Google in the USA and saved there. If this website uses IP anonymisation, your IP address is truncated in advance by Google within the Member States of the European Union or in other signatories of the Agreement on the European Economic Area. Only in exceptions is the full IP address transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate the use of the website, to summarise reports about the website activity and to provide other services associated with the use of the website and the internet for the website operator.
7.2. The IP address transferred by the browser within the scope of Google Analytics is not combined with other data of Google.
7.3. You can prevent cookies being saved by making a corresponding setting in your browser software; we would like to point out, however, that in this case you may not be able to use all the functions of this website. Furthermore you can prevent Google collecting and processing the data related to your use of the website recorded by the cookie (incl. Your IP address), by downloading and installing the browser plugin available from the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

7.4. Opt-out cookies prevent your data from being collected when you visit this website in future. In order to be able to prevent Universal Analytics from being recorded across different devices, you must add the opt-out on all systems used.
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is set when prevents your data from being collect when you visit this website in future:

Disable Google Analytics

This opt-out cookie only works in this browser and only for this domain; if you delete your cookies in this browser, you must click on this link again.
7.5. This website uses Google Analytics with the extension “„_anonymizeIp()“. This means that IP addresses are abbreviated before being processed further, so that they cannot be attributed to a person. To the extent that the collected data can be attributed to a person, the personal data excluded and deleted immediately.
7.6. The data collected by Google Analytics are deleted after 14 months.
7.7. We use Google Analytics in order to analyse use of our website and improve this regularly. The statistics obtained help us to improve our offer and make it more interesting for you as the user. Google has signed up to the EU-US Privacy Shield for the exceptional cases in which personal data are sent to the USA, see https://www.privacyshield.gov/EU-US-Framework. The legal basis for using the Google Analytics is Art. 6 (1) 1 lit. f GDPR, with the above-mentioned purpose constituting our legitimate interest.
7.8. Third-party provider details: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Terms and Conditions of Use: http://www.google.com/analytics/terms/de.html
Data Privacy Summary: http://www.google.com/intl/de/analytics/learn/privacy.html
Data Privacy Notice http://www.google.de/intl/de/policies/privacy

8. Embedded videos (Vimeo)
8.1. This website uses plugins from the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
8.2. If you visit one of our pages containing a Vimeo plugin, a connection to the Vimeo servers is established. The Vimeo server is told which of our pages you have visited. In addition, the data mentioned under 4.1 of this Notice are transmitted. This also applies if you are not logged into Vimeo or do not have a Vimeo account. The information collected by Vimeo are transmitted to the Vimeo server in the USA.
8.3. We cannot influence the collected data or the data processing procedures, nor do we know the scope of the data collection, the purpose of the processing, or the storage durations. We also do not have information as to when Vimeo deletes the collected data.
8.4. If you are logged into your Vimeo account, you are enabling Vimeo to allocate your online behaviour directly to your personal profile. You can prevent this by logging out of your Vimeo account.
8.5. You have the right to object to the data processing by Vimeo. To exercise this right, you must contact Vimeo. We use Vimeo plugins in order to provide moving images of the artists represented by us for you to watch. This is a legitimate interest. The legal basis for using the plugins is Art. 6 (1) 1 lit. f GDPR.
8.6. Vimeo also processes your personal data in the USA and has signed up to the EU-US Privacy Shield, see https://www.privacyshield.gov/EU-US-Framework
8.7. For more information regarding the purpose and scope of the data collection and processing by Vimeo, please refer to the Vimeo Data Privacy Notice at: https://vimeo.com/privacy. This is also where you can obtain further information on your rights and on options of how to protect your privacy.

9. Embedded Videos (Youtube)
9.1. This website uses plugins from the platform “YouTube” provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ein.
Privacy Policy: https://www.google.com/policies/privacy/,
9.2. Opt-Out: https://adssettings.google.com/authenticated.

10. Google Maps
10.1. This website uses the offer of Google Maps. This allows interactive maps to be displayed to you directly on the website, to make it easier for you to use the map function. This constitutes a legitimate interest within the meaning of Art. 6 (1) 1 lit. f GDPR.
10.2. When you visit the website, Google receives the information that you have accessed the relevant subpage of our website. In addition, the data mentioned under 4.1 of this Notice are transmitted. This is done regardless of whether Google provides a user account, whether you are logged in to this user account, or whether these is no such user account. If you are logged into Google, your data are allocated directly to your account. If you do not want the data to be allocated to your Google profile, you must log out before activating the button. Google saves your data as user profiles and uses them for advertising and market research purposes and/or tailor their website to your needs. Such analyses are performed (including for users who are not logged in) particularly in order to provide tailored advertising and to inform other users of the social networks of your activities on our website. You have the right to object to the creation of such user profiles. To exercise this right, you must contact Google.
10.3. For more information regarding the purpose and scope of the data ccollection and processing by the plugin provider, please refer to the provider’s data privacy notice. This is also where you can obtain further information on your rights and on options of how to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has signed up to the EU-US Privacy Shield, see https://www.privacyshield.gov/EU-US-Framework

10. Social Media Links

Our website provides links to our profiles on the following social media: Facebook, Twitter, Vimeo. These links do not establish a connection from our website to the servers of Facebook, Twitter, Instagram, and Youtube. However, if you click on one of the links, you will be forwarded to the relevant provider. We cannot say which of your data may then be processed. Please find out directly from the provider; below are the links to the relevant Data Privacy Notices:

https://www.facebook.com/about/privacy
https://twitter.com/de/privacy
https://vimeo.com/privacy