Privacy

Below you will find our privacy policy for our website and the information obligations under the EU Basic Data Protection Regulation (DSGVO).

Privacy Policy

Constantin Entertainment attributes considerable importance to the protection of your private sphere as well as your personal data and the required data security, and therefore only collects, processes and uses your personal data in compliance with the principles described below as well as the requirements of the General Data Protection Regulation (“GDPR”) and the Federal Data Protection Act applicable to Constantin Entertainment GmbH.

Contents

I. Name and Address of the Controller
II. Name and Address of the Data Protection Officer
III. Your Personal Data
IV. . General Information on Data Processing
V. Provision of the Website and Creation of Log Files
VI. Use of cookies
VII. Contact Form and Email Contact
VIII.  Video integration using Vimeo
IX. Use of Google Maps
X. Web Analysis Services
XI. Obtaining Personal Data using Social Media Platforms
XII. Rights of Data Subjects
     1. Right of access
     2. Right to rectification
     3. Right to Restriction of Processing
     4. Right to erasure
     5. Right of Information
     6. Right to data portability
     7. Right to object
     8. Right to Withdraw any Consent Given Under Privacy Law
     9. Right to lodge a complaint with a supervisory authority
XIII. Use of Contact Forms
XIV. Links to other websites
XV. Security
XVI. Availability and Amendments

I. Name and Address of the Controller

The controller within the meaning of the General Data Protection Regulation (“GDPR”) and other national data protection laws of the EU member states as well as further statutory data protection pro-visions for the operation of the website www.constantin-entertainment.de (hereinafter referred to as “website”) is:

Constantin Entertainment GmbH
Carl-Zeiss-Ring 3
85737 Ismaning

Telephone: (089) 4444 88 440
Fax: (089) 4444 88 442
Email: @constantin-entertainment.deinfo
Website: www.constantin-entertainment.de

Represented by: Otto Steiner and Onno Müller
(hereinafter referred to as “Constantin Entertainment”)

If you would like to object to the collection, processing or use of your data by us as set out in this privacy policy, either in general or with regard to individual measures, please send your objection by email, fax or letter to the aforementioned contact details or to our Data Protection Officer. Through the aforementioned contact details, you can also receive free information about your per-sonal data at any time.

II. Name and Address of the Data Protection Officer

The Data Protection Officer of the Controller is:
Dirk Seeburg, BAY GmbH Auditing and Accounting Company - Solicitors
Technopark II
Werner-von-Siemens-Ring 12
85630 Grasbrunn

Telephone: (89) 90 420 49 62
Fax: (89) 46 14 90 78
Email: datenschutz@constantin-entertainment.de

(hereinafter referred to as“DSB“)

Your Personal Data

Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”). When you visit our website, it is not necessary for you to provide us with personal data. Only personal data is collected, such as your name, telephone number, postal and e-mail address, date of birth and telephone number, if you voluntarily provide us with this information of have consented to its collection. For the technically required data we refer to the execution under “V. Provision of the website and creation of log files” and “VI. Use of cookies”.

IV. General Information on Data Processing

1. Scope of Personal Data Processing

We collect and use the personal data (hereinafter also referred to as “data”) of our users in principle only from affected persons, i.e. from visitors to the website, to the extent where this is required to provide a functional website and our content and services. The personal data of our users is as a rule only processed with the prior consent of the user. An exception to this applies in cases where the processing of data is permitted by legal regulations, necessary for the performance of a contract or technically necessary. 2. Legal Basis for Personal Data Processing

Where we obtain consent from the data subject for personal data processing operations, Art. 6 (1) GDPR is the legal basis for personal data processing.

If processing personal data is necessary for the performance of a contract to which the data sub-ject is party, Art. 6 (1)(b) GDPR serves as a legal basis. This also applies to processing methods required to take steps prior to entering into a contract.

Where personal data processing is necessary for compliance with a legal obligation to which our company is subject, the legal basis is Art. 6(1)(c) GDPR.

If processing is necessary to protect the vital interests of the data subject or another natural per-son, Art. 6 (1) (d) GDPR serves as legal basis.

If processing is necessary for the purposes of any legitimate interest pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, the legal basis for processing is Art. 6 (1)(f) GDPR.

3. Data Erasure and Storage Period

The data subject’s personal data will be erased or blocked once the purpose of such storage ceas-es to be relevant. In addition, the data can be stored if this has been provided for by European or national legislators in union law regulations, laws or other legislation which is governed by the con-troller. Blocking or erasure of the data can also be done if a storage period specified by the named standards expires, the necessity for storing the data further must only be for concluding a contract or fulfilling a contract.

V. Provision of the Website and Creation of Log Files

1. Description and Scope of Data Processing

When using the website for informational purposes only, we only collect the personal data that your browser sends to our server or provider and that is technically necessary for the purpose of displaying our website and ensuring its stability and security.
We have commissioned the company Xion Webdesign, Schleißheimer Str. 12, 85221 Dachau, Germany (hereinafter "Xion") for the hosting and technical provision of our website. We have concluded the agreement with Xion for order processing in accordance with Art. 28 GDPR which is required by data protection law. According to this agreement, Xion undertakes to ensure the necessary protection of your data and to process them according to the applicable data protection regulations exclusively on our behalf and according to our instructions
Any time that our internet pages are called-up, the server automatically collects data and information from the computer system of the accessing computer.
The following data will be collected:

(1) Information on the browser type and version used
(2) The operating system of the user
(3) date and time of access
The data will also be stored in the log files of our system. This does not affect the IP addresses of the user or other data which allow for attribution of the data to a user. This data will not be stored together with other personal data of the user.

2. Legal Basis for Data Processing

The legal basis for temporary data retention is Art. 6 (1) (f) GDPR.

3. Purpose of Data Processing

It is necessary for the system to temporarily store the IP address to allow the website to be deliv-ered to the computer of the user. To this end, the IP address of the user must be stored for the duration of the session.
Such purposes are also the basis for our legitimate interest in data processing according to Art. 6 (1) (f) GDPR.

4. Duration of Storage

The data will be erased as soon as it is no longer required to achieve the purpose of its collection. In the case of collection of data for the provision of the website, this is the case when the relevant session ends.

5. Option of Objection and Elimination

The collection of data is necessary for the provision of the website, and storage of the data in log files is necessary for the operation of the website. Consequently, the user has no option to object.

VI. Use of cookies

1. Description and Scope of Data Processing

Our website uses cookies. Cookies are text files which are stored within or by the internet browser in the user’s computer system. Cookies cannot run programmes or transmit viruses to your computer. If a user accesses a website, a cookie can be stored in the user’s operating system device. This cookie contains a distinctive sequence of characters that allows the unique identification of the browser the next time the website is accessed. Some of the cookies that we use will be deleted again following the end of the browser session, i.e. after you close the browser (commonly known as “session cookies”). Other cookies stay on your end device and allow us to recognise your browser when you next visit our website.
If your browser setting allow us to use cookies, the following cookies may be used on our websites:

Technically necessary cookies:

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. In the following technically necessary cookies, on the one hand, the closing of the cookie banner or your consent to the setting of analysis cookies is stored and, on the other hand, the identification of the user during page visits is guaranteed:

www.constantinentertainmentdetracking: Saves the interaction with our cookie banner or the consent to the setting of analysis cookies from Google Analytics. Validity: 1 year.

PHPSESSID: The so-called Session ID is a randomly selected character string that uniquely identifies the protocol data on the server. The ID is stored in the session cookie PHPSESSID during the website visit. Validity: Session.These cookies are transmitted to us with every page view, do not contain any personal data and are therefore not used for personal identification.

Analysis cookies:

We use cookies on our website, which enable an analysis of the surfing behaviour of our users. In this way, entered search terms, the frequency of page visits or the use of website functions can be analysed. The user data collected in this way is made anonymous by a technical precautionary measure. It is therefore no longer possible to assign the data to the calling user of the website. These anonymised data are not stored together with personal data of the users.
The analysis cookies are used for the purpose of improving the quality of our website and its contents. The analysis cookies tell us how the website is used and enable us to constantly optimise our offer to the respective user. For a description of the cookies, their function, purpose and the possibilities of objection, we also refer to the explanations under "X. Website analysis services".

In addition, due to the use of various plug-ins on our website, third parties may set so-called third-party cookies on your end device. If possible, we use plug-ins with the "advanced privacy mode" or "do-not-track" setting (see "VIII. Integrating videos using Vimeo") to prevent the third-party providers from setting the cookies. However, we would like to point out that when using Google Maps (see "IX. Use of Google Maps"), these settings are currently not possible. We therefore implement the integration of the Google Maps content with a 2-click solution, i.e. the third party provider can only set cookies or receive information about your visit to our website if you have actively clicked on the respective plugin and refer to the explanations under "IX. Use of Google Maps".

2. Legal Basis for Data Processing

The legal basis for personal data processing using technically required cookies is Art. 6 (1) (f) GDPR.

The legal basis for the processing of personal data using cookies for analysis purposes where the user has given its consent to this via our cookie notice is Art. 6(1)(a) GDPR.

3. Purpose of Data Processing

The purpose of the use of technically required cookies is to make it easier for users to use our websites. Certain functions of our website cannot be used without the use of cookies. To achieve this, it must also be possible to recognise the browser after changing to a different web page.

The user data which is collected by the technically necessary cookies will not be used for the creation of user profiles.
Analysis cookies are used for the purpose of improving the quality of our website and its content on the basis of your consent. Via the analysis cookies, we find out how the website is used, allowing us to continually optimise our content. We refer to X. Website Analysis Services.

4. Duration of Storage, Option of Objection and Elimination

Cookies are stored on the computer of the user, and transferred from it to our site under consideration of the validity period (see above). Therefore, you as the user also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transfer of cookies. Cookies which have already been stored can be deleted at any time. This can also occur automatically. If cookies are deactivated for our website, you may not have full access to the website functions.
If you would like to reactivate our cookies again, please click here.
If you want to deactivate our cookies please click here.

VII. Contact Form and Email Contact

1. Description and Scope of Data Processing

There is a contact form on our website which can be used to contact us electronically. If a user uses this option, then the data entered into the input screen (title, first name*, surname*, street, postcode, city, telephone number, mobile number, e-mail address*, correspondence (or subject and your message) *) will be transferred to us and stored. Mandatory information (*) and voluntary information are indicated in the contact forms.

Alternatively, we can be contacted using the email address provided. In this case, the personal data of the user transferred with the email will be stored.

In this context, data will not be passed on to third parties. The data will exclusively be used for pro-cessing the conversation.

2. Legal Basis for Data Processing

The legal basis for the processing of data in the course of sending an email or via the contact form is Art. 6 (1) (f) GDPR. If the email contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6 (1) (b) GDPR.

3. Purpose of Data Processing

The processing of personal data by email or from the input screen serves the sole purpose of pro-cessing the initiated contact. In this case, the necessary legitimate interest is also in the processing of the data.

4. Duration of Storage

The data will be erased as soon as it is no longer required to achieve the purpose of its collection. For personal data that was sent by email, this is the case when the relevant conversation with the user has come to an end. The conversation ends when it can be seen from the circumstances that the relevant case has been conclusively clarified.

5. Option of Objection and Elimination

The user can withdraw their consent to personal data processing at any time. If the user contacts us by email, then they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
All personal data stored in the course of contact will be erased in this case.

VIII. Integration of videos using Vimeo

1. Description and Scope of Data Processing

Our website uses plug-ins from the provider Vimeo LLC, 555 West 18th Street, New York 10011 (hereinafter referred to as “Vimeo” for the integration of videos. The content of the plug-in is transmitted directly from the Vimeo to your browser via a connection to the Vimeo servers and integrated into the website by the latter. This will transmit your visit to our website.

If you are logged in to Vimeo with your user account, Vimeo can assign the information obtained to your respective account by using the plug-in. In this case the information will be transferred to your personal user account at Vimeo and stored there. Since Vimeo collects data in particular via cookies, we also recom-mend that you delete all cookies via the security settings of your browser.
We have integrated our videos with the "do-no-track" setting as standard. This means that Vimeo cannot set third-party cookies via the plug-in on your device.

We have no control over the data and data processing operations collected by Vimeo, nor are we aware of the full scope of the data collection, the purposes of the processing, the storage periods and the storage location. There is also no information available on the deletion of the collected data by the providers. Further information on the purpose and scope of data pro-cessing, as well as your rights in this regard and setting options to protect your privacy, can be found in the Terms of Use and Data Protection of Vimeoat :https://vimeo.com/privacy.

2. Legal Basis and Purpose of Data Processing

The processing purposes mentioned are in our legitimate interest (Art. 6 (1) (f) GDPR). It is important for us to make our website attractive and to increase interaction with our visitors with the help of plug-ins.

3. Option of Objection and Elimination

According to European and German law, you have the right to object to the creation of user profiles or their assignment, whereby you must contact the plug-in provider or Vimeo directly in order to exercise this right.

In addition, we point out that you can prevent this assignment by logging out of your Vimeo account before visiting the website.

IX. Use of Google Maps

1. Description and Scope of Data Processing

Our website uses the functions of the Google Maps API to present geographical information to our customers. The provider is Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

By using the functions of Google Maps or by visiting the website with the plug-in used, data is usually collected, processed and stored. By calling up the Google Maps component on our website, the operator saves cookies via your browser on your computer or mobile device. In addition, Google can save and evaluate your IP address and our website (as a starting point for the Google Maps query). For further information on the processing of data by Google, please refer to Google's privacy policy.

In order to avoid an unauthorized and uncontrolled data flow from the time of your visit to our website, we implement the integration of the plugin with a so-called 2-click solution, i.e. Google Maps may only set cookies or receive information about your visit to our website if you have actively clicked on the plugin to display the map. By visiting our website without confirmation from your side using the 2-click solution, no data is transmitted to Google.

2. Legal Basis and Purpose of Data Processing

The legal basis for the processing of personal data is based on your consent in this regard through the voluntary use or click on the provided plug-in content Art. 6 para. 1 lit. a GDPR.
Furthermore, the processing purposes mentioned before are in our legitimate interest (Art. 6 para. 1 lit. f GDPR). It is important for the responsible body to make the website attractive and to increase the interaction with visitors and customers with the help of the plugin. By using Google Maps, the functionality of the website is improved.

3. Option of Objection and Elimination

However, you may at any time with future effect object to the collection, storage and use of information by Google by installing the deactivation add-on provided by Google or by adjusting your browser settings to prevent the storage of cookies.

Further information and the valid data security regulations of the operator can be found at https://www.google.com/intl/de_de/help/terms_maps.html.

X. Web Analysis Services

1. Description and Scope of Data Processing

Our website uses the functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (hereinafter referred to as “Google”). Google Analytics uses so-called “cookies”. These are text files that are stored on your end device (tablet, smartphone, etc.), and allow for an analysis of how you use our website. The following cookies are set:

(1) _ga: This is a cookie which is stored by Google Analytics for 2 years in your browser memory to distinguish our users, validity: 24 months,
(2) _gat: This is a cookie which is used to distinguish the visiting user, validity: 1 minute,
(3) _gid: This is a cookie which is set to count the number of users. The cookie is set automatically by Google Analytics and is stored in your browser memory for one day, validity: 1 day.
The information generated by the cookie about your use of this website (including your IP address) is usually transmitted to a Google server in the USA and stored there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Due to the activation of IP anonymisation on our website, your IP address will be shortened by Google within member states of the European Union or in other signatory states of the Agreement on the European Economic Area before transmission in order to exclude any direct personal reference. Outside the European Union or the European Economic Area, Google has not set up IP anonymisation as a system.

You can object to the collection, storage and use of information by Google at any time with effect for the future by installing the deactivation add-on provided by Google.

We have concluded the Data Processing Addendum in accordance with Article 28 GDPR, in which Google undertakes to protect the data of our users and to process them exclusively on our behalf in accordance with the applicable data protection regulations.
Please refer to the privacy policy of Google for further information about the handling of user data at Google Analytics: https://support.google.com/

2. Purpose and Legal Basis for Data Processing

The legal basis for the processing of personal data using cookies for statistical purposes is based on your consent in this regard via the cookie settings or our cookie banner Art. 6 para. 1 lit. a GDPR.
The information obtained through the use of Google Analytics is used in particular to better understand the use of our website and to improve its content, functionality and findability. We as website operators have an interest in analysing your user behaviour in order to improve our website. The aforementioned processing purposes are therefore also in our legitimate interest (Art. 6 Para. 1 lit. f GDPR), should it be possible to forward anonymous information to Google on the basis of your consent.

3. Duration of storage

Sessions will end after 30 minutes without activity and campaigns will end after six months. The maximum time limit for campaigns is two years.

4. Option of Objection and Elimination

You can object to the collection, storage and use of information by Google at any time with effect for the future by using the following methods:

You can object by installing the deactivation add-on provided by Google. You can find further information on this at https://tools.google.com/dlpage/gaoptout?hl=de.
Alternatively, you can prevent the storage of the cookies set by Google by adjusting your browser software accordingly.
c) You can prevent the collection of your data by Google Analytics by clicking on the following link By clicking you deactivate your cookie settings or Google Analytics: LINK.

However, we would like to point out that in case of deactivation or opt-out you may not be able to use all functions of the website to their full extent

XI. Obtaining ersonal data through the use of social media platforms

1. Description and scope of data processing

We collect and process data provided to us by Facebook, Facebook Inc., 1601 S. California Avenue, Palo Alto, CA 94304, USA and Instagram, Instagram LLC, 1601 Willow Rd., Menlo Park CA 94025, USA on the basis of our profiles and pages created there for statistical evaluations and for the advertising of our productions.

If you are not registered on Facebook or Instagram, Facebook and Instagram will not provide us with any information about your visit or use of our profiles and pages. However, we would like to point out that it is possible for Facebook and Instagram to make a note about how our profiles and pages are accessed, for example by reading log files (e.g. IP address) or setting cookies. We have no influence on the data collected and data processing operations, nor are we aware of the scope of data collection, the purposes of processing, the storage periods. A forwarding of the data to anonymous statistics is therefore not excluded.

If you follow/subscribe to our pages and profiles or like Facebook or Instagram adds your profile to the list of all fans and subscribers and makes them available to us. However, only the public information of your profile will be viewed and forwarded to us. You decide which of these are specific in your Facebook or Instagram settings. In your Facebook settings (https://www.facebook.com/settings?tab=privacy) you also have the option to actively hide your like or no longer follow the fan page. Then your profile will no longer appear in the list of fans of our pages.

Facebook and Instagram provide us with "Insights" statistics about our fans, subscribers and reached persons. This is anonymous demographic data such as age, gender, place of residence, country or native language, without any reference to identifiable individuals. We are also provided with other statistics about the source of the call, the type of device used to access the site, or the page views. We use these statistics to select relevant information for our Facebook and Instagram posts, or to target advertisements on Facebook to appropriate groups. In your Facebook settings, you have the option to object to this targeted advertising at any time. We use only the information provided by Facebook and Instagram that is necessary for the purposes set forth herein. We do not retrieve and process the other data provided.

We cannot link the statistical data with the profile data of our fans and subscribers.
For more information on data processing, please see the respective Facebook and Instagram privacy notices.

2. Purpose and legal basis for data processing
The legal basis for the processing of data by us is Art. 6 Para. 1 lit. f GDPR. Facebook has provided appropriate regulations for the joint responsibility in the sense of Art. 26 GDPR: https://www.facebook.com/

3. Possibility of opposition and removal
We use the data made available on Facebook and Instagram under "Insight" to select relevant information for our posts on Facebook and Instagram or to order targeted advertising on Facebook for corresponding groups. The processing purposes mentioned are in our legitimate interest (Art. 6 para. 1 lit. f GDPR).

XII. Rights of Data Subjects

If your personal data is processed, you are a data subject in the sense of the GDPR and you have the following rights towards the controller:

1. Right of access

You can request a confirmation from the controller whether we process personal data relating to you.

If such processing takes place, you can request the controller to provide you with the following information:

(1) the purposes for which personal data is processed;
(2) the categories of personal data processed;
(3) the recipients or categories of recipients to which the personal data relating to you have been or are to be disclosed;
(4) the envisaged period for which personal data relating to you will be stored, or, if specific information on this is not possible, the criteria used to determine that period;
(5) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such pro-cessing;
(6) the right to lodge a complaint with a supervisory authority;
You have a right to be provided with information as to whether the personal data relating to you was transmitted to a third country or to an international organisation. In this context, you can request information on the appropriate safeguards in acc. with Art. 46 GDPR in connection with the transfer.
To exercise your free right to information, please contact us directly via the contact details that are provided in our legal notice, or make direct contact with our Data Protection Officer (refer to sec-tions I and II).

2. Right to rectification

You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data related to you is incorrect or incomplete. The controller must perform rectification immediately.

3. Right to Restriction of Processing

Under the following circumstances, you can request us to restrict processing of the personal data relating to you:

(1) if you contest the accuracy of the personal data relating to you for a period that enables the controller to verify accuracy of the personal data;
(2) if processing is unlawful, but you refuse erasure of the personal data, requesting instead that use of the personal data be restricted;
(3) if the controller no longer needs the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or
(4) if you have objected to processing pursuant to Art. 21(1) GDPR, pending the verification whether the legitimate grounds of the controller override your legitimate grounds.

Where processing of the personal data relating to you has been restricted, such data may – except for storing thereof – only be processed with your consent or for the establishment, exercise or de-fence of legal claims or for the protection of the rights of another natural or legal person or for rea-sons of important public interest of the Union or of a Member State.

Where processing has been restricted pursuant to the aforementioned conditions, you will be noti-fied by the controller before the restriction is lifted.

4. Right to erasure

a) Obligation to Erase

You may demand the controller to erase your personal data without undue delay and the controller is obliged to erase such data without undue delay where one of the following grounds applies:
(1) Your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
(2) You withdraw your consent on which processing is based according to Art. 6(1)(a) and there is no other legal ground for processing.
(3) You object to processing according to Art. 21(1) and there are no overriding legitimate grounds for processing, or you object to processing according to Art. 21(2) GDPR.
(4) Your personal data have been unlawfully processed.
(5) Your personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
(6) Your personal data have been collected in relation to the offer of information society ser-vices referred to in Art. 8(1) GDPR.

b) Information to Third Parties

Where the controller has made your personal data public and is obliged acc. to Art. 17 (1) GDPR to erase it, the controller, taking account of available technology and the cost of implementation, takes reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, such personal data.

c) Exemptions

The right to erasure does not apply to the extent that processing is necessary

(1) for exercising the right of freedom of expression and information;
(2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the pub-lic interest or in the exercise of official authority vested in the controller;
(3) for the establishment, exercise or defence of legal claims.

5. Right of Information

If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the con-troller, the latter is obliged to notify all recipients, to whom your personal data have been disclosed, of such rectification or erasure of the data or restriction of processing, unless this turns out to be impossible or produces unreasonable burdens.
You have the right vis-à-vis the controller to be informed of such recipients.

6. Right to data portability

You have the right to receive any personal data related to you that has been provided by you to the controller in a structured, commonly used and machine-readable format. Moreover, you have the right to transmit those data to another controller without hindrance from the controller to which the personal data has been provided, where

(1) the processing is based on consent acc. to Art. 6 (1) (a) GDPR and
(2) the processing is carried out by automated means.
In exercising such right, you further have the right to have the personal data transmitted directly from one controller to another, where technically feasible. This must not adversely affect the rights and freedoms of others.

The right to data portability does not apply to any personal data processing that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to object

You have the right to object, on grounds relating to your particular situation, at any time to the pro-cessing of personal data concerning you that is based on Art. 6(1)(e) or (f) GDPR.

The controller no longer processes your personal data, unless the controller demonstrates compel-ling legitimate grounds for processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

8. Right to Withdraw any Consent Given Under Privacy Law

You have the right to withdraw at any time your consent given under privacy law. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

9. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a com-plaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of your per-sonal data infringes the GDPR.

The supervisory authority with which the complaint has been lodged informs the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy according to Art. 78 GDPR.

The data protection authority responsible for our company is the Bavarian State Office for Data Protection, address, Promenade 27 (Schloss), 91522 Ansbach, Germany, postal address: Postfach 606, 91511 Ansbach, Germany, further information is available in the internet at www.lda.bayern.de.

XIII. Use of Contact Forms

You can contact us at any time on the contact form provided. Any personal data that you provide will only be collected, processed and used for the processing of your enquiry.

XIV. Links to other websites

This declaration regarding data protection exclusively applies to the website of Constantin Entertainment GmbH. The web pages of this website can contain links to third party websites or to our social media profiles. Our privacy policy does not extend to these third-party websites. If you leave our website, we recommend that you carefully read the data protection provisions of each website that collects personal data.

XV. Security

We apply the necessary security measures to protect your personal data against accidental or de-liberate manipulation, erasure, modification or loss, as well as unauthorised forwarding to other persons. We encrypt your data when it is transferred to our website and make use of SSL connec-tions (Secure Socket Layer). We apply the appropriate technical and organisational measures to protect our website and other systems and personal data against, in particular, loss, destruction, unauthorised access, modification and forwarding to third parties.

XVI. Availability and Amendments

You can view this privacy policy at [www.homepage.de/Datenschutz]. You can also save or print out this privacy policy by using the appropriate functions of your browser.
We reserve the right to amend this privacy policy from time to time and to adapt it according to the statutory requirements, and therefore request you to refer to our current privacy policy every time you visit our website.

Version: March, 2020

Information obligations under the EU Basic Data Protection Regulation (DSGVO)

General information

Constantin Entertainment GmbH attaches great importance to the protection of your privacy and your personal data. We treat your personal data confidentially and according to the EU Data Protection Basic Regulation (GDPR ) and the applicable national data protection regulations (in Germany mainly BDSG) as well as this information sheet. Personal data are data with which you can be identified or are identifiable. This information sheet explains what data we collect and what we use it for. It also explains how this is done and for what purpose.

Person responsible (responsible body)

Constantin Entertainment GmbH
Carl-Zeiss Ring 3
85737 Ismaning

Phone: (089) 4444 88 - 440
fax: (089) 4444 88 - 442
e-mail: info@constantin-entertainment.de
Website: www. constantin-entertainment.de

Represented by managing directors: Otto Steiner and Onno Müller

Munich Local Court HRB 128783

Data protection officer

BAY GmbH Wirtschaftsprüfungsgesellschaft Law firm, Mr. Dirk Seeburg, lawyer

Technopark II | Werner-von-Siemens-Ring 12
85630 Grasbrunn

E-Mail:datenschutz@constantin-entertainment.de

Legal basis for the processing of personal data

We only process personal data if there is a legal basis for this, i.e. if

the consent of the data subject has been obtained (Art. 6 para. 1 letter a GDPR)
the performance of a contract (Art. 6 para. 1 lit. b GDPR) takes place
this is necessary to fulfil a legal obligation (Art. 6 para. 1 lit. c GDPR)
legitimate interests (Art. 6 para. 1 lit. f GDPR) exists.

Processing of data, categories of data and groups of persons concerned

All personal data is collected and processed in accordance with the statutory data protection regulations.

We only process the data you provide us within the scope of the contractual relationship. These are, for example, surname and first name, address, picture, voice and film recordings.

The data belong to the following data categories: Identification data, communication data, address data, image and video data.

Use of your data (purpose)

Your data will be processed,

to enable the film production to be carried out
for mutual fulfilment of the contract
for correspondence with you
for information purposes.

The data collected by us is limited to the extent necessary for the purpose. We do not pass on your data to third parties, unless it is necessary to fulfil enquiries and orders as well as contracts.

Rights as a data subject

As a data subject, you have the right at all times to

to free information about your stored personal data (Art. 15 GDPR), its origin and recipients and the purpose of processing your data,
on correction (Art. 1 6 GDPR),
to restrictions of processing (Art.18 GDPR),
for the deletion of this data, taking into account any existing statutory retention obligations (Art. 17 GDPR),
on information (Art. 19 GDPR),
upon complaint to the competent supervisory authority (Art. 77 GDPR),
on data transferability (Art. 20 GDPR).

Revocation of consent

You can revoke your consent to the processing of your personal data at any time with effect for the future. Revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation. If you wish to exercise your right of revocation, simply send an e-mail to the responsible office (see above).

Storage period and deletion of personal data

The personal data collected by us will be deleted or blocked as soon as the purpose for which it was stored no longer applies. Further storage after the purpose has ceased to apply may result from statutory retention periods. Once these have expired, the data will be deleted. The data that must be stored due to the assignment of rights is not covered by this.

Provision of their personal data

Within the framework of our contractual relationship, you must provide us with those personal data which are necessary for the execution of our contractual relationship and the fulfilment of the associated contractual obligations or which we are legally or contractually obliged to collect.

Technical-organisational measures

We take technical-organisational measures to be able to process your data with a high degree of security. We attach particular importance to the following points:

Confidentiality (Art. 32 para. 1 lit. b GDPR), in particular access, entry, access and separation control.
integrity (Art. 32 para. 1 lit. b GDPR), in particular passing on, input, processing, documentation and order control
availability and resilience (Art. 32 para. 1 lit. b GDPR), in particular availability control and restorability
Procedures for regular review, assessment and evaluation (Art. 32 para. 1 lit. d GDPR; Art. 25 para. 1 GDPR), in particular data protection management, data protection-friendly presettings and organisational control

Top

Contact Imprint Privacy