Data privacy

I. Name and address of the data controller

FilmFernsehFonds Bayern GmbH
Gesellschaft zur Förderung der Medien in Bayern
Sonnenstraße 21
80331 München
Telefon: +49-(0) 89 - 544 602 – 36
E-Mail: filmcommission@fff-bayern.de
www.fff-bayern.de

is the data controller as defined in the EU General Data Protection Regulation (DSGVO) and the national data privacy laws.

II. Name and address of the data protection officer

The data protection officer of the data controller is:

Frau Justyna Rulewicz
AGOR AG
Hanauer Landstr. 151-153
60314 Frankfurt am Main
+49 (0) 69 - 9494 32 410
E-Mail: info@agor-ag.com
Website: www.agor-ag.com

III. General information about data processing

1. The extent to which personal data is processed

We collect and use the personal data of users of our homepage only to the extent that this is necessary for keeping our website, contents and services functioning properly.
Basically, we collect and use our users’ personal data only after they give their consent. An exception to this principle applies in cases where processing the data by statutory provisions is permitted or when obtaining prior consent for actual rea-sons is not possible.

2. Legal basis for processing personal data

The legal basis for processing personal data is basically based on:

  • Art. 6 Section 1 lit. a GDPR upon obtaining the consent of the data subject.
  • Art. 6 Section 1 lit. b GDPR for processing operations that serve to fulfill a contract to which the data subject is a party. Included here are processing operations that are necessary to carry out pre-contractual measures.
  • Art. 6 Section 1 lit. c GDPR for processing required to fulfill a legal obligation.
  • Art. 6 Section 1 lit. d GDPR, if vital interests of the data subject or another natural person require the processing of personal data.
  • Art. 6 Section 1 lit. f GDPR, if the processing is necessary to safeguard the le-gitimate interests of our company or a third party, and the interests, funda-mental rights and fundamental freedoms of the data subject do not out-weigh the former interest.
3. Data erasure and storage duration

The personal data of users will be deleted or blocked as soon as the purpose of the storage is no longer applicable. Additional storage may be provided for by European or national legislators through EU regulations, laws or other regulations to which the data controller is subject.

Blocking or deleting the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for additional storage of the data for concluding a contract or ful-filling the contract.

IV. Use of our website, general information

1. Description and scope of data processing

Every time our website is accessed, our system automatically collects data and information from the user's computer system. The following information is col-lected:

  1. Information about the browser type and version used
  2. The user’s operating system
  3. Date and time of access
The data described - with the exception of the user’s IP address or other data that allows data to be assigned to a user - are stored in our system’s log files. This data is not stored together with any other personal user data.

2. Purpose and legal basis for data processing

Our system must temporarily store user IP addresses to allow us to deliver our website to the user's computer. To do this, the user's IP address must be stored for the duration of the session.

The legal basis for the temporary storage of data is Art. 6 Section 1 lit. f GDPR.
Collecting your personal data to ensure our web presence and storing this data in log files is essential for operating our website. A contradictory possibility of the user therefore does not exist.

3. Duration of storage

Your data will be deleted as soon as they are no longer necessary for achieving the purpose of the inquiry. Your data will be deleted when the session ends if your data has been collected to ensure the site's availability.

V. General information about the use of cookies

We use cookies on our website. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When you visit a website, a cookie may be stored on your operating system. This contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. 

We use cookies to make our website more user-friendly. Some elements of our website require that the browser can be identified even after a page change. 

The legal basis for the storage of cookies, device identifiers and similar tracking technologies or for the storage of information in the end user's terminal equipment and access to this information is the European ePrivacy Directive in conjunction with the Telecommunications and Telemedia Data Protection Act (TTDPA; Ger.: TTDSG).  

Please note that the legal basis for the processing of personal data collected in this context then results from the GDPR. The relevant legal basis for the processing of personal data in each specific case can be found below the respective cookie or the respective processing itself.   The primary legal basis for the storage of information in the end user's terminal equipment - consequently in particular for the storage of cookies - is their consent, § 25 Abs. 1 S.1 TTDPA (Ger.: TTDSG). Consent is given when visiting our website - although this does not have to be given, of course - and can be revoked at any time in the cookie settings.  

According to § 25 Abs. 2 Nr. 2 TTDPA (Ger.: TTDSG), consent is not required if the storage of information in the end user's terminal equipment or access to information already stored in the end user's terminal equipment is absolutely necessary for the provider of a telemedia service to be able to provide a telemedia service expressly requested by the user. You can see from the cookie settings which cookies are to be classified as absolutely necessary (often also referred to as "technically necessary cookies") and therefore fall under the exception of § 25 Abs. 2 TTDPA (Ger.: TTDSG) and therefore do not require consent.

VI. Your rights/rights of the data subject

According to the EU General Data Protection Regulation, as an affected party you have the following rights:

1. The right to receive information

As the data controller, you have the right to receive information from us regarding processing personal data involving you. In addition, you may request information in accordance with the legal requirements pursuant to Article 13, 14 GDPR.

2. The right to rectification

If we process your personal data incorrectly or in an incomplete manner, then you have a right for it to be corrected/completed. The correction will be made immediately.

3. Right to restriction

The right to limit the processing of your personal data in accordance with the provisions of the law (Article 18 GDPR).

4. The right to delete

If the reasons set out in Art. 17 GDPR apply, you may request that the personal data relating to you be deleted immediately.

We would like to point out that the right to deletion does not exist insofar as pro-cessing is necessary for one of the exceptions listed in Article 17 Section 3.

5. Right to information

If you have asserted the right to rectify, delete or restrict the processing, we are obligated to notify all recipients to whom your personal data have been dis-closed of this correction or deletion of the data or restriction of processing, un-less this proves to be impossible or is associated with a disproportionate amount of effort. You also have the right to be informed about these recipients.

6. Right to data portability

According to the GDPR, you also have the right to obtain the personal data pro-vided to us and to receive it in a structured, understandable and machine-readable format. Furthermore, you have the right to transfer this data to another data controller.

7. Right to revoke the declaration of consent to data protection

You have the right to revoke your data protection declaration at any time. Please note that revoking consent does not affect the lawfulness of the pro-cessing carried out based on the consent until the revocation goes into effect.

8. Right to objection

Furthermore, for reasons based on your particular situation, you have the right at any time to file an objection to the processing of personal data relating to you, as it is defined in Art. 6 Section 1 lit. e or f GDPR.

9. Automated decision on an individual basis, including profiling

Under the EU General Data Protection Regulation, you remain entitled not to be subjected to a decision based solely on automated processing - including profil-ing - which would have legal effect or would affect you in a similar manner.

10. Right to complain to a supervisory authority

Finally, if you believe that the processing of personal data concerning you is con-trary to the GDPR, you have the right to complain to a supervisory authority, in the Member State of its place of residence, employment or the location of the alleged infringement.

VII. Electronic contact

If you would like to contact us, you have the option of contacting us via the pro-vided e-mail address. In this case, the user's personal data transmitted by email will be stored.

A transfer of your data to third parties will not take place in this context; this data will be used exclusively for processing the communication record. The legal basis for processing the data is regularly Art. 6 Section 1 Sentence1 lit. b DSGVO, addi-tionally Art. 6 Section 1 Sentence1 lit. f DSGVO.

Your data will be deleted as soon as they are no longer necessary for achieving the purpose of the inquiry. Regarding the personal data from the input form on the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clari-fied. If the process is based on the legal basis of legitimate interests, you can object to the storage of your personal data at any time. However, we would like to point out that in such a case the conversation cannot be continued. All personal data stored in the course of contacting you will be deleted in this case

VIII. Integrating Google Maps

We use Google Maps offer on our website. This allows us to show you interactive maps right on the website and allow you to conveniently use the map feature.

By visiting the website, Google receives the information that you have accessed the corresponding subpage for our website. In addition, the information referred to in Section IV of this statement will be transmitted to Google. This is done re-gardless whether Google provides a user account that you are logged in to, or if there is no user account. When you're logged in to Google, your data will be as-signed directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for advertising, market research and/or needs-based website design. This type of an evaluation is carried out (even for users who are not logged in) for the purpose of providing appropriate advertising and to inform other users of the social network about your activities on our website. You have a right of objec-tion to the formation of these user profiles, and you must contact Google to ex-ercise this right.

Please refer to the provider's privacy policy for more information on the purpose and scope of the data collection and its processing by the plug-in provider. There you will also find further information about these rights as they relate to you and settings options for protecting your privacy. http://www.google.de/intl/de/policies/privacy.

IX. SSL encryption

In order to protect your transmitted data in the best possible way, we use SSL encryption. You can recognize this encrypted connection by the prefix https:// in the page link in the address bar of your browser. Unencrypted pages are marked by http://.

All data that you transmit to us via our website – e.g. when making enquiries – cannot be read by third parties in this way.