On this page you will find data protection information for the use of audiovisual content of the HARD:ON:LINE FILM FESTIVAL.
A. DATA PROTECTION PRINCIPLES
1) Scope of application
The following data protection information applies to the visit and use of audiovisual content during the HARD:ON:LINE FILM FESTIVAL from 14.04.2022 to 24.04.2022. For the use of other content, e.g. the HARD:LINE FILM FESTIVAL or other offers of OFFSTREAM CINEMA e.V., the data protection information on the website at https://www.hardline-filmfestival.com/datenschutzapplies.
2) Responsible person
The operator named in the imprint is responsible for compliance with data protection.
3) Data source
You either actively provide us with your data via an input mask or e-mail or it is collected via our IT systems, cookies or similar technologies.
4) Purpose of collection
You will be informed of the purpose of the data collection in the DATA PROTECTION DECLARATION at the time of the respective processing.
5) Legal basis
Your data is collected either on the basis of consent, for the performance of a contract or on the basis of our legitimate interests.
6) Your rights
You have the right to information, correction, restriction of processing or deletion. If the processing is based on consent, you can revoke this at any time for the future; if it is based on a legitimate interest, you can object to this at any time if your interests prevail. You have the right to lodge a complaint with the competent supervisory authority.
B. PRIVACY POLICY
1) Name and address of the controller
The responsible person within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
Offstream Cinema e.V. (represented by Florian Scheuerer)
Andreasstraße 28, 93059 Regensburg, Germany
E-mail: info[at]hardline[minus]filmfestival[dot]com
www.hardline-filmfestival.com
2) Provision of the website and creation of log files (access data)
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. This includes information about the browser type and version used, the user's operating system, the user's internet service provider, the user's IP address, the date and time of access, websites from which the user's system accesses our website, websites that are accessed by the user's system via our website. This data is stored in the log files of our system. The legal basis for the temporary storage of the data is Art. 6 para. 1 lit. f) DSGVO. The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. This is also our legitimate interest in the data processing according to Art. 6 para. 1 lit. f) DSGVO.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.
3) Technically necessary cookies
Our website uses technically necessary cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user calls up a website, a cookie may be stored on the user's operating system. Cookies contain a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. Cookies are stored on the user's computer and transmitted to our site by the user.
Some functions of our website require that the calling browser can be identified even after a page change. The user data collected through technically necessary cookies are not used to create user profiles. The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f) DSGVO. The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change. This is also our legitimate interest in processing the personal data in accordance with Art. 6 Para. 1 lit. f) DSGVO. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.
4) Ordering content
As part of the ordering process, you enter contact and payment data in the input masks provided. This data is used exclusively for processing your order. We only transmit this data to third parties if this is necessary to process the order (payment service provider). The legal basis for data processing is Art. 6 para. 1 lit. b) DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. The collected data will be deleted after the order has been processed and any retention periods have expired. The processing of your order is not possible without the collection of the data.
The country recorded via the IP address is stored and deleted after the expiry of the rental period and any statutory retention periods. The other data will not be stored. The collection of this data is necessary to process the contract and to comply with our legal information obligations. The legal basis for this is Art. 6 para. 1 lit b) DSGVO, as the data is necessary for the processing of the contract.
5) Accredited guests
In order to register you as an accredited user, we need to collect certain data about you. This is done to check and register accreditations for the HARD:ON:LINE FILM FESTIVAL with regard to the issuing of an accreditation, the provision of audiovisual content and for payment processing. If you do not provide the data, accreditation will not be possible. The data will not be used for purposes other than accreditation and contract fulfilment. The legal basis for data processing is Art. 6 para. 1 lit. b) DSGVO.
6) Geolocation
The country from which you are accessing our website is determined on the basis of your IP address recorded when you play the content on our website. On this basis, a decision is made as to whether the content can be played by you. Your location is not tracked beyond this. The legal basis is Art. 6 para. 1 lit. f) DSGVO. The determination of your country of residence is necessary because rights of use to content are granted limited to certain territories and the controller as licensee is obliged to ensure that the broadcast does not take place in unlicensed territories. This is also our legitimate interest in data processing according to Art. 6 para. 1 lit. f) DSGVO. The data will not be stored. The determination of your country of residence is mandatory for the use of our offer. Consequently, there is no possibility to object.
7) Content retrieval
We use an embedded player (integrated player) for our offer to provide the content and to process payments. The provider of this player is PANTAFLIX Technologies GmbH, Neue Schönhauser Straße 16, 10178 Berlin. When the player is called up, various data (IP address, operating system, browser) are transmitted to the provider in order to ensure optimal use. The data is deleted as soon as it is no longer required for this purpose. The legal basis for the data processing is Art. 6 para. 1 lit. b) DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. In order to use our offer, our cookies must be accepted. The cookies are technically necessary to provide the service. If no consent is given, our offer cannot be used.
8) Payment service provider
We have integrated payment services from third-party companies into our offer. If you make a purchase from us, various payment data (e.g. name, payment amount, account data, credit card number) are processed by the payment service provider to process the payment. We integrate the payment service providers into our offers for contract processing (Art. 6 (1) b) DSGVO) and in the interest of a secure, fast and convenient service (Art. 6 (1) f) DSGVO). In the event that consent is requested, this is based on Art. 6 (1) a) DSGVO, whereby consent can be revoked for the future. We do not store any credit card information in connection with the processing of the payment.
For the secure processing of payments initiated by you, the services of the payment service provider Adyen N.V., Simon Carmiggeltstraat 6, 1011DJ Amsterdam, Netherlands, branch office Germany: Friedrichstraße 63, 10117 Berlin, Germany, are used ("Adyen"). The transfer of data is carried out in accordance with Art. 6 Para. 1 lit. b) DSGVO, and only to the extent necessary for the processing of payments. Further information on data processing by Adyen can be found in Adyen's privacy policy: https://www.adyen.com/de_DE/richtlinien-und-haftungsausschluss/privacy-policy.
We also use the services of PayPal for the secure processing of payments. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal"). We pass on your payment data (regularly this includes name, address, e-mail address, country of PayPal account) to PayPal as part of the payment processing. The transfer is carried out in accordance with Art. 6 Para. 1 lit. b) DSGVO, and only to the extent necessary for payment processing. Further information on data processing by PayPal can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE
9) Access data
When you access and play content, we process the access data for the content. We record which content you have used in order to enable further functions, such as continuing to play the content at a later time. This access data is used to fulfil the contract; the legal basis for data processing is Art. 6 para. 1 lit. b) DSGVO.
10) Disclosure of personal data
We will not disclose or otherwise distribute your personal data to third parties unless this is necessary for the performance of our services (legal basis for data processing: Art. 6 para. 1 lit. b) DSGVO), you have consented to the disclosure (legal basis for data processing: Art. 6 para. 1 lit. a) DSGVO) or the disclosure of data is permitted by law.
Within the framework of the data protection regulations concerning the processing of your personal data, we are entitled to commission external service providers, who act for us as processors in accordance with Art. 4 No. 8 DSGVO, with data processing. External service providers support us in the technical operation and support of the offer and payment processing. The external service providers commissioned by us process your data in accordance with our instructions.
Our external service providers process your personal data within the European Union (EU) or the contracting states of the Agreement on the European Economic Area (EEA). However, in the event that your personal data is transferred to a service provider located in a third country and processed there, the protection of your personal data is ensured by means of suitable guarantees, such as the conclusion of standard data protection clauses.
11) E-mail
On our website and within the scope of our offer, e-mail addresses are given which you can use to contact us. If you send us an e-mail, the data transmitted to us with the e-mail will be stored. The data will not be passed on to third parties. The legal basis for the processing is Article 6 (1) (f) DSGVO. The personal data is processed solely for the purpose of dealing with your request. This is also our legitimate interest. The data will be deleted as soon as your request has been conclusively clarified. You can object to the processing of your data at any time by sending an e-mail to the person responsible. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting you will be deleted in this case.
12) Data subject rights, right of appeal
You have the right to information about the personal data concerning you as well as the right to correction or deletion or to restriction of processing or a right to object to processing as well as the right to data portability.
13) Right of complaint
You have the right to complain to the competent data protection authority:
The Bavarian State Commissioner for Data Protection (BayLfD).
Letter P.O. Box 22 12 19, 80502 Munich, Germany
Visit Wagmüllerstraße 18, 80538 Munich
Call 089 212672-0
Fax 089 212672-50
Mail poststelle@datenschutz-bayern.de
