Privacy Policy
General Information and Mandatory Notices
Designation of the Responsible Entity
The responsible entity for data processing on this website is:
Internationales Filmfest Oldenburg
Torsten Neumann
Lange Straße 53
26122 Oldenburg
The responsible entity decides alone or together with others on the purposes and means of processing personal data (e.g., names, contact details, etc.).
Revocation of Your Consent to Data Processing
Some data processing operations are only possible with your explicit consent. You can revoke your already given consent at any time. An informal notification by email is sufficient for the revocation. The legality of the data processing carried out up to the revocation remains unaffected by the revocation.
Right to Complain to the Competent Supervisory Authority
As a data subject, you have the right to lodge a complaint with the competent supervisory authority in the event of a data protection violation. The competent supervisory authority for data protection issues is the data protection officer of the federal state in which our company is headquartered. The following link provides a list of data protection officers and their contact details: Data Protection Officers.
Right to Data Portability
You have the right to have data that we process on the basis of your consent or in fulfillment of a contract automatically delivered to yourself or to a third party. The provision is made in a machine-readable format. If you request the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.
Right to Information, Correction, Blocking, Deletion
Within the scope of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin, its recipients, and the purpose of the data processing and, if necessary, a right to correction, blocking, or deletion of this data. For this purpose, and also for further questions on the subject of personal data, you can contact us at any time via the contact options listed in the imprint.
SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption. This means that data you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the “https://” address line of your browser and the lock symbol in the browser line.
Server Log Files
The provider of the website automatically collects and stores information in server log files that your browser automatically transmits to us. These are:
- Visited page on our domain
- Date and time of the server request
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- IP address
These data are not combined with other data sources. The basis for data processing is Art. 6 para. 1 lit. b GDPR, which allows the processing of data for the fulfillment of a contract or pre-contractual measures.
Order Processing
As part of the ordering process, you enter contact and payment data into the provided input forms. This data is used exclusively for processing your order. We only transfer this data to third parties if it is necessary for the processing of the order (e.g., payment service providers). The legal basis for data processing is Art. 6 para. 1 lit. b GDPR, which allows the processing of data for the fulfillment of a contract or pre-contractual measures. The collected data will be deleted after the order is completed and any retention periods have expired. The processing of your order is not possible without the collection of the data.
Geolocation
Based on the IP address captured when accessing our content, the country from which you are accessing is determined. On this basis, it is decided whether the content can be played by you. No further localization of your location takes place. The legal basis is Art. 6 para. 1 lit. f GDPR. The determination of your country of residence is necessary because usage rights to content are restricted to various territories, and the responsible party, as a licensee, is obligated to ensure that the broadcast does not occur in unlicensed territories. This is also our legitimate interest in data processing according to Art. 6 para. 1 lit. f GDPR. The data are not stored. Determining your country of residence is essential for the use of our offer. Consequently, there is no possibility of objection.
Content Retrieval
We use an embedded player to provide content and handle payments. The provider of this player is 1o1Media GmbH, Marthashof 6, 10435 Berlin, Germany. When the player is called up, various data (IP address, operating system, browser) are transmitted to the provider to ensure optimal use. The data is deleted as soon as it is no longer needed for this purpose. The legal basis for data processing is Art. 6 para. 1 lit. b GDPR, which allows the processing of data for the fulfillment of a contract or pre-contractual measures. To use our offer, our cookies must be accepted. The cookies are technically necessary to provide the service. If no consent is given, our offer cannot be used.
Payment Service Providers
We have integrated payment services from third-party companies into our offer. If you make a purchase with us, the payment service provider processes various payment data (e.g., name, payment amount, account data, credit card number) to process the payment. We integrate the payment service providers into our offers to process the contract (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast, and convenient service (Art. 6 para. 1 lit. f GDPR). If consent is requested, it is based on Art. 6 para. 1 lit. a GDPR, whereby consent can be revoked at any time for the future. We do not store any credit card information in connection with payment processing.
For the secure processing of payments initiated by you, we use the services of the payment service provider Adyen N.V., Simon Carmiggeltstraat 6, 1011DJ Amsterdam, Netherlands, German branch: Friedrichstraße 63, 10117 Berlin, Germany ("Adyen"). The transfer is carried out according to Art. 6 para. 1 lit. b GDPR, and only to the extent necessary for payment processing. Further information on data processing by Adyen can be found in Adyen's privacy policy: Adyen Privacy Policy.
We also use the services of PayPal for secure payment processing. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal"). We transfer your payment data (usually name, address, email address, country of the PayPal account) to PayPal for payment processing. The transfer is carried out according to Art. 6 para. 1 lit. b GDPR, and only to the extent necessary for payment processing. Further information on data processing by PayPal can be found in PayPal's privacy policy: PayPal Privacy Policy.
Invoicing
Upon your request, you can request an invoice by clicking. You may need to enter additional data. This data is used exclusively for invoicing. The legal basis for data processing is Art. 6 para. 1 lit. b and lit. a GDPR.
Retrieval Data
When you retrieve and play content, we process the access data for the content. We record which content you have used to enable further functions, such as resuming playback at a later time. These access data are used to fulfill the contract. The legal basis for data processing is Art. 6 para. 1 lit. b GDPR.
Disclosure of Personal Data
We will not disclose or otherwise distribute your personal data to third parties unless this is necessary for the fulfillment of our services (legal basis for data processing: Art. 6 para. 1 lit. b GDPR), you have consented to the disclosure (legal basis for data processing: Art. 6 para. 1 lit. a GDPR), or the disclosure of data is permitted by law.
Within the framework of data protection regulations, we are entitled to commission external service providers who act for us as processors according to Art. 4 No. 8 GDPR with data processing. External service providers support us in the technical operation and support of the offer and payment processing. Our external service providers process your data according to our instructions.
Our external service providers process your personal data within the European Union (EU) or the Contracting States of the Agreement on the European Economic Area (EEA). If your personal data is transferred to and processed by a service provider located in a third country, the protection of your personal data is ensured by appropriate guarantees, such as an adequacy decision by the EU Commission for the respective third country (Art. 45 GDPR) or the agreement of so-called EU standard contractual clauses (Art. 46 para. 2 lit. c GDPR).
Transfer of Personal Data
We will not disclose or otherwise distribute your personal data to third parties unless it is necessary for the fulfillment of our services (legal basis for data processing: Art. 6 para. 1 lit. b) GDPR), you have consented to the transfer (legal basis for data processing: Art. 6 para. 1 lit. a) GDPR), or the transfer of data is permitted by legal regulations. In accordance with data protection regulations, we are entitled to commission external service providers acting as processors according to Art. 4 No. 8 GDPR for the processing of your personal data. External service providers assist us with the technical operation and support of the offer and payment processing. The external service providers we engage process your data according to our instructions.
Our external service providers process your personal data within the European Union (EU) and the Contracting States of the Agreement on the European Economic Area (EEA). In the event that your personal data is transferred to and processed by a service provider located in a third country, the protection of your personal data will be ensured by appropriate guarantees, such as the conclusion of standard data protection clauses.
Our website provides an email address through which you can contact us. If you send us an email, the data transmitted with the email will be stored. The data will not be disclosed to third parties. The legal basis for processing is Art. 6 para. 1 lit. f GDPR. The processing of personal data is solely for the purpose of handling your inquiry. This also constitutes our legitimate interest. The data will be deleted once your inquiry has been fully resolved. You can object to the processing of your data at any time by emailing the responsible party. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.
YouTube
To integrate and display video content, our website uses plugins from YouTube. The provider of the video portal is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
When you access a page with an integrated YouTube plugin, a connection to YouTube's servers is established. YouTube is informed about which of our pages you have accessed.
YouTube can directly associate your browsing behavior with your personal profile if logged into your YouTube account. You can prevent this by logging out of your YouTube account beforehand.
The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
Details on handling user data can be found in YouTube's privacy policy: YouTube Privacy Policy.
Cookies
Our website uses technically necessary cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. The cookie contains a characteristic string that allows the browser to be uniquely identified when the website is accessed again. Cookies are stored on the user's computer and transmitted to our site.
Some website functions require the browser to be identified even after a page change. The user data collected through technically necessary cookies are not used to create user profiles. The legal basis for processing personal data using cookies is Art. 6 para. 1 lit. f GDPR. The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change. This also constitutes our legitimate interest in processing personal data according to Art. 6 para. 1 lit. f GDPR.
By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that are already stored can be deleted at any time. This can also be done automatically. If cookies are disabled from our website, it may not be possible to fully use all functions of the website.
Google Analytics
Our website uses functions of the web analytics service Google Analytics. The provider of the web analytics service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses "cookies." These are small text files that your web browser stores on your end device and enable an analysis of the website usage. The information generated by cookies about your use of our website is transmitted to a server of Google and stored there. The server is usually located in the USA.
The settings for Google Analytics cookies are based on Art. 6 para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in analyzing user behavior to optimize our web offer and possibly advertising.
IP Anonymization
We use Google Analytics in conjunction with the IP anonymization feature. It ensures that Google shortens your IP address within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before transmitting it to the USA. There may be exceptional cases in which Google transmits the full IP address to a server in the USA and shortens it there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activities, and to provide us with other services related to website and internet usage. The IP address transmitted by Google Analytics will not be merged with other data from Google.
Browser Plugin
You can prevent the storage of cookies by configuring your web browser accordingly. However, some functions of our website may be limited. You can also prevent the collection of data generated by cookies regarding your website usage, including your IP address, and the subsequent processing by Google. This can be done by downloading and installing the browser plugin available at the following link: Google Analytics Opt-out Browser Add-on.
Objection to Data Collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent the collection of your data during future visits to our website: [Google Analytics deactivate].
Details on handling user data in Google Analytics can be found in Google's privacy policy: Google Analytics Privacy Policy.
Order Processing
To fully comply with legal data protection requirements, we have concluded a data processing agreement with Google.
Demographic Features in Google Analytics
Our website uses the “demographic features” function of Google Analytics. It can be used to create reports that contain statements about the age, gender, and interests of the site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics, as explained in the section “Objection to Data Collection.”