Privacy Policy

Privacy Policy

I. Introduction and terms

1. GENERAL

Through the operation of our website with the URL summit.progress.film (hereinafter referred to as the "Website"), we process personal data. We treat this data confidentially and process it in accordance with the applicable laws – in particular the German Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Teleservices Data Protection Act (TDDSG). The purpose of this privacy policy is to inform you about what personal data we collect from you, for what purposes and on what legal basis we use it, and to whom we may disclose it. We also tell you what rights you have to protect and enforce your privacy.

2. NOTES

Our privacy policy contains technical terms that are used in both the GDPR and the BDSG. For your better understanding, we would like to explain these terms in simple terms:

2.1 Personal data

"Personal data" is any information relating to an identified or identifiable person (Art. 4 No. 1 GDPR). Information of an identified person can be, for example, the name or the e-mail address. However, personal data is also data where the identity is not immediately apparent, but can be determined by combining one's own information or that of others and thus finding out who it is. A person can be identified, for example, by providing your address or bank details, your date of birth or user name, your IP addresses and/or location data. Relevant here is all information that in any way allows a conclusion to be drawn about a person.

2.2 Processing

Article 4 No. 2 of the GDPR defines "processing" as any operation related to personal data. This includes in particular to the collection, recording, organisation, arrangement, storage, adaptation or alteration, retrieval, consultation, use, disclosure, transfer, dissemination or any other form of making available, alignment or combination, restriction, erasure or destruction of personal data.

II. Person responsible and data protection officer

3. RESPONSIBLE

Responsible for data processing is:

Company: PROGRESS Film GmbH ("we") Legal representative: Gunnar Dedio (Managing Director) Address: Mansfelder Straße 56, 06108 Halle / Saale Phone: +49 (0) 341 23429 138 E-mail: [email protected]

4. DATA PROTECTION OFFICER

We have appointed an external data protection officer for our company. You can reach him under:

Company: HABEWI GmbH & Co KG Legal representative: General partner HABEWI Beteiligungs GmbH, represented by Arne Platzbecker (Managing Director) Address: Palmaille 96, 22767 Hamburg Phone: 040/ 46008966  Fax: 040/ 46008977 E-mail: [email protected]

III. Processing frame

5. PROCESSING FRAMEWORK: WEBSITE

Within the framework of the website, we process the personal data of you listed in detail below in section IV. We only process data from you that you actively provide on the website (e.g. by filling out forms) or that you automatically provide when using our offer.

Your data will be processed exclusively by us and will not be sold, lent or passed on to third parties. If we use the help of external service providers to process your personal data, this is done within the framework of so-called order processing, in which we as the client are authorised to issue instructions to our contractors. To operate our website, we use external service providers for hosting, as well as for maintenance, care and further development. We host our website with the external provider Amazon Web Services AWS (Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, USA) at the data centre location 410 Terry Avenue North, Seattle WA 98109, United States. If further external service providers are used for individual processing operations listed in section IV, they will be named there.

As a matter of principle, we do not transfer data to third countries and do not plan to do so. We will provide information about exceptions to this principle in the processing operations described below. Any data transfer to third countries will then take place on the basis of the so-called EU standard contractual clauses.

IV. The processing in detail

6. PROVISION OF THE WEBSITE AND SERVER LOGFILES

6.1 Description of processing

Every time you access the website, we automatically record information that your browser transmits to our server. This involves the following data:

  • IP address
  • Browser software used, as well as its version and language
  • Operating system
  • the website from which visitors came to the website (so-called referrer)
  • the sub-pages accessed on the website
  • the date and time the website was accessed
  • Internet service provider
  • Country and location from which a user visited the website

These are also stored in the so-called log files of our system. The temporary storage of your IP address by the system is necessary in order to be able to deliver our website to a user's terminal device. For this purpose, the user's IP address must remain stored for the duration of the session. However, your IP address is not stored in the log files.

6.2 Purpose

The processing is carried out to enable the website to be called up and to ensure its stability and security. Furthermore, the processing serves the statistical evaluation and improvement of our online offer.

6.3 Legal basis

The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the data protection described in para. 6.2 named purpose.

6.4 Storage period

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. The log files are deleted after 7 days.

7. REGISTRATION AND PROFILE

7.1 Description of the processing

Individual functions and offers of our website are only available to you as a registered user. By registering, you enter into a free user agreement with us. By registering, you receive your own user account on our website. Registration takes place by filling in the registration form on our website and sending it to us electronically. To register, you must provide your first name, surname and e-mail address. The other information is for billing purposes and a freely chosen password. By clicking the button "Register" you submit the form to us. You will then receive an automatic welcome e-mail. This contains a link to network.progress.film to confirm your registration by entering a password. Only after successful verification of your e-mail address by clicking on the confirmation link and entering the password will your account on our website be activated.

As a registered user, we provide you with your profile page, which can be viewed by logged-in registered users of our website. As a registered user, you can publish photos and posts there, as well as contact other members. In addition to the information you provide when registering, we process the following personal data from you to set up and maintain your user account and profile page: Username, first name and last name, address, location, posts, photos, videos and information.

7.2 Purpose

The processing is carried out in order to provide you with the functions of our website for registered users.

7.3 Legal basis

The processing is necessary for the conclusion and fulfilment of the free user contract (Art. 6 para. 1 lit. b GDPR). Without providing your personal data as part of the registration process, we cannot provide our contractually owed services.

7.4 Storage period

The data will be automatically deleted by us upon termination of your user contract. You can terminate the user contract yourself by selecting the "Delete profile" function in the settings of your user account. Alternatively, you can inform us by post to PROGRESS Film GmbH, Mansfelder Straße 56, 06108 Halle / Saale by fax to tbd or by e-mail to [email protected] that you no longer wish to be a registered user of our website. We will then delete your user account immediately. Furthermore, as a logged-in user, you can edit and remove your own details and information at any time.

7.5 Recipient

On your profile page, your username, first name and surname, address, location, posts, photos, videos and information are visible to other logged-in registered users. Via the privacy settings of your profile, you can define and regulate whether and which personal data other registered users can take from your profile.

8. PURCHASE

8.1 Description of the processing

You can only access the data as a registered user (see point 7.) to shop on our website. As part of your ordering process, we process personal data from you. The mandatory fields marked with an asterisk "*" in our online shop must be completed by you. Otherwise it is not possible for us to conclude a purchase contract with you and to send you the desired goods. All other information is voluntary. When shopping on our website, you can also select one of the payment methods offered (credit card via Stripe) to settle the purchase price. When you complete your order, the data required for payment will be passed on to the respective payment service provider. If you shop on our website as a registered user, you can store your billing and delivery addresses as well as your preferred payment method in your user profile for faster and more convenient ordering.

8.2 Purpose

The processing is carried out for the conclusion and execution of sales contracts.

8.3 Legal basis

The processing is necessary for the conclusion and fulfilment of the purchase contracts (Art. 6 para. 1 lit. b GDPR). This also applies to the transfer of the data required for the processing of payments to the respective payment service providers.

8.4 Storage period

We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. However, we restrict processing after two years. This means that your data will then only be stored separately for compliance with the statutory retention periods and will be deleted immediately after their expiry.

8.5 Recipients In order

to process your payment, personal data will be passed on to one of the external payment service providers listed below and selected by you as part of your purchase:

  • Credit Card: Stripe, Inc., 185 Berry Street, Suite 550, San Francisco, California 94107, USA. For more information about Stripe's privacy policy, please visit https://stripe.com/de/privacy.

9. COOKIES

9.1 Description of the processing

Our website uses cookies. Cookies are small text files that are stored on the user's terminal device when visiting a website. Cookies contain information that enables the recognition of a terminal device and possibly certain functions of a website. We distinguish between our own cookies and external, so-called third-party cookies. So-called "session cookies" and "persistent cookies" are used on our site. "Session cookies" are automatically deleted when you end your internet session and close the browser. Persistent cookies remain stored on your terminal device for a longer period of time. We only use cookies that are technically necessary for the operation of our site. Consent is not required for these cookies. If cookies are technically necessary for the operation of our site, your consent is not required. All other cookies that are not technically necessary are only set after you have actively consented to the use of cookies via our consent tool. We use the service to obtain and document your consent. The Consent Tool itself saves your selection in a cookie on your end device. This means that you do not need to make a decision about cookies again on a subsequent visit to our website.

The following overview shows which cookies are used on our website for which purpose, how long they are stored on your end device and which consents you may have already declared.

9.2 Purpose

We use cookies to make our website more user-friendly and to enable us to provide the services described in para. 9.1 described in clause 9.1.

9.3 Legal basis

The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose named in section 9.1.

9.4 Storage period

Cookies are automatically deleted at the end of a session or when the specified storage period expires. Since cookies are stored on your terminal device, you as a user have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transfer of cookies. Cookies that have already been stored can be deleted. This can also be done automatically. If cookies for our website are deactivated, deleted or restricted, it may be that individual functions of our website cannot be used or can only be used to a limited extent.

9.5 Recipients

When using third-party cookies, data may be transmitted to the corresponding providers of these third-party services. Under certain circumstances, data may also be transferred to third countries outside the European Union or the European Economic Area. We provide information about the recipients of data and the transfer to third countries in the corresponding section on the third-party service in this data protection policy.

10. CONTACT BY E-MAIL

10.1 Description of processing

You can also contact us via the email addresses provided on the website. To contact us, you can write to us via the e-mail address provided on the website. In this case, the personal data transmitted with the e-mail will be processed by us.

10.2 Purpose

The data transmitted with and in your e-mail will be used exclusively for the purpose of processing and responding to your request.

10.3 Legal basis

The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the data protection described in para. 10.2 named purpose. If the e-mail contact is aimed at the conclusion or fulfilment of a contract, the data processing is carried out for the fulfilment of the contract (Art. 6 para. 1 lit. b GDPR).

10.4 Storage period

The data is deleted by us as soon as it is no longer required to achieve the purpose for which it was collected. This is usually the case when the respective communication with you has ended. The communication is deemed to have ended when it is clear from the circumstances that your concern has been conclusively clarified. If legal retention periods prevent deletion, the data will be deleted immediately after the legal retention period has expired.

11. NEWSLETTER

11.1 Description of the processing

We send out a newsletter at irregular intervals. With the newsletter we inform you about news on current and future PROGRESS events, especially the PROGRESS History Summit, release of new collections on progress.film as well as industry news and announcements. You will only receive our newsletter if you actively subscribe to our mailing list. You can subscribe to it by filling in and submitting a newsletter registration form on our website. You can subscribe to it as part of an order in our online shop.

For the newsletter registration, only your e-mail address is required. All other details (such as your first name and surname) are voluntary and serve solely to personalise the e-mails. We use the so-called double opt-in procedure to carry out and verify newsletter registrations. Registration takes place in several steps. First, you register for the newsletter on our website. You will then receive an e-mail from us at the e-mail address you have provided. In this e-mail, we ask you to confirm that you have actually registered for the newsletter and wish to receive it. Confirmation takes place by clicking on a confirmation link in the e-mail. Only after successful confirmation will we add you to our newsletter distribution list and send you future e-mails. As part of the double opt-in process, we save the date, time and your IP addresses both during registration and confirmation.

If you purchase goods or services on our website and enter your e-mail address, this may subsequently be used by us to send a so-called existing customer newsletter. In such a case, only direct advertising for our own similar goods or services will be sent via the newsletter.

11.2 Purpose

The processing takes place in order to offer the newsletter function and to be able to send newsletter emails to subscribers and existing customers. The collection and storage of date, time and IP addresses when subscribing to the newsletter serves to document consent given and to protect against the misuse of email addresses.

11.3 Legal basis

In the case of our subscriber newsletter, processing takes place on the basis of consent pursuant to Art. 6 (1) lit. a GDPR. You can access the declaration of consent on our website at any time at mailchimp.com/legal/privacy/. Your consent is voluntary. The collection and storage of date, time and IP addresses during newsletter registration is necessary to protect the overriding legitimate interests of the responsible party (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the data protection described in para. 11.2 named purpose.

In the case of our newsletter for existing customers, processing is carried out on the basis of Art. 6 (1) lit. f GDPR in order to protect the overriding interests of the controller. Our legitimate interest lies in direct advertising to existing customers. This is permissible within the framework of Section 7 (3) UWG, which we observe.

11.4 Storage period and revocation of consent

If you do not confirm your subscription to our newsletter within 48 hours of receiving the corresponding registration e-mail, your data will be automatically deleted. We process your personal data for the duration of your newsletter subscription. You can cancel your subscription to our newsletter at any time by revoking your consent. You can also object to the use of your e-mail address to send our newsletter to existing customers at any time. A simple declaration is sufficient (by e-mail to [email protected] or by post to PROGRESS Film GmbH, Mansfelder Straße 56). You can also unsubscribe from the newsletter by clicking on the unsubscribe link in every newsletter email or here mailchimp.com/legal/privacy/. With the revocation of your consent, you will no longer be sent newsletters and your personal data will be removed from our active distribution list.

11.5 Recipients and transfer to third countries

We use the services of the newsletter provider Mailchimp to manage our newsletter distribution list and to send the emails. This takes place within the framework of order processing. Mailchimp is a service provided by The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308 USA (hereinafter referred to as "Mailchimp"). With your newsletter registration, the data provided during the registration process is transferred to Mailchimp and processed on Mailchimp servers in the USA. For more information on data protection at Mailchimp, please refer to the service provider's privacy policy at mailchimp.com/legal/privacy/.

12. SOCIAL NETWORKS

12.1 Description of the processing

Our website does not use so-called social media plugins. The Facebook, Platform X (Twitter), YouTube, Instagram and LinkedIn logos displayed on our website are merely linked to the corresponding profiles of our company on the social networks. A data transfer to the social networks does not take place with the integration of the logos. If you click on one of the logos, you will only be redirected to the external website of the respective social network.

However, our profiles within the social networks constitute data processing. If you are logged in to the respective social network when you visit such a profile, this information will be assigned to your user account there. If you interact with our profile, e.g. comment, "share", "like" or "retweet" a post, this information will also be stored in your user account. As a rule, your interactions with our profile can also be viewed by us.

On the social networks Facebook and Instagram, we have the possibility to obtain statistical data about the use of our Facebook page or our Instagram profile via the so-called "Insights" function. These statistics are provided by Facebook and Instagram. The "Insights" function cannot be disabled. We cannot decide to turn this feature on or off. It is available to all Facebook fan page operators and all Instagram business account operators, regardless of whether you use the Insights function or not.

We are provided with the following data via Facebook Insights for a selectable period of time in anonymised form with regard to fans, subscribers, people reached and people interacting: Total page views, likes including origin, page activity, post interactions, reach, post reach (broken down into organic, viral and paid interactions), comments, shared content, replies and demographic analysis, i.e. country of origin, gender and age. In the Insights statistics, it is not possible for us to identify subscribers and fans of our site and to view their profiles.

Furthermore, we receive anonymised data about the development and reach of our Instagram profiles, as well as the posts, stories and videos we post there, via Instagram insights. We also receive statistical information on the place of origin, gender and age of the subscribers to our Instagram profile in the Instagram insights.

12.2

On the social network LinkedIn, we have the possibility to obtain statistical data about the use of our LinkedIn profile via the so-called "Insights" function.

The social networks with which you communicate store your data using pseudonyms as usage profiles and use them for advertising purposes and market research. For example, you may be shown advertisements within the social network and on other third-party websites that match your presumed interests. Cookies are usually used for this purpose, which the social network stores on your end device. You have the right to object to the creation of these user profiles, for the exercise of which you must contact the social networks directly.

12.3 Purpose

We maintain profiles on the aforementioned social networks for the purpose of public relations and corporate communication with customers and interested parties. We use the "Insights" function of Facebook and Instagram to evaluate the reach of our posts on the social network and to make them more appealing to our visitors in the future.

12.4 Legal basis

The legal basis for data processing within the scope of our profiles on social networks is the protection of our overriding legitimate interests (Art. 6 para. 1 lit. f GDPR). Our justified interest lies in the data processing described in para. 12.3 named in point 12.3. If you are asked for consent by the respective operator of a social network, the legal basis is Art. 6 (1) a GDPR. Data processing with regard to our presence on Facebook, Instagram and LinkedIn is also carried out on the basis of joint responsibility in accordance with Art. 26 GDPR.

12.5 Recipients and transmission to third countries

The respective social networks are operated by the companies listed below. Further information on data protection with regard to our profile on the social networks can be found in the linked data protection provisions.