PRIVACY POLICY.

This data protection declaration informs you about the nature, scope and purpose of the processing of personal data (hereinafter referred to as "data") in the context of the provision of our services and within our online offer and the websites, functions and content associated with it, as well as external online presences, such as our social media profiles (hereinafter collectively referred to as "online offer"). With regard to the terms used, such as "processing" or "controller", we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

CONTACT.

BITTE EINEN FILM
Bauert & Engelhardt & Grande & Mayer GbR
Frankenthaler Str. 20
DE-81539 Munich

Mail: hey@bitteeinenfilm.de
Legal notice: www.bitteeinenfilm.de/legal-notice
Contact for privacy: maxi@bitteeinenfilm.de

PROCESSED DATA TYPES.

  • Inventory data (e.g., person master data, names or addresses)

  • Contact information (e.g., email, phone numbers)

  • Content data (e.g., text input, photographs, videos)

  • Usage data (e.g., web pages visited, interest in content, access times)

  • Meta / communication data (e.g., device information, IP addresses)

CATEGORIES OF PERSONS CONCERNED.

Visitors and users of the online offer (hereinafter we also refer to the data subjects collectively as "users").

PURPOSE OF PROCESSING.

  • Provision of the online offer, its functions and contents.

  • Respond to contact requests and communicate with users.

  • Safety measures.

  • Reach measurement/marketing

TERMS USED.

"Personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

"Processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means. The term is broad and includes virtually any handling of data.

"Pseudonymization" means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures which ensure that the personal data are not attributed to an identified or identifiable natural person.

"Profiling" means any automated processing of personal data which consists in using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or change of location.

"Controller" means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.

"Processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the Controller.

RELEVANT LEGAL BASES.

In accordance with Art. 13 GDPR, we inform you about the legal basis of our data processing. For users from the area of application of the Basic Data Protection Regulation (GDPR), i.e. the EU and the EEC, the following applies if the legal basis is not mentioned in the privacy policy: 

The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 GDPR;The legal basis for processing for the fulfillment of our services and implementation of contractual measures as well as answering inquiries is Art. 6 para. 1 lit. b GDPR;The legal basis for processing for the fulfillment of our legal obligations is Art. 6 para. 1 lit. c GDPR;

In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) lit. d GDPR serves as the legal basis. The legal basis for the processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller is Art. 6 (1) lit. e GDPR. The legal basis for processing to protect our legitimate interests is Art. 6 (1) lit. f GDPR. The processing of data for purposes other than those for which they were collected is determined by the requirements of Art. 6 (4) GDPR. The processing of special categories of data (according to Art. 9 (1) GDPR) is determined according to the requirements of Art. 9 (2) GDPR.

SAFETY MEASURES.

We take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons.

The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access to, entry into, disclosure of, assurance of availability of and segregation of the data. Furthermore, we have established procedures to ensure the exercise of data subjects' rights, deletion of data, and response to data compromise. Furthermore, we already take the protection of personal data into account during the development and selection of hardware, software and processes, in accordance with the principle of data protection through technology design and through data protection-friendly default settings.

COLLABORATION WITH PROCESSORS, JOINT CONTROLLERS AND THIRD PARTIES.

If, in the course of our processing, we disclose data to other persons and companies (order processors, jointly responsible persons or third parties), transmit it to them or otherwise grant them access to the data, this shall only be done on the basis of a legal permission (e.g. if a transmission of the data to third parties, such as to payment service providers, is necessary for the fulfillment of the contract), users have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.). 

If we disclose or transfer data to other companies in our group of companies or otherwise grant them access, this is done in particular for administrative purposes as a legitimate interest and, in addition, on a basis that complies with the legal requirements.

TRANSFERS TO THIRD COUNTRIES.

If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA) or the Swiss Confederation) or if this is done in the context of using third-party services or disclosing or transferring data to other persons or companies, this will only be done if it is done to fulfill our (pre)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or leave the data in a third country only if the legal requirements are met. This means, for example, that the processing takes place on the basis of special guarantees, such as the officially recognized determination of a level of data protection that corresponds to the EU (e.g. for the USA by the "Privacy Shield") or compliance with officially recognized special contractual obligations.

RIGHTS OF THE DATA SUBJECTS.

You have the right to obtain confirmation as to whether or not data concerning you is being processed and to obtain information about such data, as well as further information and a copy of the data in accordance with the law. You have the right, in accordance with the law, to request that the data concerning you be completed or that inaccurate data concerning you be corrected. You have the right, in accordance. with the legal requirements, to demand that data concerning you be deleted without delay, or alternatively, in accordance with the legal requirements, to demand restriction of the processing of the data. You have the right to demand that the data concerning you that you have provided to us be received in accordance with the legal requirements and to demand that it be transferred to other persons responsible. You also have the right, in accordance with the law, to lodge a complaint with the competent supervisory authority.

RIGHTS OF WITHDRAWAL.

You have the right to revoke given consents with effect for the future.

RIGHT OF OPPOSITION.

You may object to the future processing of data relating to you in accordance with the statutory provisions at any time. The objection can be made in particular against the processing for purposes of direct advertising.

COOKIES AND RIGHT TO OBJECT TO DIRECT ADVERTISEMENT.

Cookies" are small files that are stored on users' computers. Different information can be stored within the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after his visit to an online offer. Temporary cookies, or "session cookies" or "transient cookies", are cookies that are deleted after a user leaves an online offer and closes his browser. Such a cookie may store, for example, the contents of a shopping cart in an online store or a login status. Cookies that remain stored even after the browser is closed are referred to as "permanent" or "persistent". For example, the login status can be stored if users visit them after several days. Likewise, the interests of users can be stored in such a cookie, which is used for range measurement or marketing purposes. Third-party cookies" are cookies that are offered by providers other than the responsible party that operates the online offer (otherwise, if they are only its cookies, they are referred to as "first-party cookies").

We may use temporary and permanent cookies and provide information about this in our privacy policy.

If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.

A general objection to the use of cookies used for online marketing purposes can be made for a large number of the services, especially in the case of tracking, via the U.S. site http://www.aboutads.info/choices/oder the EU site http://www.youronlinechoices.com/erklärt. Furthermore, the storage of cookies can be achieved by disabling them in the browser settings. Please note that not all functions of this online offer can then be used.

DATA DELETION.

The data processed by us will be deleted or restricted in its processing in accordance with the legal requirements. Unless expressly stated within the scope of this data protection declaration, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. I.e. the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law.

CHANGES AND UPDATES TO THE PRIVACY POLICY.

We ask you to regularly inform yourself about the content of our privacy policy. We adapt the data protection declaration as soon as the changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g. consent) or other individual notification.

CONTACT.

When contacting us (e.g. by contact form, e-mail, telephone or via social media), the user's data will be used to process the contact request and its settlement pursuant to Art. 6 para. 1 lit. b. (in the context of contractual/pre-contractual relations), Art. 6 para. 1 lit. f. (other requests) GDPR processed... The user's information may be stored in a customer relationship management system ("CRM system") or comparable inquiry organization.We delete the inquiries if they are no longer necessary. We review the necessity every two years; Furthermore, the legal archiving obligations apply.

GOOGLE TAG MANAGER.

Google Tag Manager is a solution that allows us to manage so-called website tags via an interface (and thus, for example, integrate Google Analytics and other Google marketing services into our online offering). The Tag Manager itself (which implements the tags) does not process any personal data of the users. With regard to the processing of users' personal data, please refer to the following information on Google services. Usage guidelines: https://www.google.com/intl/de/tagmanager/use-policy.html.

GOOGLE ANALYTICS.

We use Google Analytics, a web analytics service provided by Google LLC ("Google"), on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 (1) lit. f. GDPR) Google Analytics, a web analytics service provided by Google LLC ("Google"). Google uses cookies. The information generated by the cookie about the use of the online offer by users is usually transmitted to a Google server in the U.S. and stored there.Google is certified under the Privacy Shield Agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide other services related to the use of this online offer and Internet use to us. In doing so, pseudonymous user profiles can be created from the processed data.We only use Google Analytics with IP anonymization activated. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.The IP address transmitted by the user's browser will not be merged with other data from Google. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent the collection of the data generated by the cookie and related to their use of the online offer to Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google. com/dlpage/gaoptout?hl=en.For more information on data usage by Google, setting and objection options, please refer to Google's privacy policy (https://policies.google.com/privacy) as well as the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).The users' personal data will be deleted or anonymized after 14 months.

GOOGLE UNIVERSAL ANALYTICS.

We use Google Analytics in the form of "Universal Analytics". "Universal Analytics" refers to a method of Google Analytics in which the user analysis is based on a pseudonymous user ID and thus a pseudonymous profile of the user is created with information from the use of different devices (so-called "cross-device tracking").

TARGET GROUP FORMATION WITH GOOGLE ANALYTICS.

We use Google Analytics to display the ads placed within Google's advertising services and those of its partners only to users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Google (so-called "Remarketing Audiences" or "Google Analytics Audiences"). With the help of Remarketing Audiences, we also want to ensure that our ads correspond to the potential interest of users.

GOOGLE ADSENSE WITH PERSONALIZED ADS.

We use on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR. GDPR) the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google").Google is certified under the Privacy Shield Agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).We use the service AdSense, with the help of which ads are displayed on our website and we receive payment for their display or other use. For these purposes, usage data, such as the click on an ad and the IP address of the users are processed, whereby the IP address is shortened by the last two digits. Therefore, the processing of the users' data is pseudonymized. We use Adsense with personalized ads. In doing so, Google draws conclusions about users' interests based on the websites they visit or apps they use and the user profiles thus created. Advertisers use this information to tailor their campaigns to these interests, which benefits users and advertisers alike. For Google, ads are personalized if collected or known data determine or influence the ad selection. This includes past search queries, activities, website visits, app usage, demographic and location information, among others. Specifically, this includes: demographic targeting, targeting on interest categories, remarketing, and targeting on customer matching lists and targeting lists uploaded to DoubleClick Bid Manager or Campaign Manager.For more information on Google's use of data, settings and opt-out options, please see Google's privacy policy (https://policies.google.com/technologies/ads) and Google's ad display settings (https://adssettings.google.com/authenticated).

GOOGLE ADSENSE WITH NON-PERSONALIZED ADS.

We use on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR. GDPR) the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google").Google is certified under the Privacy Shield Agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).We use the service AdSense, with the help of which ads are displayed on our website and we receive payment for their display or other use. For these purposes, usage data, such as the click on an ad and the IP address of the users are processed, whereby the IP address is shortened by the last two digits. Therefore, the processing of the users' data is pseudonymized. We use Adsense with non-personalized ads. In this case, the ads are not displayed on the basis of user profiles. Non-personalized ads are not based on previous user behavior. Targeting uses contextual information, including broad (e.g., location-level) geographic targeting based on current location, content on the current website or app, and current search terms. Google prevents any personalized targeting, including demographic targeting and targeting based on user lists.For more information about Google's use of data, settings and opt-out options, please see Google's privacy policy (https://policies.google.com/technologies/ads) and the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).

GOOGLE ADWORDS AND CONVERSION MEASUREMENT.

We use on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR. GDPR) the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google").Google is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).We use the online marketing procedure Google "AdWords" to place ads in the Google advertising network (e.g., in search results, in videos, on web pages, etc.) so that they are displayed to users who have a presumed interest in the ads. This allows us to display ads for and within our Online Offerings in a more targeted manner to present users only with ads that potentially match their interests. If, for example, a user is shown ads for products he or she has been interested in on other online offers, this is referred to as "remarketing". For these purposes, when our website and other websites on which the Google advertising network is active are called up, a code is executed directly by Google and so-called (re)marketing tags (invisible graphics or code, also referred to as "web beacons") are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user's device (comparable technologies can also be used instead of cookies). This file records which web pages the user has visited, which content the user is interested in and which offers the user has clicked on, as well as technical information about the browser and operating system, referring web pages, time of visit and other information about the use of the online offer.Furthermore, we receive an individual "conversion cookie". The information obtained with the help of the cookie is used by Google to create conversion statistics for us. However, we only learn the anonymous total number of users who clicked on our ad and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information with which users can be personally identified.The users' data is processed pseudonymously within the Google advertising network. That is, Google does not store and process, for example, the name or email address of users, but processes the relevant data cookie-related within pseudonymous user profiles. I.e. from Google's perspective, the ads are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who this cookie holder is. This does not apply if a user has explicitly allowed Google to process the data without this pseudonymization. The information collected about users is transmitted to Google and stored on Google's servers in the U.S.A. For more information about Google's use of data, settings and opt-out options, please refer to Google's privacy policy (https://policies.google.com/technologies/ads) and the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).

GOOGLE DOUBLECLICK.

We use on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR. GDPR) the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google").Google is certified under the Privacy Shield Agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).We use the online marketing procedure Google "Doubleclick" to place ads in the Google advertising network (e.g., in search results, in videos, on websites, etc.). Double Click is characterized by the fact that ads are displayed in real time based on presumed user interests. This allows us to display ads for and within our online offering in a more targeted manner to present users only with ads that potentially match their interests. If, for example, a user is shown ads for products he or she was interested in on other online offers, this is referred to as "remarketing". For these purposes, when our website and other websites on which the Google advertising network is active are called up, a code is executed directly by Google and so-called (re)marketing tags (invisible graphics or code, also referred to as "web beacons") are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user's device (comparable technologies can also be used instead of cookies). This file records which web pages the user has visited, which content the user is interested in and which offers the user has clicked on, as well as technical information about the browser and operating system, referring web pages, time of visit and other information about the use of the online offer. The IP address of the user is also recorded, whereby this is shortened within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases transferred in full to a Google server in the USA and shortened there. The aforementioned information may also be combined on the part of Google with such information from other sources. If the user subsequently visits other websites, he can be shown ads tailored to him according to his presumed interests on the basis of his user profile.The user's data is processed pseudonymously within the Google advertising network. This means that Google does not store and process the name or e-mail address of the user, for example, but processes the relevant data on a cookie basis within pseudonymous user profiles. I.e. from Google's perspective, the ads are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who this cookie holder is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization. The information collected by Google marketing services about users is transmitted to Google and stored on Google's servers in the U.S.A. For more information about Google's use of data, settings and opt-out options, please refer to Google's privacy policy (https://policies.google.com/technologies/ads) and Google's advertising display settings (https://adssettings.google.com/authenticated).

ONLINE PRESENCE IN SOCIAL MEDIA.

We maintain online presences within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services there.We would like to point out that user data may be processed outside the area of the European Union. This may result in risks for users because, for example, it could make it more difficult to enforce users' rights. With regard to U.S. providers that are certified under the Privacy Shield, we point out that they thereby undertake to comply with the data protection standards of the EU.Furthermore, user data is usually processed for market research and advertising purposes. For example, usage profiles can be created from the usage behavior and resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and interests of the users are stored. Furthermore, data may also be stored in the usage profiles regardless of the devices used by the users (in particular if the users are members of the respective platforms and are logged in to them).The processing of the users' personal data is based on our legitimate interests in effectively informing the users and communicating with the users pursuant to Art. 6 para. 1 lit. f. GDPR. If the users are asked by the respective providers of the platforms for consent to the aforementioned data processing, the legal basis of the processing is Art. 6 para. 1 lit. a., Art. 7 GDPR a detailed presentation of the respective processing and the options to object (opt-out), we refer to the information of the providers linked below.Also in the case of information requests and the assertion of user rights, we point out that these can be asserted most effectively with the providers. Only the providers have access to the data of the users and can directly take appropriate measures and provide information. If you still need help, you can contact us.- Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) - Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.- Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) - Privacy Policy/ Opt-Out: http://instagram.com/about/legal/privacy/.

INTEGRATION OF THIRD-PARTY SERVICES AND CONTENT.

Within our online offer, we use content or service offers of third-party providers on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR) to integrate content or services offered by third-party providers, such as videos or fonts (hereinafter uniformly referred to as "content"). This always requires that the third-party providers of this content are aware of the IP address of the user, since without the IP address they could not send the content to their browser. The IP address is thus required for the display of this content. We endeavor to use only such content whose respective providers use the IP address only for the delivery of the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offer, as well as be combined with such information from other sources.

VIMEO.

We can embed the videos of the platform "Vimeo" of the provider Vimeo Inc, Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA. Privacy policy: https://vimeo.com/privacy. We would like to point out that Vimeo may use Google Analytics and refer to the privacy policy (https://policies.google.com/privacy) as well as opt-out options for Google Analytics (http://tools.google.com/dlpage/gaoptout?hl=de) or Google's settings for data use for marketing purposes (https://adssettings.google.com/).

YOUTUBE.

We integrate the videos of the platform "YouTube" of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

GOOGLE FONTS.

We integrate the fonts ("Google Fonts") of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

GOOGLE MAPS.

We integrate the maps of the service "Google Maps" of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The processed data may include, in particular, IP addresses and location data of the users, which, however, are not collected without their consent (usually executed as part of the settings of their mobile devices). The data may be processed in the USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.