PANTAFLIX Technologies GmbH – Privacy Policy
 
  1. Controller
 
PANTAFLIX Technologies GmbH, Neue Schönhauser Straße 16, 10178 Berlin, Germany, represented by the Managing Director: Rainer Knebel  ("PANTAFLIX" or "we"), complies with the applicable data protection laws when you visit our web pages at www.pantaflixpro.com ("web pages") and hereby informs you on the details of the data processing as follows:
 
Any personal data shall be saved, processed and used by us under adherence to any applicable privacy regulations (especially the General Data Protection Regulation (GDPR), the German Federal Data Protection Act [Bundesdatenschutzgesetz, BDSG] and the German Telemedia Act [Telemediengesetz, TMG]).
Personal data is any information that refers to an identified or identifiable natural person (hereafter referred to as the "data subject"); a natural person shall be considered to be identifiable who may be directly or indirectly identified, especially through identifiers, such as a name, identification number, location data, online identifiers or one or several special characteristics that represent expressions of the physical, physiological, genetic, psychological, economic, cultural or social identity that can be assigned to this natural person. Information that cannot be associated with your true identity does not constitute personal data; this includes the number of users of our web pages or comparable summarized data.
 
  1. Processing Purpose and Legal Basis
 
By default, our web servers temporarily protocol the connection data of requesting computers that visit our web pages, the date and duration of visits, the identification data of the browser and operating system type and the websites from which they visit us.
We use tracking software to determine the frequency of use and number of users of our web pages. This software does not record data through which we can derive personal information, but we will learn your IP address when accessing our web pages. This data will only be used in anonymized and summarized form for statistical purposes and for the development of the web pages. These purposes for the processing are grounds for the legitimate interest we pursue (Article 6(1) f) GDPR. You may object to the collection and use of your IP address for statistical purposes by deactivating your internet browser's "Track User" function.
 
Irrespective thereof, you may generally visit our web pages without personal data being collected by us.
 
We, as the controller, will collect, process and use personal data on the basis of Article 6(1) a) or b) of the GDPR that you provide to us of your own accord for the execution of a contract or pre-contractual measures, when opening an account or contacting us or if you grant your permission for the respective processing. Furthermore, we may process your personal data if such processing is necessary for safeguarding legitimate interests of ours or of a third party, unless outweighed by your interests or basic rights or basic freedoms that require the protection of your personal data (Article 6(1) f) GDPR), as further explained hereafter, or if necessary for the fulfillment of other legal obligations of PANTAFLIX (Article 6(1) c) GDPR) or according applicable legal regulations of a member state of the European Union.
 
We will use your name, company name, business address, email address ("inventory data"), bank account and/or other payment details as your respective payment method to implement the VOD license contract concluded between you and us and as further explained hereafter (Article  6(1) b) GDPR). Contracts cannot be concluded without your inventory data.  Please note, that you might transfer personal data including meta data to us in connection with the upload of a film.
 
Furthermore, we store your offer history including changes in regard to prices etc. for documentation purposes for you (Article 6(1) f) GDPR.
 
  1. Data Transfers to Third Parties
We will not provide your personal data to third parties without your express permission, which you may revoke at any time, or unless we are authorized to do so by law.
This includes service providers commissioned by us who support us with our business operations (abuse prevention, advertising agencies, IT service providers for operating our web sites, accountants, tax consultants).
Furthermore, this includes transferring your personal data to banks that handle payments as necessary under the VOD license contract (Article 6(1) b) GDPR).
However, in such cases, the extent of the transmitted data will be limited to the minimum required for achieving the objective of the data processing. We do not process any of your payment information (account information, credit card number, etc.)—except for your payment method and billing address. Processing is performed exclusively by the certified external payment provider.
Should we be legally required to disclose certain personal data due to court orders or requests by prosecution or regulatory authorities or authorized third parties for investigative procedures or because of suspicions of crimes, unlawful acts or other actions that may result in liability for you or us, we will disclose the data required for the investigation, such as your name, address, email address or offer history (Article 6(1) c) GDPR).
 
  1. Data Transfers into Non-EEA / Non-EU Countries
We may also transfer your personal data to third parties outside of EEA / EU member states for which the European Commission does not find privacy protection levels to be comparable to those of the EU (e.g., the US). In such cases, before transferring your data, we will ensure that the recipient possesses an adequate privacy protection level, especially by first obtaining your consent for the processing, or through specific safeguards according to Article 44 et seq. GDPR such as the EU-US Privacy Shield self-certification for US recipients or by concluding so-called EU Standard Contractual Clauses for the third country. You may receive a copy of appropriate safeguards such as these Standard Contractual Clauses from our data protection officer on request; see Section 10 for contact details. Moreover, you can find further information on the members of the EU-US Privacy Shield here: www.privacyshield.gov/list.
 
  1. Newsletters
Our web pages offer subscriptions to a free email newsletter. When subscribing for the newsletter, data submitted through the input screen for registration will be transmitted to us (your name, email address, if applicable, telephone number for text messages). We will request your permission to process your data during the registration process or subsequent visits to our web pages (Article 6(1) a) GDPR, Section 7(2) of the German Act Against Unfair Competition [Gesetz gegen den unlauteren Wettbewerb, UWG]) and refer to this Privacy Policy. In the event of such consent we may send such newsletters to you through the newsletter platforms "MailChimp" and "Mandrill", operated by Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA (together "MailChimp") which we have assigned. MailChimp is certified with the „EU-US Privacy Shield “ and is therefore obligated to comply with the European data protection regulations. Furthermore, we have concluded a „Data Processing Agreement" with MailChimp, in which MailChimp has agreed to protect the data of our users according to the provisions of this Data Processing Agreement, to process data on our behalf and in particular not to transfer data to any third parties. Please find further information in regard to data processing by MailChimp in MailChimp's Privacy Policy . We will provide the details of the processing of your personal data to you transparently before the completion of your newsletter subscription .
If you provide your email address when purchasing goods or services on our web pages, we may also use your email address to send you a newsletter. In such cases, the newsletter will only be used to send direct advertisements for similar goods and services of ours (Legal basis: Section 7(3) UWG).
 
  1. Cookies
Several of our websites use cookies to make visiting our web pages more attractive and allow use of certain functions. Cookies are small text files saved onto your computer. Most of the cookies we use are so-called "session cookies." These will be automatically deleted after your visit to our web pages. Furthermore, we use permanent cookies, which enable us to recognize you when you visit our web pages in the future for the optimization of user settings. The legal basis for the use of cookies for the operation of our web pages and certain services on behalf of our users is Article 6(1) f) GDPR. In addition, if and where legally required we obtain your consent (Article 6(1) a) DSGVO). You may prevent cookies from being saved onto your computer through according browser settings. However, this may limit navigational options on our web pages. 
 
  1. Google Analytics
PANTAFLIX uses Google Analytics, a web analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, 94043 CA, USA, ("Google"). Google Analytics saves information about your use of these web pages (including your IP address) on cookies. (For information about cookies, please see above). The information saved by Google Analytics on cookies will be transmitted to a Google server in the US where it is stored and assessed. Please note that Google Analytics was extended by the code "gat._anonymizeIp(); on our web pages. This ensures that IP addresses are collected anonymously (through so-called IP masking). Through this process, IP addresses are usually shortened by Google servers in member states of the European Union or in other states party to the European Economic Area Agreement before being saved or transmitted to Google servers in the US. IP addresses that have not been shortened are only transmitted to Google servers in the US in exceptions, though, even in such cases, the IP addresses will be shortened before being saved.
Google will use the transmitted data to assess your use of our web pages, compile web page activity reports and perform additional services for our web pages for us. (We therefore have a data processing agreement with Google). The purpose of using Google Analytics is the continuous improvement of our web pages and optimize your user experience. These purposes are also the grounds for our legitimate interest for the processing (Article 6(1) f) _GDPR). Furthermore, the processing is based on your consent in regard to the processing by Google for these purposes and as explained above which you may give us by clicking a respective button on these web pages (Article 6(1) a) DSGVO).
You may prevent the collection of your data by Google Analytics, if you click on the following link. In this case, an opt-out cookie will be placed which will prevent the future collection of your data by Google Analytics when you visit these web pages in the future: Deactivate Google Analytics.
Google also offers a deactivation add-on for common desktop browsers. These add-ons block Google Analytics and prevent personal data on your use of our web pages (including your IP address) from being transferred to and processed by Google. This browser plugin can be downloaded and installed at: http://tools.google.com/dlpage/gaoptout
Irrespective thereof, any data collected by Google Analytics will automatically be deleted after 14 months with or without your interactions in this matter.
 
Further information about the purpose and scope of data collection and further processing and use by Google, including notices about your rights and privacy protection configuration options, can be found under the following links:
http://www.google.com/analytics/terms/us.html and
http://www.google.com/analytics/privacyoverview.html.
 
Google Tag Manager
Furthermore, PANTAFLIX also uses Google Tag Manager. This service allows website tags to be managed. Google Tag Manager merely implements tags. This means: Google Tag Manager does not use cookies and no personal data is collected. Google Tag Manager activates other tags that may collect data which, however, is not accessed by Google Tag Manager. If websites were deactivated on the domain or browser level (see cookie deactivation in Section 6 above), they will remain deactivated for all tracking tags implemented through Google Tag Manager.
 
  1. Data Subject Rights
 
Under the applicable privacy protection regulations, you may exercise the following rights at any time:
  • Demand the disclosure of personal data saved about you;
  • Demand the recitification or erasure of inaccurate personal data;
  • Demand if applicable processing restrictions of your personal data (in certain legally regulated cases, e.g., required storage periods, your data may be blocked instead of deleted);
  • Object to the processing of your personal data processed by us due to legitimate interests (Article 6(1) f) of the General Data Protection Regulation);
  • In the event of processing based on your consent on a contract between you and us you have the right to demand to receive  the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to demand that we transmit those data to another controller if this is technically feasible (data portability).
  • Revoke any permission granted to us with future effect. However, this will not affect the legitimacy of any processing performed under your permission prior to its revocation.
 
You may assert the above-stated rights against us, e.g., by contacting us through the paths described at the end of this Privacy Policy. We will notify any recipients to whom we disclosed your personal data about any correction, deletion or processing restrictions regarding your personal data, unless doing so proves to be impossible or unreasonable.
 
In case of complaints about the treatment of your personal data, you may also contact the competent regulatory authorities.
 
  1. Retention Period
 
We will, under adherence to any applicable privacy regulations, delete any personal data saved about you without your involvement if notifying you is no longer necessary to achieve the aims pursued by saving the data or if saving the data is not permitted for other legal reasons. In some legally required cases (e.g., legally required storage periods), your data may be blocked instead of deleted.
 
  1. Data Protection Officer
 
Should you have any questions about this Privacy Policy or the treatment of your personal data, please do not hesitate to contact our data protection officer at any time, including for requests, suggestions or complaints, as follows:
 
By mail:
PANTAFLIX Technologies GmbH
Neue Schönhauser Straße 16
10178 Berlin, Germany
 
By email:
privacy@pantaflix.com.