PANTAFLIX Technologies GmbH, Neue Schönhauser Straße 16, 10178 Berlin, Germany, represented by the Managing Directors: Stefan Langefeld, Christoph Urban ("PANTAFLIX" or "we"), complies with the applicable data protection laws when you visit our web pages at www.pantaflixpro.com ("web pages") and hereby informs you on the details of the data processing as follows:
Any personal data shall be saved, processed and used by us under adherence to any applicable privacy regulations (especially the General Data Protection Regulation (GDPR), the German Federal Data Protection Act [Bundesdatenschutzgesetz, BDSG] and the German Telemedia Act [Telemediengesetz, TMG]).
Personal data is any information that refers to an identified or identifiable natural person (hereafter referred to as the "data subject"); a natural person shall be considered to be identifiable who may be directly or indirectly identified, especially through identifiers, such as a name, identification number, location data, online identifiers or one or several special characteristics that represent expressions of the physical, physiological, genetic, psychological, economic, cultural or social identity that can be assigned to this natural person. Information that cannot be associated with your true identity does not constitute personal data; this includes the number of users of our web pages or comparable summarized data.
- Processing Purpose and Legal Basis
By default, our web servers temporarily protocol the connection data of requesting computers that visit our web pages, the date and duration of visits, the identification data of the browser and operating system type and the websites from which they visit us.
We use tracking software to determine the frequency of use and number of users of our web pages. This software does not record data through which we can derive personal information, but we will learn your IP address when accessing our web pages. This data will only be used in anonymized and summarized form for statistical purposes and for the development of the web pages. These purposes for the processing are grounds for the legitimate interest we pursue (Article 6(1) f) GDPR. You may object to the collection and use of your IP address for statistical purposes by deactivating your internet browser's "Track User" function.
Irrespective thereof, you may generally visit our web pages without personal data being collected by us.
We, as the controller, will collect, process and use personal data on the basis of Article 6(1) a) or b) of the GDPR that you provide to us of your own accord for the execution of a contract or pre-contractual measures, when opening an account or contacting us or if you grant your permission for the respective processing. Furthermore, we may process your personal data if such processing is necessary for safeguarding legitimate interests of ours or of a third party, unless outweighed by your interests or basic rights or basic freedoms that require the protection of your personal data (Article 6(1) f) GDPR), as further explained hereafter, or if necessary for the fulfillment of other legal obligations of PANTAFLIX (Article 6(1) c) GDPR) or according applicable legal regulations of a member state of the European Union.
We will use your name, company name, business address, email address ("inventory data"), bank account and/or other payment details as your respective payment method to implement the VOD license contract concluded between you and us and as further explained hereafter (Article 6(1) b) GDPR). Contracts cannot be concluded without your inventory data. Please note, that you might transfer personal data including meta data to us in connection with the upload of a film.
Furthermore, we store your offer history including changes in regard to prices etc. for documentation purposes for you (Article 6(1) f) GDPR.
- Data Transfers to Third Parties
We will not provide your personal data to third parties without your express permission, which you may revoke at any time, or unless we are authorized to do so by law.
This includes service providers commissioned by us who support us with our business operations (abuse prevention, advertising agencies, IT service providers for operating our web sites, accountants, tax consultants).
Furthermore, this includes transferring your personal data to banks that handle payments as necessary under the VOD license contract (Article 6(1) b) GDPR).
However, in such cases, the extent of the transmitted data will be limited to the minimum required for achieving the objective of the data processing. We do not process any of your payment information (account information, credit card number, etc.)—except for your payment method and billing address. Processing is performed exclusively by the certified external payment provider.
Should we be legally required to disclose certain personal data due to court orders or requests by prosecution or regulatory authorities or authorized third parties for investigative procedures or because of suspicions of crimes, unlawful acts or other actions that may result in liability for you or us, we will disclose the data required for the investigation, such as your name, address, email address or offer history (Article 6(1) c) GDPR).
- Data Transfers into Non-EEA / Non-EU Countries
We may also transfer your personal data to third parties outside of EEA / EU member states for which the European Commission does not find privacy protection levels to be comparable to those of the EU (e.g., the US). In such cases, before transferring your data, we will ensure that the recipient possesses an adequate privacy protection level, especially by first obtaining your consent for the processing, or through specific safeguards according to Article 44 et seq. GDPR such as the EU-US Privacy Shield self-certification for US recipients or by concluding so-called EU Standard Contractual Clauses for the third country. You may receive a copy of appropriate safeguards such as these Standard Contractual Clauses from our data protection officer on request; see Section 10 for contact details. Moreover, you can find further information on the members of the EU-US Privacy Shield here: www.privacyshield.gov/list.
If you provide your email address when purchasing goods or services on our web pages, we may also use your email address to send you a newsletter. In such cases, the newsletter will only be used to send direct advertisements for similar goods and services of ours (Legal basis: Section 7(3) UWG).
- Google Analytics
PANTAFLIX uses Google Analytics, a web analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, 94043 CA, USA, ("Google"). Google Analytics saves information about your use of these web pages (including your IP address) on cookies. (For information about cookies, please see above). The information saved by Google Analytics on cookies will be transmitted to a Google server in the US where it is stored and assessed. Please note that Google Analytics was extended by the code "gat._anonymizeIp(); on our web pages. This ensures that IP addresses are collected anonymously (through so-called IP masking). Through this process, IP addresses are usually shortened by Google servers in member states of the European Union or in other states party to the European Economic Area Agreement before being saved or transmitted to Google servers in the US. IP addresses that have not been shortened are only transmitted to Google servers in the US in exceptions, though, even in such cases, the IP addresses will be shortened before being saved.
Google will use the transmitted data to assess your use of our web pages, compile web page activity reports and perform additional services for our web pages for us. (We therefore have a data processing agreement with Google). The purpose of using Google Analytics is the continuous improvement of our web pages and optimize your user experience. These purposes are also the grounds for our legitimate interest for the processing (Article 6(1) f) _GDPR). Furthermore, the processing is based on your consent in regard to the processing by Google for these purposes and as explained above which you may give us by clicking a respective button on these web pages (Article 6(1) a) DSGVO).
You may prevent the collection of your data by Google Analytics, if you click on the following link. In this case, an opt-out cookie will be placed which will prevent the future collection of your data by Google Analytics when you visit these web pages in the future: Deactivate Google Analytics.
Google also offers a deactivation add-on for common desktop browsers. These add-ons block Google Analytics and prevent personal data on your use of our web pages (including your IP address) from being transferred to and processed by Google. This browser plugin can be downloaded and installed at: http://tools.google.com/dlpage/gaoptout
Irrespective thereof, any data collected by Google Analytics will automatically be deleted after 14 months with or without your interactions in this matter.
Further information about the purpose and scope of data collection and further processing and use by Google, including notices about your rights and privacy protection configuration options, can be found under the following links:
Google Tag Manager
- Data Subject Rights
Under the applicable privacy protection regulations, you may exercise the following rights at any time:
- Demand the disclosure of personal data saved about you;
- Demand the recitification or erasure of inaccurate personal data;
- Demand if applicable processing restrictions of your personal data (in certain legally regulated cases, e.g., required storage periods, your data may be blocked instead of deleted);
- Object to the processing of your personal data processed by us due to legitimate interests (Article 6(1) f) of the General Data Protection Regulation);
- In the event of processing based on your consent on a contract between you and us you have the right to demand to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to demand that we transmit those data to another controller if this is technically feasible (data portability).
- Revoke any permission granted to us with future effect. However, this will not affect the legitimacy of any processing performed under your permission prior to its revocation.
In case of complaints about the treatment of your personal data, you may also contact the competent regulatory authorities.
- Retention Period
We will, under adherence to any applicable privacy regulations, delete any personal data saved about you without your involvement if notifying you is no longer necessary to achieve the aims pursued by saving the data or if saving the data is not permitted for other legal reasons. In some legally required cases (e.g., legally required storage periods), your data may be blocked instead of deleted.
- Data Protection Officer
PANTAFLIX Technologies GmbH
Neue Schönhauser Straße 16
10178 Berlin, Germany