We, Weischer.Cinema want you to feel at ease when visiting our website. Protecting your personal data is an important matter for us and therefore in the following we wish to inform you of how we handle your data in compliance with Article 13 of the General Data Protection Regulation (GDPR).
Responsibility for the data collection and processing described in the following lies with the person whose details are stated in the Imprint.
We store the IP address transferred by your web browser only where strictly necessary and for a period of seven days, for the purpose of detecting, limiting and eliminating attacks on our web pages. After this period, we delete or anonymise the IP address. The legal basis for this is Article 6(1)(f) GDPR.
It is, in principle, possible to visit our website without disclosing any personal data. For statistical purposes, temporary usage data is stored as a log in order to improve the quality of our web pages. This data set consists of:
Such log data is only saved anonymously.
Weischer collects, processes, stores and protects the data of people who access our website. We take technical and organisational measures to protect your data from unwanted access as comprehensively as possible. We use an encryption method on our website. Your information is transferred over the Internet from your computer to our server and vice versa using TLS 1.2. You will recognise this by the fact that the lock symbol on the status bar of your browser is locked and the address bar starts with https: //.
We transfer your data to service providers for contract processing, in accordance with Article 28 GDPR, that assist us in managing our web pages (e.g. hosting and web analysis) and associated processes. Our service providers are strictly subject to our instructions and are bound by agreement accordingly.
Website hosting: Microsoft Azure
Digital newsletter and sending of invitations: Episerver / Optivo and Mailjet
Analysis: Google Analytics (see third countries)
In addition, our subsidiary companies Weischer.Cinema Deutschland GmbH & Co. KG, Weischer.JvB GmbH, Weischer.Cinema Schweiz GmbH, Weischer.Cinema Austria GmbH (siehe Drittländer); Weischer Online GmbH, elbbergMedia GmbH & Co. KG, Weischer.Solutions GmbH, Weischer.Cinema Regio GmbH & Co. KG, Weischer.Q GmbH and Nqyer Media GmbH can access your data.
We transfer some of your personal data to third countries outside the EU. In doing so, we have ensured that there is an appropriate level of data security:
In the case of Google Analytics (USA) and MailChimp (USA), an adequate level of data protection is provided through corresponding participation in the Privacy Shield agreement (Article 45(1) GDPR).
We use cookies on our website. Cookies are small text files that can be stored on your end device and be read out. A distinction is made between session cookies, which can be deleted once you close your browser, and permanent cookies that are stored beyond one individual session. Cookies may contain data that enable recognition of the device used to access the website. However, some cookies also contain information about certain settings that do not relate to the individual person.
We use session cookies and permanent cookies on our web pages. Data is processed on the basis of Article 6(1)(f) GDPR and in the interests of optimising and enabling user prompting and adjusting the display of our website.
You can set your browser so that you are informed about the installation of cookies. This way, the use of cookies is transparent to you. You can delete cookies at any time via the corresponding settings for your browser and you can block new cookies. Please note that in this case our web pages will not be displayed optimally and some functions will no longer be available.
To design our website according to the user’s needs, we create pseudonym usage profiles using Google Analytics. Google Analytics uses cookies, which are small text files that can be stored on your end device and read out by us. This way, we are able to recognise returning visitors and manage them as such. Data is processed on the basis of Article 6(1)(f) GDPR and Article 15(3) of the German Telemedia Act (TMG) and in the interest of finding out how often our web pages were called up by different users.
The information generated by the cookie about the use of this website is usually transferred to a Google server in the USA where it is stored. As we have activated IP anonymisation on this website, your IP address is however first shortened by Google within the European Union member states. Only in exceptional cases is the full IP address transferred to a Google server in the USA where it is then shortened (an adequate level of data protection is in place according to Article 45(1) GDPR through Google’s participation in the Privacy Shield). We have also concluded an agreement with Google Inc. (USA) for contract processing in accordance with Article 28 GDPR. Google may therefore only use all information strictly for the purpose intended, in order to evaluate the usage of our website for our company and to compile reports on the website activities.
You can object to the processing of your data at any time with effect for the future. Please use one of the following options for this purpose:
You can prevent the storage of cookies by making the corresponding settings in your browser software; we would like to point out, however, that in this case you will not be able to use the full extent of the functionality on this website.
You can also prevent Google from collecting the data generated by the cookie and in relation to your use of the website (incl. your IP address) and also prevent Google from processing this data, by downloading and installing the browser plugin available under the following link (http://tools.google.com/dlpage/gaoptout?hl=en).
We process the personal data of our customers insofar and as long as this is required for the implementation of pre-contractual measures or for the performance of an agreement pursuant to Article 6(1)(1)(b) GDPR, or insofar as this is in our legitimate interest as per Article 6(1)(1)(f) GDPR. A legitimate interest includes information about events or news from Weischer and its subsidiaries.
Data will only be processed for its intended purpose within the area of application of the GDPR and in Switzerland and will not be passed on to third parties, unless appropriate data protection agreements are in place with those cooperation partners. Data will only be deleted if the purpose no longer exists and if this does not conflict with statutory retention requirements. The rights of the individual concerned remain unaffected.
Personal data is information about factual or personal circumstances relating to an identified or identifiable natural person. This includes your name and e-mail address, for example.
We process your personal data for
Weischer processes and stores personal data for the persons concerned solely for the period for which it is required to achieve the storage purpose, or if this is stipulated by legal regulations to which the controller is subjected. If there is no storage purpose or if a legal storage deadline expires, the personal data is routinely blocked or erased and in accordance with the legal provisions.
No data shall be processed without a legal basis. Such as:
Unless limited by the applicable laws, the individual has the following rights:
You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, you have the right to obtain disclosure of the information set out in Article 15 GDPR relating to such personal data.
You have the right to request, without delay, the rectification of inaccurate personal data and, where necessary, the right to have incomplete personal data completed.
In addition, you have the right to request the erasure of personal data without undue delay, where one of the grounds set out in Article 17 GDPR applies, e.g. when the data is no longer required for the designated purpose. This may take up to four weeks to process.
You have the right to request restriction of processing where one of the circumstances set out in Article 18 GDPR applies, e.g. if you have contested such processing, for a period enabling verification to be carried out.
In certain cases, as detailed in Article 20 GDPR, you have the right to receive the personal data concerning you, in a structured, commonly used and machine-readable format and/or the right to transmit such data to a third party.
If data is collected on the basis of Article 6(1)(f) (data processing for the purposes of pursuing legitimate interests), you have the right to object, on grounds relating to your particular situation, at any time, to the processing of such data. We will then no longer process such personal data unless there are evidently compelling legitimate grounds for such processing that outweigh the interests, rights and freedoms of the data subject, or the processing is for the purpose of enforcing, pursuing or defending legal claims.
Under Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority, if you consider that the processing of personal data relating to you violates data protection regulations. This right to lodge a complaint may be exercised with a supervisory authority in the member state of your habitual residence, place of work or place of the alleged violation.
For reasons of data protection, we do not integrate any social plugins directly into our website. When you call up our pages, no data is therefore transferred to social media services such as Facebook, Twitter, XING and LinkedIn. Profiling by third parties is therefore excluded.
Nevertheless, you have the option to click on the Facebook, Twitter, XING and LinkedIn buttons to share selected pages and also to view how many times the pages you call up have been shared in the past. To do this, we use Shariff solution, which was developed by c’t magazine in order to offer a data protection-compliant alternative to the traditional social plugins.
What lies behind this technology? With the Shariff solution, all the data and functions that are required to display Facebook, Twitter, XING and LinkedIn buttons are provided by our web server. When you choose to share a page by clicking on the corresponding button, only then is the data transferred to the operator of the respective social media service.
As part of the contractual agreement, we offer the receipt of newsletters and event invitations etc. In order to send these digital communications, we apply the double opt-in procedure, i.e. we will only send you a newsletter or invitation by e-mail after you have expressly confirmed that we can activate these services for you. This is processed on the basis of Article 6(1)(a) GDPR.
You can revoke your consent at any time without this affecting the lawfulness of any former processing. If your consent is revoked, we adjust data processing accordingly.
If you wish to revoke your consent, you can do this here: Revoke data usage
As a contractual customer, we will occasionally send you product or service recommendations by e-mail. You receive these recommendations from us regardless of whether or not you have subscribed to a newsletter. We want to share information with you about products from our range that could be of interest to you based upon your most recent product and service purchases. In doing so, we strictly abide by the legal regulations. If you no longer wish to receive product recommendations or any commercial-related e-mails from us, you can object at any time without this resulting in costs other than the transmission costs according to the basic tariffs. Each of our e-mails also includes a link to unsubscribe.
As part of the commenting function on this page, alongside your comment is information regarding the time the comment was created and, if you do not post anonymously, your selected user name is also displayed.
Our commenting function stores the IP addresses of the users who post comments. Before being published, each comment is checked by our editorial team for violations, infringements, insults or propaganda.
Information that you provide when entering competitions will be used solely for the purpose of determining and contacting the winner (Article (6)(1)(f) DSGVO). The winners will be notified in writing. Your data will not be used for any commercial purposes. We will delete this data at the end of the competition, or if you object to the use of your data. If cooperation partners take part in the respective competitions, we send the information that you have provided to us within the scope of the competitions.
Our company Data Protection Officer is at your disposal for information or suggestions concerning data protection:
Dr Uwe Schläger
datenschutz nord GmbH
Telephone: +49 421 6966320
E-mail: office@datenschutz-nord.de
www.datenschutz-nord-gruppe.de
Version 3.0 from 1 December 2018 (expressly subject to change and modification)
In the following, we would like to inform you about how your data is handled in accordance with Article 13 of the General Data Protection Regulation (GDPR).
We, Weischer, operate the following social media pages:
Our contact details can be found in our Imprint.
Besides our company, the operator of the social media platform is also responsible for data privacy. The operator is another controller that processes data, and upon which we have only limited influence. In the areas where we have an influence and can parameterise the data processing settings, we can ensure that the data is handled confidentially by the social media platform operator within the scope of the options available to us. However, in many areas we cannot influence data processing by the social media platform operator and nor do we know exactly which data it processes.
The data you share on our social media pages, such as comments, videos, images, likes and public messages etc. are published by the social media platform and are not used or processed by us at any time for any other purposes. We reserve the right to delete contents should this be deemed necessary. Where appropriate, we may share your content on our page if this function is offered by the social media platform and communicate with you via the social media platform. The legal basis for this is Article 6(1)(1)(f) GDPR. Data is processed in the interest of our public relations work and communications.
If you wish to object to a particular data processing activity that we have an influence upon, please refer to the contact details mentioned in the Imprint. We will then review your objection.
If you make a request on the social media platform, depending on the required response, we may refer to other secure communication channels that guarantee confidentiality. You always have the option to send confidential requests to us at the address mentioned in the Imprint.
As mentioned previously, we are vigilant with regard to the areas where the social media platform provider gives us the option to design our social media sites to be as compliant with data protection law as possible. Therefore, in particular we do not use the demographic, interest-based, behaviour-based or location-based target group definitions for advertising that are made available to us by the social media platform operator. On the whole, we do not use the data provided by the respective platforms for commercial purposes. With regard to statistics that the social media platform provider makes available to us, we can only have a marginal influence upon them and cannot deactivate them. However, we are vigilant in ensuring that no additional optional statistics are made available to us.
The social media platform operator uses web tracking methods. Web tracking can also be carried out irrespectively of whether you are logged on or registered with the social media platform. As previously explained, we cannot unfortunately influence the web tracking methods on the social media platform. Nor can we deactivate them, for example.
Please be aware that: It can not be ruled out that the social media platform operator will use your profile and behaviour data in order to assess your habits, personal relationships and preferences etc. In this respect, we have no influence upon how the social media platform operator processes your data.
For more information on data processing by the social media platform operator and other objection options, see the privacy statement of the operator:
The GDPR grants you specific rights as a website user concerning your personal data:
You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, you have the right to obtain disclosure of the information set out in Article 15 GDPR relating to such personal data.
You have the right to request, without delay, the rectification of inaccurate personal data and, where necessary, the right to have incomplete personal data completed.
In addition, you have the right to request the erasure of personal data without undue delay, where one of the grounds set out in Article 17 GDPR applies, e.g. when the data is no longer required for the designated purpose.
You have the right to request restriction of processing where one of the circumstances set out in Article 18 GDPR applies, e.g. if you have contested such processing, for a period enabling verification to be carried out.
In certain cases, as detailed in Article 20 GDPR, you have the right to receive the personal data concerning you, in a structured, commonly used and machine-readable format and/or the right to transmit such data to a third party.
If data is collected on the basis of Article 6(1)(f) (data processing for the purposes of pursuing legitimate interests), you have the right to object, on grounds relating to your particular situation, at any time, to the processing of such data. We will then no longer process such personal data unless there are evidently compelling legitimate grounds for such processing that outweigh the interests, rights and freedoms of the data subject, or the processing is for the purpose of enforcing, pursuing or defending legal claims.
Under Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority, if you consider that the processing of personal data relating to you violates data protection regulations. This right to lodge a complaint may be exercised with a supervisory authority in the member state of your habitual residence, place of work or place of the alleged violation.
Our Data Protection Officer is at your disposal for information or suggestions concerning data protection:
Dr Uwe Schläger
datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen
Web: www.datenschutz-nord-gruppe.de
E-mail: office@datenschutz-nord.de
Telephone: 0421 69 66 32 0
Version 1.0 from 1 September 2018 (expressly subject to change and modification)
