Privacy Policy

PRIVACY POLICY

Thank you for visiting our website and for your interest in our company. We see data protection as a customer-oriented quality feature, and the protection of your personal data and the safeguarding of your personality rights are important to us.

With this privacy policy, we would like to transparently provide all visitors to our website with information about the type, scope and purpose of the personal data we collect, use and process and to enlighten you about the rights to which you are entitled.

Our website can generally be used without the provision of personal data. However, the processing of your personal data may become necessary if you use our company’s services through our website.

The data collected automatically when you visit our website or the personal data you input when you use our services will be processed in accordance with the current legal provisions for the protection of personal data.

If the processing of your personal data is necessary and there is no legal basis for such processing, we will always obtain consent for the necessary processing purpose.

As the company responsible for processing, we have laid down technical and organisational measures to ensure the highest possible level of protection of your personal data.

However, please note that there may be security gaps with respect to data transmission via the World Wide Web.

You may also contact us by telephone if you would like to use our company’s services and do not wish to transmit data via the World Wide Web.

1. CONTROLLER’S CONTACT DETAILS

The Controller within the meaning of the General Data Protection Regulation is:

Filmakademie Baden-Württemberg GmbH
Akademiehof 10 71638
Ludwigsburg Tel.: +49 7141 969 0
E-Mail: info(at)filmakademie.de

The following person has been appointed Data Protection Officer:
Herr Stephan Hartinger
Coseco GmbH
Telefon: 08232 80988-70
E-Mail: datenschutz@coseco.de

2. COLLECTION OF GENERAL ACCESS INFORMATION

The server log file information that your browser transmits to us every time you visit our website will be recorded automatically. These are:

  1. the accessing computer’s IP address (internet protocol address)
  2. The website from which you visit us (referrer);
  3. The webpage that you visit on our site;
  4. date and duration of your visit;
  5. Browser type and settings;
  6. Operating system.

Please note that this data cannot be assigned to specific persons. We will only use this technical access information for the following purposes:

  1. To improve our websites’ attractiveness and usability;
  2. To detect technical problems on our website at an early stage.
  3. To deliver the contents of our website correctly;
  4. To provide law enforcement agencies with the information necessary for prosecution in the event of a cyberattack.

This data will be stored for a maximum of 7 days as a technical precaution to protect the data processing systems against unauthorized access.

3. COLLECTION AND PASSING ON OF PERSONAL DATA

We will only use your personal data for the purposes stated on this data protection information page.

Our website has the following input masks for the collection of personal data: Registration on our web site

3.1.1 SUBMISSION OF APPLICATION DOCUMENTS

We will collect and process various personal application data as part of your application (online application or by e-mail).

These include, in particular, your

  • contact information (name, address, telephone number and email address);
  • Application documents (application letter, curriculum vitae, certificates or other evidence of formal training and qualifications).

As part of an online application through the application form, transmission will be carried out exclusively via an encrypted page in accordance with the currently recognised state of the art, so that your personal data and your application documents will be protected against manipulation and unauthorised access.

After dispatch, you will receive an e-mail confirming receipt of your application documents.

Your personal application data will be collected and processed exclusively for the purpose of filling positions within our company. Your data will only be forwarded to the internal units and departments of our company responsible for the specific application procedure. Your personal application data will not be passed on to other companies without your prior express consent. Your application data will not be used by or passed on to third parties beyond these limits.

Your personal application data will be deleted automatically three months after the application process has been completed. This does not apply if statutory provisions prevent deletion, if further storage is necessary for the purpose of providing evidence or if you have expressly consented to longer storage, e.g. for future job advertisements.

If an employment contract is concluded with an applicant, the transmitted data will be stored for the purpose of implementing the employment relationship in accordance with the statutory provisions.

3.1.5 MAKING CONTACT BY E-MAIL OR THROUGH CONTACT FORM

On our website, we offer you the option of contacting us by e-mail and/or through a contact form.

The personal data you transmit will be stored automatically if you contact us by e-mail or through a contact form.

Such personal data which you provide to us voluntarily will be stored for the purpose of processing your inquiry or contacting the person concerned. This personal data will not be passed on to third parties.

4. WHAT ARE COOKIES USED FOR?

Our website uses so-called cookies in several places. Detailed information and which cookies are used can be found in our cookie policy (link to cookie policy).

4.1 USE AND APPLICATION OF TRACKING AND ANALYSIS TOOLS AND SOCIAL PLUG-INS

WP Statistics

This website uses the WP Statistics analysis tool to statistically evaluate visitor traffic. Provider is Veronalabs, Tatari 64, 10134, Tallinn, Estonia (https://veronalabs.com).

WP Statistics allows us to analyze the use of our website. WP Statistics collects log files (referrer, browser used, origin of the user, search engine used) and actions that website visitors have taken on the page (e.g. clicks and views).

The data collected with WP Statistics is stored exclusively on our own server and is not shared with WordPress.

The use of this analysis tool is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the anonymized analysis of user behavior in order to optimize both our website and our advertising. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is based exclusively on Art. 6 1 lit. a GDPR; the consent can be revoked at any time.

IP anonymization

We use WP Statistics with anonymized IP. Your IP address is shortened so that it can no longer be directly assigned to you.

5. DELETION, BLOCKING AND DURATION OF THE STORAGE OF PERSONAL DATA

We will only process and store your personal data for the period of time required to achieve the respective storage purpose or which is stipulated by law. After a storage purpose ceases to subsist or after expiry of the statutorily stipulated storage period, the personal data will be routinely blocked for further processing or deleted in accordance with the statutory provisions.

6. DATA SUBJECT’S PRIVACY RIGHTS

You can contact us in writing at any time if you have any questions about your personal data. You have the following rights under the GDPR:

6.1 RIGHT TO INFORMATION (ARTICLE 15 GDPR)

You have the right to receive information at any time about which categories and information concerning your personal data we are processing for which purpose and how long and according to which criteria these data will be stored, and whether an automated decision-making process including profiling has been applied in this connection. You also have the right to know to which recipients or categories of recipients your data has been or is still being disclosed, in particular recipients in third countries or international organisations. In this case, you also have the right to be informed about appropriate safeguards in connection with the transmission of your personal data.

In addition to the right to lodge complaints with the supervisory authority and the right to information about your data’s provenance, you have the right to have your personal data erased and rectified and the right to restrict or object to the processing of your personal data.

In all the above cases, you have the right to request a free copy of your personal data that we have processed from the data processor. We are entitled to charge an appropriate administrative fee for all additional copies that you request or which go beyond the data subject’s right to information.

6.2 RIGHT TO RECTIFICATION (ARTICLE 16 GDPR)

You have the right to request the immediate rectification of your incorrect personal data and, taking into account the purposes of the processing, to request the completion of incomplete personal data including by means of providing a supplementary statement.

You can contact our data protection officer or the data controller at any time if you wish to exercise your right to rectification.

6.3 RIGHT TO ERASURE (ARTICLE 17 GDPR)

You have the right to demand the immediate erasure of your data (“right to be forgotten”) especially if the storage of the data is no longer necessary, if you revoke your consent to data processing, if your data was processed unlawfully or was collected unlawfully and if there is a legal obligation to erase under EU or national law.

However, the right to be forgotten shall not apply if there is an overriding right to freedom of expression or information, if data storage is necessary for the fulfilment of a legal obligation (e.g. storage obligations), if archiving purposes prevent erasure or if the storage serves to establish, exercise or defend legal claims.

6.4 RIGHT TO RESTRICTION OF PROCESSING (ARTICLE 18 GDPR)

You have the right to request the controller to restrict the processing of your data if you dispute the data’s accuracy, if the processing is unlawful and you oppose the erasure of your personal data and instead request a restriction of its processing, if the necessity for the processing purpose ceases or if you have objected to the processing in accordance with Article 21(1), as long as it is has not yet been established whether there are any legitimate reasons on our part which outweigh yours.

6.5 RIGHT TO DATA PORTABILITY (ARTICLE 20 GDPR)

You have the right to the portability of your personal data which you have provided to our company in a standard format, so that you can have your personal data transmitted to another controller without hindrance, provided, for example, that you have given your consent and the processing is carried out using an automated procedure.

6.6 RIGHT TO OBJECT (ARTICLE 21 GDPR)

You have the right to object at any time to the collection, processing or use of your personal data for the purposes of direct advertising or market and opinion research as well as general business data processing, unless we can prove compelling reasons worthy of protection for processing which outweigh your interests, rights and freedoms. Furthermore, you cannot exercise your right to object if a statutory provision stipulates or requires the data’s collection, processing or use.

6.7 RIGHT TO LODGE A COMPLAINT WITH THE DATA PROTECTION SUPERVISORY AUTHORITY (ARTICLE 77 GDPR IN CONJUNCTION WITH SECTION 19 OF THE GERMAN FEDERAL DATA PROTECTION ACT)

You have the right to lodge a complaint with the competent supervisory authority if you believe there has been an infringement in the processing of your personal data.

6.8 RIGHT TO WITHDRAWAL OF CONSENT (ART. 7(3) GDPR)

You can withdraw your consent to the processing of your personal data at any time and without giving reasons. This also applies to the revocation of declarations of consent given to us prior to the EU General Data Protection Regulation’s entry into force.

7. LEGAL BASIS OF THE PROCESSING

Article 6(1)(a) of the General Data Protection Regulation (GDPR) is the legal basis for the processing of personal data for which we obtain the data subject’s consent.

Article 6(6) GDPR is the legal basis for the processing of personal data required for the performance of a contract to which the data subject is a contractual party. This provision also covers processing operations necessary to implement pre-contractual measures.

Article 6(1)(c) GDPR is the legal basis for a processing of personal data necessary to fulfil a legal obligation to which our company is subject.

Article 6(1)(f) GDPR is the legal basis for processing that is necessary to protect a legitimate interest of our company or a third party, and if the data subject’s interests, fundamental rights and freedoms do not outweigh the first-mentioned interest. Our company’s legitimate interest lies in the performance of our business activities and in the analysis, optimisation and maintenance of our online offer’s security.

8. TRANSFER OF DATA TO THIRD PARTIES

We generally do not sell or lease out user data. Data will only be transmitted to third parties beyond the scope described in this privacy policy if this is necessary for the processing of the respective requested service.

We will only transfer data if there is a legal obligation to do so. This is the case if state institutions (e.g. law enforcement authorities) request information in writing or if there is a court order.

No personal data will be transferred to so-called third countries outside the EU/EEA.

9. DATA PROTECTION PROVISIONS ABOUT THE APPLICATION AND USE OF YOUTUBE

On this website, the controller has integrated components of YouTube. YouTube is an Internet video portal that enables video publishers to set video clips and other users free of charge, which also provides free viewing, review and commenting on them. YouTube allows you to publish all kinds of videos, so you can access both full movies and TV broadcasts, as well as music videos, trailers, and videos made by users via the Internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, UNITED STATES. The YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, UNITED STATES.

With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a YouTube component (YouTube video) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding YouTube component. Further information about YouTube may be obtained under www.youtube.com/yt/about/en/. During the course of this technical procedure, YouTube and Google gain knowledge of what specific sub-page of our website was visited by the data subject.

If the data subject is logged in on YouTube, YouTube recognizes with each call-up to a sub-page that contains a YouTube video, which specific sub-page of our Internet site was visited by the data subject. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.

YouTube and Google will receive information through the YouTube component that the data subject has visited our website, if the data subject at the time of the call to our website is logged in on YouTube; this occurs regardless of whether the person clicks on a YouTube video or not.If such a transmission of this information to YouTube and Google is not desirable for the data subject, the delivery may be prevented if the data subject logs off from their own YouTube account before a call-up to our website is made.

YouTube’s data protection provisions, available at https://www.google.com/intl/en/policies/privacy/, provide information about the collection, processing and use of personal data by YouTube and Google.

10. DATA PROTECTION PROVISIONS ABOUT THE APPLICATION AND USE OF VIMEO

On this website, the controller has integrated components of Vimeo. Vimeoe is an Internet video portal that enables video publishers to set video clips and other users free of charge, which also provides free viewing, review and commenting on them. Vimeo allows you to publish all kinds of videos, so you can access both full movies and TV broadcasts, as well as music videos, trailers, and videos made by users via the Internet portal.

The operating company of Vimeo is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a Vimeo component (Vimeo video) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding Vimeo component. During the course of this technical procedure, Vimeo gains knowledge of what specific sub-page of our website was visited by the data subject.

If the data subject is logged in on Vimeo, Vimeo recognizes with each call-up to a sub-page that contains a Vimeo video, which specific sub-page of our Internet site was visited by the data subject. This information is collected by Vimeo and assigned to the respective Vimeo account of the data subject.

Vimeo will receive information through the Vimeo component that the data subject has visited our website, if the data subject at the time of the call to our website is logged in on Vimeo; this occurs regardless of whether the person clicks on a Vimeo video or not. If such a transmission of this information to Vimeo is not desirable for the data subject, the delivery may be prevented if the data subject logs off from their own Vimeo account before a call-up to our website is made.

Vimeo’s data protection provisions, available at https://vimeo.com/privacy, provide information about the collection, processing and use of personal data by Vimeo.

11. STATUTORY OR CONTRACTUAL PROVISIONS CONCERNING THE PROVISION OF PERSONAL DATA AND THE POSSIBLE CONSEQUENCES OF NON-PROVISION

Please note that in specific cases (e.g. tax regulations) the provision of personal data is prescribed by law or may result from contractual regulations (e.g. information concerning the contractual partner(s)). For instance, the conclusion of a contract may require the respective person/contractual partner to make available their personal data so that we can process their request (e.g. an order) in the first place. An obligation to provide personal data arises especially when concluding contracts. In such cases, a contract cannot be concluded with the person concerned if no personal data is provided. A data subject may contact our data protection officer or the data controller before providing personal data. The data protection officer or the controller shall then inform the data subject whether the provision of the required personal data is statutorily or contractually stipulated or is necessary for the contract’s conclusion, and whether the data subject’s concerns give rise to an obligation to provide the personal data or what consequences the failure to provide the requested data will have for the data subject.

12. EXISTENCE OF AN AUTOMATED DECISION-MAKING PROCESS

As a responsible company, we refrain from automatic decision-making or profiling in our business relations.