Through the operation of our website with the URL progress.film (hereinafter referred to as the "Website"), we process personal data. We treat this data confidentially and process it in accordance with the applicable laws – in particular the German Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Teleservices Data Protection Act (TDDSG). The purpose of this privacy policy is to inform you about what personal data we collect from you, for what purposes and on what legal basis we use it, and to whom we may disclose it. We also tell you what rights you have to protect and enforce your privacy.
Our privacy policy contains technical terms that are used in both the GDPR and the BDSG. For your better understanding, we would like to explain these terms in simple terms:
"Personal data" is any information relating to an identified or identifiable person (Art. 4 No. 1 GDPR). Information of an identified person can be, for example, the name or the e-mail address. However, personal data is also data where the identity is not immediately apparent, but can be determined by combining one's own information or that of others and thus finding out who it is. A person can be identified, for example, by providing your address or bank details, your date of birth or user name, your IP addresses and/or location data. Relevant here is all information that in any way allows a conclusion to be drawn about a person.
Article 4 No. 2 of the GDPR defines "processing" as any operation related to personal data. This includes in particular to the collection, recording, organisation, arrangement, storage, adaptation or alteration, retrieval, consultation, use, disclosure, transfer, dissemination or any other form of making available, alignment or combination, restriction, erasure or destruction of personal data.
Responsible for data processing is:
Company: PROGRESS Film GmbH ("we") Legal representative: Gunnar Dedio (Managing Director) Address: Mansfelder Straße 56, 06108 Halle / Saale Phone: +49 (0) 341 234 29 138 E-mail: [email protected]
We have appointed an external data protection officer for our company. You can reach him under:
Company: HABEWI GmbH & Co KG Legal representative: General partner HABEWI Beteiligungs GmbH, represented by Arne Platzbecker (Managing Director) Address: Palmaille 96, 22767 Hamburg Phone: 040/ 46008966 Fax: 040/ 46008977 E-mail: [email protected]
Within the framework of the website, we process the personal data of you listed in detail below in section IV. We only process data from you that you actively provide on the website (e.g. by filling out forms) or that you automatically provide when using our offer.
Your data will be processed exclusively by us and will not be sold, lent or passed on to third parties. If we use the help of external service providers to process your personal data, this is done within the framework of so-called order processing, in which we as the client are authorised to issue instructions to our contractors. To operate our website, we use external service providers for hosting, as well as for maintenance, care and further development. We host our website with the external provider Amazon Web Services AWS (Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, USA) at the data centre location 410 Terry Avenue North, Seattle WA 98109, United States. If further external service providers are used for individual processing operations listed in section IV, they will be named there.
As a matter of principle, we do not transfer data to third countries and do not plan to do so. We will provide information about exceptions to this principle in the processing operations described below. Any data transfer to third countries will then take place on the basis of the so-called EU standard contractual clauses.
Every time you access the website, we automatically record information that your browser transmits to our server. This involves the following data:
These are also stored in the so-called log files of our system. The temporary storage of your IP address by the system is necessary in order to be able to deliver our website to a user's terminal device. For this purpose, the user's IP address must remain stored for the duration of the session. However, your IP address is not stored in the log files.
The processing is carried out to enable the website to be called up and to ensure its stability and security. Furthermore, the processing serves the statistical evaluation and improvement of our online offer.
The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the data protection described in para. 6.2 named purpose.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. The log files are deleted after 7 days.
Our website uses cookies. Cookies are small text files that are stored on the user's terminal device when visiting a website. Cookies contain information that enables the recognition of a terminal device and possibly certain functions of a website. We distinguish between our own cookies and external, so-called third-party cookies. So-called "session cookies" and "persistent cookies" are used on our site. "Session cookies" are automatically deleted when you end your internet session and close the browser. Persistent cookies remain stored on your terminal device for a longer period of time. We only use cookies that are technically necessary for the operation of our site. Consent is not required for these cookies. If cookies are technically necessary for the operation of our site, your consent is not required. All other cookies that are not technically necessary are only set after you have actively consented to the use of cookies via our consent tool. We use the service to obtain and document your consent. The Consent Tool itself saves your selection in a cookie on your end device. This means that you do not need to make a decision about cookies again on a subsequent visit to our website.
The following overview shows which cookies are used on our website for which purpose, how long they are stored on your end device and which consents you may have already declared.
We use cookies to make our website more user-friendly and to enable us to provide the services described in para. 7.1 described in clause 7.1.
The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose named in section 7.1.
Cookies are automatically deleted at the end of a session or when the specified storage period expires. Since cookies are stored on your terminal device, you as a user have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transfer of cookies. Cookies that have already been stored can be deleted. This can also be done automatically. If cookies for our website are deactivated, deleted or restricted, it may be that individual functions of our website cannot be used or can only be used to a limited extent.
When using third-party cookies, data may be transmitted to the corresponding providers of these third-party services. Under certain circumstances, data may also be transferred to third countries outside the European Union or the European Economic Area. We provide information about the recipients of data and the transfer to third countries in the corresponding section on the third-party service in this data protection policy.
You can also contact us via the email addresses provided on the website. To contact us, you can write to us via the e-mail address provided on the website. In this case, the personal data transmitted with the e-mail will be processed by us.
The data transmitted with and in your e-mail will be used exclusively for the purpose of processing and responding to your request.
The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the data protection described in para. 8.2 named purpose. If the e-mail contact is aimed at the conclusion or fulfilment of a contract, the data processing is carried out for the fulfilment of the contract (Art. 6 para. 1 lit. b GDPR).
The data is deleted by us as soon as it is no longer required to achieve the purpose for which it was collected. This is usually the case when the respective communication with you has ended. The communication is deemed to have ended when it is clear from the circumstances that your concern has been conclusively clarified. If legal retention periods prevent deletion, the data will be deleted immediately after the legal retention period has expired.
We send out a newsletter at irregular intervals. With the newsletter we inform you about news on new collections, current topics, anniversaries and future PROGRESS events, as well as industry news and announcements. You will only receive our newsletter if you actively subscribe to our mailing list. You can subscribe to it by filling in and submitting a newsletter registration form on our website. You can subscribe to it as part of a registration on our website www.pro.progress.film.
For the newsletter registration, only your e-mail address is required. All other details (such as your first name and surname) are voluntary and serve solely to personalise the e-mails. We use the so-called double opt-in procedure to carry out and verify newsletter registrations. Registration takes place in several steps. First, you register for the newsletter on our website. You will then receive an e-mail from us at the e-mail address you have provided. In this e-mail, we ask you to confirm that you have actually registered for the newsletter and wish to receive it. Confirmation takes place by clicking on a confirmation link in the e-mail. Only after successful confirmation will we add you to our newsletter distribution list and send you future e-mails. As part of the double opt-in process, we save the date, time and your IP addresses both during registration and confirmation.
If you purchase goods or services on our website and enter your e-mail address, this may subsequently be used by us to send a so-called existing customer newsletter. In such a case, only direct advertising for our own similar goods or services will be sent via the newsletter.
The processing takes place in order to offer the newsletter function and to be able to send newsletter emails to subscribers and existing customers. The collection and storage of date, time and IP addresses when subscribing to the newsletter serves to document consent given and to protect against the misuse of email addresses.
In the case of our subscriber newsletter, processing takes place on the basis of consent pursuant to Art. 6 (1) lit. a GDPR. You can access the declaration of consent on our website at any time at mailchimp.com/legal/privacy/. Your consent is voluntary. The collection and storage of date, time and IP addresses during newsletter registration is necessary to protect the overriding legitimate interests of the responsible party (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the data protection described in para. 9.2 named purpose.
In the case of our newsletter for existing customers, processing is carried out on the basis of Art. 6 (1) lit. f GDPR in order to protect the overriding interests of the controller. Our legitimate interest lies in direct advertising to existing customers. This is permissible within the framework of Section 7 (3) UWG, which we observe.
If you do not confirm your subscription to our newsletter within 48 hours of receiving the corresponding registration e-mail, your data will be automatically deleted. We process your personal data for the duration of your newsletter subscription. You can cancel your subscription to our newsletter at any time by revoking your consent. You can also object to the use of your e-mail address to send our newsletter to existing customers at any time. A simple declaration is sufficient (by e-mail to [email protected] or by post to PROGRESS Film GmbH, Mansfelder Straße 56). You can also unsubscribe from the newsletter by clicking on the unsubscribe link in every newsletter email or here mailchimp.com/legal/privacy/. With the revocation of your consent, you will no longer be sent newsletters and your personal data will be removed from our active distribution list.
We use the services of the newsletter provider Mailchimp to manage our newsletter distribution list and to send the emails. This takes place within the framework of order processing. Mailchimp is a service provided by The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308 USA (hereinafter referred to as "Mailchimp"). With your newsletter registration, the data provided during the registration process is transferred to Mailchimp and processed on Mailchimp servers in the USA. For more information on data protection at Mailchimp, please refer to the service provider's privacy policy at mailchimp.com/legal/privacy/.
Our website does not use so-called social media plugins. The Facebook, Platform X (Twitter), YouTube, Instagram and LinkedIn logos displayed on our website are merely linked to the corresponding profiles of our company on the social networks. A data transfer to the social networks does not take place with the integration of the logos. If you click on one of the logos, you will only be redirected to the external website of the respective social network.
However, our profiles within the social networks constitute data processing. If you are logged in to the respective social network when you visit such a profile, this information will be assigned to your user account there. If you interact with our profile, e.g. comment, "share", "like" or "retweet" a post, this information will also be stored in your user account. As a rule, your interactions with our profile can also be viewed by us.
On the social networks Facebook and Instagram, we have the possibility to obtain statistical data about the use of our Facebook page or our Instagram profile via the so-called "Insights" function. These statistics are provided by Facebook and Instagram. The "Insights" function cannot be disabled. We cannot decide to turn this feature on or off. It is available to all Facebook fan page operators and all Instagram business account operators, regardless of whether you use the Insights function or not.
We are provided with the following data via Facebook Insights for a selectable period of time in anonymised form with regard to fans, subscribers, people reached and people interacting: Total page views, likes including origin, page activity, post interactions, reach, post reach (broken down into organic, viral and paid interactions), comments, shared content, replies and demographic analysis, i.e. country of origin, gender and age. In the Insights statistics, it is not possible for us to identify subscribers and fans of our site and to view their profiles.
Furthermore, we receive anonymised data about the development and reach of our Instagram profiles, as well as the posts, stories and videos we post there, via Instagram insights. We also receive statistical information on the place of origin, gender and age of the subscribers to our Instagram profile in the Instagram insights.
On the social network LinkedIn, we have the possibility to obtain statistical data about the use of our LinkedIn profile via the so-called "Insights" function.
The social networks with which you communicate store your data using pseudonyms as usage profiles and use them for advertising purposes and market research. For example, you may be shown advertisements within the social network and on other third-party websites that match your presumed interests. Cookies are usually used for this purpose, which the social network stores on your end device. You have the right to object to the creation of these user profiles, for the exercise of which you must contact the social networks directly.
We maintain profiles on the aforementioned social networks for the purpose of public relations and corporate communication with customers and interested parties. We use the "Insights" function of Facebook and Instagram to evaluate the reach of our posts on the social network and to make them more appealing to our visitors in the future.
The legal basis for data processing within the scope of our profiles on social networks is the protection of our overriding legitimate interests (Art. 6 para. 1 lit. f GDPR). Our justified interest lies in the data processing described in para. 10.3 named in point 10.3. If you are asked for consent by the respective operator of a social network, the legal basis is Art. 6 (1) a GDPR. Data processing with regard to our presence on Facebook, Instagram and LinkedIn is also carried out on the basis of joint responsibility in accordance with Art. 26 GDPR.
The respective social networks are operated by the companies listed below. Further information on data protection with regard to our profile on the social networks can be found in the linked data protection provisions.
The social networks also process your personal data in the USA.