DATA PROTECTION IS VERY IMPORTANT TO US!
The protection of your personal data is taken very seriously when using these websites. In the following, you will be informed about the collection, processing and use of your personal data when you visit these websites and use the services offered there.
1. INFORMATION ON PERSONAL DATA
- Personal data is any data with which you can be personally identified. For detailed information on data protection, please refer to the following text.
- The responsible party according to the General Data Protection Regulation (DSGVO) is:
Xavoy Filmtheater GmbH
Barmbeker Straße 4
2. RIGHTS AFFECTED
In connection with our processing of your data you have the following rights:
Right to information pursuant to Art. 15 DSGVO about the processing of your personal data by us regarding the purpose of processing, categories of data processed, recipients or categories of recipients, duration of storage or criteria for determining the duration, right to rectification, erasure, restriction of processing or objection to processing, right to lodge a complaint with the supervisory authority, if applicable, information about the origin of the data and the existence of automated decision-making and, if applicable, information about guarantees pursuant to Art. 46 DSGVO in the event of transfer to a third country or international organization;
- Recht auf unverzügliche Berichtigung unrichtiger oder Vervollständigung unvollständiger personenbezogener Daten gemäß Art. 16 DSGVO;
Right to erasure of stored personal data pursuant to Art. 17 DSGVO if the data is no longer necessary for the purposes for which it was collected or otherwise processed, if consent has been withdrawn and there is no other legal basis, if objection to processing has been lodged and the data may no longer be processed pursuant to Art. 21 (1) or (2) DSGVO may no longer be processed, if the data have been processed unlawfully, if erasure is necessary for compliance with a legal obligation or if the data have been collected in relation to services offered by an information society pursuant to Art. 8 (1) DSGVO. This does not apply if the processing is necessary for the exercise of the right to freedom of expression and information, compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claim;
Right to restriction of processing pursuant to Art. 18 DSGVO if you dispute the accuracy of the data (and for the period necessary to verify the accuracy), if the processing is unlawful but you object to erasure and request restriction of use instead, if we no longer need the data for the purposes of processing but you need the data to assert, exercise or defend legal claims, or if you object to processing pursuant to Art. 21 (1) DSGVO as long as it has not yet been determined whether our legitimate grounds outweigh your legitimate grounds;
- Right to object to the processing of your personal data pursuant to Art. 21(2) DSGVO (if the data is processed for the purpose of direct marketing) or pursuant to Art. 21(1) DSGVO (if the processing is carried out pursuant to Art. 6(1) sentence 1 e) or f) DSGVO, on grounds relating to your particular situation, unless we have compelling legitimate grounds for the processing which override your interests, or the processing is for the establishment, exercise or defense of legal claims).
- Right to data portability pursuant to Art. 20 DSGVO, i.e. to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format or also to transfer it to another controller;
- Right to revoke consent granted at any time in accordance with Art. 7 (3) DSGVO. The revocation has the consequence that we may no longer carry out the data processing for the future from the time of the revocation.
- Right to complain to a supervisory authority pursuant to Art. 77 DSGVO. You can find the supervisory authority responsible for us under point 4. below. The right of appeal is without prejudice to other administrative or judicial remedies.
- Please address all requests for information, requests for information or objections to data processing to the address given in point 1.
3. AUTOMATED DECISION MAKING
Automated decision making is not applied here.
4. SUPERVISORY AUTHORITY
You can view the address of the state supervisory authority responsible for us under the following link:
5. STORAGE OF ACCESS DATA
- Each time you access our website, access data is stored in a log file on the server of our provider.
- This data record consists, for example, of your IP address, the date and time of the request, the name of the requested file, the transferred file volume and the access status, a description of the web browser and operating system used and the name of your Internet service provider.
- This data is collected for technical reasons. An evaluation takes place exclusively for statistical purposes and without personal reference (visitor numbers and page popularity). A deletion takes place automatically after 14 days at the latest.
6. COLLECTION OF PERSONAL DATA WHEN USING INFORMATION FOR INFORMATIONAL PURPOSES
When using the website, so-called cookies are stored on your computer. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the body that sets the cookie. Cookies cannot execute programs or transmit viruses to your computer.
- Session cookies (temporary use), which are necessary for the function of our website (e.g. shopping cart). Session cookies are automatically deleted when you close the browser. The legal basis for the use of session cookies is Art. 6 para. 1 p. 1 f) DSGVO. Our legitimate interest is that we can functionally provide our internet offers to users through the cookies.
- Persistent cookies to be able to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit. Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. The legal basis for persistent cookies is Art. 6 para. 1 p. 1 a) DSGVO. You give us your consent by agreeing on the cookie notice banner.
You can delete the cookies in the security settings of your browser at any time.
You can configure your browser settings according to your preferences and, for example, refuse to accept cookies. However, we would like to point out that you may then not be able to use all functions of this website.
7. USE OF FUNCTIONS OF OUR WEBSITE / OTHER SERVICES
In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this purpose, you usually have to provide additional personal data, which we use to provide the respective service. If additional voluntary information is possible, this is marked accordingly.
When you contact us via the contact form, your e-mail address, your message to us and, if you so indicate, your name and telephone number will be stored by us in order to answer your questions.
We may transfer your inquiry to other companies in our group if this is necessary to satisfactorily process your request.
The use of the contact form is voluntary. The processing of the data entered in the contact form is therefore based exclusively on your consent (Art. 6 para. 1 lit. a) DSGVO). You can revoke this consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
The data you entered in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions - in particular retention periods - remain unaffected.
With the newsletter we inform you about us and our offers.
With the newsletter we inform you about us and our offers.
If you would like to receive the newsletter, we require a valid e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address or that the owner agrees to receive the newsletter. If available, you may voluntarily enter your name and title in order to personalize the newsletter dispatch. This data will only be used for sending the newsletter and will not be passed on to third parties. To confirm the ownership of the e-mail address, an e-mail is sent with a link to activate the subscription (double opt-in). When you subscribe to the newsletter, we store your IP address and the date of subscription for the statutory period of limitation, beginning with the date of unsubscription. This storage serves as proof in the event that a third party misuses an e-mail address and registers to receive the newsletter without the knowledge of the authorized person. You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time. The revocation can be done via a link in the newsletters themselves, or by sending a message to the contact options above and below.
Social media and other services
We use the third-party services listed below on our website.
It is possible that user data may be processed outside the European Union. This could result in risks for users because, for example, the enforceability of their own rights may be more difficult. With regard to U.S. providers that are certified under the EU-US Privacy Shield, we point out that they thereby undertake to comply with the data protection standards of the EU.
Furthermore, user data may be processed for analysis purposes. For example, profiles can be created from the usage behavior and interests of the users derived from this. These profiles can be used, for example, to place advertisements within and outside the platforms that are likely to correspond to the interests of the users. For these purposes, cookies may be stored on the users' computers, through which the usage behavior, the users' interests and/or also the length of stay are stored. Anchor
In the case of requests for information and the assertion of user rights, we point out that these can be asserted most effectively with the respective providers. Only the providers have access to the relevant user data and can directly take appropriate measures and provide specific information.
For a detailed description of the respective processing and the possibilities to object, we refer to the following information of the providers.
Regarding the internal processing INSIGHTS at Facebook, the regulations can be read at https://www.facebook.com/legal/terms/page_controller_addendum and are briefly summarized here:
Data subject rights can be asserted with Facebook Ireland as well as with us, but the primary responsibility under the GDPR for processing Insights data lies with Facebook.
We do not make any decisions regarding the processing of Insights data and all other information resulting from Art. 13 GDPR, including legal basis, identity of the controller, and storage duration of cookies on user devices.
Facebook complies with all obligations under the GDPR with respect to the processing of Insights Data. Facebook Ireland provides the essentials of the Page Insights supplement to data subjects.
Functions of the Instagram service are integrated on our pages. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged into your Instagram account, clicking the Instagram button will connect your visit to our pages with your Instagram profile. This allows Instagram to associate the visit to our pages with your user account. If you do not want Instagram to be able to associate the visit to our pages with your Instagram user account, please log out of your Instagram user account.
We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram.
Other offers and services
Your order data (e.g. in the online store) will be used and stored in compliance with data protection law, to the extent necessary for the processing and documentation of orders. Your order data is transmitted to us in the store in encrypted form for security reasons. You can recognize this by the fact that the browser line begins with "https:" and by the closed lock symbol. We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.
In the event that you or the buyer chooses the payment method Paypal, the rules already accepted by him in the course of the contractual relationship with Paypal apply to the processing of data in the course of the transaction. These can also be viewed at:
Data protection information in accordance with Art. 13 DSGVO in relation to sweepstakes can be found in the above and following information.
In order to enable you to participate in the sweepstakes, we collect personal data (surname, first name, date of birth, country as well as e-mail address).
According to Art. 6 para. 1 a.) -c.) DSGVO, we are entitled to collect, store and transmit personal data if the data subject has consented to the data processing or a contract or legal obligation is to be fulfilled.
Your personal data will be stored and used exclusively for the purpose of conducting the competition and deleted within a maximum of 30 days after the end of the competition.
For the purpose of prize processing, the winner must provide his/her postal address. Your data will only be used for the purpose of the competition and not for any other purpose. Your data will only be passed on to third parties if this is necessary for the implementation of the competition (e.g. web agencies). Your data will not be transferred to any other third parties.
Furthermore, your data will be transmitted to internal departments involved in the execution of the respective business processes, e.g. bookkeeping, accounting, purchasing, EDP. As soon as the business purpose of carrying out the competition has been fulfilled and you have not been determined as the winner, we will delete your data within one month of the end of the competition. If you have been determined as the winner, there are retention periods under tax and commercial law. These are 10 years for accounting documents in accordance with Section 147 (1) of the German Fiscal Code (AO) and 6 years for business documents in accordance with Section 257 (1) of the German Commercial Code (HGB).
Participants have the possibility at any time to obtain information on the status of the storage of their personal data and to request its deletion. However, further participation in the competition is then no longer possible. The blocking/deletion request (revocation) is to be sent to the address mentioned under point 1.
On our websites, ads from advertising partners may be placed, which may log IP address data and usage behavior. The legal basis is Art. 6 para. 1 p. 1 a) DSGVO. If necessary, you give us your consent by agreeing to this on the cookie notice banner.
9. LIABILITY FOR CONTENT
The contents of our pages were created with the utmost care. However, we cannot guarantee the accuracy, completeness and timeliness of the content. As a service provider, we are responsible for our own content on these pages under the general laws according to § 7 para.1 TMG. According to §§ 8 to 10 TMG, however, we are not obligated as a service provider to monitor transmitted or stored third-party information or to investigate circumstances that indicate illegal activity. Obligations to remove or block the use of information under the general laws remain unaffected. However, liability in this regard is only possible from the point in time at which a concrete infringement of the law becomes known. If we become aware of such infringements, we will remove this content immediately.
10. LIABILITY FOR LEFT
Our pages may contain links to external third-party websites over whose content we have no influence. Therefore, we cannot assume any liability for these external contents. The respective provider or operator of the pages is always responsible for the content of the linked pages. The linked pages were checked for possible legal violations at the time of linking. Illegal contents were not recognizable at the time of linking. However, a permanent control of the contents of the linked pages is not reasonable without concrete evidence of a violation of the law. If we become aware of any infringements, we will remove such links immediately.
11. DATA SECURITY
We secure our website and other systems through appropriate technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. However, despite regular checks, complete protection against all dangers is not possible.
Our website uses the industry standard SSL/TLS (Secure Sockets Layer) for encryption. This ensures the confidentiality of your personal information over the Internet. You can tell whether encrypted transmission is taking place by the closed key/lock symbol in your browser display.
12. DISCLOSURE OF DATA
Your personal data will only be passed on to third parties,
- if you have given your express consent to this in accordance with Art. 6 Para. 1 S. 1 a) DSGVO;
- if the transfer is necessary for the fulfilment of contractual obligations pursuant to Art. 6 para. 1 sentence 1 b) DSGVO;
- if we are legally obliged to disclose the data within the meaning of Art. 6 para. 1 sentence 1 c) DSGVO;
- if the disclosure of the data is in the public interest within the meaning of Art. 6 para. 1 e) DSGVO or;
- if the disclosure of the data pursuant to Art. 6 para. 1 sentence 1 f) DSGVO is necessary to safeguard our legitimate interests or the legitimate interests of a third party, unless your interests in the protection of your data prevail.
13. DATA CATEGORIES
We process the following categories of data: master data (e.g. company, contact person if applicable, address), communication data, contract data, receivables data, payment and default information if applicable. See the information above.
14. THIRD PARTY RECIPIENT
In order to process your requests satisfactorily, we may have to pass on your personal data to third party recipients. Third party recipients can be Flebbe Services GmbH, our suppliers, transport and logistics partners and our trading partners.
15. DURATION OF STORAGE OF PERSONAL DATA
Your data will be stored by us for as long as it is required for the purposes for which it is processed. In addition, we store data only to the extent that we are legally obliged to do so, e.g. due to legal storage obligations.
16. INFORMATION ON THE RIGHT OF OBJECTION
An objection to the processing of personal data concerning you, based on Article 6 (1) e) (data processing in the public interest) or f) (data processing for the protection of legitimate interests based on a balance of interests) is possible at any time in accordance with Article 21 DSGVO. In the event of an objection, the personal data will no longer be processed unless compelling legitimate grounds for the processing are demonstrated which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
Please address your objection to the address mentioned under point 1.
17. INFORMATION ON THE RIGHT OF WITHDRAWAL
If you have given us your consent to the processing of personal data, you may revoke this consent at any time. Of course, this also applies to declarations of consent given to us before May 25, 2018 (before the applicability of the GDPR). The revocation of consent can always only be valid for the future. The lawfulness of the processing is not retroactively eliminated by a revocation.
Please address your revocation to the address mentioned under point 1.
19. DATA PROTECTION OFFICER
If you have any questions regarding data protection, please feel free to contact our data protection officer:
Father Solution GmbH
Mr Cord Lange
or by E-Mail under firstname.lastname@example.org turn.