Privacy Policy

Controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States as well as other data protection provisions is

tremoniamedia Produktion
a brand of ansvar2030 Holding GmbH
Plauener Str. 21
44139 Dortmund

t. +49 231 99 777 40
f. +49 231 99 777 499444

Email: zentrale@tmfp.de

Managing Director: Felix Rodenjohann

Data Protection Officer:

Patrick Halfmann
tremoniamedia Produktion
a brand of ansvar2030 Holding GmbH
Plauener Str. 21
44139 Dortmund

Email: datenschutzbeauftragter@tmfp.de

If you have any questions about data protection, please feel free to contact the Data Protection Officer.

Definitions

For the purposes of this Privacy Policy and in accordance with the provisions of the General Data Protection Regulation, the term:

“GDPR” means Regulation (EU) 2016/679 (General Data Protection Regulation);
“personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
“processing” means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
“restriction of processing” means the marking of stored personal data with the aim of limiting their processing in the future;
“controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
“processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
“recipient” means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;
“third party” means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data;
“consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
“supervisory authority” means an independent public authority established by a Member State of the European Union pursuant to Article 51 GDPR.

Processing of personal data

Below we inform you about the processing of personal data as well as, in each case, the legal basis, the purpose of processing, the duration of storage and your rights to object and request deletion.

Hosting

For the purpose of operating this website, we have concluded a data processing agreement with an external service provider. The server location is within the European Union; data are not transferred to countries outside the European Union.

Server log files

Each time our website is accessed, our system automatically records data and information from the computer system of the accessing device. The following data are collected:

1. Information about the browser type, the version used and the language
2. The user’s operating system
3. The user’s internet service provider
4. The user’s IP address
5. Date and time of access
6. Websites from which the user’s system reaches our website
7. Websites accessed by the user’s system via our website

The temporary storage of the IP address by the system is necessary in order to enable delivery of the website to the user’s computer. The data are stored in the server log files in order to ensure the functionality of the website. In addition, the data help us to optimize the website and to ensure the security of our IT systems. This also constitutes our legitimate interest within the meaning of Art. 6(1)(f) GDPR. The data are not evaluated for marketing purposes in this context. After seven days, the data are deleted automatically unless further storage is required for the purposes stated above. The data are deleted as soon as they are no longer required to achieve the purpose.

Storage of cookies

This website uses cookies. These are small text files that contain data about websites visited with the respective device and are stored by the user’s web browser. We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be recognized even after a page change.
The purpose of using technically necessary cookies is to simplify the use of websites for users, for example to be able to offer a German and an English version of the website.
The legal basis for storing cookies is Art. 6(1)(f) GDPR.
As a user, you can influence whether and to what extent cookies are stored in general via the settings on your device.

Contacting us

If you contact us by email, the information provided by the user, the date and time of the request, and the user’s IP address are stored for the purpose of processing the request, including any follow-up questions. The data are not passed on to third parties.
The legal basis for processing the data is Art. 6(1)(f) GDPR. If the contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR.
The data are deleted as soon as they are no longer necessary to achieve the purpose of processing. We review the necessity annually.
If the user contacts us, he or she may object to the storage of personal data at any time. In such a case, the conversation cannot be continued. In this case, please contact the Data Protection Officer.

Use of Google Analytics

For the statistical evaluation of visits to our website, we use Google Analytics, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. In doing so, a cookie is set that can be used to track your activities (data, sessions and interactions) across multiple devices. Your identity is pseudonymized. On our behalf, Google will use this information to evaluate your use of the website, compile reports on website activity and provide further services related to website and internet usage for the website operator. These purposes also constitute our legitimate interest in data processing.

The information generated by the cookie about your use of our website is usually transmitted to a Google server in the USA and stored there. Since we use Google Analytics only with IP anonymization, your IP address is shortened by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.
The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

Legal basis for the processing is Art. 6(1)(f) GDPR. We use Google Analytics, a web analytics service of Google LLC (“Google”). Google uses cookies. The information generated by the cookie about the use of the online service by users is usually transmitted to a Google server in the USA and stored there.
The data sent by us and linked to cookies, user identifiers (e.g., user ID) or advertising IDs are automatically deleted after 14 months. The deletion of data whose retention period has been reached takes place automatically once a month.

Google is certified under the Privacy Shield framework and thereby offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

You can prevent the storage of cookies by adjusting your browser software accordingly. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing these data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de .

Rights of the data subject

If your personal data are processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

Right to confirmation

You have the right to request confirmation from the controller as to whether personal data concerning you are being processed. If you wish to exercise any of these rights, you can contact the Data Protection Officer using the contact details above.

Right of access

If personal data are processed, you have the right to obtain free information about the personal data being processed as well as a copy of the personal data that are the subject of the processing. In addition, you may request the following information:

1. the purposes of processing;
2. the categories of personal data being processed;
3. the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
4. if possible, the planned period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period;
5. the existence of the right to rectification or erasure of personal data concerning you, or to restriction of processing by the controller, or of a right to object to such processing;
6. the existence of the right to lodge a complaint with a supervisory authority;
7. if the personal data are not collected from the data subject, any available information as to their source;
8. the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) GDPR and—at least in those cases—meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

If personal data are transferred to a third country or to an international organization, you also have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR in connection with the transfer.

If you wish to exercise any of these rights, you can contact the Data Protection Officer using the contact details above.

Right to rectification

You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed—including by means of providing a supplementary statement.
If you wish to exercise any of these rights, you can contact the Data Protection Officer using the contact details above.

Right to erasure (“right to be forgotten”)

You have the right to request from the controller that personal data concerning you be erased without undue delay, and the controller is obliged to erase personal data without undue delay where one of the following grounds applies:

The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
The data subject withdraws consent on which the processing is based pursuant to Article 6(1)(a) or Article 9(2)(a) and where there is no other legal ground for the processing.
The data subject objects to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) GDPR.
The personal data have been processed unlawfully.
Erasure of the personal data is necessary for compliance with a legal obligation in Union or Member State law to which the controller is subject.
The personal data have been collected in relation to the offer of information society services pursuant to Article 8(1). If you wish to exercise any of these rights, you can contact the Data Protection Officer using the contact details above.

Right to restriction of processing

You have the right to request the restriction of processing from the controller if one of the following conditions applies:

the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data,
the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims, or
the data subject has objected to processing pursuant to Article 21(1) as long as it has not yet been determined whether the legitimate grounds of the controller override those of the data subject. If you wish to exercise any of these rights, you can contact the Data Protection Officer using the contact details above.

Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us as controller, in a structured, commonly used and machine-readable format, and you have the right to transmit those data to another controller without hindrance from us as the controller to which the personal data have been provided, provided that

the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR, or
is based on a contract pursuant to Article 6(1)(b) GDPR and the processing is carried out by automated means. In exercising your right to data portability pursuant to paragraph 1, you also have the right to have the personal data transmitted directly from one controller to another controller, where technically feasible. If you wish to exercise any of these rights, you can contact the Data Protection Officer using the contact details above.

Google Web Fonts

This site uses so-called web fonts provided by Google for uniform display of fonts. When you access a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you use must connect to Google’s servers. This gives Google knowledge that our website was accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

If your browser does not support web fonts, a standard font from your computer will be used.

Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.

YouTube

For the integration and display of video content, our website uses plugins from YouTube. The provider of the video portal is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you access a page with an integrated YouTube plugin, a connection to YouTube’s servers is established. YouTube thereby learns which of our pages you have visited. YouTube can directly assign your browsing behavior to your personal profile if you are logged into your YouTube account. You can prevent this by logging out beforehand. The use of YouTube is in the interest of an appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

Details on the handling of user data can be found in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy .

Vimeo

For the integration and display of video content, our website uses plugins from Vimeo. The provider of the video portal is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. When you access a page with an integrated Vimeo plugin, a connection to Vimeo’s servers is established. Vimeo thereby learns which of our pages you have visited. Vimeo receives your IP address even if you are not logged into the video portal or do not have an account there. The information recorded by Vimeo is transmitted to servers of the video portal in the USA. Vimeo can directly assign your browsing behavior to your personal profile. You can prevent this by logging out beforehand.

Details on the handling of user data can be found in Vimeo’s privacy policy at: https://vimeo.com/privacy.

Real Cookie Banner

To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at https://devowl.io/de/rcb/datenverarbeitung/.

The legal bases for the processing of personal data in this context are Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

Providing personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide personal data. If you do not provide the personal data, we cannot manage your consents.

Right to object

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions. In this case, we as controller will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defense of legal claims.

If personal data are processed for the purpose of direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling insofar as it is related to such direct advertising.

If you object to processing for direct advertising purposes, the personal data will no longer be processed for these purposes.
You also have the right, on grounds relating to your particular situation, to object to processing of personal data concerning you for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) GDPR, unless the processing is necessary for the performance of a task carried out in the public interest.

If you wish to exercise any of these rights, you can contact the Data Protection Officer using the contact details above. In connection with the use of information society services, you may exercise your right to object by automated means using technical specifications, notwithstanding Directive 2002/58/EC.

Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing—including profiling—which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

is necessary for the conclusion or performance of a contract between the data subject and the controller,
is authorized by Union or Member State law to which the controller is subject and that law contains suitable measures to safeguard the rights and freedoms and legitimate interests of the data subject, or
is based on the explicit consent of the data subject. If you wish to exercise any of these rights, you can contact the Data Protection Officer using the contact details above.
Right to withdraw a declaration of consent under data protection law. You have the right to withdraw your consent at any time. If you wish to exercise any of these rights, you can contact the Data Protection Officer using the contact details above.

Right to lodge a complaint with the data protection authority

You have the right to lodge a complaint with the supervisory authority.