privacy policy
I– general information
This privacy policy applies to our service labeled “Cinelogue”
- responsible body
Below we explain to you which personal data is collected and processed by us when using our services and offers.
Cinelogue, Karl-Marx-Str. 16 12043 Berlin
email: [email protected]
phone: +4917669487177
Personal data are individual details about personal or factual circumstances of a specific or identifiable natural person, this means all information that relates to a person.
- Legal Basis
As far as a legal basis is mentioned in this Privacy Policy, they relate to the General Data Protection Regulation.
We collect and process personal data based on the following statutory regulations:
- Consent according to Article 6 paragraph 1 (a) General Data Protection Regulation (GDPR)Consent is any voluntary expression of intent, in an informed and unequivocal manner, in the form of a statement or other unambiguous confirmatory act, which indicates that the data subject consents to the processing of his personal data.
- Necessity to fulfill the contract or carry out preparatory actions in accordance with Article 6 para. 1 (b) GDPR This means that the data is required so that we can fulfill the contractual obligations to you or we need the data to prepare a contract closure with you.
- Processing to fulfill legal obligations under Article 6 para. 1 (c) GDPR This means that a processing of the data is required by law or other regulations.
- Processing for the protection of legitimate interests in accordance with Article 6 para. 1 (f) GDPR This means that processing is necessary to safeguard legitimate interests on our part or by third parties, unless the interests or fundamental rights and freedoms on your part that require the protection of personal data prevail.
- Rights of affected
You are entitled to the following rights with regard to the processing of data by us in accordance with the respectively listed articles of the General Data Protection Regulation:
- Right of access by the data subject to Art. 15 GDPR
- Right to rectification according to Art. 16 GDPR
- Right to erasure (“right to be forgotten”) in accordance with Art. 17 GDPR
- Right to restriction of processing according to Art. 18 GDPR
- Right to data portability according to Art. 20 GDPR
- Right to object according to Art. 21 GDPR
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, employment or the place of the alleged infringement, if you believe that the processing of the personal data is violating the GDPR.
- Data Erasure and Storage Duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, storage may take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which the processor is subject. Blocking or deletion of the data also takes place if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
II– actual data processing
- Visiting the Website
- Scope of Data Collection
When visiting our website, the following data is collected and stored by our web server:
- Information about the browser type and version used
- The operating system of the user
- The IP address of the user
- Date and time of access
- The requested URL
The data is stored in the log files of our hosting provider.
This data is not stored or processed together with other personal data of the user. We are hosting our website and databases with a hosting provider based in the European Union; the servers are placed within the European Union.
- Legal basis
The legal basis for processing the data that is stored by our webserver is Art. 6 para. 1 (f) GDPR. The legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR therefore lies in the functionality of our website and its availability.
The legal basis for the transfer of data to our hosting provider is Article 28 para. 3 GDPR.
- Purpose of data processing
The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user’s IP address must be kept for the duration of the session.
The data is stored in order to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
- Duration of storage
The logfiles will be deleted after sixty days at the latest, unless there is a need to keep the data for the aforementioned purpose due to specific events.
- Objection and removal possibility
The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no possibility of objection by the user.
- Google Analytics
- Scope of data processing
The website and our service use Google Analytics, a web analytics service provided by Google Ireland Ltd. (“Google”). This software collects information about how you use the website but also how you use our service and compiles various statistics. The increased usage data include in particular the concrete selection of links, the length of stay on individual pages and the order of use of the website and the frequency of the page request. This data is collected together with your IP address.
In particular, the following information is collected:
- Information about the type of browser and the version used
- The operating system of the user
- The user’s Internet service provider
- The IP address of the user
- Date and time of access
- Screen color processing ability
- network location
- clicks on individual videos
- scroll depth
- use of individual website functions
- Websites from which the user’s system accesses our website
- Websites that are accessed by the user’s system via our website
Google Analytics uses so-called “cookies”, text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by cookies about your use of this website is usually transmitted to a Google server in the USA and stored there.
We have activated a so-called IP anonymization on the website, this means that the IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area prior to retransmission to the USA.
Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. Google itself describes here https://www.google.com/policies/privacy/ its data processing activity.
The data processing is essentially carried out by Google itself. Despite IP anonymization, the data is not anonymous and can be merged with other data by Google. Google can use the data for any of its own purposes, such as profiling, as well as link it with other data such as any Google accounts and also pass it on to associated US companies, e.g. Google LLC.
- Legal basis
The legal basis for the processing of data when using the website is Article 6 para. 1 (a) GDPR in the form of your express consent.
The legal basis for the transfer of data to Google is Art. 26 GDPR and Art. 6 para. 1 (a) GDPR. For any subprocessing done by Google outside of the EU Google employs the standard contractual clauses of the EU commission and additional data safety guarantees.
- Purpose of data processing
The purpose of the processing is to analyze this website and the usage behavior of its visitors.
- Duration of storage
We ourselves no longer have access to personal data after anonymization by Google. With regard to a use by Google, the duration of the storage is not known.
- Objection and removal possibility
You can prevent the storage of cookies, including the generation and transmission of data to Google, by restricting or prohibiting the use of cookies in your browser software. This may result in the deactivation of non-Google-related cookies as well as the inability to use all functions of this website to the full extent.
You can prevent the collection of the data generated by the cookie regarding your use (including your IP address) and their transmission to Google as well as the processing of this data by Google by downloading the browser plugin available under the following link and to install [Http://tools.google.com/dlpage/gaoptout?hl=de].
In addition, you can also revoke your consent to data collection at any time in our Cookie Bar. For this purpose, a cookie is then stored so that we can recognize that you have not consented to the use of Google Analytics.
- Scope of data processing
If you purchase goods or services on our website and deposit your e-mail address, we may subsequently use this information to send you product information by e-mail regarding the booked product or our similar products. In such a case, only direct advertising for our own similar goods or services will be sent by e-mail. We will also send you emails related to your bookings, such as: Order confirmations, Updates regarding the service, special events etc.
It is also possible to subscribe to a free newsletter on our website, which contains direct advertising for our products or products of our cooperation partners. When you sign up for the newsletter, the data from the input mask will be transmitted to us or the e-mail address already stored will be used. In this case, the date and time of registration for the newsletter and the IP address used are also stored. As part of the confirmation of the newsletter registration, the date and time at which you click on the confirmation link for the newsletter registration as well as the IP address used will also be saved.
When sending the product information, your e-mail address will be forwarded to an external service provider, who will be responsible for sending the newsletter on our behalf. No further use is made by the service provider. The service provider is located in the United States of America.
If you contact us via email with a support request, we will store your email and all information provided therein. Our email service provider is Google Ireland Inc. and emails are stored on their servers which may also be outside of the European Union.
- Legal basis
The legal basis for the processing of the data when sending out the newsletter due to the prior acquisition of goods or services is Article 6 para. 1 sentence 1 (f) GDPR in conjunction with § 7 para. 3 UWG.
The legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR is therefore in direct advertising and the increase in sales to existing customers.
The legal basis for processing the data when registering directly for the newsletter is Art. 6 para. 1 (a) GDPR.
The legal basis for contacting in connection with current purchase is Article 6 para. 1 (b) GDPR.
The legal basis for the transfer of the data to the newsletter service provider is Article 28 para. 3, 6 and 7, Article 46 para. 2 (c) GDPR. The standard data protection clauses of the EU Commission are used in contractual relation with the provider.
The legal basis for storing support requests is Art. 6 para. 1 (b) GDPR. The legal basis for storing our emails with our email service provider is Art. 26 GDPR and Art. 6 para. 1 (a) GDPR. For any subprocessing done by Google outside of the EU Google employs the standard contractual clauses of the EU commission and additional guarantees for the processing in the USA.
- Purpose of data processing
The purpose of storing the e-mail address is the possibility of electronic contact for advertising purposes. The date and IP address of the registration as well as the confirmation of the registration will be recorded in order to document the consent to the newsletter shipment and to prevent misuse. Furthermore, for information regarding actual purchases, the proper execution of the contract is the purpose of the contact.
The transfer to the service provider is done for the purpose of sending the newsletter as a mass mailing.
The purpose of us storing your support request, is to answer your request and assist you.
- Duration of storage
If we have received your e-mail address as part of the purchase of goods or services, it will be used for the delivery of advertising until you object to further use.
As far as you have expressly consented to the receipt of the newsletter, we will only delete or block the e-mail address for the advertising mailing, if you revoke your consent. The data confirming the order of the newsletter will be stored for an additional period of one year in case of late inquiries about the legal basis for sending a newsletter.
The e-mails sent, as far as business letters are concerned, are stored for the duration of retention periods of the Tax Code (“Abgabenordnung”) or the Commercial Code (“Handelsgesetzbuch”). The further e-mails are deleted as soon as no further response by the user has to be expected.
We store support requests as long as it is reasonable that you may have any additional questions or the ticket is closed. Closed tickets may be stored another 3 months for quality insurance and possible addition requests from your side. If a ticket contains any legal requests, e.g. refunds, we may store the ticket data as long as legally required under the Tax Code and the Commercial Code.
- Objection and removal possibility
You may object or revoke your consent to the use of the e-mail address for advertising purposes at any time, without incurring any costs beyond the charges of your communications tariff. You can object to the use of any advertising mail by clicking on a link provided there with effect for the future. You may also opt-out of advertising for future use by emailing [EMAIL]. You can not contradict the use of the e-mail address for addressing in the context of the performance of the contract or storing of business letters.
You can not object to storing the support request.
- Registering for our Services & Purchases
- Scope of data processing
In order to use the free part of our service, you do not need a personalized account but for any services requiring the payment of a service fee you are first required to set up a personalized account. This requires you providing an email address, a password of your choice and a username. We will send a double-opt-in-confirmation email to your email address and store the time and date and from which IP address the confirmation was issued.
If you purchase any content or enter any subscription model we will offer you the use of the payment services of our payment service provider.
We work with the external payment service provider “Stripe” to process the payments for your purchases.
Stripe Technology Europe, Limited,
The One Building, 1, Lower Grand Canal Street, Dublin 2, Ireland
The data required for the payment process (credit card number, validity and verification number, IBAN etc.) is transmitted encrypted to the payment service provider and is not visible for us. Stripe is certified according to the Payment Card Industry Data Security Standard Level 1. The payment provider transfers, processes and stores personal data outside the EU. Stripe is solely responsible for the processing of this data.
The privacy policy of Stripe can be viewed here: https://stripe.com/de/privacy
Finally, we will store all purchases made by you to your user account, including time and date and IP address used.
- Legal basis
The legal basis for collecting your email, password, confirmation data and nickname is Art. 6 para. 1 (b) GDPR, enabling us to provide our contractual services. Processing the purchases and storing them to your account is done based on Art. 6 para 1 (b) and (c), as we are required to keep track of your purchases and we are obliged under tax law and trade law to store all transaction data relating to purchases. The use of your IP address is based on Art. 6 para 1 (f) GDPR.
The legal basis for the processing of data by Stripe when making a purchase is Article 6 para. 1 (a) and (b) GDPR.
Stripe is not working as a data processor, but is itself responsible for the payment processing.
- Purpose of data processing
Storing the account and confirmation data allows you to log into your account and use the Service, while the confirmation data is proof for us, that you are entitled to use the email address. The transaction history is stored in order to process any requests for support from your side as well as for legal accounting purposes. We use the IP address for fraud prevention.
The purpose regarding the payment data is the settlement of payments for content, fraud prevention as well as the identifiability of the payment method by the user.
- Duration of storage
The account login data will be deleted as soon as your account is deactivated or deleted. Confirmation data is stored for at least one more year, in order to reply to late authorization inquiries. The purchase history is stored in accordance with the legal requirements under tax and trade law. The IP address is store for 6 weeks.
- Objection and removal possibility
You can not object to us storing the account login data except by terminating you account. Regarding the payment history and storing of the IP address an objection is not possible.
Regarding the data processing by Stripe, the revocation has to be declared towards Stripe.
- Viewing Videos
- Scope of data processing
While viewing our videos we will record which videos you view, at which point you stop to view a video in order to continue later, when you view a video in order to show you your viewing history in the correct order and we may offer you the option to store a wish- or to-view list. We will also use your IP address to verify the country you are using our service from.
- Legal basis
The legal basis for processing your viewing history is Art. 6 para. 1 (b) GDPR. The use of the IP address and your country of origin is based on Art. 6 para 1 (f) GDPR and is required for legal reasons as we may not own the licenses to offer certain videos to certain countries.
- Purpose of data processing
The viewing history and whishlist are required to provide you the services offered on our website. The use of your location is required for legal reasons, as detailed above.
- Duration of storage
The viewing history and wishlist is stored as long as you use our service, though may manually delete both on your own. The respective IP address and your location are deleted immediately after we verified that we are allowed to deliver the video.
- Objection and removal possibility
You can not object to our use of such data.
- Cookies & Locale Storage
Cookies & locale storage are “storage areas” for data on your computer. Content providers often access files stored there via the web browser or store information there for later access. This can be, for example, the language settings for a website, the contents of a shopping cart or settings data for video playback.
In detail, the following data packages in the form of cookies or local storage files can be accessed on our website. You have the option to refuse or accept this when loading the website. Once you have given your consent, you can revoke it at any time. In practice, you can do this by blocking cookies in your browser.