Data protection policy of the Stiftung Deutsche Kinemathek

Section 1 Information on the collection of personal data

(1) In the following, we would like to inform you about the collection of personal data when using our website. Personal data are all data that are personally identifiable to you, e.g. name, address, e-mail addresses, user behaviour.

(2) According to Article 4 (7) of the EU General Data Protection Regulation (GDPR), Mr Sebastian Harrand is the controller and our external Data Protection Officer at the Stiftung Deutsche Kinemathek - Museum für Film und Fernsehen, Potsdamer Strasse 2, 10785 Berlin. He can be contacted at datenschutz@deutsche-kinemathek.de. You can also use our postal address to contact our Data Protection Officer by adding “The Data Protection Officer”.

(3) When you contact us by e-mail or via a contact form, we will store the data you provide (your e-mail address, if applicable, your name and your telephone number) to be able to answer your questions. After the storage is no longer necessary, we will erase the data collected in this context; if there are any statutory retention obligations, we will restrict the processing of these data.

(4) If we use any commissioned service providers for individual functions of our offer or would like to use your data for advertising purposes, please see below for details on these processes. You can also find specific information on the defined criteria for the storage period here.

Section 2 Your rights

(1) You have the following rights regarding personal data concerning you:

• The right to access,
• The right to rectification or erasure,
• The right to restrict processing,
• The right to object to the processing,
• The right to data portability.

(2) If you are under the impression that something could have gone wrong with the processing of your personal data, you also have the right to contact the supervisory authority for data protection in the federal state of Berlin.

Section 3 Collection of personal data when visiting our website

(1) When using the website solely for information purposes, i.e. if you do not register or otherwise provide us with any information, we only collect the personal data that your browser transfers to our server. If you wish to view our website, we collect the data listed below. These data are technically necessary for us to display our website to you and to guarantee stability and security (legal basis is Article 6 (1)(f) GDPR):

• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access Status/HTTP Status Code
• The amount of data transferred in each case
• Website from which the request is made
• Browser
• Operating system and its interface
• Language and version of the browser software

(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk in relation to the browser you are using and which provide the operator of the webpage (in this case, us) where the cookie was placed with certain information. Cookies cannot run programs or transfer viruses to your computer. They are only used to make the Internet offer more effective and user-friendly.

(3) Use of cookies:

1. a) This website uses the following types of cookies. The scope and functionality of these cookies are explained further below:

• Transient cookies (see b)
• Persistent cookies (see c).

1. b) Transient cookies are automatically deleted when you close your browser. This particularly includes session cookies. Session cookies store a so-called session ID. This ID is used to assign different requests from your browser to the common session. This will allow your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close your browser.
2. c) Persistent cookies are automatically deleted after a specified period; depending on the cookie, this period may vary. You can delete cookies at any time in your browser security settings.
3. d) You can configure your browser settings according to your preferences and, for example, set the browser to deny third party cookies or all cookies. Please note that, if you do this, you may not be able to use all the functions of this website.
4. e) If you have an account with us, we use cookies to identify you when you visit the website again. Otherwise, you would have to log in again every time you visit.
5. f) The Flash cookies used are not recorded by your browser, but by your Flash plug-in. We also use HTML5 storage objects that are stored on your terminal device. These objects store the required data independently of your browser and do not have an automatic expiry date. If you want to prevent the Flash cookies from being processed, you must install an appropriate add-on, e.g. “Better Privacy” for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using the private browsing mode in your browser. We also recommend that you regularly erase your cookies and your browser history manually.

Section 4 Additional functions and offers on our website

(1) In addition to the purely informational use of our website, we offer various services which you can use if you are interested. You must generally provide additional personal data. We use in order to provide the respective service and the data processing principles mentioned above apply here.

(2) In some cases, we use external service providers to process your data. We carefully choose and commission these providers. They are also bound by our instructions and monitored at regular intervals.

(3) Furthermore, we may transfer your personal data to third parties if we offer you participation in promotional campaigns and competitions, conclusion of contracts or similar services together with partners. You will receive more information on this when you provide your personal data or below in the description of the offer.

(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the implications of this for you in the offer description.

Section 5 Objecting to or revoking consent to the processing of your data

(1) If you have given your consent to the processing of your data, you can revoke this at any time. After you have submitted a revocation to us, this influences whether or not it is permitted to process your personal data.

(2) If we base the processing of your personal data on the consideration of interests, you may object to the processing. This is the case if processing is not necessary, in particular, to fulfil a contract with you as we illustrate in the following description of the functions. If you decide to file such an objection, we ask you to explain why we should not process your personal data as we have done. If your objection is justified, we will examine the situation and either stop or adjust data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

(3) You can of course object to the processing of your personal data for the purposes of advertising and data analysis at any time. Using the following contact data, you can inform us of your objection to advertising: Stiftung Deutsche Kinemathek – Museum for Film and Television, Potsdamer Strasse 2, 10785 Berlin, Germany datenschutz@deutsche-kinemathek.de.