Privacy Policy of Celluloid Visual Effects GmbH & Co. KG
I. General Information
This privacy policy applies to all of our websites.
1. Responsible Body
Below we explain to you which personal data is collected and processed by us when using our services and offers.
Celluloid Visual Effects GmbH & Co. KG
Pflügerstraße 18, 12047 Berlin
phone +49 (0)30 / 54 735 220
fax +49 (0)30 / 54 735 221
Personal data are individual details about personal or factual circumstances of a specific or identifiable natural person, this means all information that relates to a person.
2. Legal Basis
As far as a legal basis is mentioned in this Privacy Policy, they relate to the General Data Protection Regulation. This comes into effect from May 25, 2018. Prior to this, the corresponding provisions of the Federal Data Protection Act apply without us naming them.
We collect and process personal data based on the following statutory regulations:
Consent according to Article 6 paragraph 1 (a) General Data Protection Regulation (GDPR). Consent is any voluntary expression of intent, in an informed and unequivocal manner, in the form of a statement or other unambiguous confirmatory act, which indicates that the data subject consents to the processing of his personal data.
Necessity to fulfill the contract or carry out preparatory actions in accordance with Article 6 para. 1 (b) GDPR, this means that the data is required so that we can fulfill the contractual obligations to you or we need the data to prepare a contract closure with you.
Processing to fulfill legal obligations under Article 6 para. 1 (c) GDPR, this means that a processing of the data is required by law or other regulations.
Processing for the protection of legitimate interests in accordance with Article 6 para. 1 (f) GDPR, this means that processing is necessary to safeguard legitimate interests on our part or by third parties, unless the interests or fundamental rights and freedoms on your part that require the protection of personal data prevail.
3. Rights of affected
You are entitled to the following rights with regard to the processing of data by us in accordance with the respectively listed articles of the General Data Protection Regulation:
- Right of access by the data subject to Art. 15 GDPR
- Right to rectification according to Art. 16 GDPR
- Right to erasure (“right to be forgotten”) in accordance with Art. 17 GDPR
- Right to restriction of processing according to Art. 18 GDPR
- Right to data portability according to Art. 20 GDPR
- Right to object according to Art. 21 GDPR
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, employment or the place of the alleged infringement, if you believe that the processing of the personal data is violating the GDPR.
4. Data Erasure and Storage Duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, storage may take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which the processor is subject. Blocking or deletion of the data also takes place if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
II. Actual data processing
1. Visiting the Website
(a) Scope of Data Collection
When visiting our website, the following data is collected and stored by our web server:
- Information about the browser type and version used
- The operating system of the user
- The IP address of the user
- Date and time of access
The data is stored in the log files of of our hosting provider. This data is not stored or processed together with other personal data of the user. Our hosting provider is Strato AG based in Germany.
(b) Legal basis
The legal basis for processing the data is Art. 6 para. 1 (f) GDPR. The legal basis for the data processing by our hosting provider is Art. 28 para 3 GDPR.
The legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR therefore lies in the functionality of our website and its availability.
(c) Purpose of data processing
The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user’s IP address must be kept for the duration of the session.
The data is stored in order to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
(d) Duration of storage
The logfiles will be deleted after sixty days at the latest, unless there is a need to keep the data for the aforementioned purpose due to specific events.
(e) Objection and removal possibility
The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no possibility of objection by the user.
2. Recruitment database
(a) Scope of Data Collection
We offer the opportunity to apply for for jobs or freelance services with our company. We offer a form requesting your contact details, your job experience, nationality and we offer the opportunity to provide additional files documenting your experience. We usually do not offer express jobs but will take your application into consideration when we consider hiring employees or sourcing individual services with third parties.
Our database is stored with Shotgun Software Inc. in the United States of America.
(b) Legal basis
The legal basis for processing the data is Art. 6 para. 1 (a) and (b) GDPR in the form of initiating a contractual relation. The legal basis for the transfer of the data to the database service provider is Article 28 para. 3, 6 and 7, Article 46 para. 2 (c) GDPR. The standard data protection clauses of the EU Commission are used in contractual relation with the provider.
(c) Purpose of data processing
Purpose is to build a database with potential applicants for jobs and outsourcing contracts.
(d) Duration of storage
The is stored until you request us to remove the data..
(e) Objection and removal possibility
You may at any time request us to remove your data from the databank by sending us an email to mail@celluloid-vfx.com.
3. Embedded Vimeo videos
(a) Scope of data collection
Our website uses Vimeo, a video streaming platform operated bei Vimeo LLC, 555 West 18th Street, New York, New York 10011, USA, in video content on our website. By doing so the IP address of each visitor is transferred to Vimeo in order to provide the video content. When you initiate the video stream further data will be collected. Vimeo uses Cookies, small text files containing information, in order to collect information about your visit of our website. If you are logged into Vimeo’s services when using out website, Vimeo is able to identify you and allocate your visit to our website to your Vimeo user account. According to Vimeo they collect the following data using cookies:
- IP address
- browsertype
- language
- access time
- other cookies‘ content, including marketing IDs
- visited websites
Vimeo uses the data to deliver the requested videos, to produce statistical data and to offer each user individual content based on their preferences. Further information is provided on Vimeo’s website: https://vimeo.com/privacy.
(b) Legal Basis
Legal basis for the data transfer to Vimeo as an independent controller is Art. 6 para- 1 (f) GDPR.
The legitimate interest is the customer orientated design of the website and the opportunity to present videos without leaving the website.
(c) Purpose of data processing
The purpose is to enable the visitors to view videos directly on our website.
(d) Duration of storage
We do not store any data but only integrate a script that transfers information to Vimeo directly. For information on the duration of storage by Vimeo please visit their privacy policy: (https://vimeo.com/privacy).
(f) Objection and removal possibility
We can not offer any objection method for collecting the IP adress by Vimeo due to technical restrictions. Should you wish to view the video without Vimeo collecting data from Cookies, you can prevent your browser to store cookies by applying the respecting configuration to your browser. Also you can log out of Vimeo services in order to prevent Vimeo to connect information with your Vimeo account.