presented by

Premium-Partner









tiktok

The person responsible within the meaning of the General Data Protection Regulation (hereinafter “GDPR”) and other national data protection laws of the member states as well as further data protection provisions is:

 

FOL Festival of Lights International Productions GmbH

Birgit Zander

Savignyplatz 6

10623 Berlin

Website: www.festival-of-lights.de

E-Mail: info@festival-of-lights.de

Phone: +49 (0)30 318 60 113/4/5

Fax: +49 (0)30 315 09 748

 

 

General data processing

 

Scope and permission for the processing of personal data

We collect and use personal data of our users only to the extent necessary to provide the functionality of our website and our content and services. The collection and use of personal data of our users takes place regularly only with the consent of the user.

 

An exception applies in those cases in which prior consent cannot be obtained for actual reasons and the processing of the data is permitted by statutory provisions.

 

The legal basis for processing personal data with the prior consent of the data subject is Art. 6 para. 1 lit. a GDPR. Art. 6 para. 1 lit. b GDPR is the legal basis for the processing of personal data required for the performance of a contract or for the implementation of pre-contractual measures. The legal basis for the processing of personal data to fulfil a legal obligation is Art. 6 para. 1 lit. c GDPR. Art. 6 para. 1 lit. d GDPR serves as a legal basis in the event that vital interests of the data subject or another natural person necessitate the processing of personal data. If the processing is necessary to safeguard a legitimate interest of our company or a third party and these interests outweigh the interest of the data subject, taking into account the fundamental rights and freedoms of the data subject, Art. 6 para. 1 lit. f GDPR is the legal basis for the processing of the data.

 

Data erasure and storage duration

The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage no longer applies. In addition, the data may be stored if we are required to do so by law in order to process the data. In this case, the data will be blocked or deleted when the legally prescribed storage period expires, unless it is necessary for further storage of the data for the conclusion or fulfilment of a contract.

 

 

Data processing through the use of our website

Visit to our website

When you access our website, the browser used on your terminal device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted: IP address of the requesting computer, date and time of the access, name and URL of the retrieved file, website from which the access is made (referrer URL), browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

 

The above mentioned data are processed by us for the purposes of ensuring a smooth connection of the website, ensuring a comfortable use of our website, evaluation of system security and stability as well as for other administrative purposes.

 

The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. f GDPR. Our justified interest follows from the purposes listed above for the collection of data. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.

 

Use of our contact form

It is possible to contact us via the e-mail address provided. In this case, the personal data of the user transmitted with the e-mail will be stored. The data will not be passed on to third parties in this context. The legal basis for the processing of this data is Art. 6 para. 1 lit. f GDPR. If the purpose of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

 

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR on the basis of your voluntary consent. The personal data collected by us for the use of the contact form will be automatically deleted after you have completed your request.

 

Newsletter

We offer you the opportunity to subscribe to our newsletter on our website. With this newsletter we inform you about our offers at regular intervals. In order to receive our newsletter, you need a valid e-mail address. We will check the e-mail address you have entered to see whether you are actually the owner of the e-mail address provided or whether the owner is authorised to receive the newsletter.

 

With your registration to our newsletter we will save your IP address and the date and time of your registration. In the event that a third party misuses your e-mail address and subscribes to our newsletter without your knowledge, this serves as security on our part. Further data will not be collected by us. The data collected in this way will only be used in regard to our newsletter. It will not be passed on to third parties. A comparison of the data collected in this way with data that may be collected by other components of our site also does not take place. You can cancel your subscription to this newsletter at any time. Details can be found in the confirmation e-mail and in each individual newsletter.

 

Newsletter tracking

Our newsletters contain so-called tracking pixels. A pixel-code is a miniature graphic embedded in emails sent in HTML format for log file recording and analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. The embedded pixel-code allows us to determine if and when an email was opened by an individual and which links in the email were accessed by that individual.

 

Such personal data collected via the tracking pixels contained in the newsletters are stored and evaluated by us in order to optimise the newsletter dispatch and to adapt the content of future newsletters even better to the interests of the person concerned. This personal data will not be passed on to third parties. Affected persons are entitled at any time to revoke the relevant separate declaration of consent submitted via the double opt-in procedure. After a revocation these personal data will be deleted by the person responsible for the processing. A deregistration from the receipt of our newsletter will always be interpreted as a revocation.

 

Disclosure of data

Your personal data will not be transferred to third parties for purposes other than those listed below. We will only disclose your personal data to third parties if you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, the disclosure in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR for the assertion, exercise or defense of legal claims is necessary and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data, in the event that for the disclosure in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR for the disclosure in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR for the assertion, exercise or defense of legal claims. 6 para. 1 sentence 1 lit. c GDPR, as well as this is legally permissible and necessary according to Art. 6 para. 1 sentence 1 lit. b GDPR for the execution of contractual relationships with you.

 

Usage of cookies

We use cookies to operate our website in order to make it more user-friendly. Some elements of our website require that the accessing browser can be identified even after the site is changed.

 

Cookies are small files that make it possible to save specific information relating to the device on the user’s access device (PC, smartphone, etc.). They serve the user-friendliness of websites and thus the occupants (e.g. storage of login data). On the other hand, they are used to collect statistical data on the use of the website enabling them to be analysed with the aim of improving the service. Visitors can influence the use of cookies. Most browsers have an option that limit or completely prevents the storage of cookies. However, it should be mentioned that utilization and in particular user comfort are restricted without cookies.The user data collected in this way is pseudonymised by technical procedures. It is therefore no longer possible to assign the data to the accessing user. The data are not stored together with other person-related data of the users.The legal basis for the handling of person-related data with the use of cookies is Article 6 Paragraph 1 Letter F GDPR. The legal basis for the processing of personal data using technically necessary cookies is Article 6 Paragraph 1 Letter F GDPR. The legal basis for the processing of personal data using cookies for analysis purposes is Article 6 Paragraph 1 Letter A GDPR, if the user has given his authorisation.

The purpose of using technologically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized also after a site change.

The analysis cookies are used for the purpose of optimizing the quality of our website and its content. Through the analysis cookies, we are able to gain information on how the website is used and can thus are able to continuously optimise our services.

Our reasonable interest in the processing of personal data in accordance with Article 6 Paragraph 1 Letter F GDPR also stems in this regard.

Third-Party Suppliers

 

The responsible for processing has to integrate contents, services and performances of other providers on the website. These include, for example, maps provided by Google Maps, videos from YouTube and graphics and images from other websites. The transmission of the IP address is absolutely necessary so that these data can be accessed and displayed in the user’s browser. The providers ( in the following referred to as “third party suppliers”) thus perceive the IP address of the respective user.

Even though we make every effort to only use third-party providers who only need the IP address in order to deliver content, we have no influence on whether the IP address may be recorded. In this case, this process serves statistical purposes, among others. If we are aware that the IP address is being stored, we will inform our users accordingly.

 

Use and application of Google Analytics (with anonymization function)

The data processor has integrated the Google Analytics component (with anonymisation function) on this website. Google Analytics is a web analysis service. Web analysis is the elicitation, gathering and evaluation of data on the behaviour of visitors of websites. A web analysis service collects data on, among other things, from which website the visitor accessed a website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. A web analysis is mainly used to optimise a website and to analyse the costs and benefits of Internet advertising.

The operating company of the Google Analytics component is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The responsible for the processing of data uses the addition “_gat._anonymizeIp” for the web analysis via Google Analytics. This addition is used by Google to shorten and anonymise the IP address of the Internet connection of the person involved if the access to our Internet pages takes place from a member state of the European Union or from another contracting state of the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyse the influx of visitors viewing our website. Google uses the data and information gathered, among other things, to analyze the use of our website, to prepare online reports for us showing the activities on our website and to provide other services in connection with the use of our website.

Google Analytics places a cookie on the information technology system of the person concerned. What cookies are has already been explained above. When the cookie is set, Google is able to analyse the use of our website. Each time you access one of the individual pages of this website, which is operated by the data controller and on which a Google Analytics component has been integrated, the Internet browser on the information technology system of the person concerned is automatically instructed by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. Within the scope of this technical procedure, Google obtains information about personal data, such as the IP address of the person concerned, which Google uses, among other things, to trace the origin of visitors and clicks and as a result to enable commission settlements.

The cookie is used to store personal information such as the access time, the location from which the access originated and the frequency of visits to our website by referring persons. Each time a user visits our website, this personal data, including the IP address of the Internet connection used by the visitor, is transferred to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may share this personal data collected through the technical process with third parties.

The affected person can prevent the setting of cookies by our website, as described above, at any time by setting the Internet browser used accordingly and thus permanently disagree with the use of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the person affected. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

Furthermore, it is possible for the person concerned to disagree with and prevent the collection of data generated by Google Analytics in connection with the use of this website and the processing of this data by Google. For this purpose, the person concerned must download and install a browser add-on under the link https://tools.google.com/dlpage/gaoptout . This browser add-on informs Google Analytics via JavaScript that no data and information on visits to Internet pages may be transmitted to Google Analytics. The installation of the browser add-on is considered a disagreement by Google. If the data subject’s information technology system is later deleted, formatted or reinstalled, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the person concerned or by another person within his/her sphere of control, the browser add-on may be reinstalled or reactivated.

For more information and to review Google’s current privacy policies, please visit https://www.google.de/intl/de/policies/privacy/ and http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail at this link, https://www.google.com/intl/de_de/analytics/

 

Use and application of web fonts

External fonts, Google Fonts, are used on these Internet pages. Google Fonts is a service of Google Inc. (“Google”). These web fonts are integrated via a server access, usually a Google server in the USA. This will tell the server which of our Internet pages you have visited. The IP address of the browser of the user’s terminal device is also stored by Google. You can find more detailed information in Google’s data protection policy, which you can access here:

www.google.com/fonts#AboutPlace:about

www.google.com/policies/privacy/

 

Application of YouTube

We have integrated components from YouTube on our website. YouTube is an internet video portal that allows video publishers to post video clips and other users to view, rate and comment on them at no cost. YouTube allows the publication of all types of videos, which is why complete film and television programmes, but also music videos, trailers or videos made by users themselves can be accessed via the Internet portal.

YouTube is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Each time a YouTube component (YouTube video) has been integrated into one of the individual pages of this website, which is managed by the data controller, the Internet browser on the information technology system of the person concerned is automatically instructed by the respective YouTube component to download a representation of the YouTube component from YouTube. Further information on YouTube can be found at https://www.youtube.com/yt/about/de/ Within the scope of this technical procedure, YouTube and Google gain knowledge of which specific subpage of our website is visited by the person concerned.

If the person affected is logged in to YouTube at the same time, YouTube recognizes which specific subpage of our website the visitor is accessing by accessing a subpage containing a YouTube video. This information is collected by YouTube and Google and assigned to the corresponding YouTube account of the person concerned.

YouTube and Google always receive information via the YouTube component that the person concerned has visited our website if the person concerned is logged on to YouTube at the same time as accessing our website; this occurs regardless of whether the person concerned clicks on a YouTube video or not. If the data subject does not want YouTube and Google to receive such information, they can prevent the the data from being transmitted by logging out of their YouTube account before visiting our website.

The data protection regulations published by YouTube, which are available at https://www.google.de/intl/de/policies/privacy/, provide information about the gathering, processing and use of personal data by YouTube and Google.

 

Newsletter via MailChimp

Regarding the utilisation of your personal data to receive our newsletter, you will be asked for your consent at the specified point as follows:

“I have read and understood the privacy policy, in particular I agree that the data processing will be carried out by a third party service in the USA”.

We inform you about our offers through the newsletter at regular intervals. In order to receive our newsletter, you need a valid e-mail address. We will check the e-mail address you have entered to see whether you are actually the owner of the e-mail address provided or whether the owner is authorised to receive the newsletter. When you subscribe to our newsletter, we will store your IP address along with the date and time of your subscription. This serves as security for us in the scenario that a third party misuses your e-mail address and subscribes to our newsletter without your knowledge.

A comparison of the data collected in this way with data that may be collected by other components of our site also does not take place.

We use the component MailChimp to send our newsletter. MailChimp is a service provided by The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA. The information stored about you when you subscribe to our newsletter (e-mail address, name, IP address, date and time of your subscription) will be transferred to a server of The Rocket Science Group in the USA and stored there in accordance with the “EU-US Privacy Shield”. Further information on data protection at MailChimp can be found at: http://mailchimp.com/legal/privacy/

Further information on the “EU-US Privacy Shield” can be found at:

https://www.bfdi.bund.de/DE/Europa_International/International/Artikel/EU-US_PrivacyShield_Daten%C3%BCbermittlungenUSA.html?nn=5217040

http://ec.europa.eu/justice/data-protection/international-transfers/eu-us-privacy-shield/index_en.htm

You can cancel / revoke your subscription to this newsletter and thus your consent to the storage of your data for the future at any time . Details can be found in the confirmation e-mail as well as in each individual newsletter.

 

Implementation of Jetpack with wordpress.com STATS

We employ the Jetpack component from Automattic Inc., 132 Hawthorne Street, San Francisco, CA 94107, United States of America, using the technology of Quantcast Corp., 201 Third Street, 2nd Floor, San Francisco, CA 94103, United States of America. Each time you visit our site, cookies are used to collect web analysis data and store it in the United States. Cookies are small text files that are stored locally in the memory of the visitor’s Internet browser in order to enable the recognition of the visitor’s Internet browser. The IP address is anonymized immediately after processing however, before it is stored. You can prevent the installation of cookies by setting your browser software accordingly or delete cookies that have already been saved; however, we would like to point out that in this case you may not be able to use all the functions of our website to the full extent.

The gathering and use of data by the Jetpack component can be revoked for the future if you set an opt-out cookie in your browser via the http://www.quantcast.com/opt-out site. If you delete all cookies from your browser, the process must be repeated.

 

Data protection for applications and in the application process

We collect and process the personal data of applicants for the purpose of completing the application process. The processing can also be performed electronically. This is especially the case if an applicant submits corresponding application documents to us electronically, for example by e-mail or via a web template on the website. If we are entering into an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in consideration of the statutory provisions. If we do not enter into an employment contract with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, unless there are other reasonable interests on our part to prevent deletion. Other legitimate interests in this sense include, for example, a proof obligation in procedures under the General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz – AGG).

 

Rights of the person affected

You have the Right:

(1) to request information about your personal data processed by us in according to Article 15 GDPR. Especially, you have the right to request information on the processing purposes, the category of individual-related data, the categories of receivers to whom your data have been or will be disclosed, the planned duration of storage, the existence of a right of modification, deletion, restriction of processing or opposition, the existence of a right of complaint, the origin of your data if not collected from us, as well as the existence of an automated decision making process including profiling and, if applicable, meaningful information on its details;

(2) in accordance with Article 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;

(3) demand the deletion of your personal data stored by us in accordance with Article 17 GDPR, unless the processing is necessary to practise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

(4) to demand the restriction of the processing of your person-related data in accordance with Article 18 GDPR, if the correctness of the data is disputed by you, the processing is unlawful, yet you refuse its deletion and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have submitted an opposition against the processing in accordance with Article 21 GDPR;

(5) in accordance with Article 20 GDPR, to receive your personal data which you have provided to us in a structured, common and machine-readable format or to request the conveyance to another responsible person;

(6) in accordance with Article 7 para. 3 GDPR to cancel your permission once given to us at any time. The result of this is that we are no longer allowed to continue the data processing based on this consent for the future and

(7) to complain to a supervisory authority in accordance with Art. 77 GDPR. Generally, you can contact the supervisory authority of your usual place of residence or workplace or the headquarters of our office.

 

Right of objection

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data on the basis of Art. 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions.

 

The controller will no longer process the personal data relating to you unless he can prove compelling reasons for processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

 

If the personal data concerning you are processed for the purpose of direct advertising, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising; this also applies to profiling to the extent that it is connected with such direct advertising.

 

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

 

You have the possibility to exercise your right of objection in relation to the use of Information Society services – notwithstanding Directive 2002/58/EC – by means of automated procedures using technical specifications.

 

Automated decision in individual cases including profiling

You have the right not to be subject to any decision based solely on automated processing, including profiling, that has any legal effect on you or similarly significantly affects you. This does not apply if the decision

 

(1) is necessary for the conclusion or performance of a contract between you and the person responsible,

(2) is authorised by legislation of the Union or of the Member States to which the person responsible is subject and contains adequate measures to safeguard your rights and freedoms and your legitimate interests, or

(3) with your explicit consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.

 

In the cases referred to in (1) and (3), the controller shall take reasonable steps to safeguard the rights and freedoms and your legitimate interests, including at least the right of the controller to obtain the intervention of a person, to present his or her point of view and to contest the decision.

 

As a responsible company, we refrain from automatic decision-making or profiling.

 

Data security

We use the most common SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser.

 

We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

 

 

Timeliness and amendment of this data protection declaration

This privacy policy is currently valid and as of May 2018.

 

Due to the further development of our website and offers about it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can call up and print out the current data protection declaration at any time at this address.

 

X