Data Privacy Statement of Film- und Medienfestival gGmbH

for itfs.de and itfs.picturepipe.net

 

We are pleased that you are visiting our website and would like to thank you for your interest. Protecting the privacy of our website visitors’ personal data is a key concern of ours, which is why we ask you to kindly take note of the information provided below.

In the following provisions we inform you about the collection, processing and use of your personal data in connection with your visit and use of the service offer on our website.

This Data Privacy Statement can be stored and printed.

 

  1. Controller/ Data Protection Officer
    • Controller

The controller of the data collection, data processing and data use is the operator of the website www.itfs.de and itfs.picturepipe.net:

Film- und Medienfestival gGmbH

Stephanstr. 33

D-70173 Stuttgart, Germany

Tel: +49-(0)711-92546-0

Fax: +49-(0)711-92546-150

E-mail: kontakt@festival-gmbh.de

 

  • Data Protection Officer

The contact data of the Data Protection Officer is:

Thomas Lang

Oberer Kirchhaldenweg 9 b
70195 Stuttgart

datenschutz@festival-gmbh.de

 

  1. Basic principles

We collect and process your personal data in compliance with the relevant statutory regulations, in particular with the General Data Protection Regulation (hereinafter referred to as: “GDPR”) and with the provisions of the German Federal Data Protection Act (hereinafter referred to as: “BDSG”) and in accordance with the provisions set out below.

 

 

  1. Terminology
    • Personal Data

The term personal data means any information relating to an identified or identifiable natural person. This includes, for example, name, address, telephone number, e-mail address, IP address, user name, password, and information on the websites which have been viewed by a visitor.

  • Data subject

The data subject is every identified or identifiable natural person whose personal data is processed by the controller responsible for the processing or by a processor on behalf of the controller.

  • Processing

Processing means any operation or set of operations which is performed on personal data, whether or not by automated means. This includes collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

  • Restriction of processing

Restriction of processing means the marking of stored personal data with the aim of limiting the processing thereof in the future.

  • Controller

Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

  • Processor

Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

  • Recipient

Recipient means a natural or legal person, public authority, agency or another body, to which the personal data is disclosed, whether a third party or not.

  • Third Party

Third Party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process the personal data.

  • Consent

Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

 

  1. Collection, processing and use of your personal data when you visit our website
  • Log files

Every time you access our website, the respective Internet browser transmits specific user data and stores it in log files, the so-called server log files. The data concerned is as follows:

  • date and time when you access our website
  • URL of the website you are referred from
  • the file retrieved
  • the amount of data transmitted
  • the browser type and browser version
  • your operating system
  • your IP address.

This data is collected and processed for the purpose of enabling you to use our website (establish the connection), to guarantee system security, for technical administration of the network infrastructure, to pass information on to the law enforcement authorities in the event of a cyber attack or abuse, and in order to optimize our offer.

The data is stored for 7 days. It is then erased – subject to any statutory storage obligations or storage requirements of public authorities.

The legal basis for the collection, storage and use of this data is our legitimate interest in being able to make the information on our website available to you free of any impairment and in guaranteeing the necessary security (Art. 6 (1) sentence 1 (f) GDPR).

 

  • Establishing general contact

If, in order to receive general information or to order our commemorative publication or a festival DVD, you contact us by e-mail, by means of the postal service or on the telephone, then depending on the transmission route you choose, we collect, store and process your form of address, your e-mail address, your first name and last name, your address and the content of your message. If you voluntarily provide us with more data than is necessary for the chosen transmission route, then we also store and process this data.

If you contact us by using our contact form, we collect, store and process your e-mail address and the content of the message sent to us. These are mandatory details. In addition, you can also voluntarily provide us with your first name and last name.

Please note that we do not need the data you provide on a voluntary basis in order to reply to your messages and you should check carefully whether or not you wish to disclose this data to us.

After the communications with you have been concluded, this data will be routinely erased – provided that there are no statutory storage obligations or storage requirements of public authorities or unless the lawfulness of the data processing is grounded on a different legal basis. This erasure is carried out no later than one year after we have had no further communications with you.

The legal basis for processing your personal data is our legitimate interest in communicating with you in order to reply to your messages and to be able to answer your questions (Art. 6 (1) sentence 1 (f) GDPR).

 

  • Newsletter

Our website is a showcase presenting you with interesting information on our company, our events and activities, our products and campaigns. You also have the possibility of subscribing to our free Newsletter so that you can receive this information directly by e-mail.

We need to have your e-mail address for you to subscribe to this. You can also indicate your first name and last name on a voluntary basis. Please note that we do not need the data you provide on a voluntary basis in order to send you the Newsletter and you should check carefully whether or not you wish to disclose this data to us. We use the so-called “double opt-in process” for your registration:

Once you have sent us the registration form, you receive a confirmation e-mail from us for verification of your e-mail address. The registration does not become effective until you have clicked on the link in the e-mail confirmation. If you have subscribed to the Newsletter you have given us the following statement of consent:

I agree to receiving information and advertising from
Film- und Medienfestival gGmbH in the form of Newsletters.

We use the e-mail address you advised us of when ordering the Newsletter solely to send the Newsletter.

You can unsubscribe from the Newsletter at any time. For this you can either use the unsubscribe link provided at the end of every e-mail or the de-register function on our website. Further, we also accept de-registrations by e-mail and on the telephone using the contact data provided above. Your e-mail address will then be immediately erased from the distribution system unless there is another legal basis for processing your personal data. When withdrawing your consent, you do not incur any charges apart from the transmission costs of the basic tariff.

The legal basis for collecting and processing your data to send you the Newsletter is your consent pursuant to Art. 6 (1) sentence 1 (a) GDPR.

We use Mailchimp for provision of the Newsletter function; this is a newsletter service of Rocket Science Group LLC headquartered in 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, Georgia 30308, USA.

We point out that Rocket Science Group LLC complies with the requirements of both the EU-US Privacy Shield and also those of the Swiss-US Privacy Shield. You can find extensive information on the data privacy policy of Rocket Science Group LLC (“Privacy Policy”) on the Mailchimp website: https://mailchimp.com/legal/privacy/#3._Privacy_for_Contacts. Mailchimp acts on our behalf as our processor (see section 5).

 

 

  • Transmitting information (also of a promotional nature)

 

If you provide us with your personal data in connection with contacting one of our employees by sending us your business card or an enquiry requesting information by e-mail, post, on the telephone etc., we store your data and use it for the purpose of sending you information in future on us, our activities and events. Information is only sent by e-mail if you give us your explicit consent after we have verified your e-mail address (double opt-in). If you did not contact us by e-mail yourself beforehand then we ask you to confirm that you consent to our sending you promotional information either by clicking on a link we send you or by sending us an e-mail reply. Your consent is given voluntarily and may be withdrawn at any time by sending us an e-mail with the reference “deregister” to the following address: datenschutz@festival-gmbh.de. When withdrawing your consent, you do not incur any charges apart from the transmission costs of the basic tariff.

 

The legal basis for this processing of your data is our legitimate interest in communicating with you in future and/or to comply with your wish by sending you information in future, including information of a promotional nature, on us, our activities and events (Art. 6 (1) sentence 1 (f) GDPR). If we send you information of a promotional nature by e-mail, the legal basis for this is your consent pursuant to Art. 6 (1) sentence 1 (a) GDPR.

 

If we have received your data in connection with a contractual relationship with you, e.g. by virtue of your having registered for one of our events or if you have submitted works in connection with an award, we process your personal data transmitted in this connection, on the one hand for the purpose of performing the contract relationship existing with you, or alternatively to initiate it. In addition, we will also send you information on us, our activities and events in future too, including information of a promotional nature.

The legal basis for the processing of your data is, on the one hand, to perform or initiate the contract relationship with you pursuant to Art. 6 (1) sentence 1 (b) GDPR, on the other hand it is the legitimate interest we have in sending you direct advertising and in advising you of our activities (Art. 6 (1) sentence 1 (f) GDPR).

 

You may object at any time to your personal data being processed for direct advertising purposes. To this effect please send us an e-mail with the reference “de-register” to datenschutz@festival-gmbh.de. We will then no longer use your data for these purposes.

  • Call for entries

We also collect and process your personal data for the purpose of your registration to participate in our event and for you to submit an entry to one of the competitions we organize. Under “Call for Entries” we show all the competitions currently being held which you can participate in.

 

 

  • Registration

You are re-routed to the special website itfs.picturepipe.net for the purpose of registration. During the course of registration, we collect, store and process your e-mail address, your first name and last name, your address (street, postal code, town/city, country). This information is mandatory. You can also provide us with the following additional information on a voluntary basis: The name of the undertaking you work for and on whose behalf you are attending and the position you hold in this undertaking.

Please note that we do not need the data you provide on a voluntary basis in order for you to take part in the competitions and you should check carefully whether or not you wish to disclose this data to us.

The legal basis for processing your personal data is in order to take steps for participation at our event prior to entering into a contract and/or for the performance of the contract with you as attendee at the event (Art. 6 (1) sentence 1 (b) GDPR).

 

  • Submitting a film entry

If you register as a entrant to participate in one of the competitions, we collect, store and process your contact data (form of address, your first name and last name, your country, address, telephone number and e-mail address) as well as detailed information on the project submitted (including the title, genre, production details etc.).

You can additionally provide us with your mobile phone and telefax numbers and the name of the undertaking you work for and on whose behalf you are attending and the position you hold in this undertaking. Please note that we do not need the data you provide on a voluntary basis in order for you to take part in the competition and you should check carefully whether or not you wish to disclose this data to us. We further grant you the possibility of providing us with personal data of the persons collaborating on the film and of additional persons acting as contacts (director, screenplay, camera, editing etc.). Please note that this personal data is also disclosed on a voluntary basis.

If you provide us with the data of third parties, you warrant that you are entitled to disclose this data to us. If you are uncertain about whether you are entitled to disclose individual personal data, then please refrain from doing so or obtain the permission of the data subject.

The purpose of our processing of this personal data is to communicate with you in connection with the competition, to process the competition and communicate the results and the procedure externally. Furthermore, processing the data of persons collaborating on the film serves to comply with the obligation under copyright law to properly name the authors and other rights holders.

 

The legal basis for processing your personal data is in order to take steps prior to entering into a contract or for the performance of the contract entered into with you on participation in the competition, pursuant to (Art. 6 (1) sentence 1 (b) GDPR). The legal basis for processing personal data of the third parties named by you is our legitimate interest in the proper processing of the competition, in collecting adequate information on the individual film works to enable an appropriate selection and in complying with our statutory obligations, particularly with regard to the naming of authors (Art. 6 (1) sentence 1 (f) GDPR).

We also transfer your contact data and the contact data of the persons involved in the film and of the contact persons you provided us with to the persons and undertakings accredited by us as trade visitors, to enable you to establish contact among yourselves and to fulfil our function as a meeting place. The legal basis for disclosing this personal data is our legitimate interest in informing the general public, interested specialists and the Jury of the projects submitted to us and to fulfil our function as a meeting place (Art. 6 (1) sentence 1 (f) GDPR).

 

  • Cookies and tracking tools
    • Cookies

We use so-called cookies. Cookies are alphanumeric identification characters (small text files) which are either stored briefly in your working memory and then deleted again as soon as you close your browser (“session cookies”) or stored in your storage medium over a longer period or for an unlimited period of time (“permanent cookies”). They can be subdivided into the following categories:

 

  • Necessary cookies

We use cookies that are strictly necessary from a technical perspective to hold the connection while you visit our website, to guarantee the security of communications and to protect our systems against attack. Without these cookies it is not possible to provide the website. The website cannot function securely without these cookies.

We use the following necessary cookies:

Name Cookie provider Cookie Description Storage
duration
boxzilla Boxzillaplugin.com boxzilla_box_24556 Conceals pop-up on Newsletter subscription after it has been closed Permanent

7 days
ITFS itfs..de _current_language Keeps the
current
language set		 Permanent

24 hours
WordPress itfs.de nm_transient_id Assigns a unique ID to every website visitor. If the visitor revisits the website, a new ID is assigned. Session
ITFS Itfs.de Opt-out status Blocks content and tools not allowed by the user in connection with statistics, marketing and external media, and stores this selected option. Session

 

The legal basis for the use of these cookies is our legitimate interest, pursuant to Art. 6 (1) sentence 1 (f) GDPR, to enable you to have secure and disruption-free use of the functionalities of our website.

  • Statistics cookies (tracking cookies)

Statistics cookies enable us to understand the way visitors use our website by collecting and evaluating information. This helps us to continually improve our website and, by doing this, to also increase convenience for you when you use it.

We only use statistics cookies in connection with implementing the analysis software Google Analytics (see sub-sec. 4.6.2.). Please note that we only use Google Analytics with IP anonymisation (see sub-sec. 4.6.2.).

 

Name Cookie provider Cookie Description Storage period
Google Analytics Google LLC

https://support.google.com/analytics/answer/6004245?hl=de&ref_topic=2919631

 _ga Statistics tool (generates statistics on use relating to visitors’ interaction with the website, without identifying the user personally). Registers a unique ID which is used to obtain statistical data on the usage behaviour of the website user. Permanent

2 years

 
Google Analytics Google LLC https://support.google.com/analytics/answer/6004245?hl=de&ref_topic=2919631 _gid Permanent

24 hours

 
Google Analytics Google LLC

https://support.google.com/analytics/answer/6004245?hl=de&ref_topic=2919631

 dc_gtm_UA-8201980-1 Statistics and analysis tool

(use of the Google Analytics ID for the DoubleClick Campaign Manager to analyse and track the success of an advertising campaign) is used to control the loading of the Google Analytics tag.

 Permanent

24 hours

 
Google Analytics itfs.de Opt-out status Stores the consent given to analysis for statistics purposes and to the associated provision of data to Google. Google Analytics is unblocked by this cookie.

 

The legal basis for the use of these cookies is your consent pursuant to Art. 6 (1) sentence. 1 (a) GDPR. These cookies are not implemented without your explicit consent.

 

  • External media / social media

We incorporate external media in our website in order to design our offer in a manner which is more interesting and informative for you. As data on your use of our website is transmitted to the operators of the external media in these cases, we require your consent in order to do so. The cookies that are used either block or unblock access to the external media, depending on the option you choose.

Name Provider Cookie Description Storage
period
Google

Maps

https://policies.google.com/privacy?hl=de

 

 itfs.de Opt-out status Stores the consent given to the use of and data transmission to external media and unblocks the content of these external media
Youtube

https://policies.google.com/privacy?hl=de

 

 itfs.de Opt-out status

The legal basis for the use of external media is your consent pursuant to Art. 6 (1) sentence 1 (a) GDPR. The external media set out above are not implemented without your explicit consent.

 

 

  • Deactivation of cookie settings

You can allow or refuse to allow the use of cookies in our cookie settings [a link]. Alternatively, in your browser settings, you can refuse to allow cookies in general, erase them from your computer, block them or activate the function that ensures you are always asked before a cookie is set. You do not have to allow cookies to visit our website. We do point out, however, that the use of the offer on our website, especially the convenience of use, might be restricted if you have deactivated cookies.

The following examples show you how to deactivate cookies:

Internet Explorer browser:

  1. Open the Internet Explorer.
  2. Select “Internet Options” in the menu “Tools”.
  3. Click on the “Privacy” tab.
  4. Click on “Advanced” under the sub-heading “Settings”
  5. You can now choose whether to accept all cookies, block all cookies or prompt approval of the cookies.
  6. You confirm your setting by pressing “OK”.

 

Firefox browser:

  1. Open the Firefox browser.
  2. Select “Options” from the main menu (three lines) in the top right corner
  3. Click on the “Privacy & Security” tab.
  4. In the section “Enhanced Tracking Protection” select “Custom” and choose a setting from the cookies dropdown menu.
  5. You can now choose which types of sites to accept cookies from, if any.
  6. You may need to restart the browser for the changes to be applied.

 

Safari browser:

  1. Open the Safari browser.
  2. Select “Preferences” under the Safari menu tab.
  3. Click “Privacy” and choose any of the following:
  4. Select “Prevent cross-site referencing”.
  5. Select “Block all cookies”.
  6. Select “Remove” or “Remove All” to remove stored cookies from the selected websites or all websites.
  7. Click “Manage Website Data” to see which websites store cookies or data.

 

Google Chrome browser:

  1. Open the Chrome browser.
  2. Select “Settings” from the main menu (three dots) in the top right corner.
  3. Under “Privacy & Security” select “Site Settings” and from this menu select “Cookies and site data”.
  4. You can either switch on “Allow sites to save and read cookie data” to allow all sites to use cookies or switch off “Allow sites to save and read cookie data” to block cookies on all sites.
  5. You can also allow and block individual sites by clicking “Add” under the sub-heading of the action you want to perform.
  6. The browser saves the changes made automatically.

 

Other browsers:

If you use any other browsers, information on cookie settings can be found by pressing the browser’s “assist” button.

 

Please note that browser functionalities change frequently. If the above instructions are no longer up to date, please follow the instructions provided by your browser.

 

  • Additional information on the tracking tool Google Analytics

This website uses Google Analytics, a web analysis service of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). Google Analytics is only used in combination with an activated anonymous IP (IP masking). This means that the IP address of a user in one of the member states of the European Union or of the signatory states of the Agreement on the European Economic Area is shortened by Google. Only in exceptional cases, especially if there is a technical defect in the European Union, is the IP address sent to a US server and shortened there. Google uses this information on our behalf in order to analyse your use of the website, compile reports on website activities and to perform additional services for us associated with the use of the website and the Internet. These services include, in particular, functions to visualize advertisements and Google Analytics reports containing information on the service with regard to demographic aspects and interests of the website operator. If applicable, Google will transfer this information to third parties if this is prescribed by law or if third parties process data on behalf of Google. This data is not, however, personal data. The IP address transmitted in the browser is not combined with other data by Google.

Google Analytics uses so-called cookies (see secs. 4.6.1.1. to 4.6.1.4.). You can prevent cookies from being stored by selecting the appropriate settings in your browser software (see sec. 4.6.1.5.).

In addition, you can prevent the data generated by the cookie from being collected and the processing of data by Google as follows:

In order to prevent Google from processing the data, please select the following options in our cookie settings [https://www.itfs.de/]. We do not use Google Analytics without your consent. You can withdraw your consent at any time in the cookie settings [https://www.itfs.de]. If you choose not to give your consent or to withdraw consent once given, an opt-out cookie will be installed on your device. This will thus prevent data from being collected by Google Analytics on this website and on this browser in future.

Detailed information on the terms of use and data privacy of data processing by Google during the use of the Google Analytics tracking tool is available at: https://support.google.com/analytics/answer/6004245?hl=de&ref_topic=2919631 and at https://policies.google.com/privacy?hl=de&gl=de.

We point out that Google LLC complies with the requirements of both the so-called EU-US Privacy Shield and also those of the Swiss-US Privacy Shield. These are treaties between the United States and the European Union and the United States and Switzerland, guaranteeing that the level of data protection stipulated in the European Union is also complied with by the relevant undertakings domiciled and certified in the USA. Further explanations are available at: https://www.privacyshield.gov/. You can retrieve the list of certified undertakings from: www.privacyshield.gov/list. We do, however, advise of the following: Even if undertakings in the USA have subjected themselves to the EU-US Privacy Shield and have thus undertaken to comply with the data protection rules specified in the treaty, the transmission of data to countries outside Europe, especially to the USA, can nonetheless involve risks under data protection law due to the possibilities of access by the state. Your data is transmitted to Google as an exception only if you have given your consent.

The legal basis for the use of Google Analytics is your consent pursuant to Art. 6 (1) sentence 1 (a) GDPR.

 

  • Google Maps

On our website we use “Google Maps”, an online map service offered by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Google Maps enables us to show you our location via an interactive map on the website and to give you travel directions to us.

As a rule, information on your use of our website (such as your IP address) is already transmitted to Google servers and stored there as soon as you retrieve the subpages which the map from Google Maps is embedded in. In this connection there can also be a transmission to the Google LLC servers in the USA. This happens regardless of whether you are logged into Google via a user account or not.

No data is transmitted to Google Maps unless you have given your consent. In the cookie settings [https://www.itfs.de] you can withdraw your consent at any time. If you do not grant us your consent to the inclusion of Google Maps, we use a special software solution which prevents the transmission of data to Google. The effect this has is that when you click on the map in Google Maps, you are transferred to a link first of all and only by clicking on this link after receiving data privacy instructions is the information sent to Google. Please only click on the map if you are in agreement with your data being transferred to Google and being used by Google as described below. If you do not activate the link there is no transmission of your data to Google.

Google uses the following data to determine the location:

  • GPS
  • Your IP address
  • Sensor data of the device you use
  • Information on objects in the vicinity of your device, e.g. any Wi-Fi access points, radio masts and Bluetooth-enabled devices

 

The type of location data collected by Google depends on the specific settings on your devices and accounts. You can, for example, activate and deactivate the location data via the “settings” App on your device.

If you are logged into Google, your data is assigned directly to your account. If you do not wish to have an assignment to your Google profile, you have to log out before you activate the button. Even if you are not logged in, Google stores your data as user profiles and evaluates it especially for (personalised) advertising and market research. You have the right to object to these user profiles being created; however, you have to contact Google to exercise this right.

We point out that Google LLC complies with the requirements of both the so-called EU-US Privacy Shield and also those of the Swiss-US Privacy Shield. These are treaties between the United States and the European Union and the United States and Switzerland, guaranteeing that the level of data protection stipulated in the European Union is also complied with by the relevant undertakings domiciled and certified in the USA. Further explanations are available at: https://www.privacyshield.gov/. You can view the list of certified undertakings at: www.privacyshield.gov/list. We do, however, advise you that, even if undertakings in the USA have subjected themselves to the EU-US Privacy Shield and have thus undertaken to comply with the data protection rules specified in the treaty, the transmission of data to countries outside Europe, especially to the USA, can nonetheless involve risks under data protection law due to the possibilities of access by the state. Only if you have given your consent is your data transferred to Google as an exception.

Extensive information on data protection by Google (“Google Privacy Policy”) is provided on the Google website: https://policies.google.com/privacy?hl=de, the additional terms of use for Google Maps can be found at:       https://www.google.com/intl/de_US/help/terms_maps.html.

If you are not in agreement with your data being transferred to Google in connection with the use of Google Maps in future, you do have the possibility of fully deactivating the Google Maps web service at any time by switching off the application of JavaScript in your browser. You cannot then use Google Maps or the map display on this Internet site. The following examples describe how you can deactivate JavaScript in the common browser Internet Explorer Version 9 or higher, Firefox, Google Chrome and Safari:

Internet Explorer Version 9 or higher:

  1. Click on “Tools” in the browser and then select the “Internet Options”.
  2. Change to the “Security” tab in the next window.
  3. Now press on “Custom level…” in the “Security” tab.
  4. When the dialogue window “Security Settings – Internet Zone” opens, scroll to the section “Scripting”.
  5. In “Active Scripting” select the option “Disable”.
  6. A “Warning!” window now opens and asks you “Are you sure you want to change the settings for this zone?” – select “Yes”.
  7. After returning to “Internet Options”, click on OK to store the settings and close the window.
  8. Now click on the “Refresh” button on your browser to reload the page.

 

Firefox:

  1. In Firefox, type “about:config” in the address bar, then press “Enter”.
  2. Select the “I accept the risk!” button.
  3. Type “javascript” in the “Search” box.
  4. Double-click the “javascript. enabled” line to switch the setting between “true” and “false” as desired.

 

Google Chrome:

  1. Select “Settings” from the main menu (three dots) in the top right corner of the browser.
  2. Click “Site Settings” under the sub-heading “Privacy & Security”.
  3. Click “JavaScript”.
  4. You can choose to switch “enable all” or “disable all” or you can add sites to an allow list or block list.

 

Safari:

  1. Open Safari.
  2. Open the Safari menu and click “Preferences”.
  3. Click the “Security” tab.
  4. Remove the check from the box in front of “Enable JavaScript” to disable the feature.

 

Please note that browser functionalities change frequently. If the above instructions are no longer up to date, please follow the instructions provided by your browser.

 

Additional information on restricting data use by Google Maps e.g. on deactivating and activating the location memory for certain devices and on deactivation or activation for specific Apps is available here:
https://support.google.com/accounts/topic/7189122?hl=de&ref_topic=3382254.

We use Google Maps to be able to show you the interactive maps of Google Maps and to thus improve your sense of direction regarding our location and make it easier for you to find us. The legal basis is your consent pursuant to Art. 6 (1) sentence 1 (a) GDPR.

 

  • Inclusion of YouTube videos

We incorporate videos from “YouTube”, the platform provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Information on the use of the data by Google when videos are viewed, is provided in the Google privacy policy: https://www.google.com/policies/privacy/ and in the YouTube terms of use:  https://www.youtube.com/static?gl=DE&template=terms&hl=de.

When a YouTube video is viewed, personal data is generally transferred by means of cookies to YouTube and to the Google tracking service DoubleClick, so as to enable the user behaviour to be analysed. In this case, cookies are already set every time the website is viewed, with the effect that Google is, in principle, able to collate all of the pages you have visited as a user, in order to compile a profile. It cannot, therefore, be ruled out that this data that is stored by the respective network is assigned to an individual person.

It is possible that by viewing YouTube videos, your data could be transferred to servers in third countries, e.g. in the USA. The responsibility for operating in compliance with data protection regulations has to be guaranteed by the respective provider. We point out that Google LLC complies with the requirements of both the so-called EU-US Privacy Shield and also those of the Swiss-US Privacy Shield. These are treaties between the United States and the European Union and the United States and Switzerland, guaranteeing that the level of data protection stipulated in the European Union is also complied with by the relevant undertakings domiciled and certified in the USA. Further explanations are available at: https://www.privacyshield.gov/. You can retrieve the list of certified undertakings from: www.privacyshield.gov/list. We do, however, advise of the following: Even if undertakings in the USA have subjected themselves to the EU-US Privacy Shield (see list of the undertakings at: www.privacyshield.gov/list) or to the EU standard contract clauses, and have thus undertaken to comply with the data protection rules specified in the contract, the transmission of data to countries outside Europe, especially to the USA, nonetheless involves risks under data protection law.

This use of your data by Google is conditional upon your consent. You give this consent in connection with the cookie consent or, in an individual case, by accepting data processing by Google by clicking on the video interface.

By means of our software solution, there is only a transmission of data to Google if you allow only the YouTube cookies or if you allow all social media cookies. Google may not collect any data from you beforehand. This thus ensures that you can use our offer without making your data available to Google.

Your consent is voluntary as you can already choose in the cookie settings [https://www.itfs.de/] whether you agree to allowing cookies to be set by YouTube or not. It is up to you to decide not to allow YouTube cookies. Please bear in mind that in this case YouTube content cannot be displayed on our website.

You can withdraw your consent at any time. In order to prevent the transmission of data to Google without activating the video, you can block YouTube cookies at any time in the cookie settings [https://www.itfs.de/]. The resultant effect is that no data is transferred to Google, but you cannot be shown any videos either. You can still watch the video if you accept the data transmission to YouTube by clicking on the link on the blocked video user interface.

The legal basis for this processing of your data is your consent (Art. 6 (1) sentence 1 (a) GDPR).

 

  • Cloudflare

 

We use content delivery networks to design a particularly appealing website for you and to simultaneously reduce the website loading time. In this connection, content of our website, for instance fonts and images, is provided on external third-party servers. We use content of the provider “Cloudflare”.

We use animation libraries of Cloudflare, a Content Delivery Network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.

When you visit our website, Cloudflare collects your IP address, your system configurations and other information on the traffic to and from Cloudflare customer websites.

We point out that Cloudflare complies with the requirements of both the so-called EU-US Privacy Shield and also those of the Swiss-US Privacy Shield. These are treaties between the United States and the European Union and the United States and Switzerland, guaranteeing that the level of data protection stipulated in the European Union is also complied with by the relevant undertakings domiciled and certified in the USA. Further explanations are available at: https://www.privacyshield.gov/. You can view the list of certified undertakings at: www.privacyshield.gov/list. We do, however, advise you that, even if undertakings in the USA have subjected themselves to the EU-US Privacy Shield and have thus undertaken to comply with the data protection rules specified in the treaty, the transmission of data to countries outside Europe, especially to the USA, can nonetheless involve risks under data protection law due to the possibilities of access by the state.

You can find extensive information on the privacy policy of Cloudflare on the Cloudflare website: https://www.cloudflare.com/de-de/privacypolicy/.

The legal basis for the use of this content delivery network is our legitimate interest in providing you with an appealing and fast-loading website (Art. 6 (1) (f) GDPR).

 

  • Job applications

If you send us your application through the postal service, by e-mail or telefax, we collect, store and process the contact data you specifically provide us with, e.g. your name, address and telephone number, your telefax number and your e-mail address, in order to use it to be able to communicate with you during the course of the application process. Your full application documentation and other documentation provided during the course of the application process, and our records, will also be handled in confidence and protected against access when stored. Documents on paper will be protected against access when stored. We process your application documentation in order to be able to assess your specialist aptitude, qualification and ability for the position you have applied for, and so as to have a basis on which to make our selection decision.

If your application documentation should contain special categories of personal data, for instance information on your health, your religious beliefs or ethnic origin, we shall base our processing of such documentation on our statutory obligations as an employer and on the protection of your fundamental rights associated therewith and thus, in addition, on Art. 9 (2) (b) GDPR. Additionally, we also process your information on the basis of Art. 9 (2) (h) GDPR in order to be able to assess the working capacity of potential employees and, if appropriate, to take preventive or occupational medicine measures.

If the outcome of the application process is successful, we will use and process your documentation and data in the context of your employment relationship. You will be given separate information in this respect. Otherwise the application process will end when a letter of rejection addressed to you is dispatched.

Your data will be erased no later than four months after our letter of rejection is dispatched and any copies existing on paper will be correctly destroyed and disposed of or returned to you, unless a longer storage period is necessary in order to defend against any legal claims or to perform a statutory obligation. Naturally we will proceed in the same manner if you advise us that you wish to retract your application.

If, after your application is rejected, you would like us to consider you in a subsequent selection process, we will store your application documentation if you have given us your statement of consent in writing. If appropriate, we will obtain this from you separately. The legal basis for this continued storage and processing of your personal data is your consent pursuant to Art. 6 (1) sentence 1 (a) GDPR. This data will be routinely erased after two years or in the event of your withdrawal of consent, which is possible at any time, unless a longer storage period is necessary in order to defend against any legal claims or to perform a legal obligation.

The legal basis for collecting and processing your data in connection with the application process is, in principle, the need to have it for a decision on establishing an employment relationship (Art. 6 (1) sentence 1 (b) GDPR; section 26 (1) sentence 1 BDSG) and our legitimate interest in using it for the purpose of the proper conduct of the application process (Art. 6 (1) sentence 1 (f) GDPR). In the event of special categories of personal data, the legal basis is Art. 9 (2) (b) and (h) GDPR (see above).

 

  • Children and young people

Our websites are not designed for children or young people below 16 years of age. We do not therefore knowingly or intentionally collect any personal data from children or young people. If you are under 16 years of age, please do not enter any data on this website. If we obtain knowledge that we have received personal data from children or young people who are not yet 16 years of age, we will erase such data without undue delay subject to any storage obligations.

 

  1. Data processing by a processor / disclosing data
  • Data processing by a processor

Notwithstanding any other provisions, we reserve the right, on the above legal bases, to transfer or disclose your data to a third-party (processor) commissioned by us (e.g. in connection with IT support, hosting, destruction of files, sending the Newsletter etc.). We always have agreements on such processing on our behalf with the service providers commissioned by us in this manner. These agreements ensure that the data disclosed accordingly is only used by our commissioned processors to perform the tasks stipulated by us in accordance with the above purposes and that it is used in compliance with the technical and organisational measures necessary for data security and data protection.

5.2    Disclosing data to third parties

Further, your personal data is not transmitted to third parties for any purposes other than those set out below. We only disclose personal data to third parties if:

  • you have explicitly given us your consent to do so pursuant to Art. 6 (1) sentence 1 (a) GDPR;
  • disclosure is necessary pursuant to Art. 6 (1) sentence 1 (f) GDPR on account of a legitimate interest and if there is no reason to assume that such interest is overridden by your interests or fundamental rights and freedoms to protect your personal data (Art. 6 (1) sentence 1 (f) GDPR);
  • there is a legal obligation for disclosure pursuant to Art. 6 (1) sentence 1 (c) GDPR;
  • the transmission is necessary, pursuant to Art. 6 (1) sentence 1 (b) GDPR, for the performance of contract relationships with you;
  • the transmission is necessary, pursuant to Art. 6 (1) sentence 1 (d) GDPR, in order to protect vital interests or
  • the transmission is necessary for the performance of a task carried out in the public interest pursuant to Art. 6 (1) sentence 1 (e) GDPR.
  1. Encryption / data security
    • Your data is always encrypted by means of TLS encryption (so-called Transport Layer Security) when it is collected, processed and used. TLS is implemented to encrypt the continual flow of data on the Internet between the server and a user’s browser and to thus prevent any “eavesdropping and data being secretly retrieved” – insofar as this is technically feasible. One of the ways to tell that a connection is encrypted, is if the URL in your browser’s address bar starts with “https://” and/or if the status bar at the bottom of your web browser shows a “lock” or “key” symbol (icon). By clicking on the icon, depending on the browser you use, you can receive further information on the encryption and on the TLS certificate used.
    • We point out that it is not possible to fully guarantee data security during e-mail communications. For transmitting confidential information, it might be preferable to use the postal service or service by a courier.
    • Furthermore, we apply all reasonable, suitable, technical and organisational security measures to protect your data against accidental or deliberate manipulation, full or partial loss, destruction and unauthorized access by third parties. Our security measures are subject to on-going improvement and further development in accordance with technological developments.
  1. Erasure of the data / restriction of data processing

Your data will be erased, in principle, if your consent has discontinued or if the data is no longer required for the purpose of the data processing and if there is no other legal basis for or justified interest in continued storage and processing. If, however, this data still has to be stored due to existing statutory or contractual obligations or requirements of public authorities (e.g. warranty, financial book­keeping), then data processing is restricted by marking and blocking the data. In the event that the purpose of the data processing is changed compared with the original purpose, we shall inform you of this in a manner that is in conformity with data protection law and comply with the requirements of data protection law.

 

  1. Rights of the data subject

As the data subject whose data is being processed, you are entitled to the following rights:

  • Right to be given information (Art. 15 GDPR)

You have the right to obtain information from us on the personal data stored on you. This encompasses, in particular, information on the purposes of the processing, the categories of the personal data processed, the categories of recipient to whom the processed personal data has been or will be disclosed, the period of storage, the existence of the right to rectification or erasure of personal data, to restriction of processing and to object to such processing, the existence of a right to lodge a complaint, the source of your data if it was not collected by us, and the existence of automated decision-making, including profiling, and, if applicable, meaningful information on the details. You further have the right to receive a copy of your personal data undergoing processing by us.

  • Right to rectification (Art. 16 GDPR)

You have the right to obtain from us without undue delay the rectification of inaccurate personal data and the right to have incomplete personal data completed.

  • Right to erasure (‘right to be forgotten’) (Art. 17 GDPR)

You have the right to obtain from us the erasure of your personal data, subject to the statutory requirements. If such erasure is prejudiced by statutory storage obligations or storage requirements of public authorities or where the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims, the processing of the data will be restricted (see below).

  • Right to restriction of processing (Art. 18 GDPR)

You have the right to demand of us, subject to the statutory requirements, that we restrict the processing of your personal data, i.e. mark the data and restrict the future processing of it (blocking).

  • Right to data portability (Art. 20 GDPR)

You have the right, subject to the statutory requirements, to require us to transmit to you, or to another controller named by you, the personal data concerning you, which you provided to us, in a structured, commonly used and machine-readable format.

  • Right to object to direct marketing (Art. 21 GDPR)

You have the right to object at any time to the processing of your personal data for advertising purposes (“Objection to Advertising”).

  • Right to object to data processing if the legal ground is a “legitimate interest” (Art. 21 GDPR)

You have the right to object at any time to the processing of the data by us if the legal basis for this is a “legitimate interest”. We will then discontinue the processing of the data unless we are able to demonstrate, in accordance with the legal stipulations, compelling legitimate grounds for the continued processing which override your rights.

  • Right to withdraw consent (Art. 7 (3) GDPR)

If you have given us your consent to the collection and processing of your data, you may withdraw this consent at any time with effect for the future. The lawfulness of processing your data in the past up until the time of your withdrawal of consent shall remain unaffected by this.

  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

You may lodge a complaint with the competent supervisory authority if you are of the opinion that the processing of your data is infringing applicable law. For this you have the right to approach the competent data protection authority at your habitual residence or in your country or the data protection authority with competence for us.

 

  1. Competent supervisory authority

The supervisory authority with competence for us is the

State Officer for data protection and

freedom of information of the German State of Baden-Württemberg

Königstrasse 10a

70173 Stuttgart, Germany

Telephone: +49 (0)711/615541-0

E-mail: poststelle@lfdi.bwl.de

 

  1. Validity and changes to the Data Privacy Statement

This Data Privacy Statement is valid at the current time and is the version dated 28 November 2019.

It can become necessary to amend this Data Privacy Statement as a result of further developing our website and offers or due to changes to statutory provisions or requirements of the public authorities.

You can retrieve, print and store the Data Privacy Statement valid at any one time from our website at https://www.itfs.de/datenschutz/.

 

Version: 10th March 2020