Privacy policy

1. Data protection at a glance

General notes

The fol­low­ing notices pro­vide a sim­ple overview of what hap­pens to your per­son­al data when you vis­it this web­site. Per­son­al data is any data by which you can be per­son­al­ly iden­ti­fied. For detailed infor­ma­tion on the sub­ject of data pro­tec­tion, please refer to our data pro­tec­tion dec­la­ra­tion list­ed below this text.

Data collection on this website

Who is responsible for the data collection on this website?

Data pro­cess­ing on this web­site is car­ried out by the web­site oper­a­tor. You can find their con­tact details in the sec­tion “Infor­ma­tion on the respon­si­ble body” in this data pro­tec­tion declaration.

How do we collect your data?

On the one hand, your data is col­lect­ed by you pro­vid­ing it to us. This can be, for exam­ple, data that you enter in a con­tact form.

Oth­er data is col­lect­ed auto­mat­i­cal­ly or with your con­sent by our IT sys­tems when you vis­it the web­site. This is main­ly tech­ni­cal data (e.g. inter­net brows­er, oper­at­ing sys­tem or time of page view). This data is col­lect­ed auto­mat­i­cal­ly as soon as you enter this website.

What do we use your data for?

Part of the data is col­lect­ed to ensure error-free pro­vi­sion of the web­site. Oth­er data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right at any time to receive infor­ma­tion free of charge about the ori­gin, recip­i­ent and pur­pose of your stored per­son­al data. You also have a right to request the cor­rec­tion or dele­tion of this data. If you have giv­en your con­sent to data pro­cess­ing, you can revoke this con­sent at any time for the future. You also have the right to request the restric­tion of the pro­cess­ing of your per­son­al data in cer­tain cir­cum­stances. Fur­ther­more, you have the right to lodge a com­plaint with the com­pe­tent super­vi­so­ry authority.

You can con­tact us at any time with regard to this and oth­er ques­tions on the sub­ject of data protection.

Third-party analysis tools and tools

When vis­it­ing this web­site, your surf­ing behav­iour may be sta­tis­ti­cal­ly analysed. This is done main­ly with so-called analy­sis programmes.

Detailed infor­ma­tion on these analy­sis pro­grammes can be found in the fol­low­ing data pro­tec­tion declaration.

2. Hosting

We host the con­tent of our web­site with the fol­low­ing provider:

DomainFactory

The provider is Domain­Fac­to­ry GmbH, c/o WeWork, Neu­turm­straße 5, 80331 Munich (here­inafter Domain­Fac­to­ry). When you vis­it our web­site, Domain­Fac­to­ry col­lects var­i­ous log files includ­ing your IP addresses.

For details, please refer to DomainFactory’s pri­va­cy pol­i­cy:https://www.df.eu/de/datenschutz/.

The use of Domain­Fac­to­ry is based on Art. 6 para. 1 lit. f DSGVO. We have a legit­i­mate inter­est in ensur­ing that our web­site is pre­sent­ed as reli­ably as pos­si­ble. If a cor­re­spond­ing con­sent has been request­ed, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6 Para. 1 lit. a DSGVO and § 25 Abs. 1 TTDSG, inso­far as the con­sent includes the stor­age of cook­ies or access to infor­ma­tion in the user’s ter­mi­nal device (e.g. for device fin­ger­print­ing) with­in the mean­ing of the TTDSG. The con­sent can be revoked at any time.

Job processing

We have con­clud­ed a con­tract pro­cess­ing agree­ment (DPA) for the use of the above-men­tioned ser­vice. This is a con­tract required by data pro­tec­tion law that ensures that it process­es the per­son­al data of our web­site vis­i­tors only in accor­dance with our instruc­tions and in com­pli­ance with the GDPR. 

3. General information and mandatory information

Privacy

The oper­a­tors of these pages take the pro­tec­tion of your per­son­al data very seri­ous­ly. We treat your per­son­al data con­fi­den­tial­ly and in accor­dance with the statu­to­ry data pro­tec­tion reg­u­la­tions and this data pro­tec­tion declaration. 

When you use this web­site, var­i­ous per­son­al data is col­lect­ed. Per­son­al data is data that can be used to iden­ti­fy you per­son­al­ly. This pri­va­cy pol­i­cy explains what data we col­lect and what we use it for. It also explains how and for what pur­pose this is done. 

We would like to point out that data trans­mis­sion on the Inter­net (e.g. when com­mu­ni­cat­ing by e‑mail) may have secu­ri­ty gaps. It is not pos­si­ble to com­plete­ly pro­tect the data from access by third parties. 

Note on the responsible body

The per­son respon­si­ble for data pro­cess­ing on this web­site is:

AV Media Heroes GmbH
Moras­sistr. 4
80469 Munich
Man­ag­ing Direc­tors: Benedikt Karpati, Flo­ri­an Feil

Phone: +49 (0) 8145 – 36 06 810
info@avmedia-heroes.de
The con­troller is the nat­ur­al or legal per­son who, alone or joint­ly with oth­ers, decides on the pur­pos­es and means of the pro­cess­ing of per­son­al data (e.g. names, e‑mail address­es, etc.).

Storage period

Unless a spe­cif­ic stor­age peri­od has been spec­i­fied in this pri­va­cy pol­i­cy, your per­son­al data will remain with us until the pur­pose for which the data is processed no longer applies. If you assert a jus­ti­fied request for era­sure or revoke con­sent to data pro­cess­ing, your data will be delet­ed, unless we have oth­er legal­ly per­mis­si­ble grounds for stor­ing your per­son­al data (e.g. reten­tion peri­ods under tax or com­mer­cial law); in the lat­ter case, the dele­tion takes place after these rea­sons have ceased to exist. 

General information on the legal basis of data processing on this website

If you have con­sent­ed to the data pro­cess­ing, we process your per­son­al data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 (2) (a) GDPR, inso­far as spe­cial cat­e­gories of data are processed in accor­dance with Art. 9 (1) GDPR. In the case of explic­it con­sent to the trans­fer of per­son­al data to third coun­tries, the data pro­cess­ing is also car­ried out on the basis of Art. 49 para. 1 lit. a GDPR. If you have con­sent­ed to the stor­age of cook­ies or access to infor­ma­tion in your device (e.g. via device fin­ger­print­ing), data pro­cess­ing will also be car­ried out on the basis of Sec­tion 25 (1) TTDSG. The con­sent can be revoked at any time. If your data is required for the per­for­mance of a con­tract or for the imple­men­ta­tion of pre-con­trac­tu­al mea­sures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. Fur­ther­more, we process your data if it is nec­es­sary to com­ply with a legal oblig­a­tion on the basis of Art. 6 para. 1 lit. c GDPR. Fur­ther­more, the data pro­cess­ing may be car­ried out on the basis of our legit­i­mate inter­est in accor­dance with Art. 6 para. 1 lit. f GDPR. Infor­ma­tion on the rel­e­vant legal bases in each indi­vid­ual case is pro­vid­ed in the fol­low­ing para­graphs of this data pro­tec­tion declaration. 

Note on data transfer to the USA and other third countries

Among oth­er things, we use tools from com­pa­nies based in the USA or oth­er third coun­tries that are not secure under data pro­tec­tion law. When these tools are active, your per­son­al data may be trans­ferred to and processed in these third coun­tries. We would like to point out that in these coun­tries no lev­el of data pro­tec­tion com­pa­ra­ble to that of the EU can be guar­an­teed. For exam­ple, US com­pa­nies are oblig­ed to hand over per­son­al data to secu­ri­ty author­i­ties with­out you, as the data sub­ject, being able to take legal action against it. It can­not there­fore be ruled out that US author­i­ties (e.g. intel­li­gence ser­vices) process, eval­u­ate and per­ma­nent­ly store your data on US servers for sur­veil­lance pur­pos­es. We have no con­trol over these pro­cess­ing activities. 

Withdrawal of your consent to data processing

Many data pro­cess­ing oper­a­tions are only pos­si­ble with your explic­it con­sent. You can revoke any con­sent you have already giv­en at any time. The law­ful­ness of the data pro­cess­ing car­ried out up to the time of revo­ca­tion remains unaf­fect­ed by the revocation. 

Right to object to data collection in special cases as well as to direct marketing (Art. 21 GDPR)

IF THE DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 PARA. 1 GDPR). 

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING, INSOFAR AS IT IS RELATED TO SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL THEN NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21 PARA. 2 GDPR). 

Right to lodge a complaint with the competent supervisory authority

In the event of vio­la­tions of the GDPR, the data sub­jects have the right to lodge a com­plaint with a super­vi­so­ry author­i­ty, in par­tic­u­lar in the Mem­ber State of their habit­u­al res­i­dence, their place of work or the place of the alleged infringe­ment. The right of appeal exists with­out prej­u­dice to oth­er admin­is­tra­tive or judi­cial remedies. 

Right to data portability

You have the right to have data that we process auto­mat­i­cal­ly on the basis of your con­sent or in ful­fil­ment of a con­tract hand­ed over to you or to a third par­ty in a com­mon, machine-read­able for­mat. If you request the direct trans­fer of the data to anoth­er con­troller, this will only be done to the extent that it is tech­ni­cal­ly feasible. 

Information, deletion and correction

With­in the frame­work of the applic­a­ble legal pro­vi­sions, you have the right to free infor­ma­tion about your stored per­son­al data, its ori­gin and recip­i­ents and the pur­pose of the data pro­cess­ing at any time and, if nec­es­sary, a right to rec­ti­fi­ca­tion or dele­tion of this data. You can con­tact us at any time for this and oth­er ques­tions on the sub­ject of per­son­al data. 

Right to restriction of processing

You have the right to request the restric­tion of the pro­cess­ing of your per­son­al data. You can con­tact us at any time for this. The right to restric­tion of pro­cess­ing exists in the fol­low­ing cases: 

• If you con­test the accu­ra­cy of your per­son­al data held by us, we will usu­al­ly need time to ver­i­fy this. For the dura­tion of the audit, you have the right to request the restric­tion of the pro­cess­ing of your per­son­al data. 
• If the pro­cess­ing of your per­son­al data was/is unlaw­ful, you can request the restric­tion of data pro­cess­ing instead of deletion.
• If we no longer need your per­son­al data, but you need it to exer­cise, defend or assert legal claims, you have the right to request the restric­tion of the pro­cess­ing of your per­son­al data instead of erasure.
• If you have filed an objec­tion in accor­dance with Art. 21 (1) GDPR, a bal­anc­ing of your inter­ests and ours must be car­ried out. As long as it has not yet been deter­mined whose inter­ests pre­vail, you have the right to request the restric­tion of the pro­cess­ing of your per­son­al data. 

If you have restrict­ed the pro­cess­ing of your per­son­al data, this data may only be processed with your con­sent or for the estab­lish­ment, exer­cise or defence of legal claims, or for the pro­tec­tion of the rights of anoth­er nat­ur­al or legal per­son, or for rea­sons of impor­tant pub­lic inter­est of the Euro­pean Union or of a Mem­ber State.

SSL or TLS encryption

This site uses SSL or TLS encryp­tion for secu­ri­ty rea­sons and to pro­tect the trans­mis­sion of con­fi­den­tial con­tent, such as orders or inquiries that you send to us as the site oper­a­tor. You can rec­og­nize an encrypt­ed con­nec­tion by the fact that the address bar of the brows­er changes from “http://” to “https://” and by the lock sym­bol in your brows­er line. 

If SSL or TLS encryp­tion is acti­vat­ed, the data you trans­mit to us can­not be read by third parties.

4. Data collection on this website

Cookies

Our web­sites use so-called “cook­ies”. Cook­ies are small data pack­ets and do not cause any dam­age to your device. They are stored on your device either tem­porar­i­ly for the dura­tion of a ses­sion (ses­sion cook­ies) or per­ma­nent­ly (per­sis­tent cook­ies). Ses­sion cook­ies are auto­mat­i­cal­ly delet­ed at the end of your vis­it. Per­ma­nent cook­ies remain stored on your device until you delete them your­self or until your web brows­er auto­mat­i­cal­ly deletes them. 

Cook­ies can come from us (first-par­ty cook­ies) or from third-par­ty com­pa­nies (so-called third-par­ty cook­ies). Third-par­ty cook­ies enable the inte­gra­tion of cer­tain third-par­ty ser­vices with­in web­sites (e.g. cook­ies for pro­cess­ing pay­ment services). 

Cook­ies have dif­fer­ent func­tions. Many cook­ies are tech­ni­cal­ly nec­es­sary because cer­tain web­site func­tions would not work with­out them (e.g. the shop­ping cart func­tion or the dis­play of videos). Oth­er cook­ies may be used to eval­u­ate user behav­ior or for adver­tis­ing purposes. 

Cook­ies that are nec­es­sary to car­ry out the elec­tron­ic com­mu­ni­ca­tion process, to pro­vide cer­tain func­tions that you have request­ed (e.g. for the shop­ping cart func­tion) or to opti­mize the web­site (e.g. cook­ies to mea­sure the web audi­ence) (nec­es­sary cook­ies) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless anoth­er legal basis is spec­i­fied. The web­site oper­a­tor has a legit­i­mate inter­est in the stor­age of nec­es­sary cook­ies for the tech­ni­cal­ly error-free and opti­mized pro­vi­sion of its ser­vices. If con­sent to the stor­age of cook­ies and com­pa­ra­ble recog­ni­tion tech­nolo­gies has been request­ed, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of this con­sent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG); con­sent can be revoked at any time. 

You can set your brows­er so that you are informed about the set­ting of cook­ies and only allow cook­ies in indi­vid­ual cas­es, exclude the accep­tance of cook­ies for cer­tain cas­es or in gen­er­al, and acti­vate the auto­mat­ic dele­tion of cook­ies when you close the brows­er. If you dis­able cook­ies, the func­tion­al­i­ty of this web­site may be limited. 

You can find out which cook­ies and ser­vices are used on this web­site in this pri­va­cy policy.

5. Plugins and Tools

YouTube with extended data protection

This web­site embeds videos from the YouTube web­site. The oper­a­tor of the pages is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ireland. 

We use YouTube in extend­ed pri­va­cy mode. Accord­ing to YouTube, this mode means that YouTube does not store any infor­ma­tion about vis­i­tors to this web­site before they watch the video. The dis­clo­sure of data to YouTube part­ners, on the oth­er hand, is not nec­es­sar­i­ly exclud­ed by the extend­ed data pro­tec­tion mode. Here’s how YouTube con­nects to the Google Dou­bleClick net­work whether you’re watch­ing a video. 

As soon as you start a YouTube video on this web­site, it con­nects to YouTube’s servers. The YouTube serv­er is informed which of our pages you have vis­it­ed. If you are logged in to your YouTube account, you enable YouTube to assign your surf­ing behav­ior direct­ly to your per­son­al pro­file. You can pre­vent this by log­ging out of your YouTube account. 

Fur­ther­more, after start­ing a video, YouTube may store var­i­ous cook­ies on your device or use com­pa­ra­ble recog­ni­tion tech­nolo­gies (e.g. device fin­ger­print­ing). This allows YouTube to obtain infor­ma­tion about vis­i­tors to this web­site. This infor­ma­tion is used, among oth­er things, to col­lect video sta­tis­tics, improve the user expe­ri­ence and pre­vent fraud attempts. 

If nec­es­sary, fur­ther data pro­cess­ing oper­a­tions may be trig­gered after the start of a YouTube video, over which we have no influence.

YouTube is used in the inter­est of an appeal­ing pre­sen­ta­tion of our online offer­ings. This con­sti­tutes a legit­i­mate inter­est with­in the mean­ing of Art. 6 para. 1 lit. f GDPR. If a cor­re­spond­ing con­sent has been request­ed, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6 Para. 1 lit. a DSGVO and § 25 Abs. 1 TTDSG, inso­far as the con­sent includes the stor­age of cook­ies or access to infor­ma­tion in the user’s end device (e.g. device fin­ger­print­ing) with­in the mean­ing of the TTDSG. The con­sent can be revoked at any time.

For more infor­ma­tion about pri­va­cy at YouTube, please see their pri­va­cy pol­i­cy at: https://policies.google.com/privacy?hl=de.

Source: https://www.e‑recht24.de