{"id":3611,"date":"2025-01-29T13:54:05","date_gmt":"2025-01-29T12:54:05","guid":{"rendered":"https:\/\/imagis-fiction.de\/datenschutz\/"},"modified":"2025-02-12T10:11:40","modified_gmt":"2025-02-12T09:11:40","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/imagis-fiction.de\/en\/privacy-policy\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"
<\/div><\/div><\/main><\/div><\/div>
\n

Privacy Policy<\/strong><\/p>\n

This privacy policy informs you about the nature, scope, and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offering and its associated websites, functions, and content, as well as external online presences, such as our social media profiles (hereinafter collectively referred to as “online offering”). Regarding the terms used, such as “processing” or “controller,” we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).<\/p>\n

Controller<\/strong>
\nimagis Filmproduktion GmbH & Co. KG
\nAllee 82
\n74072 Heilbronn
\nGermany<\/p>\n

Managing Directors:<\/strong> Michael Stadler, Joshua J. Krull<\/p>\n

Imprint: https:\/\/imagis-fiction.de\/impressum<\/p>\n

Types of Processed Data<\/strong>
\nInventory data (e.g., names, addresses).
\nContact data (e.g., email, phone numbers).
\nContent data (e.g., text entries, photographs, videos).
\nUsage data (e.g., visited websites, interest in content, access times).
\nMeta\/communication data (e.g., device information, IP addresses).
\nCategories of Affected Persons
\nVisitors and users of the online offering (hereinafter referred to collectively as “users”).<\/p>\n

Purpose of Processing<\/strong>
\nProvision of the online offering, its functions, and content.
\nResponding to contact inquiries and communicating with users.
\nSecurity measures.
\nAudience measurement\/marketing.
\nDefinitions of Terms
\nPersonal data: Any information relating to an identified or identifiable natural person.
\nProcessing: Any operation or set of operations performed on personal data.
\nPseudonymization: Processing personal data in such a way that it can no longer be attributed to a specific data subject without additional information.
\nProfiling: Any form of automated processing used to evaluate personal aspects of a natural person.
\nController: A person or organization determining the purposes and means of processing personal data.
\nProcessor: A person or organization processing personal data on behalf of the controller.
\nRelevant Legal Basis
\nAccording to Article 13 GDPR, we inform you of the legal bases of our data processing. If no specific legal basis is mentioned, the following applies:<\/p>\n

Consent: Article 6(1)(a) and Article 7 GDPR.
\nPerformance of a contract: Article 6(1)(b) GDPR.
\nLegal obligations: Article 6(1)(c) GDPR.
\nLegitimate interests: Article 6(1)(f) GDPR.
\nProtection of vital interests: Article 6(1)(d) GDPR.
\nSecurity Measures
\nWe take appropriate technical and organizational measures per Article 32 GDPR to ensure an adequate level of protection for the data we process. These measures include:<\/p>\n

Ensuring confidentiality, integrity, and availability of data.<\/strong>
\nControlling access to data.
\nEstablishing procedures for data protection, including deletion and incident response.
\nEmbedding data protection principles into technology and system design (Article 25 GDPR).
\nCollaboration with Processors and Third Parties
\nWe disclose data to third parties only if legally permitted (e.g., necessary for contract fulfillment, based on consent, legal obligation, or legitimate interest). If we contract third parties for processing, this is based on a data processing agreement per Article 28 GDPR.<\/p>\n

Transfers to Third Countries<\/strong>
\nData transfers outside the EU\/EEA occur only if necessary for contract fulfillment, with user consent, due to legal obligations, or legitimate interests. Such transfers occur under specific conditions per Articles 44 ff. GDPR, such as recognized data protection standards (e.g., EU-US Privacy Shield) or standard contractual clauses.<\/p>\n

Rights of Data Subjects<\/strong>
\nYou have the right to:<\/strong><\/p>\n

Request confirmation of data processing and access to your data (Article 15 GDPR).
\nRequest rectification of incorrect or incomplete data (Article 16 GDPR).
\nRequest deletion of data (Article 17 GDPR) or restriction of processing (Article 18 GDPR).
\nReceive your data in a structured, commonly used format (Article 20 GDPR).
\nLodge a complaint with a supervisory authority (Article 77 GDPR).
\nRight of Withdrawal
\nYou can withdraw consent at any time with future effect (Article 7(3) GDPR).<\/p>\n

Right to Object<\/strong>
\nYou can object to future data processing at any time, especially concerning direct marketing (Article 21 GDPR).<\/p>\n

Cookies and Right to Object to Direct Advertising
\nCookies are small files stored on users\u2019 devices. We use temporary (session) cookies and persistent cookies for various functions, including analytics and marketing. Users can disable cookies in browser settings, though this may affect website functionality.<\/p>\n

Deletion of Data<\/strong>
\nData is deleted according to Articles 17 and 18 GDPR when no longer needed for its intended purpose and no legal retention obligations exist.<\/p>\n

In Germany:<\/strong> Retention periods of 10 years (\u00a7147 AO, \u00a7257 HGB) and 6 years (\u00a7257 HGB).
\nIn Austria: Retention periods of 7 years (\u00a7132 BAO) and up to 22 years for real estate transactions.
\nBusiness-Related Processing
\nWe process contract and payment data from customers, prospects, and business partners for service provision, customer support, and marketing.<\/p>\n

Google Analytics Privacy Policy<\/strong>
\nThis website uses Google Analytics (based on Article 6(1)(f) GDPR). Google Analytics uses cookies to analyze website usage. Data collected includes browser type, OS, referrer URL, IP address (anonymized), and session times.
\nUsers can disable Google Analytics tracking via browser settings or an opt-out link.<\/p>\n

Agency Services<\/strong>
\nWe process client data for consulting, campaign planning, software development, implementation, and analysis. Data includes contract, contact, payment, and usage data. Processing follows Articles 6(1)(b) and 6(1)(f) GDPR.<\/p>\n

Administration, Financial Accounting, Office Organization, Contact Management<\/strong>
\nWe process data for administrative purposes, including financial accounting and legal obligations. Data may be shared with tax authorities, accountants, and payment processors.<\/p>\n

Business Analytics and Market Research<\/strong>
\nWe analyze business activities and trends based on inventory, communication, contract, and usage data. Processing is based on Article 6(1)(f) GDPR.<\/p>\n

Providing Our Statutory and Business-Related Services<\/strong>
\nWe process data from members, supporters, customers, and others per Articles 6(1)(b) and 6(1)(f) GDPR for administrative and public relations purposes.<\/p>\n

Comments and Contributions<\/strong>
\nUser IP addresses are stored for security purposes (Article 6(1)(f) GDPR). Data is retained indefinitely unless users request deletion.<\/p>\n

Contacting Us<\/strong>
\nUser inquiries are processed under Articles 6(1)(b) and 6(1)(f) GDPR. Inquiries are deleted when no longer needed.<\/p>\n

Hosting and Email Services<\/strong>
\nHosting services involve processing user data for website operations (Article 6(1)(f) GDPR and Article 28 GDPR).<\/p>\n

Log Files and Access Data<\/strong>
\nServer log files store access data for security purposes (max 7 days).<\/p>\n

Social Media Presence<\/strong>
\nWe manage social media profiles to interact with customers and users, following platform-specific policies.<\/p>\n

Embedding Third-Party Services and Content<\/strong>
\nWe use third-party content (e.g., videos, fonts) based on legitimate interests (Article 6(1)(f) GDPR).<\/p>\n

YouTube (Google LLC)
\nGoogle Fonts (Google LLC)
\nGoogle Maps (Google LLC)
\nFacebook Social Plugins (Facebook Ireland Ltd.)
\nFacebook data collection can be managed via privacy settings or cookie controls.<\/p>\n<\/div><\/section><\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-3611","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/imagis-fiction.de\/en\/wp-json\/wp\/v2\/pages\/3611","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/imagis-fiction.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/imagis-fiction.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/imagis-fiction.de\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/imagis-fiction.de\/en\/wp-json\/wp\/v2\/comments?post=3611"}],"version-history":[{"count":4,"href":"https:\/\/imagis-fiction.de\/en\/wp-json\/wp\/v2\/pages\/3611\/revisions"}],"predecessor-version":[{"id":6821,"href":"https:\/\/imagis-fiction.de\/en\/wp-json\/wp\/v2\/pages\/3611\/revisions\/6821"}],"wp:attachment":[{"href":"https:\/\/imagis-fiction.de\/en\/wp-json\/wp\/v2\/media?parent=3611"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}