The information in this declaration applies to the processing of personal data on or via our website and is intended in particular to inform you of the scope of processing, the purposes of processing, the recipients, legal bases, storage periods and your rights. Personal data are all information relating to an identified or identifiable natural person, i.e. a person (hereinafter also referred to as “data subject”), including for example your name, your address or your e-mail address. Processing” of personal data means in particular the collection, storage, use and transmission of such data.

I. Name and Address of the data controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:

Hahn Film AG
Schwedter Strasse 36b
10435 Berlin
Germany
fon +49 (0)30 443 549 0
dst@hahnfilm.com
https://www.hahnfilm.com

II. General information data processing

1. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, legal basis is Art. 6 para. 1 lit. a GDPR.

Insofar as the processing of personal data is required for the performance of a contract to which the data subject is a party, legal basis is Art. 6 para. 1 lit. b GDPR. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, legal basis is Art. 6 para. 1 lit. c GDPR.

If processing of data is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, legal basis is Art. 6 para. 1 lit. f GDPR.

2. Data deletion and storage time

The personal data of the data subject will be deleted or processing restricted as soon as the purpose of storage ceases to apply. In certain cases, data can be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the data controller is subject.

III. Provision of the website and creation of log files

1. Description and extent of data processing

Every time you visit our website, our system automatically collects data and information from the computer system of the accessing device (computer, smartphone, tablet, etc.).

The following data is collected:

• Information about the browser type and version used
• The operating system of the accessing device
• The IP address of the accessing device
• Date and time of access
• Websites from which the system of the accessing device reaches our website

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

2. Legal basis for data processing

Legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s device. For this the IP address of the user must remain stored for the duration of the session.

The data is stored in log files to ensure the functionality of the website.

In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

Our legitimate interest in data processing also lies in these purposes.

4. Storage time

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this will happen after seven days at the latest. Further storage is possible. In this case, however, the IP addresses of the users are deleted or made anonymous, so that an identification of the accessing client is no longer possible.

IV. Requests by E-Mail

1. Description and extent of data processing

It is possible to contact us via the e-mail address provided on our website. In this case, the user’s personal data transmitted via e-mail will be stored.

If you apply for a job at Hahn Film, we will receive the personal data in your application materials.

2. Legal basis for data processing

The legal basis for the processing of the data is Art. 6 para. 1 lit. f GDPR.

3. Purpose of data processing

Purpose of data processing is the handling of requests, other questions and job applications. The processing of personal data serves us solely to handle the contact approach or application. This is also our legitimate interest in the processing of the data.

4. Storage time

The data will be deleted as soon as the purpose of its collection is no longer given. For the personal data that were sent by e-mail, this is the case when the respective conversation with the user is finished or the job application phase is finished. The conversation/application phase is finished when the circumstances indicate that the matter in question has been solved.

If data is collected in the course of e-mail communication which we are obliged to store due to tax, commercial law or other regulations, it will not be deleted until the respective legal retention or storage periods have expired. The legal basis for this data storage is Art. 6 para. 1 lit. c GDPR..

V. Other recipients of personal data (EU only)

For the provision of our website and the offered contact possibilities, we make use of other service providers, including host providers and e-mail providers, each based in the European Union, who process the data stored by them exclusively on our behalf as processors according to Art. 28 GDPR.

VI. Rights of the data subject

If your personal data are processed, you are a data subject within the meaning of the GDPR and you have the following rights against the controller (in the case of the fulfilment of further conditions regulated in the relevant regulations, if applicable):

• The right of access according to Art. 15 GDPR
• The right to rectification according to Art. 16 GDPR
• The right to erasure (“right to be forgotten”) according to Art. 17 GDPR
• The right to restriction of processing according to Art. 18 GDPR
• The right to a notification according to Art. 19 GDPR
• The right to data portability according to Art. 20 GDPR
• The right to object according to Art. 21 GDPR
• The right not to be subject to a decision based solely on automated processing according to Art. 22 GDPR
• The right to withdraw consent to the processing of personal data according to Art. 7 para. 3 GDPR

To assert these rights, please contact our data protection officer.

Without prejudice to any other administrative or judicial remedy, you also have the right to lodge a complaint with a supervisory authority, in particular in the Member State where you are staying, working or suspected of infringing, if you believe that the processing of personal data concerning you infringes the GDPR.