PANTALEON Films GmbH – Privacy Policy
1. Data Controller
PANTALEON Films GmbH, Holzstraße 30, 80469 Munich, Germany, represented by its Managing Director, Stephanie Schettler-Köhler ("we", "us", or "our"), is pleased that you are visiting our website available under the domain www.pantaleonfilms.com (the "Website").
We collect, process and use personal data exclusively in compliance with the applicable data protection laws, in particular the provisions of the General Data Protection Regulation ("GDPR"), the German Federal Data Protection Act (Bundesdatenschutzgesetz – "BDSG") and any other applicable data protection legislation.
"Personal data" means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to that person's physical, physiological, genetic, mental, economic, cultural or social identity. Information that cannot be associated with your actual identity does not constitute personal data; this includes, for example, aggregated information concerning the number of users of our Website or similar statistical data.
2. Purposes and Legal Bases of Processing
Our web server temporarily logs, by default, the connection data of the requesting device, the webpages visited on our Website, the date and duration of the visit, information identifying the browser and operating system used, as well as the website from which you accessed our Website.
In order to determine usage frequency and the number of users visiting our Website, we use tracking software. This software does not collect information that directly identifies you; however, it records the IP address used to access the Website. Such data is used exclusively in anonymised and aggregated form for statistical purposes and for the further development and optimisation of the Website. These purposes constitute our legitimate interest within the meaning of Article 6(1)(f) GDPR.
Depending on the browser you use, you may object to the collection and use of your IP address for statistical purposes by disabling the "Do Not Track" function.
Notwithstanding the foregoing, you may generally visit our Website without providing any personal data. In particular, the Website contains publicly available general information regarding PANTALEON Films GmbH.
We collect, process and use personal data where:
- you voluntarily provide such data for the performance of a contract or in order to take steps prior to entering into a contract (Article 6(1)(b) GDPR);
- you contact us and provide personal data in this context (Article 6(1)(b) GDPR, where applicable);
- you have consented to the relevant processing activity (Article 6(1)(a) GDPR);
- processing is necessary for the purposes of our legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms override such interests (Article 6(1)(f) GDPR), as further described in this Privacy Policy; or
- processing is necessary for compliance with a legal obligation to which PANTALEON Films GmbH is subject (Article 6(1)(c) GDPR or the corresponding provisions of applicable Member State law).
a) Communications
We use your name, company name, private or business address, email address, telephone number and any other personal data that you voluntarily provide to us to the extent necessary to process and respond to your communications or enquiries.
Where such communications relate to contractual or pre-contractual matters, the legal basis for processing is Article 6(1)(b) GDPR. In all other cases, processing is based on our legitimate interest pursuant to Article 6(1)(f) GDPR.
b) Applications
We may publish vacancies on our Website. PANTALEON Films GmbH is responsible for the recruitment process and for handling applications submitted in response to such vacancies.
If you submit an application to us, we will process the information and documents provided as part of your application, including any personal data contained therein, such as your name, address, email address, telephone number, information concerning your professional background and curriculum vitae, certificates, references and any other information you choose to provide, for the purpose of processing your application (Section 26(1) BDSG).
The provision of personal data is necessary for participation in the recruitment process. You are under no statutory or contractual obligation to provide personal data for application purposes. However, please note that we will be unable to process your application if you do not provide the information required for the recruitment process.
If we are unable to consider your application for a current vacancy but would like to retain your application for future opportunities, we will contact you and request your consent to retain your application documents (Article 6(1)(a) GDPR). Prior to obtaining your consent, we will inform you in detail about the relevant conditions, including the applicable retention period.
3. Disclosure to Third Parties
Your personal data may, in certain circumstances, be processed by service providers engaged by us to support our business operations, including, for example, providers engaged for fraud prevention, advertising agencies or IT service providers responsible for operating our Website.
In such cases, the scope of the personal data transferred is limited to the minimum amount necessary for the respective processing purpose.
Where we are legally obliged to disclose certain personal data pursuant to a court order, a request from law enforcement authorities, supervisory authorities or other authorised third parties in connection with an investigation, suspected criminal activity, unlawful conduct or other activities that may give rise to legal liability for us or for you, we will disclose such personal data as necessary for the relevant investigation, including, where applicable, your name, address, email address or order history (Article 6(1)(c) GDPR).
We also reserve the right to process and use your personal data for the establishment, exercise or defence of legal claims.
4. Transfers of Personal Data Outside the EEA/EU
Your personal data may also be transferred to third parties located in countries outside the European Economic Area ("EEA") or the European Union ("EU").
Any such transfer of personal data to third countries shall take place exclusively in compliance with the applicable legal requirements. Where no adequacy decision pursuant to Article 45 GDPR exists for the relevant third country, we will ensure that appropriate safeguards pursuant to Article 46 GDPR are implemented.
In particular, an adequate level of data protection may be ensured by entering into the Standard Contractual Clauses adopted by the European Commission pursuant to Article 46 GDPR with the respective recipient.
5. Cookies
We use cookies in order to make your visit to our Website more attractive and to enable the use of certain functions. Cookies are small text files that are stored on your device.
Most of the cookies we use are so-called "session cookies", which are automatically deleted once you leave our Website.
In addition, we use persistent cookies that enable us to recognise you when you return to our Website and thereby optimise user settings.
The legal basis for the use of cookies necessary for the operation of our Website and for the provision of services requested by you is generally Article 6(1)(f) GDPR. Where required by law, we will obtain your consent prior to placing cookies (Article 6(1)(a) GDPR).
You may generally prevent the storage of cookies on your device by adjusting the settings of your internet browser. Please note, however, that doing so may limit the functionality and navigability of our Website.
To manage your cookie preferences, we use Cookiebot, a service provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany. In this context, personal data may be shared with the service provider. We have entered into a data processing agreement with Usercentrics in accordance with Article 28 GDPR.
Further information is available at:
https://usercentrics.com/privacy-policy/
6. Rights of Data Subjects
Subject to the applicable data protection laws, you have the following rights at any time:
- to obtain information about the personal data concerning you that we process (Article 15 GDPR);
- to request the rectification of inaccurate or incomplete personal data (Article 16 GDPR);
- to request the erasure of your personal data (Article 17 GDPR);
- to request the restriction of processing under certain circumstances prescribed by law (Article 18 GDPR);
- to object, on grounds relating to your particular situation, to the processing of your personal data where such processing is based on our legitimate interests pursuant to Article 6(1)(f) GDPR (Article 21 GDPR); and
- where processing is based on your consent or on a contract and carried out by automated means, to receive the personal data concerning you in a structured, commonly used and machine-readable format or to request the transmission of such data to another controller, where technically feasible ("right to data portability", Article 20 GDPR).
Where processing is based on your consent, you also have the right to withdraw such consent at any time with effect for the future. The withdrawal of consent shall not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal.
You may exercise the above rights by contacting us using one of the contact methods specified at the end of this Privacy Policy.
We will communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort.
You also have the right to lodge a complaint with a competent supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.
7. Retention Periods
In accordance with applicable data protection laws, we will delete personal data concerning you without undue delay once such data is no longer required for the purposes for which it was collected or where its continued storage is otherwise unlawful.
In certain cases prescribed by law, personal data may be restricted instead of deleted, for example where statutory retention obligations apply.
With regard to job applications, application documents will be deleted or blocked in accordance with the following principles, and any hard-copy documents may be returned to you.
If you have applied solely for a specific position, your application data will be retained until a final decision has been made regarding the filling of that position and, thereafter, for a maximum period of six months following notification of such decision.
Following expiry of this period, the information and documents provided by you will be deleted.
Different retention periods may apply where an employment relationship is established on the basis of your application or where applicable law permits or requires further retention. In such cases, your application data will be processed for the purposes of the employment relationship pursuant to Section 26(1) BDSG and retained in accordance with applicable statutory requirements. Where required by law, we will provide you with the relevant information prior to such further processing, unless you have already received such information.
8. Data Protection Officer
If you have any questions regarding this Privacy Policy or the processing of your personal data, you may contact our Data Protection Officer, eagle lsp GmbH, at any time. The Data Protection Officer is also available to assist with requests for information, suggestions and complaints.
By post:
PANTALEON Films GmbH
Holzstraße 30
80469 Munich
Germany
By email:
datenschutz@pantaleonfilms.com