We, Story House Productions GmbH, are pleased to have your interest in our online presence and want to make your visit to our website as pleasant as possible. Protecting your privacy is very important to us. Therefore, we would like to inform you below about how we handle your personal data and your corresponding rights.

The controller within the meaning of Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR) is Story House Productions GmbH. The external data protection officer appointed according to Art. 37 GDPR for the Bavaria Film Group can be reached with the note “To the attention of the Data Protection Officer” at the following address:

Bavaria Film GmbH
Bavariafilmplatz 7
82031 Geiselgasteig
datenschutz@bavaria-film.de

1. Type and Scope of Data Processing

You can visit our website without providing any personal information. We only collect your personal data in our contact form. Additionally, when you visit our website, we record the transmitted IP address. The IP address may be considered personal data because, under certain circumstances, it is possible to determine the identity of the owner of the used internet access. We evaluate the IP address in the event of attacks on our internet infrastructure or any other abusive use of our website. We have a legitimate interest in doing so according to Art. 6 Para. 1 f) GDPR. This stems from the need to defend against attacks on the internet infrastructure, identify the origin of the attack, take criminal and civil action against the responsible individual, as well as to effectively prevent further attacks and ensure the smooth operation of our online presence. If it can be ruled out that such an attack has occurred, the IP address will be deleted. This happens after seven days.

2. Data Processing for Handling Your Requests

We offer you the opportunity to contact us via email or through the forms provided on our website. In doing so, we only collect the personal data that you voluntarily provide when making contact. When using one of the contact forms, this includes your first and last name, your email address, your phone number, subject, and the content of the message sent to us.

We use this data exclusively to process and respond to your request, specifically for contacting you. When contacting us via the contact form on our website, we always ask for your consent to use the data you provide to respond to your request and forward it to the appropriate contact person. Therefore, the processing of your data is based on your explicit consent according to Art. 6 Para. 1a) GDPR. If the contact is for the purpose of fulfilling or preparing a contract, the legal basis is Art. 6 Para. 1b) GDPR, unless special categories of personal data are involved. Your data will be deleted, considering any applicable legal retention periods, once your request has been fully processed.

3. SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, we use SSL or TLS encryption. You can recognize an encrypted connection by the browser’s address bar changing from “http://” to “https://” and the padlock symbol in your browser bar. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

4. Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser transmits to us automatically. These include: browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request, and IP address. These data are not combined with other data sources. The legal basis for data processing is Art. 6 Para. 1 lit. f) GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

5. Cookies

Like almost every modern website, we use cookies to make the use of the website more convenient. A cookie is typically a small text file that stores technical information about your visit to our website in your browser, allowing certain functions to be provided (e.g., a language setting or a shopping cart). You can disable the use of cookies in your browser, but this may result in limited functionality.

6. Processing of Personal Data from Online Applications

We process the application documents you send to us, including the files you provide, exclusively for the purpose of conducting an application process (Art. 6 (1) lit. b) GDPR). We will contact you during the application process to inform you about the progress of your application or to invite you to an interview. After completing the application process, your data will be deleted within six months, unless you have consented to us keeping your data and informing you about future suitable job offers (Art. 6 (1) lit. a) GDPR).

7. Your Rights

Regarding the processing activities described above, you have the following rights, which you can generally exercise free of charge. However, we reserve the right to charge a reasonable fee in the case of obviously unfounded or repetitive requests, taking into account the administrative costs incurred.

1. Revocation of Consent: You can revoke any consent you have given for the processing of your personal data with effect for the future. However, this does not affect the legality of the processing of your data up to the point of revocation.
2. Confirmation and Information: You can request confirmation as to whether your personal data is being processed. If this is the case, you have the right to request information about the specific details as outlined in Art. 15 GDPR.
3. Correction and Deletion: You can request the correction of incorrect personal data and the completion of incomplete personal data (Art. 16 GDPR) as well as, under certain conditions of Art. 17 GDPR, the deletion of your personal data.
4. Restriction of Processing: You can request the restriction of the processing of your personal data under the conditions of Art. 18 GDPR.
5. Objection: You can object to the processing of your personal data at any time, for reasons arising from your particular situation, if the processing is based on Art. 6 Para. 1 e) or f) GDPR. After objection, your personal data will no longer be processed by us, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims. You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by us. The supervisory authority responsible for the Bavaria Film Group can be found here: https://www.rundfunkdatenschutz.de.
6. Data Portability: You can obtain your personal data provided by you in a structured, commonly used, and machine-readable format. If technically feasible, you have the right to request that these data be transmitted to another controller. The right to data portability only applies when the processing is based on consent under Art. 6 Para. 1a) GDPR or a contract under Art. 6 Para. 1b) GDPR and is carried out using automated methods. This right is excluded if it would impair the rights and freedoms of others (in particular, third-party personal data, business or trade secrets, copyrights).

8. Obligation to Provide Data

You are under no legal or contractual obligation to provide your personal data. However, if you wish to use our services, providing your personal data is mandatory if necessary for the provision of the respective service.

Cookie Policy