1. Responsible Persons
PANTAFLIX Technologies GmbH, Neue Schönhauser Straße 16, 10178 Berlin, Germany, represented by the Managing Director Stefan Langefeld, ("PANTAFLIX" or "we"), thanks you for visiting our web pages at www.pantaflix.com ("web pages").
2. Processing Purpose and Legal Basis
Any personal data shall be saved, processed and used by us under adherence to any applicable privacy regulations (especially the General Data Protection Regulation (GDPR), the German Federal Data Protection Act [Bundesdatenschutzgesetz, BDSG] and the German Telemedia Act [Telemediengesetz, TMG]).
By default, our web servers temporarily protocol the connection data of requesting computers that visit our web pages, the date and duration of visits, the identification data of the browser and operating system type and the websites from which they visit us.
We use tracking software to determine the frequency of use and number of users of our website. This software does not record data through which we can derive personal information, but we will learn your IP address when accessing our website. This data will only be used in anonymized and summarized form for statistical purposes and for the development of the website. You may object to the collection and use of your IP address for statistical purposes by deactivating your internet browser's "Track User" function.
Irrespective thereof, you may generally visit our web pages without personal data being collected by us. Personal data is any information that refers to an identified or identifiable natural person (hereafter referred to as the "data subject"); a natural person shall be considered to be identifiable who may be directly or indirectly identified, especially through identifiers, such as a name, identification number, location data, online identifiers or one or several special characteristics that represent expressions of the physical, physiological, genetic, psychological, economic, cultural or social identity that can be assigned to this natural person. Information that cannot be associated with your true identity does not constitute personal data; this includes the number of users of our web pages or comparable summarized data.
We, as the responsible persons, will only collect, process and use personal data on the basis of Article 6(1) a) or b) of the General Data Protection Regulation that you provide to us of your own accord for the execution of a contract or pre-contractual measures, when opening a customer account or contacting us or if you grant your permission for the respective processing. Furthermore, we may process your personal data if such processing is necessary for safeguarding legitimate interests of ours or of a third party, unless outweighed by your interests or basic rights or basic freedoms that require the protection of your personal data (Article 6(1) f) of the General Data Protection Regulation), as further explained hereafter, or if necessary for the fulfillment of other legal obligations of PANTAFLIX (Article 6(1) c) of the General Data Protection Regulation) or according applicable legal regulations of a member state of the European Union.
We will only use your name, address, date of birth and email address ("inventory data") and your respective payment method to implement the VOD service contract concluded between you and us and as further explained hereafter. Contracts cannot be concluded without your inventory data. We need your date of birth to verify that you are of age.
3. Data Transfers to Third Parties
We will not provide your personal data to third parties without your express permission, which you may revoke at any time, or unless we are authorized to do so by law.
This includes service providers commissioned by us who support us with our business operations (abuse prevention, advertising agencies, IT service providers for operating our web pages).
Furthermore, this includes transferring your personal data to banks that handle VOD services payments (Article 6(1) b) of the General Data Protection Regulation).
However, in such cases, the extent of the transmitted data will be limited to the minimum required for achieving the objective of the data processing. We do not process any of your payment information (account information, credit card number, etc.)—except for your payment method and billing address. Processing is performed exclusively by the certified external payment provider.
Should we be legally required to disclose certain personal data due to court orders or requests by prosecution or regulatory authorities or authorized third parties for investigative procedures or because of suspicions of crimes, unlawful acts or other actions that may result in liability for you or us, we will disclose the data required for the investigation, such as your name, address, email address or order history (Article 6(1) c) of the General Data Protection Regulation).
4. Data Transfers into Non-EEA / Non-EU Countries
We may also transfer your personal data to third parties outside of EEA / EU member states for which the European Commission does not find privacy protection levels to be comparable to those of the EU (e.g., the US). In such cases, before transferring your data, we will ensure that the recipient possesses an adequate privacy protection level, especially by first obtaining your approval for EU-US Privacy Shield self-certification for US recipients or by concluding so-called EU Standard Contractual Clauses for the third country. You may receive a copy of these Standard Contractual Clauses from our data protection officer on request; see Section 14 for contact details.
5. Newsletters; Sweepstakes
If you provide your email address when purchasing goods or services on our website, we may use your email address to send you a newsletter. In such cases, the newsletter will only be used to send direct advertisements for similar goods and services of ours (Legal basis: Section 7(3) of the German Act Against Unfair Competition).
7. Market Research
With your prior permission or—if legally permitted—without your objection, we will also use your personal data for advertising and market research purposes (Article 6(1) a) & f) of the General Data Protection Regulation).
To prevent abuse of our services, we may also collect your geolocation data. In consideration of your interests, this will not lead to any territorial playback restrictions (so-called "geo-blocking") if, as a PANTAFLIX customer, your habitual residence is in an EU member state and you are only in a non-EU member state temporarily (Article 6(1) f) of the General Data Protection Regulation).
9. Social Plugins
PANTAFLIX uses social plugins of various social internet networks (Facebook, Twitter, Google+, LinkedIn). These allow you to place bookmarks on our web pages which you may share with other social internet network participants. You may recognize social plugins by their logos which can be found on the websites of the respective social internet networks.
If you open a web page on our online presence that contains these social plugins, a direct connection to the servers of the internet networks will be established from where the image of the plugin displayed to you and its underlying functions will be directly transmitted to your browser which will include them on our web page. Should you be logged in to the social internet network under your user name and password at this time, your visit to our web page will be transmitted and assigned to your user account. If you interact with social plugins, e.g., by sharing one of our web pages or using the Facebook "Like" or "Share" buttons or Twitter's "Tweet This" function, the contents of our web pages will be linked to your social internet network profile. Even if you are not registered on any social internet network or logged out prior to visiting our shop, your IP address may nonetheless be transmitted to and saved by the social internet work.
a. Google +1 Interface
PANTAFLIX also uses the "+1" interface of the social network Google Plus operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google"). This button may be recognized by the "+1" symbol.
If you open a web page on our online presence that contains such an interface, your browser will automatically establish a direct connection to Google's servers. Google will directly transmit the contents of the "+1" interface to your browser which will include them on our web page. We cannot influence the scope of the data that Google collects through this interface. However, we assume that your IP address will be recorded. Google will also save information about the page you visited when clicking on the +1 button.
For the purpose and scope of data collection, further processing and use of this data by Google and your according rights and privacy settings options, please see Google's "+1" Button Policy: https://developers.google.com/+/web/buttons-policy
If you are registered on Google Plus and do not want Google to collect data on you through our web pages and link it to your member data saved by Google, you must log out of Google Plus before visiting our web pages. You may also prevent use of Google plugins through according browser add-ons, e.g., the script blocker "NoScript" (http://noscript.net/).
PANTAFLIX uses social plugins ("plugins") of the social network facebook.com operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). Facebook plugins can be recognized on our web pages by their Facebook logo or the "Like Button."
If you open a web page on our online presence that contains such a plugin, your browser will establish a direct connection to Facebook's servers. Facebook will directly transmit the contents of the plugin to your browser which will include them on our web page. We cannot influence the scope of the data that Facebook collects through this plugin and therefore inform you according to our current knowledge as follows:
The plugins will inform Facebook that you visited an according web page of our online presence. If you are logged in to Facebook, Facebook may assign your visit to your Facebook account. If you interact with the plugins, e.g., by activating the Like Button or submitting comments, your browser will transmit this information directly to Facebook where it will be saved. During this process, e.g., contents of our web pages will be linked to your Facebook profile where, depending on your privacy settings, they may be viewed others.
Even if you are not registered on Facebook, Facebook may nonetheless learn and save your IP address.
For the purpose and scope of data collection and further processing and use of this data by Facebook and your according rights and privacy settings options, please see Facebook's Data Policy: http://www.facebook.com/policy.php.
If you are registered on Facebook and do not want Facebook to collect data on you through our web pages and link it to your member data saved by Facebook, you must log out of Facebook before visiting our web pages.
You may also block Facebook plugins through according browser add-ons, e.g., "Facebook Blocker." You may also prevent Facebook plugins through browser add-ons, e.g., the script blocker "NoScript" (http://noscript.net/).
c. Facebook Fanpage
d. Twitter Interfaces
PANTAFLIX uses Twitter interfaces. These interfaces are offered by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA (“Twitter”). They can be recognized through terms like "Twitter" or "Follow," including in connection with a stylized blue bird. These interfaces allow comments about web pages of our online presence to be shared or us to be followed on Twitter. Data is also transmitted to Twitter thereby.
If you open a web page on our online presence that contains such a button, your browser will automatically establish a direct connection to Twitter's servers. Twitter will directly transmit the contents of the Twitter interface to your browser. We cannot influence the scope of the data that Twitter collects through this plugin and therefore inform you according to our current knowledge as follows:
Merely your IP address and the URL of the respective web page of our online presence will be transmitted when activating the button. These will not be used for purposes other than to display the button.
e. LinkedIn Plugins (Share Button)
Our web pages use plugins of the social network LinkedIn operated by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA ("LinkedIn"). LinkedIn plugins can be recognized on our website through the LinkedIn logo or the "Recommend" button.
If you visit our web pages, the plugin will establish a direct connection between your browser and the LinkedIn server. LinkedIn will be informed that you visited our web page with your IP address.
If you click on the LinkedIn "Recommend" button while you are logged in to your LinkedIn account, you may link the contents of our web pages to your LinkedIn profile. This will allow LinkedIn to assign your visit to our web pages to your user account.
We do not receive information about the contents of transmitted data or its use by LinkedIn.
10. Google Analytics
PANTAFLIX uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics saves information about your use of these web pages (including your IP address) on cookies. (For information about cookies, please see above). The information saved by Google Analytics on cookies will be transmitted to a Google server in the US where it is stored and assessed. Please note that Google Analytics was extended by the code "gat._anonymizeIp(); on our web pages. This ensures that IP addresses are collected anonymously (through so-called IP masking). Through this process, IP addresses are usually shortened by Google servers in member states of the European Union or in other states party to the European Economic Area Agreement before being saved or transmitted to Google servers in the US. IP addresses that have not been shortened are only transmitted to Google servers in the US in exceptions, though, even in such cases, the IP addresses will be shortened before being saved.
Google will use the transmitted data to assess your use of our web pages, compile web page activity reports and perform additional services for our web pages for us. (We therefore have a data processing agreement with Google under Section 11 of the German Federal Data Protection Act).
You may prevent the collection of your data by Google Analytics and its transfer to and processing by Google by deactivating cookies (see above) or if you click on the following link. In this case, an opt-out cookie will be placed which will prevent the future collection of your data by Google Analytics when you visit these web pages in the future: Deactivate Google Analytics.
Google also offers a deactivation add-on for common desktop browsers. These add-ons block Google Analytics and prevent personal data on your use of our web pages (including your IP address) from being transferred to and processed by Google. This browser plugin can be downloaded and installed at: http://tools.google.com/dlpage/gaoptout
Further information about the purpose and scope of data collection and further processing and use by Google, including notices about your rights and privacy protection configuration options, can be found under the following links:
11. Google Tag Manager
12. Data Subject Rights
Under the applicable privacy protection regulations, you may exercise the following rights at any time:
- Demand the disclosure of personal data saved about you;
- Demand the correction of inaccurate personal data;
- Demand the deletion or processing restrictions of your personal data (in certain legally regulated cases, e.g., required storage periods, your data may be blocked instead of deleted);
- Object to the processing of your personal data processed by us due to legitimate interests (Article 6(1) f) of the General Data Protection Regulation);
- Demand that your personal data be provided to you in a structured, orderly and machine-readable format.
- Revoke any permission granted to us with future effect. However, this will not affect the legitimacy of any processing performed under your permission prior to its revocation.
In case of complaints about the treatment of your personal data, you may also contact the competent regulatory authorities.
13. Data Storage Duration
We will, under adherence to any applicable privacy regulations, delete any personal data saved about you without your involvement if notifying you is no longer necessary to achieve the aims pursued by saving the data or if saving the data is not permitted for other legal reasons. In some legally required cases (e.g., legally required storage periods), your data may be blocked instead of deleted.
14. Data Protection Officer
PANTAFLIX Technologies GmbH
Neue Schönhauser Straße 16
10178 Berlin, Germany