The privacy policy fulfills the information obligations pursuant to Art. 12 et seq. of the EU General Data Protection Regulation (hereinafter referred to as “GDPR”) and gives you an overview of the processing of your personal data (hereinafter referred to as “data”) on this website(www.ufa.de) and in our social media presences (see section 11), for business contacts and events as well as for additional information with corresponding links to this privacy policy.
You can find the privacy policy for the ticketing and casting area here.
The
UFA GmbH
Dianastr. 21
14482 Potsdam
info@ufa.de
Tel.: +49 (0)331 / 7060 – 0
Fax: +49 (0)331 / 7060 – 149
is responsible for the processing of your data on this website, in the social media presences, as a business contact or as an event participant and for references to this privacy policy, unless another UFA company is identified as the controller (hereinafter also referred to as “UFA”). UFA processes personal data in accordance with the applicable provisions, in particular the GDPR and the German Federal Data Protection Act (hereinafter referred to as “BDSG”).
You can contact the UFA data protection officer at the above postal address, with the addition “To the data protection officer” or at the e-mail address: datenschutz.ufa@ufa.de
When you visit the website, information is automatically collected by the accessing computer (hereinafter referred to as “access data”). This access data includes server log files, which usually consist of information about the browser type and version, the operating system, the Internet service provider, the date and time of use of the website, the previously visited websites and newly accessed websites via the website and the IP address of the computer. With the exception of the IP address, the server log files are not personally identifiable. An IP address can in any case be personally identifiable, in particular if it is permanently assigned when the Internet connection is used and the Internet provider can assign it to a person.
If you consent to the use of analysis and marketing services, pseudonymous user profiles and/or the data you enter on the website (e.g. form entries, click data) may be processed (for more details, see section 4.5 below).
Some services on the website require you to provide personal data. In these cases, the data you provide will be used to provide you with the requested service or to process the respective request. The following personal data is processed on the website: E-mail address; address data; contact data; date of birth; image, video and sound recordings.
Cookies are used on the website. Cookies are files that are stored on your computer when you visit a website. The stored cookies are assigned to the browser you are using. If the corresponding website is called up again, the web browser sends back the content of the cookies and thus enables the user to be recognized. In principle, cookies are only an online identifier without personal reference. Cookies become personal when, in addition to the information generated by the cookies, they are combined with other data.
Certain cookies are deleted when you end the browser session (so-called “transient cookies”). Other cookies are stored for a specified period of time or permanently (so-called “temporary cookies” or “persistent cookies”). These cookies are deleted automatically after the defined time has expired. You can also delete cookies at any time in the security settings of your browser and configure the use of cookies according to your wishes. However, UFA would like to point out that you may then not be able to use all the functions of the website.
A distinction can be made between cookies that are necessary for the provision of the website and cookies that are necessary for other purposes such as web analysis or our marketing.
The cookies that are required for the provision include the following in particular:
The legal basis for this is generally Section 25 (2) TTDSG.
The cookies that are required for other purposes of the website include the following in particular:
The legal basis for this is generally your consent in accordance with Section 25 (1) TTDSG.
Further information on web analysis and marketing services can be found in section 4.5.
The purposes of data processing may arise from business, technical, contractual or legal requirements.
We use the data specified in section 2 for the following purposes:
Further information on these purposes of data processing can be found in the following sections of this privacy policy.
4.1.1 Description and scope of data processing
For the functionality of the website, the performance of security analyses and the defense against attacks, the server log files are automatically recorded and temporarily stored by the computer system of the accessing computer when entering and using the website as part of the access data according to section 2. The server log files are not stored together with other data. UFA uses the server log files for statistical evaluations in order to analyze and rectify technical faults and to ward off attempted attacks and fraud. We also save the selection of your cookie settings. Cookies are also stored in your browser so that you do not have to make your selection again each time you visit.
4.1.2 Purposes and legal basis of data processing
The legal basis for the collection of server log files is Art. 6 para. 1 lit. f GDPR. The legal basis for setting cookies for your cookie settings is Section 25 (2) TTDSG in conjunction with Art. 6 para. 1 lit. f GDPR. The consent log files are stored on the basis of our legal obligation under Art. 7 para. 1 GDPR in conjunction with Art. 6 para. 1 lit. f GDPR. Art. 6 para. 1 lit. c GDPR processed. The legitimate interests of UFA lie in the functionality of the website, the performance of security analyses and the prevention of threats.
4.1.3 Duration of storage or criteria for determining this duration
After accessing the web pages, the server log files are stored on the web server and the IP address contained therein is deleted after 7 days at the latest. The cookies for your cookie settings have a functional life of 12 months. The consent log files are generally also stored for 12 months, unless legitimate interests (Art. 6 para. 1 lit. f GDPR) or legal obligations require longer storage.
4.1.4 Possibility of objection and removal
You have the right to object to the processing of your data in the context of server log files if there are reasons for this arising from your particular situation. If you wish to exercise your right to object, please contact us at the address given in section 1.
4.2 Business contacts; press; events
4.2.1 Description and scope of data processing
It is possible to contact UFA in particular by post, via a contact form, an e-mail address, social media or a telephone number. If you make use of this option, your contact details such as your e-mail address and/or your telephone number as well as your request will be transmitted to UFA or the UFA company contacted. Depending on your request (e.g. initiation of a business relationship, press inquiries, questions about UFA services, assertion of your rights as a data subject), your contact details will be processed further (with the help of service providers). If necessary for the processing of your request, your request and your contact details may be forwarded to third parties (e.g. partner companies). In the case of initial contact by UFA or other companies of the UFA Group, your contact details are usually collected from public sources (e.g. your website), in exceptional cases via forwarding by third parties (e.g. partner companies). In these cases, the processing is regularly carried out to initiate a business relationship with you or your company. To maintain contact, the contact details of business or press contacts may be stored and used within the scope of the respective relationship, e.g. for establishing contact, including invitations to events.
4.2.2 Purposes and legal basis of data processing
The processing of your data for processing your request or contacting you is generally based on legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR. The legitimate interests lie in establishing contact or processing your request and further communication. If the contact is aimed at the conclusion of a contract between you and UFA, the legal basis for the processing of your contact data is Art. 6 para. 1 lit. b GDPR.
4.2.3 Duration of storage or criteria for determining this duration
After your request has been processed and further communication has ended, the contact data will be deleted. This does not apply if your contact is aimed at concluding a contract with UFA, a business relationship exists or you assert your rights as a data subject. In this case, the data will be stored until the contractual and/or legal obligations have been fulfilled and no legal retention periods or interests in evidence prevent deletion.
4.2.4 Objection and removal options
You have the right to object to the processing of your data, which is based on Art. 6 para. 1 lit. f GDPR, insofar as there are reasons for this arising from your particular situation. If you wish to exercise your right to object, please contact us at the address given in section 1. If you effectively object, the communication cannot be continued. Please note that this does not apply if the storage of your contact data is necessary for the initiation of a contract, fulfillment of a contract, assertion of your rights as a data subject, interests in evidence or retention obligations.
4.3 Newsletter
(see the data protection information on casting and ticketing of UFA Show & Factual)
4.4 Competitions
(without casting and ticketing of UFA Show & Factual)
4.4.1 Description and scope of data processing:
You can take part in competitions organized by UFA or other companies in the UFA Group via the website. Your participant data will be recorded and stored via an input mask. Your data will be processed in order to verify the validity of the conditions of participation and to carry out and process the competition. Participation is voluntary. Reference is made to this privacy policy. If you win, we will inform you and send you your prize (with the help of service providers). Beyond this, your data will not be passed on to third parties (e.g. sponsors or partner companies).
4.4.2 Purposes and legal basis of data processing:
The processing of participant data is necessary for participation in the competition. The legal basis is the fulfillment of a contract pursuant to Art. 6 para. 1 lit. b GDPR.
4.4.3 Duration of storage or criteria for determining this duration:
After the winner has been drawn, the participant data will be deleted after 6 months at the latest, unless retention is required by law (e.g. participant data of winners after a ticket prize has been sent, current retention period 6 to 10 years).
4.4.4 Objection and removal options:
The processing of participant data is necessary for participation in the competition. Consequently, there is no possibility for you to object.
4.5 UFA casting
4.5.1. Description and scope of data processing:
As part of our casting activities for productions, we use established actor databases both as a research tool and for project management. We process the profile information created there, in any case the name and contact details as well as other personal data voluntarily provided in the portal.
4.5.2 Purposes and legal basis of data processing:
The purposes of data processing are the search for suitable cast members, making contact, presentation and documentation of the casting ideas for the respective production. The legal basis for this is, on the one hand, our legitimate interest (Art. 6 para. 1 lit. f GDPR in the search for a suitable cast for the respective production and, on the other hand, Art. 6 para. 1 lit. b GDPR in the case of the initiation of a contractual relationship.
4.5.3 Duration of storage or criteria for determining the duration:
The personal data will be deleted as soon as it is no longer required for the stated purposes. If a contractual relationship is established, the storage period depends on the duration of the contractual relationship and the statutory retention periods.
4.5.4 Possibility of objection and removal:
In principle, you can object to further contact and the processing of your personal data if this is based on legitimate interests (see section 7 below). If you effectively object, the communication cannot be continued. Please note that this does not apply if the storage of your contact data is necessary for the initiation of a contract, fulfillment of a contract, assertion of your rights as a data subject, interests in evidence or retention obligations.
4.6 Web analysis
Services are built into the website that measure the reach of the website and the success of our marketing campaign and optimize user-friendliness. Usage behavior or interaction with marketing campaigns is evaluated and pseudonymous usage profiles may be created using cookies or other technologies. Personal identification is generally not required for web tracking, so that when your access data is collected, the stored IP address is either not used or only used in abbreviated form. These user profiles are not merged with other data. Usage profiles are only created if you have given your consent and you have the option of revoking your consent for the future at any time via the cookie settings, linked in the footer of the website, or by deleting the cookies in your browser.
If the service providers process your data outside the European Union or the European Economic Area (hereinafter referred to as “EU or EEA”), a so-called third country transfer takes place. This is permitted in particular if you have consented to it, UFA has created guarantees for a level of data protection appropriate to the European standard or the EU Commission has classified the respective third country as a safe third country. The third country transfer of the respective service is indicated below. Further information on the recipients of your data can be found in the description of the respective service or the information in our cookie settings, linked in the footer of the website.
4.6.1 Google Analytics
The website uses the Google Analytics service. The provider of Google Analytics is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). For the analysis, Google Analytics records, among other things, the number of visitors, the regional origin of the visitors, the visitor sources, the length of stay and the average number of pages viewed per visit. Google Analytics uses this information to create a pseudonymous user profile in order to optimize the user-friendliness of the website. Google Analytics uses cookies for this purpose. The pseudonymity of the user profile is ensured by the fact that the IP address is shortened before your data is transmitted to Google and it is not possible to draw any conclusions about your person. The pseudonymous user profile is evaluated after transmission for the purpose of optimizing user-friendliness. It is not merged with other Google data.
Through the use of Google Analytics, a third country transfer may take place due to subcontractors and affiliated companies of Google in third countries. We have agreed with Google that, in principle, Google must have concluded so-called standard contractual clauses as suitable guarantees with these subcontractors and affiliated companies, unless there is no other safeguard for the transfer.
We use the following cookies via Google services:
Cookie: _ga Storage period: 24 months
Cookie: _gat Storage duration: Browser session
Cookie: _gid Storage duration: 1 day
You can find more information on data processing by Google Analytics here and in Google’s privacy policy.
4.6.2 Purposes and legal basis of data processing:
The legal basis for data processing is consent in accordance with Art. 6 para. 1 lit. a GDPR and in the case of cookies or similar technologies in accordance with § 25 para. 1 TTDSG.
4.6.3 Duration of storage or criteria for determining this duration:
Google Analytics will be used until you withdraw your consent. Your data will be stored for 26 months and then deleted.
4.6.4 Objection and removal options:
You can revoke your consent at any time for the future via our cookie settings, linked in the footer of the website.
You can also object to the use of web tracking services at any time by changing your browser settings or by clicking on this link to download and install the available browser plug-ins. Further information can be found in Google’s privacy policy.
4.7 Marketing and social media services
Social media services and technologies such as cookies and pixels are used on the website.
Through the use of social media services, your access data (see section 2) will only be recorded and usage profiles created with the help of tracking cookies (see section 3) after you have given your consent. These usage profiles are transmitted to social networks such as Facebook and used for the purposes of advertising, reach measurement and needs-based design of the website. Such use initially takes place regardless of whether you have a user account with the respective social network or are logged in via your user account during the website visit. Depending on how the respective social media service works, it may be possible to draw conclusions about you personally, for example if you have an account with the social network and/or your access data is merged with other data.
When using social media plugins, UFA has no or only limited influence on data processing after transmission to the respective social network. The company is also not or only partially aware of the purposes of data processing and their storage periods. Please contact your social network to find out about the further processing of your data. Further information can be found in the description of the respective service.
If the social networks process your data outside the EU or EEA, a so-called third country transfer takes place. This is permitted if you have consented to it, UFA has created guarantees for a level of data protection appropriate to the European standard or the EU Commission has classified the respective third country as a safe third country. The third country transfer to the respective social network is indicated below. Further information on the recipients of your data can be found in the following paragraphs and the linked information of the respective social network.
The individual social media services used are described in more detail below.
4.7.1. Facebook and Instagram
This website uses the social media services of Facebook and Instagram, including the Facebook Pixel from Facebook. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland (“Facebook”). When you visit the website, no data is initially transmitted to Facebook. The Facebook pixel is only used if you have given your consent via our cookie settings. You also have the option of activating the use of the social media button by giving your consent. By activating it, you have the option of sharing website content with Facebook and other users. Your data will be transmitted to Facebook and stored there. If you are logged in to Facebook while visiting the website, your data collected on the website will be merged directly with other Facebook data and assigned to your account.
We use Facebook Pixel via Facebook Website Custom Audiences to measure the success of our ads on Facebook and Instagram and to be able to target interested parties on our website and similar target groups with our ads.
The transfer to Facebook results in a transfer to a third country. However, Facebook ensures that the European level of data protection is guaranteed for the third country transfer.
The following cookies can be set via the Facebook pixel with your consent:
Cookie: _fbp Storage period: 3 months
If you do not want Facebook to assign the data collected via our website directly to your account, you must log out of Facebook / Instagram before giving your consent on our website.
If you wish to opt out of the use of Facebook Website Custom Audiences, you can make changes to the consent you have already given to the use of the pixel via our cookie settings, linked in the footer of the website, as well as via settings in your Facebook account at: https://www.facebook.com/ads/website_custom_audiences/. We are jointly responsible with Meta under data protection law for advertising on Facebook and Instagram. You can find more information at: https://www.facebook.com/legal/controller_addendum and https://www.facebook.com/legal/terms/businesstools_jointprocessing and in Meta’s privacy policy https://de-de.facebook.com/policy.php.
You can find more information about Facebook’s data processing, the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights in this regard and settings options for protecting your privacy in the privacy policy and for Instagram at https://help.instagram.com/155833707900388/.
4.7.2 LinkedIn
Functions and content of the LinkedIn service, offered by LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland, are integrated into our website. This may include, for example, content such as images, videos or text and buttons with which users can share content from this online offering within LinkedIn. If the users are members of the LinkedIn platform, LinkedIn can assign the access to the above-mentioned content and functions to the users’ profiles there.
We also use the “LinkedIn Insight Tag” conversion tool. Cookies are set in your browser that enable the collection of IP address, device and browser properties and page events (e.g. which page was accessed). LinkedIn does not share any personal data with us, so we cannot assign you to the events. We only receive anonymized reports about the website target group and the success of a campaign. LinkedIn also offers the option of retargeting via the Insight Tag. This allows us to place targeted ads on LinkedIn for our prospects or similar target groups without you being identified by us.
LinkedIn members can change the use of their data for advertising purposes in their account settings
Privacy policy: https://www.linkedin.com/legal/privacy-policy,
Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
4.7.3 Purpose and legal basis of data processing
The purposes of data processing when using social media cookies and similar technologies are advertising, reach measurement and the needs-based design of the website and our marketing campaigns. You also have the opportunity to share the content of the website with social networks and other users and to receive advertising tailored to your interests. The legal basis for data processing is consent in accordance with Art. 6 para. 1 lit. a GDPR and, in the case of cookies or similar technologies, in accordance with Section 25 para. 1 TTDSG.
4.7.4 Storage duration or criteria for determining this duration
The storage period of the data and the functional duration of the cookies can be found in the information on the individual services. You can revoke your consent at any time with effect for the future via our cookie settings, linked in the footer of our website.
4.7.5 Objection and removal options
You can revoke your consent at any time for the future, e.g. via the corresponding link on the website or by post to UFA under section 1. UFA will inform the respective social network of your revocation if there is joint responsibility.
4.8 Third-party services
4.8.1 YouTube
We also integrate video content from the provider YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). If you use this service, communication data may be exchanged between you and the provider for technical reasons.
In addition, the provider may process your data for other purposes of its own. We have configured services or content from providers that are known to process data for their own purposes to the best of our knowledge and belief in such a way that either communication for purposes other than to display the content or services on our website does not take place, or communication only takes place when you actively decide to use the service. However, as we have no influence on the data collected by third parties and its processing by them, we cannot provide any binding information on the purpose and scope of the processing of your data.
Further information about the purpose and scope of the collection and processing of your data can be found in YouTube’s privacy policy.
There is also an opt-out option for personalized advertising from Google.
4.8.2 Google Maps
We have integrated maps from the provider Google Maps on our website. The provider of Google Maps is Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland (“Google”). The purpose of this is to make it easier for interested users to find our company headquarters in Potsdam. The legal basis is Art. 6 para. 1 lit. f GDPR.
When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, further data such as your IP address is transmitted to Google. This takes place regardless of whether you are logged into a Google user account or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you should log out before viewing our website. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or needs-based design of its services. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
Further information on the purpose and scope of data collection and its processing by Google can be found in Google’s privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy.
Within UFA, those departments that need your data to fulfill the purposes described in section 4 will have access to it. Service providers used by UFA may also receive access to your data (so-called “processors”, e.g. data centers, content delivery networks, newsletter dispatch, processing of competitions, customer service or accounts receivable management). Contracts for order processing ensure that these service providers are bound by instructions, data security and the confidential handling of your data.
Data is forwarded to other recipients, such as providers of social media services, if this is required by law or if you have given your consent. The following recipients in particular are covered by the data transfer:
Further information on the transfer of data to the respective third party can be found in the individual purposes in section 4.
Insofar as the service providers and/or other recipients outside the EU or the EEA mentioned in section 5 process your data for the purposes set out in section 4, this may result in your data being transferred to a country where a level of data protection appropriate to the EU or the EEA cannot be guaranteed. However, such a level of data protection can be ensured with a suitable guarantee. Suitable guarantees include standard contractual clauses provided by the EU Commission. You can request a copy of these guarantees using the contact details provided in section 1. Any guarantees may be waived in exceptional cases, for example if you give your consent or if the transfer to a third country is necessary for the performance of your contract with UFA. The EU Commission has also recognized certain third countries as safe third countries, so that UFA can also dispense with suitable guarantees in this regard.
For the provision and default settings of the website and for the use of third-party services, service providers are used whose data centers may be located in a third country or who can access the data centers within the European Union or the EEA from a branch in a third country. Where necessary, UFA has agreed compliance with the European level of data protection with these service providers via standard contractual clauses.
If the legal requirements are met, you have the following rights:
You have the right to information about your personal data stored by us at any time (Art. 15 GDPR). If your personal data is incorrect or no longer up to date, you have the right to request that it be corrected (Art. 16 GDPR). You also have the right to request the erasure or restriction of the processing of your data in accordance with Art. 17 or Art. 18 GDPR. You may also have the right to receive the data you have provided in a commonly used and machine-readable format (right to data portability pursuant to Art. 20 GDPR).
If you have given your consent to the processing of personal data for certain purposes, you can revoke your consent at any time with effect for the future. The revocation must be sent to UFA at the contact address stated in section 1. You can also revoke consent with your e-mail address that you have given on the website at datenschutz.ufa@ufa.de. You can revoke your consent to the use of cookies via the cookie settings, linked in the footer of the website.
In accordance with Art. 21 GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your data which is carried out on the legal basis of Art. 6 para. 1 lit. f GDPR.
You also have the option of contacting a data protection authority and lodging a complaint there. The authority responsible for the UFA is
State Commissioner for Data Protection and the Right of Access to Files
Dagmar Hartge
Stahnsdorfer Damm 77
14532 Kleinmachnow
Phone: 033203/356-0
Fax: 033203/356-49
E-mail: Poststelle@LDA.Brandenburg.de
You can also contact the data protection authority responsible for your place of residence.
We take precautions to protect your personal data from loss, destruction, falsification, manipulation and unauthorized access. The statutory data protection regulations are of course observed.
We urge all parents and guardians to instruct their children in the safe and responsible use of personal data on the Internet. Children should not submit any personal data to the website without the consent of their parents or guardians! We ensure that we do not knowingly collect personal data from children, use it in any way or disclose it to third parties without authorization.
This privacy policy applies to the website www.ufa.de. The websites on this site may contain links to other providers to which this privacy policy does not apply. When you leave the website, you are advised to carefully read the privacy policy of each website that collects personal data.
We process your data not only when you visit our website, but also when you visit our social media presences or contact us via them.
11.1. General information
We maintain publicly accessible profiles in various social networks. These are
Facebook: UFAProduction at https://www.facebook.com/UFAProduction/
Facebook is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, Facebook’s privacy policy can be found at https://www.facebook.com/policy.php, the agreement on joint responsibility and the information provided by Facebook in this context https://www.facebook.com/legal/terms/page_controller_addendum
Instagram: @ufa_production at https://www.instagram.com/ufa_production/,@ufa_filmnaechte at https://www.instagram.com/ufa_filmnaechte/,@ufa_firmensport at https://www.instagram.com/ufa_firmensport/ and @ufa_talentbase at https://www.instagram.com/ufa_talentbase/
Instagram is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, Instagram’s privacy policy can be found at https://help.instagram.com/519522125107875/, the joint responsibility agreement and the information provided by Instagram in this context https://www.facebook.com/legal/terms/page_controller_addendum
LinkedIn: https://www.linkedin.com/company/ufa-film-&-tv-produktions-gmbh/
LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, LinkedIn’s privacy policy can be found at https://de.linkedin.com/legal/privacy-policy, the agreement on joint responsibility at https://de.linkedin.com/legal/l/dpa and the information provided by LinkedIn in this context https://www.linkedin.com/help/linkedin/answer/124838/joint-controllership?lang=de
TikTok: @ufa_production at https://www.tiktok.com/@ufa_production
TikTok is operated by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, the privacy policy of TikTok can be found at https://www.tiktok.com/legal/privacy-policy-eea?lang=de.
X, (formerly Twitter): @ufa_production at https://twitter.com/ufa_production
X is operated by X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, Twitter’s privacy policy can be found at https://twitter.com/de/privacy.
Xing: https://www.xing.com/pages/ufagmbh
Xing is operated by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany, Xing’s privacy policy can be found at https://privacy.xing.com/de/datenschutzerklaerung.
YouTube: https://www.youtube.com/c/UFA-Produktion, at https://www.youtube.com/channel/UCGxibxIRDsbQgVogFLAxXFQ/featured, at https://www.youtube.com/c/UFATalentbase/about and at https://www.youtube.com/user/GrundyUFATVProduktio
YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, YouTube’s privacy policy can be found at https://policies.google.com/privacy?hl=de.
Below we provide you with an overview of which of your personal data we collect, use and store when you visit our profiles. Personal data is information that can be assigned to you as a specific person (e.g. name, age, address, photos, email addresses, possibly also IP addresses). We will also inform you about your rights with regard to the processing of your personal data.
You are not obliged to provide us with your personal data. However, this may be necessary for individual functionalities of our profiles in social networks. These functionalities will not be available to you, or only to a limited extent, if you do not provide us with your personal data.
When you visit our profiles, your personal data is not only collected, used and stored by us, but primarily by the operators of the respective social network. This happens even if you do not have a profile on the respective social network yourself. The individual data processing operations and their scope differ depending on the operator of the respective social network and they are not necessarily traceable for us. For details on the collection and storage duration of your data as well as the type, scope and purpose of its use by the operator of the respective social network, please refer to the data protection declarations of the respective operator, which are linked above in this section 11.1.
11.2 Information on the collection of personal data
The social networks pass on certain data to us, which we use to improve our presence and collect further data (see 1. below); in addition, there are special features with regard to individual networks (see 2.).
11.2.1 General information on data processing on our social media presences
11.2.1.1 As a result of your visit
As the operator of a social media presence (hereinafter referred to as “presence”), we can only view the information stored in your public profile, and only if you have such a profile. However, we do not collect or use this data at any time, not even in connection with or as a result of your visit to our presence.
In addition, the respective networks provide us with anonymous usage statistics, which we use to improve the user experience when visiting our website.
These statistics are based on personal data that the respective social networks collect, store, use and process. We have no influence over these processes, either for the purpose of compiling the statistics or for other purposes. We also have no influence over the location where the data is processed or transferred; transfer and processing in countries outside the scope of the GDPR will regularly occur or cannot be ruled out; we also have no influence over whether and to what extent this data is made accessible to third parties. For further information on this, please refer to the explanations on the respective networks under 11.2.2.
The statistics are primarily based on the personal data that – if you have one – is stored in your profile with the respective network. They include, in particular, data on your geographical origin, gender, age and previous interactions with our site.
Some of these statistics are also based on information that has been collected using cookies or other tracking technologies, and therefore personal information that has been collected by the respective network without a profile or without a current login. This includes, for example, the IP address from which the regional origin is inferred, previously visited websites (based on the link used) or information about the end device used to access the site, in particular whether the site was accessed using a mobile device.
However, we cannot use the anonymized data provided to us in the statistics to draw any conclusions about you as an individual person; it is not possible for us to assign the data to individual interactions or persons and we do not attempt to do so. This data is therefore no longer personal for us. We have no access to the data that the respective networks collect to compile these statistics.
However, with regard to data processing for the aforementioned usage statistics, we are jointly responsible with the respective social network within the meaning of the GDPR. Further information, in particular with regard to joint responsibility, can be found in the explanations of the respective networks.
This data processing serves our legitimate interest in improving the user experience when visiting our website in line with our target group. The legal basis for data processing is therefore Art. 6 para. 1 lit. f GDPR.
In addition, the respective networks may use so-called cookies, which are stored on your end device when you visit our website even if you do not have your own profile with the network or are not logged into it during your visit to our website. These cookies allow the respective networks to create user profiles based on your preferences and interests and to show you customized advertising (within and outside the respective network). Cookies remain on your end device until you delete them. Details on this and the deletion and retention periods can be found in the respective privacy policies of the social networks.
11.2.1.2 As a result of you contacting us
If you use our profiles in social networks to contact us (e.g. by creating your own posts, responding to one of our posts or by sending us private messages), the personal data you provide us with, such as public profile name, content and time of contact, will be processed by us exclusively for the purpose of being able to contact you.
The legal basis for the processing of your communication data is Art. 6 para. 1 lit. f GDPR. Our legitimate interests lie in the processing of your request and further communication. If your contact is aimed at the conclusion of a contract between you and UFA, the legal basis for the processing may already be Art. 6 para. 1 lit. b GDPR. We delete stored data as soon as its storage is no longer necessary or if you request us to delete it; in the case of statutory retention obligations, we restrict the processing of the stored data accordingly.
11.2.1.3 Transmission of data to recipients by us
As part of our legitimate interest in cooperation in communication tasks, we may exchange your personal data within the UFA group of companies to the extent permitted by Art. 6 para. 1 lit. f GDPR.
11.2.2 Special features of individual networks
11.2.2.1 Facebook and Instagram
We have concluded an agreement with Meta Platforms Ireland Limited, which provides the Facebook and Instagram networks, on joint responsibility and the fulfillment of obligations under the GDPR.
The main content of the agreement, including further information on data processing for the provision of information in the context of anonymized usage statistics, can be found at https://www.facebook.com/legal/terms/page_controller_addendum
Further information on the collection, storage and use of data and how to contact us can be found in Facebook’s or Instagram’s privacy policy (see above).
11.2.2.2 LinkedIn
We have concluded an agreement with LinkedIn Ireland Limited, which provides the LinkedIn network, on joint responsibility and the fulfillment of obligations under the GDPR.
You can find the main content of the agreement at https://de.linkedin.com/legal/l/dpa and the information provided by LinkedIn as a result of this agreement at https://www.linkedin.com/help/linkedin/answer/124838/joint-controllership?lang=de
Further information on the collection, storage and use of data and how to contact us can be found in the LinkedIn privacy policy, which is linked above.
11.3 Your rights as a data subject affected by data processing
As a person affected by data processing in the context of using our social media presences, you have the rights listed in section 7.
In the case of joint responsibility, you can contact us or the provider of the respective social network to exercise these rights. If one party is not responsible for responding or must receive the information from the other party, we or the provider will then forward your request to the respective partner. Please contact the operator of the social network directly for questions about profiling and the processing of your data when using the website. If you have any questions about the processing of your interaction with us on our website, please write to the contact details we have provided above.
In principle, there is no legal or contractual obligation to provide data. Automated decision-making does not take place.
Status: March 2024