Privacy

1 General information

1.1 Responsible body

1.2 Legal basis for the processing of your personal data

1.3 Rights of the data subject

1.4 Storage period for personal data

2 Contractual processing

3 Application details

4 Data processing within the scope of the website

4.1 Log files, hosting

4.2 Establishing contact

4.3 Cookies

5 Advertising mailings and information to interested parties

5.1 Newsletter

5.2 Information to existing customers

6 Disclosure of data: General and contractual purpose

Use of audio and video conferencing

7 Disclosure of data: Tools used in the operation of the website

7.1 Google

Youtube

7.2 Vimeo

7.3 Matomo

7.4 curator.io

8 Data storage outside the EU/EEA

9 Our presence on social media

9.1 Facebook (Meta)

9.2 Google/YouTube

9.3 Instagram (Meta)

9.4 LinkedIn

9.5 Vimeo

1 General information

The following statement informs you about what kind of personal data we, as the responsible body, collect for what purpose and to what extent this data is made available to third parties.

1.1 Responsible body

Interactive Media Foundation gGmbH

88 Reichenberger Street

10999 Berlin / Germany

Phone: +49 (0)30 92101320

E-Mail: info@interactivemedia-foundation.com

1.2 Legal basis for the processing of your personal data

The processing of personal data requires a legal basis, which we would like to present to you below. When processing personal data for which we obtain the consent of the data subject, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data that is necessary for the performance of a contract to which the data subject is party, Article 6(1)(b) GDPR serves as the legal basis. This also includes processing operations that are necessary for the implementation of pre-contractual measures. Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis. If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6(1)(f) GDPR serves as the legal basis for the processing. The legitimate interest of our company lies in the performance of our business activities and in the analysis, optimisation and maintenance of the security of our online offering.

1.3 Rights of the data subject

You have the right to obtain information about the personal data we have stored about you. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the origin of your data if it was not collected by us, and the existence of automated decision-making, including profiling and, where applicable, meaningful information about its details. According to the legal provisions, you also have the right to correct inaccurate data, restrict processing, data portability and deletion of your personal data. To do so, please send us an email with the subject lineData protection. You also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the legal provisions.

For reasons arising from your particular situation, you may object at any time to our processing of personal data concerning you on the basis of Article 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions (Article 21 GDPR). Provided that the legal requirements are met, we will no longer process your personal data.

In the case of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
Your objection means that the personal data will no longer be processed for these purposes.

If you have given your consent, you have the right to withdraw it at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until its withdrawal.

We do not currently use automated decision-making, including profiling. If you exercise one of the above rights as a data subject, we will process your personal data collected in this context in order to respond to your request. Your personal data is processed in order to fulfil a legal obligation. In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing of such data that override your interests, rights and freedoms, or your personal data is used to assert, exercise or defend legal claims.

1.4 Storage period for personal data

Unless we have provided specific information on storage, the following applies: We store personal data for the duration of the respective statutory retention period or for as long as the purpose of collection exists. After expiry of the retention period, the data is routinely deleted, unless it is necessary for the initiation or fulfilment of a contract. If the user's data is not deleted because it is required for other, legally permissible purposes, its processing will be restricted as far as possible. The data will be blocked accordingly and not processed for other purposes. This applies, for example, to user data that must be retained for commercial or tax reasons.

2 Contractual processing

When you enter into a contractual relationship with us or request one, we generally collect the following data: title, first and last name, email address, postal address, telephone/mobile number, information necessary for the execution and initiation of the contract.

We require this data so that we can identify you as a contractual partner, execute the contract, contact you and for invoicing purposes. Data processing is carried out at your/our request or on your/our behalf and is necessary for the aforementioned purposes for the mutual fulfilment and obligations arising from the contractual relationship.

We may also process data on the basis of a legitimate interest, e.g. when asserting or defending claims arising from the contractual relationship. The personal data collected will be stored until the end of the contractual relationship and then deleted, unless we are obliged to store it for a longer period in accordance with legal obligations based on tax and commercial law retention and documentation obligations (from the German Commercial Code, Criminal Code or Fiscal Code).

We use the data of our (future) contractual partners and employees (first name, surname and, if applicable, address) to carry out checks against so-called sanctions lists. Sanctions lists are centrally compiled and maintained lists of persons, associations or companies against whom state economic or legal restrictions have been imposed. Various regulations require us to take measures to prevent support being provided to business partners, suppliers and also our (potential) employees if they are included on these lists. We use the data solely to ensure that these persons are not included on any of the sanctions lists. We need this information in order to fulfil our legal obligations and to be able to avert possible sanctions. This is also in our legitimate interest.

3 Application details

When you apply for a position with us, we receive data from you. We process the data you have sent us in connection with your application in order to assess your suitability for the position and to carry out the application process. Please note that your data will be accessible to our HR department and the departments relevant to the position to be filled. For data protection reasons, we ask you to ensure that you only provide the data necessary for the application. The legal basis for the processing of your personal data in application procedures is Section 26 of the German Federal Data Protection Act (BDSG) and Article 6(1)(b) of the GDPR. According to these provisions, the processing of data necessary in connection with the decision to establish an employment relationship is permissible. If the data is required for legal purposes after the application process has been completed, data processing may be carried out on the basis of the requirements of Art. 6 (1) lit. f) GDPR in order to safeguard legitimate interests. Our interest then lies in asserting or defending claims.

Applicants' data will be deleted after six months at the latest in the event of rejection. If you have consented to the further storage of your personal data, we will transfer your data to our applicant pool. The data will be deleted after two years. If you are offered a position as part of the application process, the data will be stored permanently for the purpose of implementing the employment relationship. You can change or delete your application at any time and revoke any consent you have given at any time.

4 Data processing within the scope of the website

4.1 Log files, hosting

The server statistics automatically store data that the browser transmits to us as part of our legitimate interest in analysis and for security reasons (so-called "log files").

These are the following data in detail:

Language and version of the browser software

Operating system used and its interface

Referrer URL (the previously visited page)

Host name of the accessing computer (IP address)

Date and time of the server request

Time zone difference from Greenwich Mean Time (GMT)

Content of the request (specific page)

amount of data transferred

Access status/HTTP status code

We cannot usually assign this data to specific individuals. This data is not merged with other data sources. The data is also deleted within seven days after statistical evaluation. Data that must be retained for evidentiary purposes is excluded from deletion until the respective incident has been finally clarified.

We use hosting services. These serve to provide infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services in order to maintain the operation of this online offering.

In doing so, we or our hosting provider process inventory data, contact details, content data, contract data, usage data, meta and communication data from customers, interested parties and visitors to this online offering on the basis of our legitimate interests in the efficient and secure provision of this online offering.

4.2 Establishing contact

When you contact us by email or via a contact form, we store your details in order to answer your questions. Your details will not be passed on to third parties unless applicable data protection regulations justify such a transfer or we are legally obliged to do so. You can revoke your consent at any time with future effect. In the event of revocation, your data will be deleted immediately, provided that there is no legal exception for further processing. Otherwise, your data will be deleted once we have processed your enquiry or the purpose of storage no longer applies and there are no other conflicting legal exceptions.

4.3 Cookies

Cookies are small text files that are stored on your device and through which the entity that sets the cookie receives certain information. They serve to make the website more user-friendly and effective and/or to facilitate your navigation on our website. We only use cookies that are not absolutely necessary with your consent. You can revoke this consent at any time for future use.

Consent is voluntary and you can also use our website without accepting cookies. You can also configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies, or delete cookies that have already been stored. If you do not accept cookies, please note that in this case our website may not function properly. Unless we provide other information on the individual topics mentioned in this privacy policy or in the cookie banner, the lifetime of cookies is 24 months. You can find out which functions on our website set cookies in the individual function descriptions in our privacy policy and in the cookie banner.

5 Advertising mailings and information to interested parties

5.1 Newsletter

If you would like to receive the newsletter offered on our website, we require a valid email address from you, which allows us to verify that you are the owner of the email address provided or that the owner agrees to receive the newsletter.

After you have provided your email address, we will send a confirmation email to the address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm this within 24 hours, your data will be automatically deleted in relation to the newsletter dispatch. If you confirm your wish to receive the newsletter, we will store your email address until you unsubscribe from the newsletter.

We only send newsletters with your consent or legal permission.

You may revoke your consent to the storage of data, your email address and its use for sending the newsletter at any time. A link to unsubscribe from the newsletter can be found at the end of each newsletter. If a user has only subscribed to the newsletter and has unsubscribed, their personal data will be deleted.

Your personal data will not be disclosed to third parties.

5.2 Information to existing customers

If you, as our contractual partner, have concluded a contract for our services, we will offer you further information about our own similar services via the email address provided when the contract was concluded (§ 7 III UWG). You may object to receiving such information at any time.

These mailings are sent on the basis of our legitimate advertising interest.

6 Disclosure of data: General and contractual purpose

We share data with third parties if this is necessary for the fulfilment of a contract and/or if we are legally obliged and/or entitled to do so in individual cases. The data is typically passed on to contracted service providers, including, among others, hosting, operation, maintenance and support of IT systems, communication systems and disposal under certain circumstances. In addition, your data may also be transferred to postal or delivery services, your bank, tax advisors/auditors and solicitors.

Use of audio and video conferencing

We use and offer online conferencing tools for our communication and for conducting online meetings. This is done on the basis of your consent to participate in online meetings and communications. When you communicate with us via video or audio conference over the Internet, your personal data is collected and processed by us and the provider of the conferencing tool. The scope of the data also depends on the information you provide before or during participation. The following personal data is subject to processing, depending on your specifications: User information: first name, surname, telephone number, email address, password, profile picture, department Meeting metadata: Subject, description (optional), participant IP addresses, device/hardware information For recordings: Video, audio and presentation recordings, text file of the online meeting chat. When dialling in by telephone: Information about the incoming and outgoing phone number, country name, start and end time. Additional connection data, such as the IP address of the device, may also be stored. Text, audio and video data: You may have the option of using the chat, question or survey functions in an online conference. In this case, the text you enter will be processed in order to display it in the online conference and, if necessary, to log it. To enable the display of video and the playback of audio, the data from the microphone of your end device and from any video camera of the end device will be processed for the duration of the meeting. You can switch off or mute the camera or microphone yourself at any time. In order to participate in an online conference or enter the "meeting room", you must at least provide your name. This can generally be pseudonymised. For further information on data processing by the conference tools used, please refer to the privacy policies of the respective tools.

7 Disclosure of data: Tools used in the operation of the website

In some cases, we use external service providers within the scope of your consent or our legitimate interests with regard to the analysis, optimisation and economic operation of our online offering. If you have given your consent to tools that are not necessary for the operation of the website, you can change these settings at any time. Below, we list our service providers.

If your data is to be used for other purposes, we will inform you in advance and will only use the data if you have expressly given your further consent.

7.1 Google

With your consent, we use services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") to optimise and operate our online offering in an economically viable manner. Google LLC is certified under the Data Privacy Framework and EU standard contractual clauses have been concluded, meaning that measures have been taken to ensure compliance with European data protection law.

Youtube

We use YouTube, a Google service, to embed videos. These videos are stored on www.youtube.com and can be played directly from our website. YouTube uses cookies to collect data and evaluate statistical data. YouTube uses cookies to collect reliable video statistics, prevent fraud and improve user-friendliness, among other things. The information generated by the cookie about your use of this website (including your IP address) is transmitted to YouTube servers in the USA and stored there. Your IP address cannot be assigned unless you have logged in to YouTube or another Google service before visiting the website or are permanently logged in. If you do not want this to happen, you must log out of your YouTube account and your other Google accounts. YouTube cookies provide us with statistical values for the retrieval of individual videos embedded in the website without any reference to the respective user. The embedded YouTube videos are used within the scope of YouTube's permitted use, which all users must accept. If you believe that copyrights have been infringed, please report this directly to YouTube. We use embedded YouTube videos in extended data protection mode. This means that YouTube does not store cookies for a user who views a website with an embedded YouTube video player but does not click on the video to start playback. If the YouTube video player is clicked, YouTube may store cookies on the user's computer. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the data transmitted or its use by YouTube. For more information on YouTube's official privacy policy, please visit https://www.google.de/intl/de/policies/privacy/ and https://support.google.com/youtube/answer/171780?hl=de.

7.2 Vimeo

With your consent, plug-ins from the video portal Vimeo, owned by Vimeo, LLC, 555 West 18th Street, New York 10011, USA, are integrated into our website. EU standard contractual clauses have been agreed with Vimeo, meaning that measures have been taken to ensure compliance with European data protection law. If you have given your consent, a direct connection between your browser and a Vimeo server in the USA is established each time you visit a page that offers one or more Vimeo video clips. Information about your visit and your IP address is stored there. Through interactions with the Vimeo plug-ins (e.g. clicking the start button), this information is also transmitted to Vimeo and stored there. If you have a Vimeo user account and do not want Vimeo to collect data about you via this website and link it to your membership data stored with Vimeo, you must log out of Vimeo before visiting this website. The privacy policy for Vimeo with more detailed information on the collection and use of your data by Vimeo can be found at https://vimeo.com/legal/privacy/policy.

7.3 Matomo

This website uses Matomo, an open-source software for statistical analysis of visitor traffic. We use Matomo in "device fingerprinting" mode (data transmission from your device to our web service). Matomo does not use cookies in this mode. This also means that we cannot analyse website usage based on information generated about your user behaviour on our websites. The information sent by "device fingerprinting" from your device is not passed on to third parties. This site uses Matomo with the "AnonymizeIP" extension. This means that IP addresses are shortened before being processed, thus ruling out any direct personal references. Information on Matomo data protection is also available at https://matomo.org/privacy-policy/.

7.4 curator.io

On our website, we use the curator.io tool to integrate social media content into our site. The provider is Curator Group Pty Ltd. (69 Ruthven Street, Bondi Junction, NSW 2022, Australia). When this content is loaded, a connection to the curator.io servers is established. This may result in technical data (e.g. IP address, date and time of access, browser used) being transmitted to curator.io. In addition, depending on the content integrated, data may also be passed on to the respective social media platform. The use of curator.io is based on your consent. Further information on data processing by curator.io can be found in the provider's privacy policy: https://curator.io/privacy-policy

8 Data storage outside the EU/EEA

As indicated in the individual tool descriptions, we use tools from US third-party providers. If this is necessary for the purposes stated, your IP address may be processed outside the European Economic Area, where a level of data protection in line with European standards is not always guaranteed and confirmed (e.g. by means of appropriate safeguards within the meaning of Article 46 of the GDPR or an adequacy decision by the European Commission). In particular, it cannot be ruled out that security authorities in a third country may gain access to your IP address without you being able to take legally effective action against this.

The transfer of the IP address to these third-party providers is carried out in accordance with Art. 49(1)(a) GDPR on the basis of your express consent given in the consent banner. This consent is voluntary. You can revoke it at any time with future effect. This will not result in any disadvantages for you.

According to some US third-party providers, the conclusion of so-called standard contractual clauses and additional measures taken in accordance with the Schrems II ruling already guarantee a level of protection that meets European standards. However, as the suitability of such measures to ensure an adequate level of data protection is controversial, we have decided to only transmit your IP address with your consent.

The certification of some companies under the Data Privacy Framework (DPF) serves to ensure the level of protection and can be queried here for the companies: https://www.dataprivacyframework.gov/s/. This certification is sufficient as a measure to ensure an adequate level of data protection.

9 Our presence on social media

You can find us on social networks and platforms. We use these platforms to communicate with our customers, interested parties and users who are active there and to inform them about our services and our company. The processing of personal data of users active there is based on our legitimate interests in communicating and providing information to and with users. If consent to data processing has been given by users within the framework of the respective social platform, processing is carried out on the basis of this consent.

When you visit one of our social media sites, we are jointly responsible with the operator of the social platform for the data processing operations triggered by this visit. You can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint, see the following point "Rights of the data subject") both against us and against the operator of the respective social platform. We would like to point out that, despite our joint responsibility, we do not have full control over the data processing operations of the social platform and may forward the rights request to the respective operator in order to better process the rights of data subjects. Our options are generally based on the corporate policy of the respective provider.

Our information on storage can be found below. We have no influence on the storage period of your data, which is stored by the operator of the social platform for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Depending on the social platform named below, user data may also be processed outside the European Union. EU standard contractual clauses have been agreed with the US companies, or they are certified under the Data Privacy Framework (DPF), so that possible measures to ensure compliance with European data protection law have been taken.

User data is generally processed by the platforms for market research and advertising purposes. For example, usage profiles can be created based on user behaviour and the resulting interests. These usage profiles can then be used, for example, to place advertisements within and outside the platforms that are likely to correspond to the interests of the users. For this purpose, cookies are usually stored on users' computers, in which the usage behaviour and interests of users are stored. Data can also be stored in the usage profiles independently of the devices used by users. This occurs in particular when users are members of the respective platforms and are logged in to them.

For a detailed description of the respective processing and the options for objection, please refer to the information provided by the providers linked below.

9.1 Facebook (Meta)

(Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland) The basis for this is an agreement on joint processing of personal data: https://www.facebook.com/legal/terms/page_controller_addendumDatenschutzerklärung: https://www.facebook.com/about/privacy/Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com

9.2 Google/YouTube

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland)Datenschutzerklärung: https://policies.google.com/privacyOpt-Out: https://adssettings.google.com/authenticated

9.3 Instagram (Meta)

(Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland) Privacy Policy/Opt-Out: http://instagram.com/about/legal/privacy/

9.4 LinkedIn

(LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland)Datenschutzerklärung https://www.linkedin.com/legal/privacy-policyOpt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

9.5 Vimeo

(Vimeo, LLC, 555 West 18th Street, New York 10011, USA) Privacy policy/opt-out: https://vimeo.com/legal/privacy/policy

This privacy policy was created by Sieling Law Firm – Specialist law firm for IT law - provided.