Privacy Statement – Assemble Entertainment GmbH
Responsible department & company data protection officer
In the following we explain to you which personal data is collected and processed by us when using our services or using our offers. We are:
ASSEMBLE Entertainment GmbH
Ostring 3 (Hinterhaus)
Telefon: +49 611 13 57 82 30
Personal data are individual details about personal or factual circumstances of a specific or identifiable natural person.
We collect and process personal data based on the following legal foundations:
- Consent according to Article 6 paragraph 1 (a) General Data Protection Regulation (GDPR). Consent is any voluntary expression of intent, in an informed and unequivocal manner, in the form of a statement or other unambiguous confirmatory act, which indicates that the data subject consents to the processing of his personal data.
- Necessity to fulfill the contract or carry out preparatory actions in accordance with Article 6 para. 1 (b) GDPR, this means that the data is required so that we can fulfill the contractual obligations to you or we need the data to prepare a contract closure with you.
- Processing to fulfill legal obligations under Article 6 para. 1 (c) GDPR, this means that a processing of the data is required by law or other regulations.
- Processing for the protection of legitimate interests in accordance with Article 6 para. 1 (f) GDPR, this means that processing is necessary to safeguard legitimate interests on our part or by third parties, unless the interests or fundamental rights and freedoms on your part that require the protection of personal data prevail.
Rights of affected
You are entitled to the following rights with regard to the processing of data by us in accordance with the respectively listed articles of the General Data Protection Regulation:
- Right of access by the data subject to Art. 15 GDPR
- Right to rectification according to Art. 16 GDPR
- Right to erasure ("right to be forgotten") in accordance with Art. 17 GDPR
- Right to restriction of processing according to Art. 18 GDPR
- Right to data portability according to Art. 20 GDPR
- Right to object according to Art. 21 GDPR
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, employment or the place of the alleged infringement, if you believe that the processing of the personal data is violating the GDPR.
Data Erasure and Storage Duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, storage may take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which the processor is subject. Blocking or deletion of the data also takes place if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or the fulfillment of the contract.
Actual data processing
Visiting the Website
Scope of Data Collection
When visiting our website, the following data is collected and stored by our web server:
- Information about the browser type and version used
- The operating system of the user
- The IP address of the user
- Date and time of access
- Websites accessed by the user's system through our website
The data is stored in the log files of our hosting provider. The data is not stored together with any other personal data of the user. The data is collected and stored by our hosting provider 1&1 Internet SE..
The legal basis for processing the data is Art. 6 para. 1 (f) GDPR. The legal basis for the data processing by our hosting and maintenance service provider is Art. 28 para 3 GDPR. The legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR therefore lies in the functionality of our website and its availability.
Purpose of data processing
The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user's IP address must be kept for the duration of the session. The data is stored in order to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
Duration of storage
The IP addresses will be anonymized after seven days at the latest, unless it is necessary to keep the data for the aforementioned purpose due to concrete events. A storage going beyond this is possible. In this case, the IP addresses of the users are alienated so that it is no longer possible to assign them to a specific user.
Objection and removal possibility
The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no possibility of objection by the user.
Scope of data processing
On our web pages we offer the possibility to register for a newsletter, in which registered persons regularly receive e-mails from us with current information. An input mask on the website is available for registration. Registration requires the entry of your e-mail address. By clicking on the registration button, the data entered in the input mask is transmitted to us. In addition, the date and time of registration for the newsletter and the IP address used are stored. When confirming the newsletter registration within the framework of the so-called double opt-in procedure, the date and time at which you click on the confirmation link for the newsletter registration as well as the IP address used will also be saved.
The newsletter is sent by the external service provider "Mailchimp". Your e-mail address will be forwarded to "Mailchimp", who will send the newsletter on our behalf. A further use does not take place by the service provider. The service provider is based in the United States of America.
The legal basis for processing the data when registering directly for the newsletter is Art. 6 para. 1 (a) and(c) GDPR in connection with the respective tax law provisions. The legal basis for the transfer of the data to Mailchimp is Art. 28 Para. 3, Art. 45 Para. 3 GDPR. The service provider is certified under the Privacy Shield Framework and is therefore subject to the adequacy decision (implementing decision 2016/1250) of the EU Commission, i.e. the level of data protection at the service provider is recognised as equivalent to the GDPR, although it is based in the USA.
Purpose of data processing
The purpose of storing the e-mail address is the possibility of electronic contact for advertising purposes. The date and IP address of the registration as well as the confirmation of the registration will be recorded in order to document the consent to the newsletter shipment and to prevent misuse. The passing on to the service-provider takes place for the purpose of the dispatch of the newsletter as mass dispatch.
Duration of storage
As far as you have expressly consented to the receipt of the newsletter, we will only delete or block the e-mail address for the advertising mailing, if you revoke your consent. The data confirming the order of the newsletter will be stored for the same amount of time.
The e-mails sent, as far as business letters are concerned, are stored for the duration of retention periods of the Tax Code or the Commercial Code. The further e-mails are deleted as soon as no further response by the user has to be expected.
Objection and removal possibility
You may object or revoke your consent to the use of the e-mail address for advertising purposes at any time, without incurring any costs beyond the charges of your communications tariff. You can object to the receipt of the newsletter by clicking on the link provided there with effect for the future. You may also opt-out of advertising for future use by emailing firstname.lastname@example.org. In the case of any objection by e-mail, the implementation of the cancellation or blocking can take up to 2 working days; In this period, you may still receive advertising emails.