Source: https://bambi-awards.com/data-privacy
Timestamp: 2019-04-21 23:05:36+00:00

Document:
Please find below our statement on the processing of personal data by our company in accordance with the legal requirements, especially with the EU Gen-eral Data Protection Regulation (GDPR – available at http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A32016R0679).
Cookies: Text files which the web server places on the user’s computer by means of the browser which is used. The stored cookie information may contain both an identifier (cookie ID) for recognition purposes and content data, such as login status or information about websites visited. The browser sends the cookie information back to the web server with each new request upon subsequent repeat visits to these sites. Most browsers accept cookies automatically. Cookies can be managed using the browser functions (usually under “Options” or “Settings”). The storage of cookies may be disabled in this way or it may be made dependent on the user’s approval in any given case or otherwise restricted. Cookies may also be deleted at any time.
Profiling: Any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, per-sonal preferences, interests, reliability, behaviour, location or movements.
Services: Our offers to which this data privacy statement applies (cf. Scope of validity)..
Tracking technologies: Actions can be tracked either via the activity records (log files) stored on our web servers or by collecting data from end devic-es via pixels, cookies or similar tracking technologies.
Processing: Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmis-sion, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
All these offers are also collectively referred to as “services”.
Our data protection officer can be contacted under the data given in paragraph 3., for the attention of the data privacy department or via bambi@datenschutzanfrage.de.
This section of the data privacy statement contains detailed information about the processing of personal data in the context of our services. The information is subdivided for greater clarity into certain functions in connection with our services. In case of the normal use of the services, differ-ent functions and therefore also different processing operations can be implemented consecutively or simultaneously.
The provision of personal data is not required by law or contract, and you are under no obligation to provide any data. We will inform you during the data entry process when personal information needs to be provided for the relevant service (e.g., by indicating “mandatory fields”). In cases where the provision of data is required, the consequence of not providing data will be that the service in question cannot be provided. Otherwise, failure to provide data may result in our inability to provide our services in the same form and quality.
When we send data to third countries, i.e., countries outside the European Union, the data are then transmitted strictly in compliance with the statu-tory conditions of admissibility.
One of these adequacy decisions is the Commission Implementing Decision (EU) 2016/1250 of 12.07.2016 on the “EU-US Privacy Shield” for the USA. The level of data protection is generally considered to be appropriate according to Art. 45 GDPR for transfers to companies which are certified under the EU-US Privacy Shield.
The time specified in the “period of storage” paragraph indicates how long we use the data for the purposes in any given case. At the end of this pe-riod, the data will no longer be processed by us but will be deleted at regular intervals, unless continued processing and storage are required by law (in particular, because it is necessary to fulfil a legal obligation or for the establishment, exercise or defence of legal claims) or unless you grant us ex-tended consent.
The passages below set out how your personal data are processed when you access our services (e.g., loading and viewing the website, opening the mobile app and navigating within the app). We would point out, in particular, that it is impossible not to send access data to external content provid-ers (cf. subsection b.) due to the technical processes involved in transmitting information over the Internet. The third-party providers are themselves responsible for the privacy-compliant operation of the IT systems which they use. The service providers are required to decide how long the data will be stored.
The tables below indicate how your personal data are processed when you enter prize draws or take part in promotions (Bambi audience voting).
All data listed under a.
The tables below show how your personal data are processed when you contact us via our feedback channels.
The explanation of the tracking methods also includes information on how to prevent or object to the processing of data. Please note that this “opt-out” request, i.e., denial of consent to processing, is usually stored via cookies. If you use our services on a new end device or in a different browser, or if you have deleted the cookies set by your browser, you will need to reconfirm the refusal of consent.
The information generated by the cookie about your use of the website is usually transferred to a Google server in the USA and stored there. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. We have also added the code “anonymizeIP” to our Google Analytics services. This guarantees the masking (shortening of the last eight digits) of your IP address, so that all data is collected anonymous-ly. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and short-ened there.
On our behalf, Google will use this information to evaluate your use of the services, to compile reports on activities within the framework of the services and to provide us with fur-ther services associated with the use of the services and the Internet.
The data transferred and linked to cookies or user IDs will be deleted after 26 months. Data whose reten-tion period has been reached is automatically deleted once a month.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP ad-dress) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.This plugin is provided by Google; please note that we cannot verify or control its functionality.
As an alternative to the browser add-on, espe-cially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking this Link .
An opt-out cookie is set that prevents future collection of your data when you visit the ser-vices. The opt-out cookie is only valid in this browser and only for the respective website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
To prevent Universal Analytics from collecting data across different devices, you must opt-out on all used systems.
This website may contain plug-ins from social networks such as Facebook, Twitter, Instagram or Pinterest, which are operated by third parties and which feature a button via which messages can be sent to the corresponding social network for various purposes, such as rating, recommending or sharing content. Our purpose and legitimate interest in this course of action is to publicise our services to greater effect. We configure our services in such a way that data are only sent if you press the button. The legal basis for data transmission in this case is Art. 6, subs. 1 f), GDPR. The respective provider is responsible for the privacy-compliant processing of the transmitted data.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concern-ing you for such marketing with future effect, which includes profiling to the extent that it is related to such direct marketing.
You also have the right, at any time with future effect and for reasons relating to your particular situation, to object to the processing of personal da-ta concerning you which is based on Art. 6, subs. 1 e) or f), GDPR, including profiling based on these provisions.
Alternatively, you may reach us, for example, using the contact information provided in paragraph I.3.
You have the right to obtain from us the erasure of personal data concerning you without undue delay if one of the reasons listed in Art. 17 Abs. 1 GDPR is applicable and the processing operations are not required for one of the purposes approved in Art. 17 Abs. 3 GDPR.
You are entitled to obtain from us the restriction of the processing of personal data if one of the conditions laid down in Art. 18 Abs. 1 is met.
Under the conditions set out in Art. 20 Abs. 1 GDPR, you have the right to receive the personal data concerning you which you have provided to us, in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance on our part. In exercising your right to data portability, you have the right to have the personal data transmitted directly by us to another controller where technically feasible.

References: Art. 45
 Art. 6
 Art. 6
 Art. 17
 Art. 17
 Art. 18
 Art. 20