Source: https://yamdu.com/fr/legal/privacy/
Timestamp: 2020-05-29 04:23:28
Document Index: 455671085

Matched Legal Cases: ['Art. 4', 'Art. 4', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 28', 'Art. 6', 'Art. 17', '§ 257', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'art. 28', 'Art. 28', 'Art. 17', 'Art. 6']

1. Controller and Privacy Contact
Seriotec GmbH, Wolfratshauser Str. 157c, 81479 Munich, Germany is the controller for the offer and the services offered on www.yamdu.com in accordance with Art. 4 para. 7 of the General Data Protection Regulation (GDPR). In the case of data protection concerns, you can contact us at any time via the contact possibilities listed in the imprint, e.g. per email to info@seriotec.com.
Personal data are, according to Art. 4 No. 1 GDPR, all information relating to an identified (for example by name, address or e-mail address, etc.), or an identifiable natural person. Identifiable is a natural person who can be identified directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier or one or more special features that express the identity of that natural person.
3. Log Files/information transmitted by your browser
In the case of merely informative use of our website, i.e. if you do not use one of the services offered on our website (for example, registration for a Yamdu account and/or use of Yamdu), we only collect the data that your browser transmits to our server. For the use of cookies, please see the information below in paragraph 8.
Each time you use the Internet, your Internet browser automatically transmits certain information that we store in so-called log files. This concerns the following data that is required to help you view our website and to ensure its stability and security: IP address (Internet Protocol address), date and time of the request, contents of the request (specific page), access status/HTTP status code, each amount of data, website, from which the request comes, browser, operating system and its surface, language and version of the browser software. It is not possible for us to draw a conclusion on individual persons on the basis of this data.
This data is used by us for reasons of technical security, e.g. to prevent attacks on our web server, whereby the data is anonymized by shortening the IP address at the domain level after no later than seven days, stored, in accordance with the data no later than seven days by shortening the IP address on domain level will be made anonymous, so that it is no longer possible to establish a reference to the individual website user. A storage or safekeeping of the log files on the above-mentioned period shall be undertaken only if the additional storage or retention in the event of a security incident, for instance in case of an attack attempt on our website/server is required for evidential purposes, and the log files are deleted after clarification of the security incident. The legal basis for the processing described above is Article 6 (1)GDPR (p. 1 lit. f) processing is necessary in order to safeguard the legitimate interests of the controller).
Your personal data will be processed by us only in so far as one or more services offered on our website, for which an indication of personal data is necessary in order to be able to provide the desired service. This relates to the following services described below:
a. Registration for Yamdu / User Account
If you wish to register for the first time with Yamdu or have been added/invited by your organization as part of its membership in a project, we collect the following data: First and Last Name, E-mail address and a password chosen by yourself
We use this information in order to be able to set up your user account for Yamdu. After clicking on the "Register" button you will receive an E-Mail requesting you to confirm the registration (double opt-in). Your registration for Yamdu is completed only after your confirmation.
Within your user account on Yamdu, you can optionally specify additional data, e.g. for film projects you are interested in, which may be of relevance, especially for other project participants or future film projects. This relates to, for example, data such as your address, phone numbers, information on skills, as far as these may be relevant for film projects (e.g. driving license). You can also enter a photo of yourself in your user account. Insofar as you provide this data, we store the information in your user account. As part of your user account, you have a large number of setting options, e.g. to see if other users can see your profile details, what notifications you would like to receive about your ongoing projects (e.g., via email or push notifications), etc.
The legal basis for the above-described processing is Art. 6 (1) sentence 1 lit. b) GDPR (processing is required to fulfill a contract).
b. Test phase/booking chargeable packages for corporate clients
As a corporate client, you register with Yamdu as a company or organization to be able to test Yamdu during a fourteen-day test phase. In this case, in addition to the data listed above, the name, address and contact details of your company, including a contact person in your organization, and optionally and as far as you have uploaded a company logo, will be stored by us.
As part of the booking of chargeable packages for corporate customers, your bank account data will also be collected. See also paragraph 6 below with regard to the collection and dissemination of data to the payment service provider/credit institutions.
5. Obligation to providing personal data
If you wish to use Yamdu's services as described in section 4 above, you must provide the personal information required to register or book the Services. If you do not provide us with this data, it is not possible for us to provide the desired performance.
Your personal data will only be passed on or transmitted by us to third parties, as far as this is necessary for the performance of the contract with you, a legitimate interest on our part, you have given your consent to this and/or as far as we are obliged to do so by law or by official or judicial orders.
Your personal data will be transmitted by us to third parties in the cases described below and for the purposes described below.
a. Service providers in connection with the execution of the contract / ARRI Webgate
As part of using Yamdu's services, the product ARRI Webgate can also be used for image editing. We would like to point out that the product ARRI Webgate is provided by our cooperation partner ARRI Media GmbH, Türkenstraße 89, 80799 Munich / Germany and in this respect a separate registration at ARRI Webgate is required. For this purpose, your email address will be automatically transmitted to ARRI Media GmbH in order to register for ARRI Webgate on the ARRI Webgate website. For the registration and use of ARRI Webgate, the data protection regulations of ARRI Media GmbH apply, to which you are informed during the registration with ARRI Webgate. The legal basis for the transmission is Art. 6 (1) sentence 1 lit. b) GDPR (processing is required to fulfill a contract).
b. Email delivery service
For the dispatch of our emails to you, e.g. transaction emails such as the sending of booking confirmations, confirmation of registration of your user account/validation of your e-mail address, etc., we use the email forwarding service providers SendGrid and Sendpulse, located in the USA.
The email addresses of the recipients and the corresponding log-on data required for logging/proof of registration are stored on the SendGrid servers outside the European Union / the European Economic Area in the USA. We solely used this data on the basis of a contract processing agreement between us and SendGrid to send the emails and to store the log-on data, not used for other purposes and particularly not, for example, sending personalized email messages to you by SendGrid. SendGrid is „Privacy Shield“-certified (https://www.privacyshield.gov/EU-US-Framework). The legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR (processing based on legitimate interest) in conjunction with Article 28 (3) GDPR (processing by a processor on the basis of a contract).
c. Service provider for push notifications
For sending our push notifications (as far as you have activated or deactivated them in your user account for individual or all projects, in whole or in part) on your mobile device, we use the service provider OneSignal based in the USA. OneSignal sends push notifications on our behalf based on an order processing agreement. OneSignal does not store or process IP addresses for push notifications. The legal basis is Article 6 (1) (1) (a) GDPR (processing based on the consent of the person concerned) in conjunction with Article 6 (1) sentence 1 lit. (f) GDPR (processing on the basis of legitimate interest) and Art. 28 (3) GDPR (processing by a processor on the basis of a contract). You can revoke your consent to receive push notifications about your assigned movie projects at any time by setting (enabling or disabling) in your user account.
In order to be able to offer you a selection of different payment methods for booking on our website, we use the external payment service provider Paymill (Paymill GmbH, St.-Martin-Straße 63, 81669 München). Depending on which payment method you select in the booking process, we pass on the data collected for the settlement of payments, such as bank details or credit card details, to the payment service provider or to the payment service provider Paymill. Insofar as the payment service provider or our payment service provider Paymill collects personal data from you, the respective data protection regulations of Paymill apply. The legal basis is Art. 6 (1) sentence 1 lit. b) GDPR (processing is required to fulfill a contract).
e. Use of Google Tag Manager (management of JavaScript and HTML tags)
This website uses Google Tag Manager. Google Tag Manager is a tag management system for managing JavaScript and HTML tags used for the implementation of tracking and analysis tools and is operated by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
The data processing purpose is the administration of website tags. No personal data is processed. Tag Manager is a cookie-free domain and does not collect any personal data. However, Google Tag Manager can trigger other tags that may collect and process personal data.
The data will be deleted as soon as it is no longer needed for processing purposes.
Data is passed on to the following companies:
Google has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).
You will find the email address of the data protection officer of the processing company below: https://support.google.com/policies/troubleshooter/7575787?hl=en
Click here to consent to all domains of the manufacturing company: https://safety.google/privacy/privacy-controls/
Click here to read the data processor's data protection regulations: https://www.google.com/intl/de/tagmanager/faq.html
Of course, even without a special request from our customers, we comply with our obligations to delete personal data (for example, pursuant to Art. 17 GDPR) and therefore store data only for as long as is necessary for the provision of the desired service or purpose.
So we store e.g. the data related to your user account only as long as you have a user account and the data will be deleted by us as soon as the storage is no longer required, e.g. after you have canceled your account or clicked on the "Delete user account" button in your profile and then clicked "Remove".
Please note, however, that in place of deletion of a blockage or restriction of processing enters into force, as far as a deletion of statutory storage obligations, which we must meet, preclude. For example, in accordance with the statutory provisions in § 257 HGB ( regulations under German commercial law), we must, for example, store offers sent to you, booking confirmations, invoices and other contractual communications with you for a period of up to ten years. Insofar as such statutory retention requirements exist, such data or documents are not deleted by us, but blocked, which ensures that the data cannot be used for other purposes.
a. What are cookies and which cookies are used on our website?
When using our website, cookies are stored on your computer. Cookies are text files that contain information about the use of our website (pages visited, number of visits, visiting hours, time spent on individual pages, used browser, operating system, etc.), which are stored on your computer's hard drive if you allow this using the settings in your browser.
Cookies cannot run programs or deliver viruses to your computer. The cookies we use do not store any personal data and do not allow any inference to you as a person.
Cookies are used to make the internet offer more user-friendly and efficient. Cookies are also used to track the preferences of visitors to our website, allowing the presentation to be optimized. This allows us to tailor the contents of our website to your specific needs and thus to improve our offer for you. Cookies can also be used to display advertising based on your interests, e.g. also on other websites.
b. Cookies in order to maintain the functionality and usability of the website
Certain cookies are required so that we can present to you our website and the features/services offered in a trouble-free and user-friendly manner as possible.
These are e.g. cookies for the temporary storage of user input on the website, e.g. Content of a form and cookies for storing user preferences in the presentation of our website in terms of e.g., the language settings, font size, etc. Furthermore, this includes cookies that allow you to remain logged in your user account for a long period of time without having to re-enter your access data again.
The legal basis for the use of cookies to maintain the functionality and user-friendliness of the website is Art. 6 para. 1 sentence 1 lit. f) GDPR (processing is necessary to safeguard the legitimate interests of the controller).
c. Web analytics cookies - Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called "cookies", text files that are stored on your computer and that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is enabled on this website, your IP address will first be truncated by Google within the member states of the European Union or other parties to the agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred and truncated to a Google server in the USA Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics is not conflated with other Google data. This website uses Google Analytics with the extension "_anonymizeIp()". As a result, IP addresses are further processed in truncated form, so that reference to individuals can be ruled out.
For more information about the purpose and scope of the data collection and processing by Google, for data protection Overview: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy policy of Google: Http://www.google.de/intl/de/policies/privacy. Google has submitted to the EU-US privacy shield (https://www.privacyshield.gov/EU-US-Framework) We use Google Analytics for the purpose of web analytics, specifically in order to be able to analyze your use of our website. Using the statistics and insights gained, we can improve our offer and make it more interesting for you as a user. The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f) GDPR (processing is necessary to safeguard the legitimate interests of the controller ).
d. Usage of Google Ads (Remarketing/Conversion Tracking)
Our website uses the Google Ads service. Google Ads is an online advertising program of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA94043, USA ("Google").
On the one hand, we use the Remarketing Feature within the Google Ads service. The Remarketing feature allows us to show users of our website on other sites within the Google Display Network (on Google itself, so-called "Google Ads" or other websites) advertising based on their interests. For this, the interaction of the users on our website is analyzed, e.g. for which offers the user has been interested in, in order to be able to display targeted advertising to the users even after visiting our website on other pages. Google stores a number in the browsers of users, who visit certain Google services or websites on the Google Display Network. This number, referred to as a "cookie", records the visits of these users. This number is used to uniquely identify a Web browser on a particular computer and not to identify a person, personal information is not stored. You can disable the use of cookies by Google by following the link below and downloading and installing the plug-in provided there: https://www.google.com/settings/ads/plugin. For more information about Google Remarketing and Google's privacy policy, please see http://www.google.com/privacy/ads/.
In addition, we use the so-called conversion tracking as part of the use of the Google Ads Service. When you click on an ad put at disposal by Google, a conversion tracking cookie will be placed on your computer/device. These cookies lose their validity after 30 days, contain no personal data and are thus not used for personal identification. The information obtained using the conversion cookie is used to generate conversion statistics for Ads advertisers who have opted for conversion tracking.
You may prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. In addition, you can disable interest-related ads on Google and interest-related Google ads on the web (within the Google Display Network) in your browser, by selecting the "Off" button under http://www.google.de/settings/ads activate the off button or make the deactivation under http://www.aboutads.info/choices/ For more information about its settings and the privacy on Google seeHttps://www.google.de/intl/de/policies/privacy/?fg=1.
e. Use of Google Optimize (optimization)
Our website uses the Google Optimize service. Google Optimize is an online optimization service from Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
The data processing purpose is the optimization of our homepage and its user experience. Cookies are set here which collect and record the anonymized IP address data attributes and user behavior on site. The above analysis is based on our legitimate interests in optimization and security purposes and in meeting the requirements of the design of our website in accordance with Art. 6 Para. 1 lit. f GDPR. When using this tool, we pay particular attention to the protection of your personal data.
The processing location is the European Union.
For more information on data protection and opt-out, click here to read the data processor's data protection regulations: https://policies.google.com/privacy?hl=en
f. Advertising cookies - Facebook Website Custom Audience
Our website uses the retargeting technology "website Custom Audience" of the social network Facebook, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ( "Facebook "), and it allows us to display relevant advertisements and offers to our website visitors, who are already interested in our offer and are Facebook members, and are also on Facebook via the Facebook ad network. Legal basis for the use of Facebook Website Custom Audience is Art. 6 para. 1 sentence 1 lit. f) GDPR (processing is necessary to safeguard the legitimate interests of the controller).
For this purpose, so-called Facebook retargeting pixels are integrated on our websites, which allow Facebook to register you as a visitor to our websites using a pseudonym and to use the data as a basis for our Facebook ads on Facebook. Personal data are not collected or stored by you and are therefore not identifiable for us. Facebook does not associate the data collected via the retargeting pixel with the user data stored on Facebook for your person. Please note that Facebook's pre-listed tracking process allows users to be identified through multiple websites.
Opt-Out: You can disagree on the use of Facebook Website Custom audiences for the future about Https://www.facebook.com/settings/?tab=ads and http://www.youronlinechoices.com/de/praferenzmanagement/. For more information on data protection and its setting options, see https://facebook.com/about/privacy/ and www.facebook.com/settings/?tab=ads.
g. Usage of Hotjar (hotjar Ltd.)
With this tool, movements on the web pages, on which Hotjar is used, can be reconstructed (so-called Heatmaps). For example, you can see how far users scroll and which buttons they click and how often. Furthermore, the tool also makes it possible to obtain feedback directly from the users of the website. In this way, we obtain valuable information in order to make our websites even faster and more customer-friendly. The above analysis is based on our legitimate interests in optimization and marketing purposes and the design of our website in line with our interests in accordance with Art. 6 Para. 1 lit. f DSGVO. When using this tool, we pay particular attention to the protection of your personal data. This means that we can only track which buttons you click and how far they scroll. Areas of the website in which personal data of you or third parties is displayed are automatically hidden by Hotjar and are therefore not traceable at any time.
Hotjar offers every user the possibility to prevent the use of the Hotjar tool with the help of a "Do Not Track Header" so that no data about the visit of the respective website is recorded. This is a setting that supports all common browsers in the current version. For this purpose, your browser sends a request to Hotjar to deactivate the tracking of the respective user. If you use our website with different browsers or computers, you must set up the "Do Not Track Header" for each of these browsers or computers separately.
h. Use of Sentry (Functional Software Inc.)
This website uses the error tracking service Sentry. The processing company is Functional Software Inc. with its registered office at 132 Hawthorne Street, San Francisco, California 94107, USA.
The data processing purposes are tracking, monitoring system stability and the detection of code errors.
This sets cookies that collect and record the following data attributes: IP address, usage data and device data. The above analysis is based on our legitimate interests in optimization and security purposes and in meeting the requirements of the design of our website in accordance with Art. 6 Para. 1 lit. f GDPR. When using this tool, we pay particular attention to the protection of your personal data.
Functional Software Inc. has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).
For more information on data protection and opt-out, click here to read the data processor's data protection regulations: https://sentry.io/privacy/
i. How you can remove cookies
In addition to the aforementioned contradiction to the individual cookies and tools used by us at any time, you can also have the option to disable the storage of cookies in the system settings for your browser and delete existing cookies.
10. Note related to order processing in accordance with art. 28 GDPR
Insofar as you process personal data of third parties in connection with the use of Yamdu (e.g. storage of contact data of actors from older projects etc.), Yamdu will process them exclusively on your instructions and on your behalf as a so-called processor according to Art. 28 GDPTR. For the processing of personal data in the context of processing on behalf of a controller, the supplementary terms and conditions for order processing apply. The completion of the supplementary contract conditions for order processing takes place during the registration for Yamdu.
Right of deletion (Art. 17 GDPR) ("right to be forgotten")
You also have the right to complain to a data protection supervisory authority in the Member State of your place of residence, your workplace or the location of the alleged infringement of the processing of your personal data by us if you consider that the processing of the personal data relating to them is illegal.
In addition, we would like to point out that insofar as your personal data is processed on the basis of the legitimate interest in the context of balancing of interests in accordance with Art. 6 (1) sentence 1 f) GDPR and/or your personal data are processed for direct marketing purposes, you have the right to object to the processing of your personal data at any time.
Insofar as you have given us consent to the processing of your data, e.g. as part of sending our newsletter, you can revoke it at any time with effect for the future. The legality of the processing of your data up to the revocation remains unaffected.
For the assertion of your rights, you can contact us at any time via the contact channels listed in section 1 above and/or the contact details listed in our imprint.