The person responsible within the meaning of the General Data Protection Regulation (hereinafter “GDPR”) and other national data protection laws of the member states as well as further data protection provisions is:

FOL Festival of Lights International Productions GmbH

Birgit Zander
Savignyplatz 6
10623 Berlin

Website: www.festival-of-lights.de
E-Mail: info@festival-of-lights.de

Phone: +49 (0)30 318 60 113/4/5
Fax: +49 (0)30 315 09 748

Scope and permission for the processing of personal data
We collect and use personal data of our users only to the extent necessary to provide the functionality of our website and our content and services. The collection and use of personal data of our users takes place regularly only with the consent of the user.

An exception applies in those cases in which prior consent cannot be obtained for actual reasons and the processing of the data is permitted by statutory provisions.

The legal basis for processing personal data with the prior consent of the data subject is Art. 6 para. 1 lit. a GDPR. Art. 6 para. 1 lit. b GDPR is the legal basis for the processing of personal data required for the performance of a contract or for the implementation of pre-contractual measures. The legal basis for the processing of personal data to fulfil a legal obligation is Art. 6 para. 1 lit. c GDPR. Art. 6 para. 1 lit. d GDPR serves as a legal basis in the event that vital interests of the data subject or another natural person necessitate the processing of personal data. If the processing is necessary to safeguard a legitimate interest of our company or a third party and these interests outweigh the interest of the data subject, taking into account the fundamental rights and freedoms of the data subject, Art. 6 para. 1 lit. f GDPR is the legal basis for the processing of the data.

Data erasure and storage duration
The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage no longer applies. In addition, the data may be stored if we are required to do so by law in order to process the data. In this case, the data will be blocked or deleted when the legally prescribed storage period expires, unless it is necessary for further storage of the data for the conclusion or fulfilment of a contract.

Visit to our website
When you access our website, the browser used on your terminal device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted: IP address of the requesting computer, date and time of the access, name and URL of the retrieved file, website from which the access is made (referrer URL), browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The above mentioned data are processed by us for the purposes of ensuring a smooth connection of the website, ensuring a comfortable use of our website, evaluation of system security and stability as well as for other administrative purposes.

The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. f GDPR. Our justified interest follows from the purposes listed above for the collection of data. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.

Use of our contact form
It is possible to contact us via the e-mail address provided. In this case, the personal data of the user transmitted with the e-mail will be stored. The data will not be passed on to third parties in this context. The legal basis for the processing of this data is Art. 6 para. 1 lit. f GDPR. If the purpose of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR on the basis of your voluntary consent. The personal data collected by us for the use of the contact form will be automatically deleted after you have completed your request.

Newsletter
We offer you the opportunity to subscribe to our newsletter on our website. With this newsletter we inform you about our offers at regular intervals. In order to receive our newsletter, you need a valid e-mail address. We will check the e-mail address you have entered to see whether you are actually the owner of the e-mail address provided or whether the owner is authorised to receive the newsletter.

With your registration to our newsletter we will save your IP address and the date and time of your registration. In the event that a third party misuses your e-mail address and subscribes to our newsletter without your knowledge, this serves as security on our part. Further data will not be collected by us. The data collected in this way will only be used in regard to our newsletter. It will not be passed on to third parties. A comparison of the data collected in this way with data that may be collected by other components of our site also does not take place. You can cancel your subscription to this newsletter at any time. Details can be found in the confirmation e-mail and in each individual newsletter.

Newsletter tracking
Our newsletters contain so-called tracking pixels. A pixel-code is a miniature graphic embedded in emails sent in HTML format for log file recording and analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. The embedded pixel-code allows us to determine if and when an email was opened by an individual and which links in the email were accessed by that individual.

Such personal data collected via the tracking pixels contained in the newsletters are stored and evaluated by us in order to optimise the newsletter dispatch and to adapt the content of future newsletters even better to the interests of the person concerned. This personal data will not be passed on to third parties. Affected persons are entitled at any time to revoke the relevant separate declaration of consent submitted via the double opt-in procedure. After a revocation these personal data will be deleted by the person responsible for the processing. A deregistration from the receipt of our newsletter will always be interpreted as a revocation.

Disclosure of data
Your personal data will not be transferred to third parties for purposes other than those listed below. We will only disclose your personal data to third parties if you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, the disclosure in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR for the assertion, exercise or defense of legal claims is necessary and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data, in the event that for the disclosure in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR for the disclosure in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR for the assertion, exercise or defense of legal claims. 6 para. 1 sentence 1 lit. c GDPR, as well as this is legally permissible and necessary according to Art. 6 para. 1 sentence 1 lit. b GDPR for the execution of contractual relationships with you.

Usage of cookies
We use cookies to operate our website in order to make it more user-friendly. Some elements of our website require that the accessing browser can be identified even after the site is changed.

Cookies are small files that make it possible to save specific information relating to the device on the user’s access device (PC, smartphone, etc.). They serve the user-friendliness of websites and thus the occupants (e.g. storage of login data). On the other hand, they are used to collect statistical data on the use of the website enabling them to be analysed with the aim of improving the service. Visitors can influence the use of cookies. Most browsers have an option that limit or completely prevents the storage of cookies. However, it should be mentioned that utilization and in particular user comfort are restricted without cookies.The user data collected in this way is pseudonymised by technical procedures. It is therefore no longer possible to assign the data to the accessing user. The data are not stored together with other person-related data of the users.The legal basis for the handling of person-related data with the use of cookies is Article 6 Paragraph 1 Letter F GDPR. The legal basis for the processing of personal data using technically necessary cookies is Article 6 Paragraph 1 Letter F GDPR. The legal basis for the processing of personal data using cookies for analysis purposes is Article 6 Paragraph 1 Letter A GDPR, if the user has given his authorisation.

The purpose of using technologically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized also after a site change.

The analysis cookies are used for the purpose of optimizing the quality of our website and its content. Through the analysis cookies, we are able to gain information on how the website is used and can thus are able to continuously optimise our services.

Our reasonable interest in the processing of personal data in accordance with Article 6 Paragraph 1 Letter F GDPR also stems in this regard.

Third-Party Suppliers

The responsible for processing has to integrate contents, services and performances of other providers on the website. These include, for example, maps provided by Google Maps, videos from YouTube and graphics and images from other websites. The transmission of the IP address is absolutely necessary so that these data can be accessed and displayed in the user’s browser. The providers ( in the following referred to as “third party suppliers”) thus perceive the IP address of the respective user.

Even though we make every effort to only use third-party providers who only need the IP address in order to deliver content, we have no influence on whether the IP address may be recorded. In this case, this process serves statistical purposes, among others. If we are aware that the IP address is being stored, we will inform our users accordingly.

Use and application of Google Analytics (with anonymization function)
The data processor has integrated the Google Analytics component (with anonymisation function) on this website. Google Analytics is a web analysis service. Web analysis is the elicitation, gathering and evaluation of data on the behaviour of visitors of websites. A web analysis service collects data on, among other things, from which website the visitor accessed a website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. A web analysis is mainly used to optimise a website and to analyse the costs and benefits of Internet advertising.

The operating company of the Google Analytics component is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The responsible for the processing of data uses the addition “_gat._anonymizeIp” for the web analysis via Google Analytics. This addition is used by Google to shorten and anonymise the IP address of the Internet connection of the person involved if the access to our Internet pages takes place from a member state of the European Union or from another contracting state of the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyse the influx of visitors viewing our website. Google uses the data and information gathered, among other things, to analyze the use of our website, to prepare online reports for us showing the activities on our website and to provide other services in connection with the use of our website.

Google Analytics places a cookie on the information technology system of the person concerned. What cookies are has already been explained above. When the cookie is set, Google is able to analyse the use of our website. Each time you access one of the individual pages of this website, which is operated by the data controller and on which a Google Analytics component has been integrated, the Internet browser on the information technology system of the person concerned is automatically instructed by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. Within the scope of this technical procedure, Google obtains information about personal data, such as the IP address of the person concerned, which Google uses, among other things, to trace the origin of visitors and clicks and as a result to enable commission settlements.

The cookie is used to store personal information such as the access time, the location from which the access originated and the frequency of visits to our website by referring persons. Each time a user visits our website, this personal data, including the IP address of the Internet connection used by the visitor, is transferred to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may share this personal data collected through the technical process with third parties.

The affected person can prevent the setting of cookies by our website, as described above, at any time by setting the Internet browser used accordingly and thus permanently disagree with the use of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the person affected. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

Furthermore, it is possible for the person concerned to disagree with and prevent the collection of data generated by Google Analytics in connection with the use of this website and the processing of this data by Google. For this purpose, the person concerned must download and install a browser add-on under the link https://tools.google.com/dlpage/gaoptout . This browser add-on informs Google Analytics via JavaScript that no data and information on visits to Internet pages may be transmitted to Google Analytics. The installation of the browser add-on is considered a disagreement by Google. If the data subject’s information technology system is later deleted, formatted or reinstalled, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the person concerned or by another person within his/her sphere of control, the browser add-on may be reinstalled or reactivated.

For more information and to review Google’s current privacy policies, please visit https://www.google.de/intl/de/policies/privacy/ and http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail at this link, https://www.google.com/intl/de_de/analytics/

Application of YouTube
We have integrated components from YouTube on our website. YouTube is an internet video portal that allows video publishers to post video clips and other users to view, rate and comment on them at no cost. YouTube allows the publication of all types of videos, which is why complete film and television programmes, but also music videos, trailers or videos made by users themselves can be accessed via the Internet portal.

YouTube is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Each time a YouTube component (YouTube video) has been integrated into one of the individual pages of this website, which is managed by the data controller, the Internet browser on the information technology system of the person concerned is automatically instructed by the respective YouTube component to download a representation of the YouTube component from YouTube. Further information on YouTube can be found at https://www.youtube.com/yt/about/de/ Within the scope of this technical procedure, YouTube and Google gain knowledge of which specific subpage of our website is visited by the person concerned.

If the person affected is logged in to YouTube at the same time, YouTube recognizes which specific subpage of our website the visitor is accessing by accessing a subpage containing a YouTube video. This information is collected by YouTube and Google and assigned to the corresponding YouTube account of the person concerned.

YouTube and Google always receive information via the YouTube component that the person concerned has visited our website if the person concerned is logged on to YouTube at the same time as accessing our website; this occurs regardless of whether the person concerned clicks on a YouTube video or not. If the data subject does not want YouTube and Google to receive such information, they can prevent the the data from being transmitted by logging out of their YouTube account before visiting our website.

The data protection regulations published by YouTube, which are available at https://www.google.de/intl/de/policies/privacy/, provide information about the gathering, processing and use of personal data by YouTube and Google.

Newsletter via MailChimp
Regarding the utilisation of your personal data to receive our newsletter, you will be asked for your consent at the specified point as follows:

“I have read and understood the privacy policy, in particular I agree that the data processing will be carried out by a third party service in the USA”.

We inform you about our offers through the newsletter at regular intervals. In order to receive our newsletter, you need a valid e-mail address. We will check the e-mail address you have entered to see whether you are actually the owner of the e-mail address provided or whether the owner is authorised to receive the newsletter. When you subscribe to our newsletter, we will store your IP address along with the date and time of your subscription. This serves as security for us in the scenario that a third party misuses your e-mail address and subscribes to our newsletter without your knowledge.

A comparison of the data collected in this way with data that may be collected by other components of our site also does not take place.

We use the component MailChimp to send our newsletter. MailChimp is a service provided by The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA. The information stored about you when you subscribe to our newsletter (e-mail address, name, IP address, date and time of your subscription) will be transferred to a server of The Rocket Science Group in the USA and stored there in accordance with the “EU-US Privacy Shield”. Further information on data protection at MailChimp can be found at: http://mailchimp.com/legal/privacy/

Further information on the “EU-US Privacy Shield” can be found at:

https://www.bfdi.bund.de/DE/Europa_International/International/Artikel/EU-US_PrivacyShield_Daten%C3%BCbermittlungenUSA.html?nn=5217040

http://ec.europa.eu/justice/data-protection/international-transfers/eu-us-privacy-shield/index_en.htm

You can cancel / revoke your subscription to this newsletter and thus your consent to the storage of your data for the future at any time . Details can be found in the confirmation e-mail as well as in each individual newsletter.

Implementation of Jetpack with wordpress.com STATS
We employ the Jetpack component from Automattic Inc., 132 Hawthorne Street, San Francisco, CA 94107, United States of America, using the technology of Quantcast Corp., 201 Third Street, 2nd Floor, San Francisco, CA 94103, United States of America. Each time you visit our site, cookies are used to collect web analysis data and store it in the United States. Cookies are small text files that are stored locally in the memory of the visitor’s Internet browser in order to enable the recognition of the visitor’s Internet browser. The IP address is anonymized immediately after processing however, before it is stored. You can prevent the installation of cookies by setting your browser software accordingly or delete cookies that have already been saved; however, we would like to point out that in this case you may not be able to use all the functions of our website to the full extent.

The gathering and use of data by the Jetpack component can be revoked for the future if you set an opt-out cookie in your browser via the http://www.quantcast.com/opt-out site. If you delete all cookies from your browser, the process must be repeated.

Data protection for applications and in the application process
We collect and process the personal data of applicants for the purpose of completing the application process. The processing can also be performed electronically. This is especially the case if an applicant submits corresponding application documents to us electronically, for example by e-mail or via a web template on the website. If we are entering into an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in consideration of the statutory provisions. If we do not enter into an employment contract with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, unless there are other reasonable interests on our part to prevent deletion. Other legitimate interests in this sense include, for example, a proof obligation in procedures under the General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz – AGG).