Privacy

Introduction and terms

1. introduction

By operating our ukxxxpass.xxx website (hereinafter referred to as "website") we process personal data. We treat this data confidentially and process it in accordance with the applicable laws - in particular the German Data Protection Regulation (DSGVO) and the German Federal Data Protection Act (BDSG). With our data protection regulations, we want to inform you which personal data we collect from you, for what purposes and on what legal basis we use it and, if applicable, to whom we disclose it. In addition, we will explain to you which rights you have to protect and enforce your data protection.

2. terms

Our data protection regulations contain technical terms that are found in the DSGVO and the BDSG. For your better understanding, we would like to explain these terms in simple terms in advance:

2.1 Personal data

"Personal data" is any information relating to an identified or identifiable person (Art. 4 No. 1 DSGVO). Information of an identified person can be, for example, the name or the e-mail address. However, personal data is also data for which the identity is not immediately apparent, but can be determined by combining one's own information or that of others and thus finding out who it is. A person becomes identifiable, for example, by providing his or her address or bank details, date of birth or user name, IP addresses and/or location data. Relevant here is all information that in any way allows a conclusion to be drawn about a person.

2.2 Processing

Article 4 No. 2 of the GDPR defines "processing" as any operation relating to personal data. This applies in particular to the collection, recording, organisation, arrangement, storage, adaptation or alteration, reading out, querying, use, disclosure, transmission, dissemination or any other form of making available, comparison or linking, restriction, erasure or destruction of personal data.

Responsible company and data protection officer

3. person responsible

The person responsible for data processing is:

 
United Content BV / AG
Broekseweg 8
3291LA Strijen
The Netherlands
Tel.: +49 (0) 30 400 544 99

Chamber of Commerce: KVK 73972673
VAT Number: NL859729011B01
Telephone number: +31 (0)6 5395 0413
Email: support@globalpaysites.com 

4. data protection officer

We have appointed an internal data protection officer for our company. You can reach him under support@globalpaysites.com 

Processing frame

5. processing frame: Website

Within the framework of the website with the URL https://ukxxxpass.xxx, we process the personal data of you listed in detail below under points 6 to 18. We only process data that you actively provide on our website (e.g. by filling in forms) or that you automatically provide when using our services.
Your data will be processed exclusively by us and will not be sold, lent or passed on to third parties. If we use the help of external service providers to process your personal data, this is done within the framework of so-called order processing, in which we as the client are authorised to issue instructions to our contractors. For the operation of our website, we use external service providers for hosting, as well as for maintenance, care and further development. If further external service providers are used for individual processing operations listed in sections 6 to 18, they will be named there. Insofar as we decide jointly with others on the purposes and means of processing personal data, this establishes a so-called joint responsibility. In this case, we have entered into an agreement with the other responsible party, in which it was determined who fulfils which obligation according to the GDPR, in particular with regard to the exercise of the rights of the data subjects and who fulfils which information obligations. We will inform you about the content of this agreement and the contact details of a central contact point at the appropriate place. Data transfer to third countries does not take place and is not planned.  We will inform you about exceptions to this principle in the processing operations described below.

The processing in detail

6 Provision of the website and server log files

6.1 Description of the processing

Each time you access the website, we automatically collect information that your browser transmits to our server (so-called log files). This involves the following data:
- your IP address
- the browser software you use, as well as its version and language
- the operating system you are using
- the website from which you came to our website (so-called "referrer")
- the sub-pages you have accessed on our website
- the date and time of your visit to our website.
These are also stored in the so-called log files of our system. The temporary storage of your IP address by the system is necessary in order to be able to deliver our website to the end device of a user. For this purpose, the user's IP address must remain stored for the duration of the session. However, your IP address is not recorded in our log files.

6.2 Purpose

The processing is carried out to enable the website to be called up and to ensure its stability and security. Furthermore, the processing serves the statistical evaluation and improvement of our online offer.

6.3 Legal basis

The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f DSGVO). Our legitimate interest lies in the purpose named in section 6.2.

6.4 Storage period

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. The log files are deleted after 14 days. 

7 Registration

7.1 Description of processing

Individual functions and offers of our website are only available to you as a registered user. By registering, you enter into a contract of use with us for which a fee is charged. By registering, you receive your own user account on our website. You can register by filling out the registration form on the ukxxxpass.xxx  website and sending it to us electronically. To register, you must enter your first name, last name, date of birth, email address, a user name of your choice, a password of your choice, as well as the country, the tariff or the desired membership and the payment data. This includes the IBAN or alternatively credit card data. By clicking the button "Order with costs" you submit the form to us.  You will then receive a registration confirmation to the e-mail address you provided during registration.

7.2 Purpose

The processing is carried out in order to provide you with the functions of our website for registered users.

7.3 Legal basis

The processing is necessary for the conclusion and fulfilment of the user contract (Art. 6 para. 1 lit. b DSGVO). Without providing your personal data as part of the registration process, we cannot provide our contractually owed services.

7.4 Storage period

Your stored personal data will be pseudonymised 50 days after expiry of your membership. If you wish to reactivate your customer account, you can do so by entering your user name and password 50 days after termination. After 50 days your data will be completely deleted. 

8. purchases

8.1 Description of the processing

As a registered user, you can purchase "coin credits" on our website. In the course of your order process, we process your personal data. You must fill in the fields indicated in our online shop. Otherwise, it is not possible for us to conclude a contract with you.  When shopping on our website, you can also select one of the payment methods offered (credit card or direct debit) to settle the purchase price.  When you complete your order, the data required for the payment will be passed on to the respective payment service provider.

8.2 Purpose

The processing is carried out for the conclusion and execution of contracts.

8.3 Legal basis

The processing is necessary for the conclusion and fulfilment of purchase contracts (Art. 6 para. 1 lit. b DSGVO).

8.4 Storage period

Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years. However, we restrict processing after two years. This means that your data will then only be stored separately for the purpose of complying with the statutory retention periods and will be deleted immediately upon their expiry. 

8.5 Recipients

In order to process your payment, personal data will be passed on to one of the external payment service providers listed below and selected by you in the course of your purchase:

• Credit card, direct debit: ConCardis GmbH / Helfmann-Park 7 / 65760 Eschborn / Germany

• Sofortüberweisung: Klarna GmbH / Theresienhöhe 12 / 80339 Munich / Germany

  • For further information on data protection with Sofortüberweisung, please visit: https://www.sofort.com/payment/wizard/getCmsContent/data_protection/DE/0/de

• Credit card: American Express Company / Theodor-Heuss-Allee 112 / 60486 Frankfurt am Main / Germany

• Direct debit: Computop Wirtschaftsinformatik GmbH / Schwarzenbergstraße 4 / 96050 Bamberg / Germany

• Credit institutions:

  • Commerzbank AG / Frankfurt am Main

  • Nord-Ostsee Sparkasse / Institution under public law / Südergraben 8 - 14 / 24937 Flensburg 

9. contacting by e-mail

9.1 Description of processing

You can contact us via the e-mail addresses provided on the website. In this case, the personal data transmitted with the e-mail will be processed by us.
Please note that for technical reasons we are currently unable to offer you secure, encrypted or signed transmission of your e-mails to us. One of the disadvantages of communicating by e-mail is that unauthorised persons can intercept unencrypted e-mails. They can read and change your e-mails and manipulate the sender of an e-mail. This is accompanied by a breach of confidentiality, integrity and authenticity. Therefore, please send confidential information to us by post to the address given above.

9.2 Purpose

By providing e-mail addresses on our website, we want to offer you a convenient way to contact us. The data transmitted with and in your e-mail will be used exclusively for the purpose of processing and responding to your request.

9.3 Legal basis

The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6(1)(f) DSGVO). Our legitimate interest lies in the purpose named in section 9.2. It is up to you whether you want to communicate with us via e-mail. If the e-mail contact is aimed at the conclusion or fulfilment of a contract, the data processing is carried out for the fulfilment of the contract (Art. 6 para. 1 lit. b DSGVO).

9.4 Storage period

We delete the data as soon as it is no longer required to achieve the purpose for which it was collected. This is usually the case when the respective communication with you has ended. The communication is terminated when the circumstances indicate that your concern has been conclusively clarified. If legal retention periods prevent deletion, the data will be deleted immediately after the legal retention period has expired.

10 Cookies

10.1 Description of processing

Our website uses cookies. Cookies are small text files that are stored on the user's terminal device when visiting a website. Cookies contain information that enables the recognition of a terminal device and possibly certain functions of a website. In most cases, we only use so-called "session cookies". These are automatically deleted when you end your internet session and close the browser. Other cookies remain stored on your terminal device for a longer period of time.
We use the following cookies on our website:
This website uses cookies. We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you've provided to them or that they've collected from your use of their services. 
Cookies are small text files that can be used by websites to make a user's experience more efficient.
The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.
This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.
You can at any time change or withdraw your consent from the Cookie Declaration on our website.
Learn more about who we are, how you can contact us and how we process personal data in our Privacy Policy.
Please state your consent ID and date when you contact us regarding your consent. 

Your current state: Allow all. 
Your consent ID: 2a5ziRgtfYAzMN69JSKgJRiTsjWMNIGCc43pOH4uwMyy0HPJ4aecoQ==
Your consent date: Tuesday, 6 July 2021, 16:13:12 CET
Change your consent | Revoke your consent
Cookie statement was last updated by Cookiebot on 03 Dec 2021: 
[...] 

10.2 Purpose

We use cookies to make our website more user-friendly and to provide the functions described in section 10.1.

10.3 Legal basis

The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6(1)(f) DSGVO). Our legitimate interest lies in the purpose named in section 10.2. If you are asked for consent in the context of a cookie banner or cookie consent tool, the legal basis is Art. 6 (1) a DSGVO. Such consent is voluntary.

10.4 Storage period, revocation of consent

Cookies are automatically deleted at the end of a session or at the end of the specified storage period. Since cookies are stored on your terminal device, you as a user also have full control over the use of cookies. You can deactivate or restrict the transfer of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, individual functions of our website cannot be used or can only be used to a limited extent. If we obtain consent for the use of cookies via a cookie banner or a cookie consent tool, you can revoke this consent at any time within the settings of the cookie banner or the cookie consent tool with effect for the future.

11 Age verification

11.1 Description of the processing

In accordance with the provisions of the Youth Protection Act (JuSchG) and the Interstate Treaty on the Protection of Minors in the Media (JMStV), we are obliged to make our offers available exclusively to users of legal age within the framework of a closed user group. To access this closed user group, you must go through a multi-stage age verification procedure. The service provider we use for this purpose acts as a commissioned processor bound by instructions in connection with the age verification, with whom we have concluded corresponding contracts. We explain the procedure of our service provider below:
Our age verification via the service "VerifyMyAge" is offered by the service provider KYC AVC UK LTD / 206 Brickfields Business Centre / 37 Cremer Street / London / E2 8HD / England (United Kingdom). After your registration and the associated payment process, you will be asked on the ukxxxpass.xxx website to carry out an "age verification". You will be redirected to the "VerifyMyAge" website. If you already have a "VerifyMyAge" account or are registered with "VerifyMyAge", you can log in with your existing customer data. If you are using "VerifyMyAge" for the first time, you will be guided through an automated age verification process carried out in real time online via webcam or Handycam (so-called "ID scan face match"). For this purpose, you must first grant the "VerifyMyAge" website access to your webcam or mobile phone camera. A facial image (so-called "selfie video") will then be taken of you before you are asked to hold a valid official identification document (ID card, passport, etc.) in the camera you are using and to state the country of issue of the document. During this process, "VerifyMyAge" will take screenshots of your ID document and compare them with your previously created "selfie video". If it is successfully determined that you are of age, we will activate the content and you will be redirected back to our website. Before this, you can also create a "VerifyMyAge" account in order to register for further age-verified offers or websites through "VerifyMyAge". If you do not wish to do this, simply select "Skip account creation". 
The personal data collected as part of the process described above (facial image, data and image of your identification document, any information you may need to provide to create a "VerifyMyAge" account) will be processed by or forwarded to our aforementioned service provider.
Further data protection information on the aforementioned service provider can be found at https://verifymyage.de/privacy and https://verifymyage.de/adult-privacy.

11.2 Purpose

The processing of your personal data required for age verification is carried out in order to fulfil the legal obligation for age verification for content harmful to minors in accordance with the JuSchG and the JMStV.

11.3 Legal basis

The processing is necessary for the fulfilment of a legal obligation, Art. 6 para. 1 p. 1 lit. c) DSGVO in conjunction with § 4 para. 2 p. 1 no. 1 and p. 2 JMStV.

11.4 Storage period

Your stored personal data will be pseudonymised 50 days after expiry of your membership. 

11.5 Recipients and transmission to third countries

Through the use of "VerifyMyAge", personal data may be transmitted to KYC AVC UK LTD. KYC AVC UK LTD also processes your personal data in England or the United Kingdom (UK). 

12 Google Web Fonts

12.1 Description of the processing

Our website uses "Google Webfonts", a font substitution service provided by Google Ireland Limited / Gordon House / Barrow Street / Dublin 4 / Ireland (hereinafter referred to as "Google"). With "Google Webfonts", the standard fonts of your terminal device are replaced by fonts from Google's catalogue when displaying our website. If your browser disables the integration of "Google Web Fonts", the text of our website will be displayed in the standard fonts of your end device. The Google fonts are loaded directly from a Google server. In order for this to happen, your browser sends a request to a Google server. As a result, your IP address may also be transmitted to Google in connection with the address of our website. "Google Webfonts" does not, however, store any cookies on your end device. According to Google, data processed as part of the "Google Web Fonts" service is transferred to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. They are not associated with data that may be related to the use of other Google services such as the search engine of the same name or Gmail. Further information on data protection at "Google Webfonts" can be found at https://developers.google.com/fonts/faq?hl=de-DE&csw=1 . General information on data protection at Google is available at https://policies.google.com/privacy?hl=de-DE.

12.2 Purpose

The processing takes place in order to be able to display the text of our website in a more readable and aesthetically pleasing manner.

12.3 Legal basis

The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6(1)(f) DSGVO). Our legitimate interest lies in the purpose named in section 12.2.

12.4 Recipients and transmission to third countries

Through the use of "Google Web Fonts", personal data may be transmitted to Google. Google also processes your personal data in the USA. 

13 Google Analytics

13.1 Description of processing

Our website uses "Google Analytics", a web analytics service provided by Google Ireland Limited / Gordon House / Barrow Street / Dublin 4 / Ireland (hereinafter referred to as "Google"). "Google Analytics" uses cookies (see section 10), which enable an analysis of your use of our offer. We use "Google Analytics" in the offered version "Universal Analytics", which allows this analysis across devices by assigning the data to a pseudonymous user ID. The information generated by the cookie is usually transferred to a Google server in the USA and stored there. However, we use "Google Analytics" exclusively with IP anonymisation. This means that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.  The IP address transmitted by your browser as part of "Google Analytics" will not be merged with other Google data. The statistics generated by "Google Analytics" record in particular how many users visit our website, from which country or location the access takes place, which sub-pages are called up and via which links or search terms visitors reach our website. The terms of use of "Google Analytics" and an overview of data protection at "Google Analytics" can be found at https://marketingplatform.google.com/about/analytics/terms/de/ . Google's privacy policy can be viewed at https://policies.google.com/privacy?hl=de-DE.

13.3 Purpose

The processing is carried out in order to be able to evaluate the use of our website. The information obtained in this way serves to improve our online presence and to design it in line with requirements.

13.3 Legal basis

The processing is carried out on the basis of consent in accordance with Art. 6 Para. 1 lit. a DSGVO. This is obtained by us via the cookie consent tool (see section 10). Such consent is voluntary. 

13.4 Storage period and right of objection, revocation of consent

We have explained the storage period and your control and setting options for cookies in section 10. You can revoke your consent with regard to "Google Analytics" at any time in the settings of the cookie consent tool with effect for the future.  Alternatively, you can object to the data processing by "Google Analytics" at any time by downloading and installing the browser add-on provided by Google at https://tools.google.com/dlpage/gaoptout?hl=de. The analysis data processed and stored with "Google Analytics" will be automatically deleted by us after 14 months. 

13.5 Recipients and transmission to third countries

"Google Analytics" is jointly responsible for data processing on our behalf according to the German data protection supervisory authorities ("Data Protection Conference"). Against this background, we have also concluded the "Google Measurement Controller-Controller Data Protection Terms" with Google.  Google also processes your personal data in the USA. 

14 Google Tag Manager

Our website uses the "Google Tag Manager", a service of the company Google LLC / 1600 Amphitheatre Parkway / Mountain View / California 94043 / USA (hereinafter referred to as "Google"). No personal data is collected via the "Google Tag Manager" and no cookies are set. This service only enables us to integrate and manage tags on our website. Tags are small code elements on our website that are helpful to measure traffic and visitor behaviour based on them with other tools, to record the impact of online advertising and social channels, to use remarketing and targeting, to test and optimise the website. For more information on Google Tag Manager, please visit https://marketingplatform.google.com/intl/de/about/analytics/tag-manager/use-policy/ . 

15 Google Ads Conversion and Google Remarketing

15.1 Description of the processing

Our website uses conversion tracking of the advertising service "Google Ads", which is operated by Google LLC / 1600 Amphitheatre Parkway / Mountain View / California 94043 / USA (hereinafter referred to as "Google"). With the help of "Google Ads", we can place advertisements on external websites in order to draw your attention to our offers there. In addition, the service enables us to determine the reach and success of individual advertising measures. Our advertisements are delivered by Google via so-called "ad servers". For this purpose, Google uses so-called "Ad Server" cookies, which measure certain parameters for measuring success, such as the display of the ads or clicks by users. If you access our website via a Google ad, Google Ads will store a cookie in your terminal device (see section 10). According to Google, these cookies are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement ("frequency"), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie. The cookies enable Google to recognise your internet browser. If you visit websites of an Ads customer and the cookie stored on your end device has not yet expired, Google and the customer can recognise that the user clicked on the ad and was redirected to our website. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked via the websites of Ads customers. We ourselves do not process any personal data with our "Google Ads" advertising measures. Google only provides us with statistical evaluations. These evaluations enable us to recognise which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information. When you visit our website, a connection is therefore established to the Google servers. We have no influence on the scope and further use of the data collected by Google through the use of "Google Ads" Conversion and therefore inform you according to our state of knowledge: Through the integration of "Google Ads" Conversion, Google receives the information which subpage of our website you have called up or which ad of ours you have clicked on. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that Google will obtain and store your IP address.
Our website also uses the "Google Remarketing" advertising service, which is also operated by Google. Google Remarketing" enables us to address you again with advertisements for our offers on other websites that have joined the Google advertising network after you have visited our website. Google also uses cookies for this purpose, which are stored in your browser and through which your usage behaviour is recorded and evaluated by Google when you visit various websites. This enables Google to determine your previous visit to our website and to show you advertisements for our offers on other websites. According to its own statements, Google does not combine the data collected in the course of remarketing with your personal data that may be stored by Google. In particular, according to Google, pseudonymisation is used in remarketing.
Further information on data protection at Google can be found at https://policies.google.com/privacy?hl=de and https://services.google.com/sitestats/de.html.

15.2 Purpose

The processing takes place in order to carry out targeted online advertising for our own offers and to be able to evaluate its effectiveness and reach.

15.3 Legal basis

The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f DSGVO). Our legitimate interest lies in the purpose named in section 15.2. If you are asked for consent by us in the context of a cookie banner or cookie consent tool, the legal basis is Art. 6 (1) lit. a DSGVO. Such consent is voluntary.

15.4 Storage period and right of objection, revocation of consent

We have explained the storage period and your control and setting options for cookies in section 10. You can also object to data processing by "Google Ads Conversion" and "Google Remarketing" at any time via the following website: https://adssettings.google.com/authenticated?hl=de . If we obtain consent for the use of "Google Ads Conversion" and "Google Remarketing" via a cookie banner or a cookie consent tool, you can revoke this consent at any time within the settings of the cookie banner or cookie consent tool with effect for the future. 

15.5 Recipients and transmission to third countries

Through the integration of "Google Ads Conversion" and "Google Remarketing", personal data may be transmitted to Google. Google also processes your personal data in the USA. If standard contractual clauses are available, these will apply as the basis for the transfer of personal data from the European Union to the USA. 

16 Affiliate marketing

16.1 Description of the processing

We work with so-called affiliate networks, through which external website operators receive a commission if a customer recruited by them performs certain actions on our pages (e.g. a registration or purchases). We currently use: Adcell, Superclix, Vitrado and CashDorado.com.  The partners include so-called affiliate links or other references like an advertisement. If users follow these links or subsequently make use of our offers, the third-party providers receive a commission from us. In order to be able to track whether users have taken advantage of the offers of an affiliate link used by us, it is necessary for the respective third-party providers to know that the users have followed an affiliate link used within our online offer. The aforementioned providers use cookies for this purpose, which we inform you about in section 10. The cookies are used for the allocation to the respective third party provider. 

16.2 Purpose

The assignment of the affiliate links to the respective business transactions or to other actions (e.g. purchases) serves the sole purpose of commission accounting and is automatically cancelled after 60 days at the latest.  For the purposes of the aforementioned assignment of the affiliate links, the affiliate links may be supplemented by certain values which are a component of the link or may be stored elsewhere, e.g. in a cookie. The values may include in particular the source website ("referrer"), the time, an online identifier of the operator of the website on which the affiliate link was located, an online identifier of the respective offer, the type of link used, the type of offer and an online identifier of the user. The processing also takes place in order to carry out targeted online advertising for our own offers and to be able to evaluate its effectiveness and reach.

16.3 Legal basis

The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 (1) (f) DSGVO). Our legitimate interest lies in the purpose named in section 16.2. The processing is based on our overriding legitimate economic interest pursuant to Art. 6 (1) sentence 1 lit. f) DSGVO. Our legitimate interest follows from the purpose described in clause 16.2. It is not otherwise possible for us to settle commission payments. It is also within the reasonable expectations of users that advertising-financed offers must be billed and that technical precautions, such as the setting of a cookie, are necessary on websites for this purpose. Finally, you have the possibility to intervene, as already explained in section 10. If we ask users for their consent to the use of cookies before setting them, the legal basis for the processing of data is consent.

16.4 Storage period and right of objection

We have explained the storage period and your control and setting options for cookies in section 10. 

16.5 Recipients and transmission to third countries

Through the integration of Adcell, Superclix, Vitrado and CashDorado.com, personal data may also be transmitted to servers in the USA. If standard contractual clauses exist, these shall apply as the basis for the transfer of personal data from the European Union to the USA.

17 Video JS Player and Wowza

17.1 Description of the processing

Our website uses the service "Video JS Player", an HTML5 video player (hereinafter referred to as "Video JS Player") and the streaming software "Wowza".
We use the players by embedding and outputting videos in the member area of ukxxxpass.xxx by means of one of the players so that they can be played on our website. The video files are stored on our server, but are displayed within our website via a player plugin. Each time you visit a sub-page of our members' area that offers one or more videos, a direct connection is established between your browser and a server of the provider in the USA in order to load the player plug-in, which in turn then outputs the correct video from our server to our website. In the process, information about your visit, such as your IP address, your browser, the terminal device you are using, your operating system, the time and duration of the video viewing and whether you watched the video in full screen, is transmitted to the service provider. Through interactions with the plugins, e.g. clicking the start button, this information is also passed on to the service provider and stored there. "Video JS Player" also uses cookies for statistical purposes (see section 10). Further information on data protection at "Video JS Player" can be found at https://www.brightcove.com/en/legal/privacy/ . Further information on data protection at "Wowza" can be found at https://www.wowza.com/legal/privacy .

17.2 Purpose

The processing is done in order to show you videos on our website and to improve the image quality and performance of the videos.

17.3 Legal basis

The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6(1)(f) DSGVO). Our legitimate interest lies in the purpose named in section 18.2.

17.4 Recipients and transfer to third countries

"Video JS Player" is offered by Brightcove, Inc / 290 Congress Street / Boston / Massachusetts 02210 / USA.
"Wowza" is offered by Wowza Media Systems LLC / 523 Park Point Drive / Suite 300 / Golden / Colorado 80401 / USA.
Both service providers work for us within the framework of order processing. By integrating the "Video JS Players", personal data may be transmitted to the aforementioned service providers as described in section 18.1. Brightcove, Inc. and Wowza Media Systems LLC also process your personal data in the USA. Where standard contractual clauses are in place, these will apply as the basis for the transfer of personal data from the European Union to the USA. 

Security measures

18. security measures

To protect your personal data from unauthorised access, we have provided our website with an SSL or TLS certificate. SSL stands for "Secure Sockets Layer" and TLS for "Transport Layer Security" and encrypts the communication of data between a website and the user's end device. You can recognise active SSL or TLS encryption by a small lock logo that is displayed on the far left of the browser's address bar. 

Your rights

19. data subject rights

With regard to the data processing by our company described above, you are entitled to the following data subject rights:

19.1 Information (Art. 15 DSGVO).

You have the right to request confirmation from us as to whether we are processing personal data relating to you. If this is the case, you have a right to information about this personal data and to the further information listed in Art. 15 DSGVO under the conditions specified in Art. 15 DSGVO.

19.2 Correction (Art. 16 DSGVO)

You have the right to request that we correct any inaccurate personal data relating to you without undue delay and, if necessary, to complete any incomplete personal data.

19.3 Deletion (Art. 17 DSGVO)

You have the right to request that we delete personal data relating to you without undue delay, provided that one of the reasons listed in detail in Article 17 of the GDPR applies, e.g. if your data is no longer required for the purposes pursued by us.

19.4 Restriction of data processing (Art. 18 DSGVO)

You have the right to request that we restrict processing if one of the conditions listed in Article 18 of the GDPR applies, e.g. if you dispute the accuracy of your personal data, data processing will be restricted for the period of time that allows us to verify the accuracy of your data.

19.5 Data portability (Art. 20 GDPR)

You have the right, under the conditions set out in Art. 20 DSGVO, to request the return of the data concerning you in a structured, common and machine-readable format.

19.6 Withdrawal of consent (Art. 7(3) of the GDPR)

You have the right to revoke your consent at any time in the case of processing based on consent. The revocation applies from the time it is asserted. In other words, it is effective for the future. The revocation of consent does not therefore render the processing unlawful with retroactive effect.

19.7 Complaint (Art. 77 GDPR)

If you believe that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority. You can exercise this right with a supervisory authority in the EU Member State of your residence, workplace or the place of the alleged infringement.

19.8 Prohibition of automated decisions / profiling (Art. 22 GDPR)

Decisions which have legal effects concerning you or which significantly affect you must not be based solely on automated processing of personal data, including profiling. We inform you that we do not use automated decision-making, including profiling, with regard to your personal data. 

19.9 Objection (Art. 21 GDPR)

If we process your personal data on the basis of Art. 6(1)(f) DSGVO (to protect overriding legitimate interests), you have the right to object to this under the conditions set out in Art. 21 DSGVO. However, this only applies if there are reasons arising from your particular situation. After an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms. We also do not have to stop processing if it serves the assertion, exercise or defence of legal claims. In any case - also irrespective of a specific situation - you have the right to object to the processing of your personal data for direct marketing at any time.

Updated: 13.01.2022