1) Information on the Collection of Personal Data and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data includes all data that can personally identify you.
1.2 The controller responsible for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is Jonas Michalzik, Eleven Pictures / Jonas Michalzik, Leihgesterner Weg, 44, 35392 Gießen, Germany, Email: jonasmichalzik@googlemail.com. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.
2) Data Collection When Visiting Our Website
When using our website purely for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary to display the website to you:
Our visited website
Date and time at the time of access
Amount of data sent in bytes
Source/reference from which you reached the page
Used browser
Used operating system
Used IP address (if applicable: in anonymized form)
Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.
3) Hosting
Hosting by Udemy
We use the online course system of the service provider:
Udemy, 600 Harrison Street, Third Floor, San Francisco, CA 94107, United States.
Further information on Uscreen.tv’s data protection policy can be found at the following website:
https://www.udemy.com/terms/privacy/
Any further processing on servers other than those mentioned above by Udemy only takes place within the scope disclosed below.
4) Content Delivery Network
AWS CloudFront (Amazon)
We use the Content Delivery Network ("CDN") "AWS CloudFront" provided by "Amazon" (Amazon EU S.a.r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg) on our website.
A Content Delivery Network is an online service that delivers large media files (e.g., graphics, page content, or scripts) via a network of regionally distributed and internet-connected servers. The use of Amazon’s Content Delivery Network helps us optimize the loading speeds of our website.
Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in the secure and efficient provision and improvement of the stability and functionality of our website.
Further information can be found in Amazon's privacy policy at:
https://docs.aws.amazon.com/de_de/
5) Cookies
To make visiting our website attractive and enable certain functions, we use cookies on various pages. Cookies are small text files stored on your device. Some of the cookies we use are deleted after the end of the browser session (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser the next time you visit (so-called persistent cookies). If cookies are set, they collect and process specific user information, such as browser and location data and IP address values, to an individual extent. Persistent cookies are automatically deleted after a specified duration, which may vary depending on the cookie.
Some cookies help simplify the ordering process by saving settings (e.g., remembering the contents of a virtual shopping cart for later visits). If personal data is also processed by individual cookies we use, the processing is carried out in accordance with Art. 6(1)(b) GDPR for contract fulfillment, Art. 6(1)(a) GDPR if consent has been given, or Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a user-friendly and effective design of the visit.
You can configure your browser to be informed about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies in certain cases or generally. Browser settings for cookie management differ. You can find instructions in the help menu of your browser:
Internet Explorer: https://support.microsoft.com
Firefox: https://support.mozilla.org
Chrome: https://support.google.com/chrome
Safari: https://support.apple.com
Opera: https://help.opera.com
Please note that the functionality of our website may be restricted if cookies are not accepted.
6) Contacting Us
When contacting us (e.g., via contact form or email), personal data is collected. The specific data collected in a contact form can be seen in the respective form. This data is stored and used solely for responding to your request and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry according to Art. 6(1)(f) GDPR. If your contact aims at concluding a contract, an additional legal basis for processing is Art. 6(1)(b) GDPR.
Your data will be deleted once your request has been fully processed unless legal retention obligations prevent this.
7) Data Processing for Account Creation and Contract Execution
According to Art. 6(1)(b) GDPR, personal data is collected and processed when you provide it to us for contract execution or account creation. The specific data collected can be seen in the respective entry forms. You can delete your account at any time by sending a message to the above-mentioned controller.
After contract completion or account deletion, your data will be restricted for further processing and deleted after the retention periods specified by tax and commercial laws unless you have expressly consented to further use or we are legally permitted to use it.
8) Comment Function
When using the comment function on this website, in addition to your comment, details about the time the comment was created and the username you chose will be stored and published. Additionally, your IP address will be recorded and stored for security reasons, in case a comment violates third-party rights or contains unlawful content. Your email address is required to contact you in case a third party objects to your published content as unlawful.
The legal bases for data storage are Art. 6(1)(b) and (f) GDPR. We reserve the right to delete comments if third parties report them as unlawful.
9) Use of Your Data for Direct Advertising
Newsletter Distribution via MailChimp
Our email newsletters are sent via the technical service provider The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (http://www.mailchimp.com/), to whom we transfer the data you provided when registering for the newsletter. This transfer is based on Art. 6(1)(f) GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system.
Please note that your data is generally transmitted to a MailChimp server in the USA and stored there.
MailChimp uses this information solely to send newsletters on our behalf. MailChimp does not use the data of our newsletter recipients for its own purposes or share it with third parties.
To protect your data in the USA, we have concluded a Data Processing Agreement ("Data-Processing-Agreement") with MailChimp based on the Standard Contractual Clauses of the European Commission, enabling the transfer of your personal data to MailChimp. This agreement can be reviewed at: https://mailchimp.com/legal/data-processing-addendum/.
Additionally, MailChimp is certified under the US-EU Privacy Shield Framework, ensuring compliance with EU data protection regulations.
MailChimp's privacy policy can be found here: https://mailchimp.com/legal/privacy/.
10) Data Processing for Order Fulfillment
10.1 Collaboration with Service Providers for Order Processing
To process your order, we collaborate with the following service providers who assist us in fulfilling our contractual obligations. Certain personal data is shared with these providers as described below.
Personal data collected by us is passed on to the shipping company responsible for delivering your order, as far as necessary for the delivery process. Similarly, we share your payment data with the assigned financial institution as required for payment processing. If we use payment service providers, we explicitly inform you about them below.
The legal basis for data transfer is Art. 6(1)(b) GDPR.
10.2 Use of Payment Service Providers
- PayPal
For payments via PayPal, credit card via PayPal, direct debit via PayPal, or—if offered—"purchase on account" or "installment payment" via PayPal, we share your payment data with PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal"). This transfer is made under Art. 6(1)(b) GDPR and only as necessary for payment processing.
PayPal reserves the right to conduct a credit check for specific payment methods (e.g., credit card, direct debit, purchase on account, installment payments). For this purpose, PayPal may transmit your payment data to credit agencies based on its legitimate interest (Art. 6(1)(f) GDPR) in assessing your financial solvency. The result of this credit check may influence PayPal’s decision to provide the respective payment method.
The credit report may contain probability values ("score values") based on a scientifically recognized mathematical-statistical process. Among other factors, address data is included in the score calculation.
More information on PayPal's privacy practices, including the credit agencies it uses, can be found here: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
You can object to this data processing at any time by contacting PayPal. However, PayPal may still be entitled to process your personal data if required for contractual payment processing.
- Stripe
If you select a payment method via Stripe, the payment process is carried out through Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. We transmit the necessary payment information (name, address, account number, bank code, credit card number if applicable, invoice amount, currency, and transaction number) to Stripe as part of the ordering process under Art. 6(1)(b) GDPR.
Stripe’s privacy policy is available here: https://stripe.com/de/privacy.
11) Use of Social Media Plugins
11.1 Facebook Plugins with Shariff Solution
Our website uses social plugins ("Plugins") from Facebook, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").
To enhance data protection, these buttons are integrated as HTML links rather than direct plugins. This ensures that no connection to Facebook's servers is established just by visiting our website. Clicking the button opens a new browser window leading to Facebook, where you can interact with the plugins (after logging in if necessary).
More information on data collection and processing by Facebook is available in Facebook’s privacy policy: https://www.facebook.com/policy.php.
11.2 Instagram Plugin with Shariff Solution
We also use social plugins from Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA. These are embedded similarly to the Facebook plugins to protect user data.
Instagram LLC is Privacy Shield-certified, ensuring compliance with EU data protection standards. More information can be found here: https://help.instagram.com/.
11.3 Pinterest Plugin with Shariff Solution
Our website features social plugins from Pinterest, operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. These plugins are also integrated using the Shariff solution.
For cases where data is transferred to Pinterest Inc. (USA), Pinterest is Privacy Shield-certified, ensuring compliance with EU data protection laws. More information is available at: https://about.pinterest.com/de/privacy-policy.
12) Web Analytics Services
Google (Universal) Analytics Without Cookies
This website uses Google (Universal) Analytics, a web analytics service by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Instead of using cookies, Google Analytics stores a unique user ID in your browser’s local storage to analyze website usage. The information generated (including your anonymized IP address) is transferred to Google servers, potentially in the USA.
We use IP anonymization ("_anonymizeIp()"), ensuring that IP addresses are processed in a shortened form within the EU before being transferred to the USA. This prevents direct personal identification.
More information on Google Analytics can be found here: https://policies.google.com/privacy.
13) Tools and Other Services
- Adobe Fonts (Typekit)
Our website uses Adobe Fonts for consistent font display, provided by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA. Your browser connects to Adobe’s servers to load the fonts, which may involve data transfer to the USA.
14.1 The applicable data protection law grants you comprehensive rights as a data subject (rights of access and intervention) with regard to the processing of your personal data by the data controller. Below, we inform you about these rights:
Right of access pursuant to Art. 15 GDPR:
You have the right to obtain information about the personal data we process concerning you, the purposes of processing, the categories of processed personal data, the recipients or categories of recipients to whom your data has been disclosed or will be disclosed, the planned retention period or the criteria for determining the retention period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the source of your data if it was not collected from you, the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved, as well as the significance and intended consequences of such processing for you. You also have the right to be informed about the guarantees in accordance with Art. 46 GDPR if your data is transferred to third countries.
Right to rectification pursuant to Art. 16 GDPR:
You have the right to immediate correction of incorrect data concerning you and/or completion of incomplete data stored by us.
Right to erasure pursuant to Art. 17 GDPR:
You have the right to request the deletion of your personal data if the conditions of Art. 17 (1) GDPR are met. However, this right does not apply if processing is necessary for the exercise of the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims.
Right to restriction of processing pursuant to Art. 18 GDPR:
You have the right to request the restriction of the processing of your personal data if the accuracy of your data is contested and is being verified, if you refuse the deletion of your data due to unlawful data processing and instead request the restriction of data processing, if you require your data for asserting, exercising, or defending legal claims after we no longer need it for its original purpose, or if you have objected to processing for reasons related to your particular situation, pending the determination of whether our legitimate grounds override yours.
Right to notification pursuant to Art. 19 GDPR:
If you have exercised your right to rectification, deletion, or restriction of processing against the data controller, the latter is obliged to inform all recipients to whom your personal data has been disclosed of this correction, deletion, or restriction of processing, unless this proves impossible or involves disproportionate effort. You also have the right to be informed about these recipients.
Right to data portability pursuant to Art. 20 GDPR:
You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request the transfer to another data controller, where technically feasible.
Right to withdraw consent pursuant to Art. 7 (3) GDPR:
You have the right to withdraw your consent to the processing of your data at any time with future effect. In the event of withdrawal, we will delete the affected data immediately, provided that further processing is not based on another legal basis that allows processing without consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint pursuant to Art. 77 GDPR:
If you believe that the processing of your personal data violates the GDPR, you have the right—without prejudice to any other administrative or judicial remedy—to lodge a complaint with a supervisory authority, particularly in the member state of your habitual residence, place of work, or the place of the alleged infringement.
14.2 Right to Object
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH FUTURE EFFECT.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES AT ANY TIME. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.
15) Duration of Storage of Personal Data
The duration of the storage of personal data is determined based on the respective legal basis, the processing purpose, and—where applicable—additionally on the relevant statutory retention period (e.g., commercial and tax retention periods).
For the processing of personal data based on explicit consent pursuant to Art. 6 (1) (a) GDPR, this data is stored until the data subject withdraws their consent.
If there are statutory retention periods for data processed under contractual or quasi-contractual obligations based on Art. 6 (1) (b) GDPR, such data is routinely deleted after the retention periods expire, provided that it is no longer required for contract fulfillment or contract initiation and/or there is no legitimate interest in further storage.
For the processing of personal data based on Art. 6 (1) (f) GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves to assert, exercise, or defend legal claims.
For the processing of personal data for direct marketing purposes based on Art. 6 (1) (f) GDPR, such data is stored until the data subject exercises their right to object pursuant to Art. 21 (2) GDPR.
Unless otherwise specified in this privacy policy regarding specific processing situations, stored personal data is deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed.