Privacy Policy for the Online Presences of movingimage EVP GmbH

This Privacy Policy provides information about the personal data that movingimage EVP GmbH (hereinafter referred to as “movingimage”) collects, stores and processes when you use the website (www.movingimage.com) and our online presences on social networks. It explains the purposes for which your data is used and the measures implemented by movingimage to ensure its security. In addition, this Privacy Policy provides information about the use of cookies, log files and analytics tools (e.g. Google Analytics), as well as your rights under the GDPR.

This Privacy Policy does not apply to the use of movingimage products or to applications for employment with movingimage. The separately published Privacy Policy for Products applies exclusively to the use of movingimage products. For applications submitted to movingimage EVP GmbH, the Candidate Privacy Policy applies and can be accessed at: https://movingimage.jobs.personio.de/privacy-policy?language=en.

1. Responsibility and Allocation of Roles

The controller within the meaning of Art.4 No. 7 GDPR for the processing activities described in this Privacy Policy that are carried out under movingimage’s own responsibility is:

‍movingimage EVP GmbH
Tempelhofer Ufer 1
10961 Berlin

Email: legal@movingimage.com

‍You may also contact our Data Protection Officer using these contact details. Please include the designation “For the Attention of the Data Protection Officer”.

‍We expressly point out that when using the email address, the contents are not reviewed exclusively by our Data Protection Officer. If you wish to exchange confidential information, please first contact us via this email address and use the subject line “Confidential – Data Protection Officer”. movingimage processes personal data under its own responsibility where such processing serves the provision and operation of the website, the maintenance of its technical security and stability, the handling of enquiries, the implementation of marketing and communication activities, the provision of events and downloads, the analysis and optimisation of the website, or the fulfilment of its own contractual or legal obligations. To the extent that website visitors provide personal data through the website, in particular by using contact forms, subscribing to newsletters, registering for events or engaging in other communication activities, movingimage processes such data exclusively for the purposes described in this Privacy Policy and on the basis of the applicable legal bases pursuant to Art.6 GDPR. This processing relates in particular to contact data, communication content, registration and event data, newsletter subscription data, technical connection data, log data, as well as information concerning the use of the website and its functionalities.

2. Purposes and Legal Bases of Processing

The purpose of the collection, storage, processing and use of the personal data collected by movingimage from website visitors is the operation, provision, further development and maintenance of www.movingimage.com. This includes the provision of the website, its secure and uninterrupted operation, communication with prospective and existing customers, the provision of information and events, as well as the analysis and optimisation of our online offering. Personal data is processed based on the applicable legal bases under the GDPR. These include Art. 6(1)(f) GDPR for the secure and proper operation of the website, Art. 6(1)(a) GDPR where processing is based on consent, and Art. 6(1)(b) GDPR where processing is necessary for handling an enquiry or for entering a contractual relationship.

3. Data Processing on Our Website

3.1. Accessing the Website

When using the movingimage website, the end user’s internet browser automatically transmits access data, which is stored by movingimage in so-called server log files (log files). The log files contain the following information: remote host (name and IP address of the computer requesting the page, by which the computer, but not the end user, can be identified), username, date, time, accessed website (URL), amount of data transferred, transmission protocol and, where applicable, the URL from which the end user accessed the website (so-called referrer), as well as product and version information of the browser and operating system used (user agent).

‍The processing of this connection data is strictly necessary to enableaccess to the website, to ensure the ongoing functionality and security of oursystems and to administer our website in general. In addition, the connectiondata is stored temporarily and only to the extent necessary in internal logfiles for the purposes described above in order to identify and prevent thecauses of repeated or malicious access attempts that jeopardise the stabilityand security of our website.

The legal basis for this processing is Art. 6(1)(b) GDPR where access to the website occurs in connection with the initiation or performance of a contract and, otherwise, Art. 6(1)(f) GDPR based on our legitimate interest in enabling access to the website and ensuring the ongoing functionality and security of our systems.

Log files are generally stored for 7 days and subsequently anonymised. In exceptional cases, individual log files and IP addresses may be retained for a longer period. The storage of log files also serves to prevent and investigate abusive access and to prevent further attacks from the same IP address in the event of cyberattacks and, where appropriate, to enable criminal prosecution of the attackers.

3.2. Contacting Us

You have various options to contact us via the website. These include the contact form, registration for events, or contacting us by telephone or email. In this context, we process your data exclusively for the purpose of communicating with you.

‍The legal basis for this processing is Art. 6(1)(b) GDPR where yourinformation is required to respond to your enquiry or to initiate or perform acontractual relationship and, otherwise, Art. 6(1)(f) GDPR based on ourlegitimate interest in enabling you to contact us and allowing us to respond toyour enquiry. We only make marketing-related telephone calls if you have givenyorconsent. If you are not an existing customer, we only send marketingemails on the basis of your consent. In such cases, the legal basis is Art.6(1)(a)GDPR in conjunction with Section 7(2) No. 1 or No. 2 of the German ActAgainst Unfair Competition (UWG).

The data collected by us in connection with your enquiry will be automatically deleted once your enquiry has been fully processed, unless we require your enquiry for the fulfilment of contractual or legal obligations (see Section 8 "Retention Period").

3.3. Newsletter

3.3.1. Subscription to the Newsletter
For the subscription to our newsletters, we use the-called double opt-in procedure, i.e. we will only send newsletters by emai ou have confirmed, by clicking a link in our notification email, thatyou are the owner of the email address provided. If you confirm your emailaddress, we store your email address, the time of registration and the IPaddress used for registration for the duration of the subscription and archivethisinformation for a limited period after unsubscription or withdrawal of consent.The toage serves solely the purpose of sending you the newsletter and beingable to demonstrate your subscription. In addition, we measure whether ournewsletter can be delivered at all.The legal basis for this processing is your consent pursuant to Art.6(1)(a) GDPR. You may withdraw your consent at any time with effect for thefuture by unsubscribing from the newsletter. A corresponding unsubscribe linkis included in every newsletter. Alternatively, it is sufficient to notify usvia the contact details provided above or in the newsletter (e.g. by email orletter).

‍3.3.2. Newsletter Tracking
We aim to share content through our newsletter that isas relevant as possible to recipients and to better understand what they areatually interested in. For this reason, we use market-standard technologies inour newsletters that allow us to measure interactions with the newsletter (e.g.opening the email or clicking on links). We use this data for generalstatistical evaluations and for the optimisation and further development of ourcontent and customer communications. This is achieved, on the one hand, throughsmall graphics embedded in the newsletter (so-called pixels), which establish acnnecion to the image server when the email is opened. On the other hand, weuse links that first register a click before redirecting the recipient to therequested target page.The legal basis for this processing is your consent pursuant to Art.6(1)(a) GDPR. Access to information stored on your end device takes place onthe basis of the national laws implementing the ePrivacy Directive of the EUMember States, in Germany pursuant to Section 25(1) TDDDG. You may withdrawyour consent to the analysis of your usage behaviour at any time with effectfor the future by unsubscribing from the newsletter. You can also prevent themeasurement of email openings by disabling the display of graphics or HTMLcontent by default in your email programme.

Data relating to your interactions with our newsletters is stored for as long as you remain subscribed to the newsletter and is anonymised and deleted within one month after you unsubscribe. The anonymised data continues to be used for analytical purposes after deletion.

4. Use of Tools on the Website

4.1. Technologies Used and Browser Settings

Cookies are used to operate the website. Cookies are small text files that are either stored temporarily in memory (so-called session cookies) or permanently on the hard drive (so-called permanent cookies). Session cookies stored only in memory are automatically deleted when the internet browser is closed. By setting cookies, anonymous user IDs are assigned to end users; however, under no circumstances are programs executed on the user’s computer or computer viruses transmitted. movingimage uses cookies to store individual user watch lists, to authenticate registered users during a session, to monitor and optimise advertising measures and to analyse hardware environments and the usage behaviour of anonymised users. When a video is accessed through the website, a so-called “view event” is generated via our web analytics software. This means that the video ID and the URL through which the video is embedded are transmitted to movingimage. The information obtained in this way does not permit any conclusions to be drawn about a natural person.

‍When videos are played,first-party cookies are used by default, which store certain information forthe display and playback of videos and for analytical evaluations. Theinformation obtained in this way does not permit any conclusions to be drawnabout a natural person. The viewer ID is stored in encrypted form for a maximumperiod of 13 months. In addition, movingimage may use so-called intelligentcookies (e.g. popupcheck), which prevent certain pop-ups from opening multipletimes within a session. This improves the user experience of the website. Theuse of cookies serves to ensure the smooth operation and continuous improvementof movingimage’s services.

4.2. Legal Bases and Withdrawal of Consent

Each end user may freely decide, through the settings of their internet browser, whether to accept cookies, to be informed whenever a cookie is set, or to reject all cookies. However, movingimage points out that the use of movingimage’s services may not be possible or may only be possible to a limited extent if cookies are partially or completely rejected.

‍We use tools that are necessary for the operation of the website on thebasis of our legitimate interests pursuant to Art. 6(1)(f) GDPR in order toprovide the basic functions of our website. In certain cases, such tools mayalso be necessary for the performance of a contract or for the implementationof pe-contractual measures, in which case processing is carried out pursuantto Art. 6(1)(b) GDPR. Access to and storage of information on the end user’sdevice is strictly necessary in these cases and is carried out on the basis ofthe national laws implementing the ePrivacy Directive of the EU Member States,in Germany pursuant to Section 25(2) TDDDG.

All other non-essential (optional) tools that provide additional functionalities are used on the basis of your consent pursuant to Art. 6(1)(a) GDPR. Access to and storage of information on the end user’s device is then carried out on the basis of the national laws implementing the ePrivacy Directive of the EU Member States, in Germany pursuant to Section 25(1) TDDDG. Personal data will only be processed through such tools where we have obtained your prior consent. Where personal data is transferred to third countries, we refer, including with regard to any associated risks, to Section 7 “Transfer of Data to Third Countries” (see below).

Obtaining Your Consent

For obtaining and managing your consent, we use the tool Cookiebot by Usercentrics, Havnegade 39, 1058 Copenhagen, Denmark (“Cookiebot”). Cookiebot generates a banner informing you about data processing on our website and giving you the opportunity to consent to all, individual or none of the processing activities carried out through optional tools. This banner appears when you first visit our website and whenever you revisit your settings to modify them or withdraw your consent. The banner will also be displayed on subsequent visits if you have disabled the storage of cookies or if cookies or information stored in local storage have been deleted or expired.

‍As part of your visit to our website, your consents or withdrawals ofconsent, your IP address, information about your browser and end device and thetime of your visit are transmitted to Cookiebot. In addition, necessaryinformation is stored on your end device in order to document your consents andwithdrawals (“CookieConsent” (1 year)).

The processing of this data is necessary to provide the legally required consent management system and to comply with our documentation obligations. The legal basis is Art. 6(1)(f) GDPR, based on our legitimate interest in complying with the legal requirements for consent management. Access to and storage of information on the end user’s device is strictly necessary in these cases andis carried out on the basis of the national laws implementing the ePrivacy Directive of the EU Member States, in Germany pursuant to Section 25(2) TDDDG.

Withdrawal of Your Consent or Change of Your Selection

You may withdraw your consent for specific tools, including the storage of and access to information on your end device, the processing of your personal data and the transfer of your data to third countries, at any time with effect for the future. To do so, please click on the following Link:

Change your consent | Revoke your consent

There, you may also change your selection regarding the tools for which you wish to provide consent and obtain additional information about the tools used. Alternatively, for certain tools you may exercise your withdrawal directly with the respective provider.

4.3. Necessary Tools

We use certain tools to provide the basic functions of our website(“necessary tools”). These include, for example, tools for the presentation anddisplay of website content, for the management and integration of tools, andfor ensuring the security of our website. Without these tools, we would not beable to provide our service. Therefore, necessary tools are used withoutconsent.

‍The legal basis for the use of necessary tools is the necessity for thepurposes of our legitimate interests pursuant to Art. 6(1)(f) GDPR in providingthe respective core website functionalities and operating our website. In caseswhere the provision of specific website functionalities is necessary for theperformance of a contract or the implementation of pre-contractual measures,the egal basis for the processing is Art. 6(1)(b) GDPR. Access to and storageof information on the end user’s device is strictly necessary in these casesand is carried out on the basis of the national laws implementing the ePrivacyDirective of the EU Member States, in Germany pursuant to Section 25(2) TDDDG.

Where personal data is transferred to third countries, we additionallyrefer to Section 7 (“Transfer of Data to Third Countries”).

‍Google Tag Manager
We use Google Tag Manager on our website, a serviceprovided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,Ireland (“Google”).

‍Google Tag Manager is a tag management system that enables us to centrallymanage and technically integrate scripts, tracking and analytics tools, andother services on our website. This allows changes to integrated services to beimplemented efficiently without requiring modifications to the website sourcecode for each individual adjustment.

Google Tag Manager serves exclusively for the technical provision and management of integrated tags. Additional services that process personal data or set cookies may be loaded through Google Tag Manager. The respective processing activities are described separately in this Privacy Policy in the sections relating to the relevant services.

When accessing our website, a connection to Google servers may be established in order to provide the scripts required for the operation of Google Tag Manager. In this context, technical connection data may be processed, in particular the IP address, information about the browser and operating system used, as well as information regarding the time and scope of access.

According to Google, Google Tag Manager itself does not process personal data for analytics or advertising purposes and does not create user profiles. However, Google may process aggregated diagnostic data in order to ensure the stability, performance and functionality of the service.

Further information on data protection in connection with Google Tag Manager can be found at:

  • Google Tag Manager – Privacy and Security
  • Google Privacy Policy

The legal basis for the use of Google Tag Manager is Art. 6(1)(f) GDPR. Our legitimate interest lies in the efficient, secure and technically reliable management and integration of the services and technologies used on our website.

To the extent that personal data is transferred to companies of the Google group in the United States in connection with the use of Google Tag Manager, such transfer is carried out on the basis of the adequacy decision of the European Commission for the EU-U.S. Data Privacy Framework pursuant to Art. 45 GDPR, provided that the respective recipient is certified accordingly.

4.4. Functional Tools

We also use optional tools to improve the user experience on our website and to provide additional functionalities (“functional tools”). Although these tools are not strictly necessary for the core functions of the website, they may offer significant benefits to visitors, particularly with regard to usability and the provision of additional communication, presentation or payment channels.

The legal basis for the use of functional tools is your consent pursuant to Art. 6(1)(a) GDPR. Access to and storage of information on the end user’s device is then carried out on the basis of the national laws implementing the ePrivacy Directive of the EU Member States, in Germany pursuant to Section 25(1) TDDDG. For information on how to withdraw your consent, please refer to Section 4.2.

Where personal data is transferred to third countries, we additionally refer to Section 7 (“Transfer of Data to Third Countries”).

‍HubSpot
Our registration service enables visitors to our website to learn more about our company, download content and provide their contact information as well as additional demographic information. This information is stored on servers operated by our software partner HubSpot. We may use this information to contact visitors to our website and to determine which of our services may be of interest to them. All information collected by us is subject to this Privacy Policy. We use all collected information exclusively for the optimisation of our marketing activities.

HubSpot is an integrated software solution that enables us to cover various aspects of our online marketing activities. These include in particular:

  • Content Management (website and blog)
  • Email marketing (newsletters and automated emails, for example for the provision of downloads)
  • Social media publishing and reporting
  • Reporting (e.g. traffic sources, website visits, etc.)
  • Contact management (e.g. user segmentation and CRM)
  • Landing pages and contact forms

HubSpot is a software company headquartered in the United States with a subsidiary in Ireland.

Contact:
HubSpot
2nd Floor, 30 North Wall Quay
Dublin 1, Ireland

The following cookies are setby HubSpot:

  • “_hssc” (30 minutes): tracking cookie for session tracking;
  • “_hssrc” (session): tracking cookie used to determine browser restarts;
  • “hubspotutk” (180 days): recognition of website visitors.

Further information regarding HubSpot cookies can be found on HubSpot’s website:

https://knowledge.hubspot.com/privacy-and-consent/what-cookies-does-hubspot-set-in-a-visitor-s-browser

The legal basis for this processing is your consent pursuant to Art.6(1)(a) GDPR. Access to and storage of information on the end user’s device is then carried out on the basis of the national laws implementing the ePrivacy Directive of the EU Member States, in Germany pursuant to Section 25(1) TDDDG.

We have entered into a data processing agreement with HubSpot. Your personal data may also be transferred by HubSpot Ireland Limited to HubSpot Inc., Two Canal Park, Cambridge, MA 02141, USA. HubSpot Inc. is certified under the EU-U.S. Data Privacy Framework. Transfers to the United States therefore take place on the basis of the European Commission’s adequacy decision pursuant to Art. 45 GDPR. In addition, we have entered into Standard Contractual Clauses with HubSpot Inc. (Commission Implementing Decision (EU) 2021/914, Module 2) pursuant to Art. 46(2)(c) GDPR.

Further information can be found in HubSpot’s Privacy Policy:
https://legal.hubspot.com/privacy-policy.

4.5. Analytics Tools

We use analytics tools on our website to evaluate the use of our online offering, improve usability, identify technical issues and analyse the reach and performance of our website.

The legal basis for this processing is your consent pursuant to Art.6(1)(a) GDPR. Access to and storage of information on the end user’s device is then carried out on the basis of the national laws implementing the ePrivacy Directive of the EU Member States, in Germany pursuant to Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future through the cookie settings.

No personal information is required when visiting our website. However, when using Google Analytics, usage data and information relating to your end device may be processed. This data is evaluated exclusively for the purpose of improving our services and does not permit any conclusions to be drawn about individual website visitors.

‍4.5.1. Google Analytics
Google Analytics uses so‑called cookies, which are text files stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including your IP address) is transmitted to and stored on a Google server in the United States. Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide further services relating to website usage and internet usage. Google may also transfer this information to third parties where required by law or where such third parties process the data on Google’s behalf.

You can prevent the installation of cookies by adjusting your browser settings accordingly; however, please note that in this case you may not be able to use all functions of this website to their full extent. You may object to the collection and use of your IP address by Google Analytics at any time with effect for the future. Further information can be found in Google’s Privacy Policy.

movingimage uses the data collected through the web analytics tool exclusively for statistical evaluations. This enables movingimage, for example, to determine on which days and at which times the services of movingimage are particularly popular and how much data volume is generated. In addition, movingimage may use such data to identify potential errors, such as broken links or software errors, and to further develop the website.

movingimage does not combine the stored analytics data with personal data of website visitors. However, movingimage reserves the right to subsequently analyse records associated with the last known IP address of website visitors where specific facts justify the suspicion that such visitors are using the services of the website in violation of applicable laws or contractual obligations. This serves to protect visitors to the movingimage website and the security of their personal data.

movingimage creates backups to safeguard its data inventories. These backups are generally overwritten and deleted after approximately four weeks. To the extent that such backups contain analytics or log data, such data is also deleted.

‍4.5.2. Matomo
The website also uses the web analytics service Matomo, a service provided by InnoCraft Ltd., 150 Willis Street, 6011 Wellington, New Zealand. Matomo is an open-source analytics software used for the statistical evaluation of website visits in order to analyse and continuously improve the use of our website.

Matomo is used with the “AnonymizeIP” function activated. As a result, IP addresses are processed only in truncated form. Direct identification of individuals can therefore be excluded. The IP address transmitted by your browser via Matomo is not combined with any other data collected by us. No data collected through Matomo is transferred to servers outside the control of movingimage EVP GmbH.

Further information regarding data protection by Matomo can be found at: Matomo Privacy Policy https://matomo.org/privacy/

4.5. Marketing  Tools

We also use optional tools for advertising purposes (“marketing tools”).

movingimage also displays third-party advertising on the website, which may be tailored to the presumed specific interests of end users. For the display of such personalised advertising, movingimage uses pseudonymised or anonymised user profiles.

The legal basis for the use of marketing tools is your consent pursuant to Art. 6(1)(a) GDPR. Access to and storage of information on the end user’s device is then carried out on the basis of the national laws implementing the ePrivacy Directive of the EU Member States, in Germany pursuant to Section25(1) TDDDG. For information on how to withdraw your consent, please refer above.

Where personal data is transferred to third countries, we additionally refer to Section 7 (“Transfer of Data to Third Countries”).
‍
‍4.6.1. LinkedIn Insight Tag
Our website uses the conversion tool LinkedIn Insight Tag provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. This tool creates a cookie in your web browser that enables the collection of, among others, the following data: IP address, device and browser characteristics, and page events (e.g. page views). This data is encrypted, anonymised within seven days and the anonymised data is deleted within 90 days. LinkedIn does not share any personal data with movingimage but provides anonymised reports on website audiences and advertisement performance.

In addition, LinkedIn offers retargeting functionality through the InsightTag. Using this data, movingimage can display targeted advertisements outside its website without identifying you as a website visitor.

Further information about LinkedIn’s data processing can be found in LinkedIn’s Privacy Policy.

Members of LinkedIn can control the use of their personal data for advertising purposes in their account settings. To disable the Insight Tag on our website (“opt-out”), please visit: LinkedIn Opt-Out.
‍
‍4.6.2. Google Ads (Google Ads Conversion, Google Ads Remarketing)
We use Google Ads Conversion to draw attention to our services through advertising materials (“Google Ads”) displayed on external websites. Based on the campaign data, we can determine how successful individual advertising measures are. We pursue the interest of displaying advertising that is relevant to you, making our website more interesting and achieving a fair calculation of advertising costs.

These advertisements are delivered by Google through so-called “AdServers”. For this purpose, we use Ad Server cookies, through which certain performance measurement parameters, such as impressions or clicks by users, can be measured. If you access our website via a Google advertisement, Google Ads stores a cookie on your end device. These cookies generally expire after 30 days and are not intended to identify you personally. The following informationis usually stored in relation to this cookie: the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information (indicating that the user no longer wishes to be targeted).

These cookies enable Google to recognise your internet browser. If a user visits certain pages of an Ads customer’s website and the cookie stored on the user’s computer has not yet expired, Google and the customer can recognise that the user clicked on the advertisement and was redirected to that page. Each Ads customer receives a different cookie. Cookies therefore cannot be tracked across the websites of different Ads customers.

We ourselves do not collect or process any personal data through the advertising measures described above. We only receive statistical evaluations from Google. Based on these evaluations, we can determine which advertising measures are particularly effective. We do not receive any additional data from the use of advertising materials and, in particular, we are unable to identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google’s servers. We have no influence over the scope and further use of the data collected by Google through the use of this tool and therefore inform you based on our current level of knowledge. By integrating Ads Conversion, Google receives the information that you have accessed the relevant part of our website or clicked on one of our advertisements. If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or are not logged in, it is possible that Google may obtain and store your IP address.

We also use the remarketing function within Google Ads. The remarketing function enables us to present interest-based advertisements to users of our website on other websites within the Google advertising network (in Google Search, on YouTube, or on other websites). For this purpose, user interactions on our website are analysed, for example which services a user has shown interest in, so that targeted advertising can also be displayed to users on other websites after they have visited our website. For this purpose, Google stores cookies on the end devices of users who visit certain Google services or websites within the Google Display Network. Through these cookies, visits by those users are recorded. The cookies serve to uniquely identify a web browser on a specific device and not to identify a person.

Further information can be found in the section “Cookies”.

The following cookie is set and read by Google:

“_gcl_au” (90 days): conversion tracking and storage of advertising clicks.

The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR. Access to and storage of information on the end user’s device is then carried out on the basis of the national laws implementing the ePrivacy Directive of the EU Member States, in Germany pursuant to Section 25(1) TDDDG.

Further information regarding Google’s data protection practices can be found here.

‍Deletion / Withdrawal of Consent:
You can prevent participation in this tracking process in various ways (further information here):

  • by configuring your browser settings accordingly; in particular, disabling third-party cookies will prevent you from receiving advertisements from third-party providers;
  • by installing the browser plug-in provided by Google, available at: Google Opt-Out Plug-in
  • by permanently disabling personalised advertising in your browser (e.g. Firefox, Internet Explorer or Google Chrome) using: Google Advertising Settings
  • by making the appropriate selection in the cookie settings. Please note that in this case you may not be able to use all functions of this website to their full extent.

Cookie retention period: up to 180 days (this applies only to cookies set by this website).

5. Online Presences

We maintain online presences on social networks in order, among other things, to communicate with customers and prospective customers and to provide information about our products and services.

‍Processing for Advertising Purposes by Social Network Providers
As a general rule, the data of users is processed by the respective social networks for market research and advertising purposes. In this way, usage profiles can be created based on users’ interests. For this purpose, cookies and other identifiers are stored on the end devices of the data subjects. Based on these usage profiles, advertisements may then be displayed, for example, within the social networks themselves and also on third-party websites.

Please refer to the privacy notices of the respective social network forthe legal basis of any processing carried out under the network provider’s ownresponsibility. The links provided below also contain further informationegarding the respective processing activities and available options forobjection.

‍Access to Publicly Available Information
If you maintain an account with the relevant social network, it may be possible for us to view information that you have made publicly available (e.g. your username) and media content (e.g. images andvideos) when we access your profile. In addition, the social network may enable us to contact you. This may occur, for example, through direct messages or posted content.

The communication occurring through the social network and the processingof the respective content data are subject to the responsibility of the socialnetwork as the provider of the messaging and platform services. For thisprocessing, we refer you to the privacy notices of the respective socialnetwork.

‍Data Subject Rights
Please note that data protection requests can generally be asserted most effectively with the respective social network provider, as only the provider has access to the relevant data and can directly take appropriate measures. You may, of course, also contact us with your request. In such case, we will process your request and forward it to the respective social network provider.

Online platforms used
Below is a list containing information about the social media platformson which we maintain an online presence:

6. Disclosure of Data to Third Parties

movingimage does not disclose the personal data of website visitors to third parties unless such disclosure is necessary for the performance of a request or contract (Art. 6(1)(b) GDPR), the website visitor has previously given explicit consent (Art. 6(1)(a) GDPR), or there is a legal obligation to disclose the data (Art. 6(1)(c) GDPR). To the extent that movingimage engages third-party service providers for the execution and handling of processing activities, the provisions of the GDPR and the German Federal Data Protection Act (Bundesdatenschutzgesetz) are complied with.

7. Transfer of Data to Third Countries

We may use services whose providers are located, inpart, in so-called third countries (outside the European Union or the European Economic Area) or which transfer personal data to such countries, i.e.countries whose level of data protection does not correspond to that of the European Union.

Where an adequacy decision of the European Commission pursuant to Art. 45 GDPR exists for a third country, we rely on such adequacy decision for the transfer. This applies, for example, to transfers to Argentina, Israel, Japan, Canada, the Republic of Korea, New Zealand, Switzerland, Uruguay and the United Kingdom. In the case of transfers to the United States, this applies only where the respective recipient is certified under the EU-U.S. Data Privacy Framework.

Where no adequacy decision has been issued for the relevant country, we have implemented appropriate safeguards to ensure an adequate level of protection for any data transfers. These safeguards include, among others, the Standard Contractual Clauses of the European Union or binding corporate rules (Art. 46 GDPR).

Where this is not possible, we rely on the derogations set out in Art. 49 GDPR, in particular your explicit consent or the necessity of the transfer for the performance of a contract or the implementation of pre-contractual measures.

Where a transfer to a third country is envisaged and no adequacy decision or appropriate safeguards are inplace, it is possible and there is a risk that authorities in the respective third country (e.g. intelligence services) may gain access to the transferred data in order to collect and analyse it, and that the enforceability of your data subject rights may not be guaranteed. Where your explicit consent is obtained, you will also be informed of these risks.

8. Retention Period

Personal data will only be stored for as long as is necessary to fulfil the purpose for which it was entrusted to movingimage, unless the website visitor has consented to further storage and use of the data. Thereafter, we will delete the data without undue delay unless we require the data until the expiry of statutory limitation periods for evidentiary purposes in relation to civil law claims, due to statutory retention obligations, or where another legal basis under data protection law exists in the specific case for the continued processing of your data.

Where commercial and tax law retention periods must be observed, certain data may be retained for up to 10 years.

9.Data Subject Rights

In this section, we provide information about the applicable data protection rights available to data subjects.

9.1 Overview of Your Rights

Subject to the applicable statutory requirements, you are entitled at any time to exercise the data subject rights set out in Art. 7(3) and Arts. 15–22 GDPR, including:

  • the right to withdraw any consent you have granted (Art. 7(3) GDPR);
  • the right to object to the processing of your personal data (Art. 21 GDPR);
  • the right to obtain access to your personal data processed by us (Art. 15 GDPR);
  • the right to obtain rectification of inaccurate personal data stored by us (Art. 16 GDPR);
  • the right to obtain erasure of your personal data (Art. 17 GDPR);
  • the right to obtain restriction of processing of your personal data (Art. 18 GDPR);
  • the right to data portability of your personal data (Art. 20 GDPR);
  • the right not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you, including, where applicable, the right to obtain human intervention by the controller, to express your point of view and to contest the decision (Art. 22 GDPR).

To exercise the rights described above, you may contact us at any time using the contact details provided above. This also applies if you wish to obtain copies of safeguards demonstrating an adequate level of data protection. Where the respective legal requirements are met, we will comply with your request.

Requests relating to the exercise of data protection rights and our responses thereto may be retained for documentation purposes to the extent necessary to comply with statutory accountability obligations or for the establishment, exercise or defence of legal claims.

The legal basis for such processing is Art. 6(1)(f) GDPR, based on our interest in defending against potential civil law claims pursuant to Art. 82 GDPR, avoiding administrative fines pursuant to Art. 83 GDPR, and fulfilling our accountability obligations under Art. 5(2) GDPR.

movingimage points out that, due to caching systems and the use of proxy servers, deleted data may in certain circumstances remain accessible for a limited period of time.

9.2. Right to Withdraw Consent and Right to Object

Subject to the applicable statutory requirements, you are entitled at any time to exercise the data subject rights set out in Art. 7(3) and Arts. 15–22 GDPR, including:

Right to Withdraw Consent (Art. 7(3) GDPR)

You have the right to withdraw any consent you have previously granted pursuant to Art. 6(1)(a) GDPR at any time vis-à-vis us. Consequently, we will no longer continue the data processing that was based on such consent in the future. The withdrawal of consent shall not affect the lawfulness of processing carried out based on the consent before its withdrawal.

Right to Object (Art. 21 GDPR)

General Objection: Where we process your data based on Art. 6(1)(f) GDPR (legitimate interests) or Art. 6(1)(e) GDPR, you have the right to object at any time to such processing on grounds relating to your situation.

Objection to Direct Marketing: Where we process your data for direct marketing purposes, you have the right to object to such processing at any time without providing any reasons.

Right to Object (Art. 21 GDPR)

If you wish to exercise your right to withdraw consent or your right to object, an informal notification to the contact details provided above shall be sufficient.

9.3 Right to Lodge a Complaint

You also have the right to lodge acomplaint with a supervisory authority (Art. 77 GDPR). You may exercise this right, for example, before a supervisory authority in the Member State of your habitual residence, your place of work or the place of the alleged infringement. In Berlin, where we are based, the competent supervisory authority is:
‍Berlin Commissioner for Data Protection and Freedom of Information
‍Alt-Moabit 59-61
10555 Berlin
Germany

10. Enforcement and Compliance with this Privacy Policy

movingimage shall continuously maintain the standards set out in this Privacy Policy and will continue to work on the ongoing improvement of data protection practices in the future.

11. Amendments to this Privacy Policy

As movingimage’s offerings are subject to continuous change, it may become necessary to introduce new provisions and/or amendments to this Privacy Policy. The same applies in the event of new or amended applicable legal requirements which may necessitate a corresponding update.

Berlin, July 2026

General Terms and Conditions of Business