Privacy policy

1. Introduction

Protecting your personal data is our highest priority. This privacy policy explains the nature, scope and purpose of the processing of personal data (hereinafter referred to as „data“) in connection with our online offering. This includes the associated website, its functions and content, as well as external online presences such as social media profiles (hereinafter collectively referred to as the „online offering“). Your personal data is treated confidentially and strictly in accordance with the statutory data protection provisions and the terms of this privacy policy.

General information

This privacy policy gives you a comprehensive overview of what happens to your personal data when you visit this website. Personal data is any information that can be used to identify you personally.

Responsible party

Data processing on this website is carried out by the website operator. You can find the contact details of the controller in the „Controller“ section of this privacy policy.

How your data is collected

Personal data is collected in part because you actively provide it, for example by filling in a contact form. Other data is collected automatically or with your consent when you visit the website, through the controller’s IT systems. This is mainly technical data (for example the internet browser, operating system or the time the page was accessed). This data is collected automatically as soon as you enter the website.

How your data is used

Some of the data is collected to ensure the website is provided without errors. Other data may be used to analyse your user behaviour in order to optimise the offering and adapt it to your needs.

Transfer of data to external parties

In the course of the controller’s business activities, it may be necessary to transfer personal data to external parties. Such transfers only take place under certain conditions: where the disclosure is necessary to perform a contract, where there is a legal obligation (for example to tax authorities), where there is a legitimate interest pursuant to Art. 6(1)(f) GDPR, or where another legal basis permits the transfer. Where external service providers are used for data processing, personal data is only passed on on the basis of a valid data processing agreement pursuant to Art. 28 GDPR. Where data is processed jointly with other parties, a joint processing agreement pursuant to Art. 26 GDPR is concluded.

Withdrawal of consent to data processing

Certain data processing operations can only take place with your express consent. This consent can be withdrawn at any time. The lawfulness of the data processing carried out up to the point of withdrawal remains unaffected by the withdrawal.

Right to object to specific data processing and advertising (Art. 21 GDPR)

Where your personal data is processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. This also applies to profiling based on these provisions. In the event of an objection, the controller will no longer process your personal data unless compelling legitimate grounds for the processing can be demonstrated which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (objection pursuant to Art. 21(1) GDPR).

Where your personal data is used for direct marketing, you have the right to object to this processing at any time. This also applies to profiling insofar as it is connected with such direct marketing. Following your objection, the controller will no longer use your personal data for these advertising purposes (objection pursuant to Art. 21(2) GDPR).

Rights under the General Data Protection Regulation

You have the right to lodge a complaint with a competent supervisory authority in the event of breaches of the GDPR. This right may be exercised in particular in the member state of your habitual residence, place of work or the place of the alleged breach. This is without prejudice to any other administrative or judicial remedy.

Personal data that is processed automatically on the basis of consent or in performance of a contract can be requested in a structured, commonly used and machine-readable format. On request, this data may also be transferred directly to another controller, where this is technically feasible.

Every data subject has the right to obtain, free of charge, information about their stored personal data, its origin, its recipients and the purpose of the processing. In addition, there is a right to rectification or erasure of this data, insofar as statutory provisions permit. For further questions or concerns regarding personal data, you can contact the controller at any time.

You have the right to request the restriction of the processing of personal data if the accuracy of the data is contested and a check is pending. In the case of unlawful processing, you can request the restriction of processing instead of erasure. You can also request restriction if the data is no longer needed but is required to assert, exercise or defend legal claims. If you object to processing pursuant to Art. 21(1) GDPR, you also have the right to restriction until it has been determined whose interests prevail.

2. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Amplivision GmbH
Represented by the managing directors Christopher Bade, Morris Bredlau and Daniel Dobrodinsky
Kienhorststraße 48, 13403 Berlin
Website: www.amplivision.de
Email: info@amplivision.de
Phone: +49 30 921 069 660

3. Processors

We work with various processors who process data on our behalf. These service providers are contractually obliged to treat the data confidentially and to use it exclusively within the scope of the respective service. There are also cases in which responsibility for data processing is shared jointly with other parties. In such cases, responsibilities are governed and documented transparently in order to ensure compliance with data protection requirements.

4. Definitions

To ensure the transparency of this privacy policy and to make it understandable for everyone, we primarily use terms that are also defined in the General Data Protection Regulation (GDPR). The full legal definitions can be found in Art. 4 GDPR.

Personal data: This includes all information relating to an identified or identifiable natural person (hereinafter the „data subject“). A person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (for example a cookie) or one or more specific characteristics.

Processing: This term covers any operation or set of operations performed on personal data, whether or not by automated means. This can include collecting, recording, organising, structuring, storing, adapting or altering, retrieving, consulting, using, disclosing, disseminating, aligning, combining, restricting, erasing or destroying data.

Controller: This is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Processor: A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Consent: Any freely given, specific, informed and unambiguous indication of the data subject’s wishes, in the form of a statement or a clear affirmative action, by which the data subject signifies agreement to the processing of personal data relating to them.

Terminal device: A terminal device is an electronic device capable of accessing the internet and loading web pages. These include, among others, computers, laptops, tablets and smartphones.

5. Hosting

This website is hosted on the servers of an external service provider in order to guarantee you a reliable and secure use of this online offering.

Data processing by the hosting provider takes place pursuant to Art. 6(1)(f) GDPR, as the controller has a legitimate interest in providing a stable and secure website. Where it is necessary to obtain the user’s consent (for example for the use of certain cookies or tracking technologies), data processing is based on the user’s consent pursuant to Art. 6(1)(a) GDPR and section 25(1) TTDSG. You can withdraw your consent at any time with effect for the future.

The hosting provider is:

STRATO AG
Otto-Ostrowski-Straße 7, 10249 Berlin, Germany

Details on data processing and data protection can be found in the hosting provider’s privacy policy, available here: https://www.strato.de/datenschutz/

To ensure that your data is processed in accordance with the applicable data protection regulations, a data processing agreement (DPA) has been concluded with the hosting provider. This agreement obliges the hosting provider to process the personal data of website visitors exclusively in accordance with the controller’s instructions and in compliance with the GDPR. The hosting provider guarantees comprehensive protection of your data through technical and organisational measures.

6. Legal bases for data processing

The processing of your personal data is based on the General Data Protection Regulation (GDPR) and other relevant statutory provisions. Depending on the purpose of the processing, different legal bases apply.

Insofar as you have consented to the processing of your personal data, the processing is based on your consent pursuant to Art. 6(1)(a) GDPR. This applies in particular to the processing of special categories of personal data pursuant to Art. 9(2)(a) GDPR and to the transfer of personal data to third countries pursuant to Art. 49(1)(a) GDPR. Your consent can be withdrawn at any time.

The processing of your data may be necessary to perform a contract or to carry out pre-contractual measures and, in this case, is based on Art. 6(1)(b) GDPR. In addition, processing may be necessary to comply with legal obligations, which then takes place pursuant to Art. 6(1)(c) GDPR. In certain cases, processing serves to protect the legitimate interests of the controller or a third party, provided that your interests or fundamental rights and freedoms do not override them. This processing is based on Art. 6(1)(f) GDPR.

National regulations may also apply to certain processing operations, such as section 25 TTDSG for the storage of cookies or access to information on your terminal device. The applicable legal bases are explained in detail in the specific sections of this privacy policy.

7. Data transfer to insecure third countries and non-DPF-certified US companies

If tools from companies based in third countries that are insecure under data protection law are used on this website, or if US tools are used whose providers are not certified under the EU-US Data Privacy Framework (DPF), your personal data may be transferred to and processed in these countries. Please note that in third countries that are insecure under data protection law, a level of data protection equivalent to that of the EU cannot be guaranteed. For the USA as an insecure third country, a level of data protection comparable to that of the EU is generally not guaranteed. A data transfer to the USA is therefore only permissible if the recipient either holds certification under the „EU-US Data Privacy Framework“ (DPF) or has appropriate additional safeguards in place.

8. Storage period

Unless a more specific storage period is stated within this privacy policy, personal data remains with the controller until the purpose for the processing no longer applies. If you assert a legitimate request for erasure or withdraw your consent to data processing, the data concerned is erased, unless there are other legally permissible grounds for storage (for example retention periods under tax or commercial law). In such cases, erasure takes place once these grounds no longer apply.

The controller only stores personal data for as long as is necessary to fulfil the respective purposes for which the data was collected. Where the processing is based on consent, the data is stored until the data subject withdraws that consent. Such a withdrawal is possible at any time with effect for the future. The data is then erased without delay, unless there are statutory retention obligations or other overriding legal grounds.

9. Security measures and data minimisation

Comprehensive technical and organisational measures are taken to protect your personal data effectively against accidental or unlawful destruction, loss, alteration or unauthorised disclosure of or access to it. Care is taken to ensure that only the data strictly necessary for the respective purpose is collected and processed. This data minimisation strategy helps to significantly reduce the risk of misuse and unauthorised access. The security measures are continuously adapted to the state of the art.

10. SSL/TLS encryption

To protect the security of your data during transmission, we use encryption methods that correspond to the current state of the art (for example SSL or TLS) via HTTPS. This ensures that the data exchanged between your browser and the server is protected against unauthorised access. You can recognise an encrypted connection by the fact that the browser’s address bar changes from „http://“ to „https://“ and by the lock symbol in your browser bar.

11. Cookies

This website uses cookies. These are small files that your browser creates automatically and that are stored on your terminal device (laptop, tablet, smartphone or similar) when you visit the site. Cookies do not cause any damage to your terminal device and contain no viruses, trojans or other malware.

The use of cookies serves, on the one hand, to make the use of our offering more pleasant for you. For example, the controller uses so-called session cookies to recognise that you have already visited individual pages of the website. These are automatically deleted after you leave the site. In addition, temporary cookies are used to optimise usability, which are stored on your terminal device for a certain defined period.

The data processed by technically necessary cookies is required to protect the legitimate interests of the controller pursuant to Art. 6(1)(1)(f) GDPR. Optional cookies, for example for reach measurement, are only set with your consent pursuant to Art. 6(1)(1)(a) GDPR and section 25(1) TTDSG.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored or so that a notice always appears before a new cookie is created. Fully disabling cookies may mean that you cannot use all the functions of the website.

12. Enquiries by email or telephone

You can send enquiries to the controller by email or telephone. The personal data transmitted in this context (for example name, email address, telephone number and the enquiry itself) is processed and stored by the controller exclusively for the purpose of handling the enquiry and any follow-up questions.

The legal basis for this data processing is Art. 6(1)(b) GDPR, as the processing is necessary to perform a contract or to carry out pre-contractual measures. Where the processing is not related to a contract, it is based on Art. 6(1)(f) GDPR, as the controller has a legitimate interest in handling and responding to enquiries.

13. Use of analysis and tracking tools

Analysis and tracking tools are used to ensure that this website is designed to meet requirements and is continuously optimised. These measures help to record the use of this website statistically and thus to optimise the offering for you. The storage and analysis of the data is based on Art. 6(1)(1)(f) GDPR, as the provider has a legitimate interest in offering an appealing and functional website.

If corresponding consent has been obtained, the processing is additionally based on Art. 6(1)(1)(a) GDPR and section 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal device. This consent can be withdrawn at any time.

Google Ads Tracking

We use Google Ads Tracking, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). Google Ads Tracking uses cookies to measure the effectiveness of advertising campaigns and to analyse your use of this website. The information generated by the cookie about your use of this website is generally transferred to a Google server in the USA and stored there.

Google is certified under the EU-US Data Privacy Framework (DPF), which ensures an adequate level of protection for the transfer of personal data from the EU to the USA. Further information on the EU-US DPF can be found at: https://www.dataprivacyframework.gov/. Further information on data protection at Google can be found at: https://policies.google.com/privacy.

Google Ads Remarketing

We use Google Ads Remarketing, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). Google Ads Remarketing uses cookies to display targeted advertising to users who have previously visited this website. This makes it possible to present relevant ads to visitors of this website on other websites in the Google Display Network. The information generated by the cookie about your use of this website is generally transferred to a Google server in the USA and stored there.

Google is certified under the EU-US Data Privacy Framework (DPF). Further information on the EU-US DPF can be found at: https://www.dataprivacyframework.gov/. Further information on data protection at Google can be found at: https://policies.google.com/privacy.

Google Conversion Tracking

We use Google Conversion Tracking, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). Google Conversion Tracking uses cookies to measure the effectiveness of ads and to analyse your use of this website. The information generated by the cookie about your use of this website is generally transferred to a Google server in the USA and stored there.

Google is certified under the EU-US Data Privacy Framework (DPF). Further information on the EU-US DPF can be found at: https://www.dataprivacyframework.gov/. Further information on data protection at Google can be found at: https://policies.google.com/privacy.

14. Form tools

Form tools may be used on this website to process enquiries. The use of these tools is based on the legitimate interest pursuant to Art. 6(1)(f) GDPR in ensuring efficient data collection and management. Where necessary, the data processing is based on your consent pursuant to Art. 6(1)(a) GDPR and section 25(1) TTDSG. Consent can be withdrawn at any time with effect for the future.

15. Conclusion of contracts for services

When concluding contracts for services, the controller collects and processes your personal data in order to fulfil the contractual obligations. This data includes in particular your contact information such as name, address and email address, as well as relevant information on the use of the services.

The processing is based on various legal bases: pursuant to Art. 6(1)(b) GDPR to perform the contract and to carry out pre-contractual measures, pursuant to Art. 6(1)(c) GDPR to fulfil legal obligations including statutory retention obligations, and pursuant to Art. 6(1)(f) GDPR to protect legitimate interests, for example to improve the services and to ensure IT security.

The data collected is used exclusively for carrying out and performing the contracts and is erased after the contractual relationship has ended and any statutory retention periods have expired. Your data may be passed on to third parties involved in providing the service as part of performing the contract, such as IT service providers. These third parties are contractually obliged to treat your data confidentially and to use it exclusively within the scope of providing the service. Your data is not passed on to third parties without your express consent, for example for advertising purposes.

16. External videos

This website may embed external videos to offer you multimedia content and an interactive user experience. These embeds are provided by third parties, who may process personal data when you use their services.

The processing of your data is based on Art. 6(1)(b) GDPR to perform the contract, in particular to provide the videos, and on the legitimate interest in a smooth, convenient and secure user experience pursuant to Art. 6(1)(f) GDPR. Insofar as your consent is required for certain actions, the data processing is based on Art. 6(1)(a) GDPR. Consent can be withdrawn at any time with effect for the future.