DATA PROTECTION POLICY
Kinostar Filmverleih GmbH
Olgastraße 57A
70182 Stuttgart
Germany
Data controller
This data protection policy provides you with information about the legal basis, the purpose and the scope of processing the personal data that we collect.
The data controller as defined by the applicable data protection laws is Kinostar Theater GmbH, Olgastrasse 57A, 70182 Stuttgart, Germany, represented by managing director Michael Rösch, tel.: +49 (0)7 11 – 24 83 79, email: kino@kinostar.de (hereinafter referred to as: ‘controller’ or ‘we’).
Access data / server log files
Whenever you access our website, the internet browser used by your device automatically sends information to our website’s server. These data are temporarily stored in so-called log files on our server. The following information is collected without any action on your part and stored until its automatic erasure:
- IP address of the requesting device,
- date and time of access,
- name and URL of the requested files,
- website from which our site was accessed (referrer URL),
- internet browser used and, if applicable, your device’s operating system along with the name of your access provider.
This data is processed by us for the following purposes:
- to ensure a smooth connection between your device and our website, i.e. enabling our site to be displayed on your device,
- to ensure comfortable navigation and use of our website,
- to ensure and assess system security and stability, and
- to perform anonymisation for other administrative purposes.
The legal bases for this data processing is article 6 (1) p. 1, point b) and f) of the GDPR. Our justified interest is based on the purposes for data processing specified above. We do not combine your data with any other data in our possession.
Cookies
Our website utilises cookies. Cookies are small text files that are saved onto your device when you visit our website.
We utilise cookies in order to facilitate the use of our website (e.g. so that our server recognises you upon subsequent visits and you do not have to enter all of your information again) as well as for statistical purposes that help us improve our website.
The data processed by these cookies are necessary in order for us to safeguard our justified interests for the purposes named above and to safeguard the justified interests of third parties pursuant to article 6 (1) p. 1, point f) of the GDPR.
Most of the temporary cookies that we use (so-called ‘session cookies’) are automatically deleted from your device after you finish using our website and close your browser. Other cookies remain on your system and allow us to recognise your device upon subsequent visits to our website (so-called persistent cookies).
Most internet browsers automatically allow for cookies to be saved. By adjusting the corresponding settings in your browser, you can prevent cookies from being saved onto your device or request that your browser informs you any time a new cookie is to be saved. You may also install a browser add-on that blocks cookies, e.g. Ghostery (https://www.ghostery.com/de/). If you choose to deactivate cookies altogether, this may prevent you from using the full functionality of our website.
Contact
Whenever you enter into contact with us, such as via email or by telephone, you are required to provide your name and your telephone number or email address so that we may process and respond to your request. You may also choose to provide us with additional information on a voluntary basis. The data transferred to us for the purpose of making contact shall only be processed in order to handle your request. The legal basis for this form of data processing is article 6 (1) p. 1, point b) of the GDPR, provided that this entails a pre-contractual measure, as well as article 6 (1) point a) on the basis of your consent. We will not share any of the personal information collected for this purpose with third parties. We will delete such data once they are no longer needed and provided that the storage of these data is not subject to any statutory retention obligations.
Subscribing to our newsletter
Our newsletter provides you with current information about our company as well as promotional information pertaining to our products and services. By subscribing to our newsletter, you consent to any necessary processing of your data as described below, pursuant to article 6 (1) point a) of the GDPR. We use the so-called double-opt-in process to activate newsletter subscriptions. In order to subscribe to our newsletter, you only need to provide us with your email address. Your registration will be recorded (email address, IP address, time of registration) so that we can prove that you provided us with your consent in accordance with the law.
You may unsubscribe from our newsletter at any time, such as by clicking on the corresponding link found at the end of each newsletter. When you unsubscribe from our newsletter or object to your personal data being processed for this purpose, your data will immediately be blocked and deleted, provided that that these data are not subject to any data retention obligations.
The Kinostar app for iOS and Android
A special data protection notice applies to the Kinostar app, which can be used to make reservations and buy tickets on your mobile device. This notice will be displayed when you download and first launch the app and it can be viewed within the app at any time.
Transfer of personal data
We will not share your personal data with any third parties unless:
- you have provided us with your express consent pursuant to article 6 (1) p. 1, point a) of the GDPR,
- such a transfer is legally permissible and necessary for executing our contractual relationship with you pursuant to article 6 (1) p. 1, point b) of the GDPR,
- a justified interest exists for transferring this data in accordance with article 6 (1) p. 1, point f) of the GDPR and there are no grounds for assuming that you have an overriding interest in preventing your data from being transferred to third parties, or
- a legal obligation exists in relation to such a data transfer pursuant to article 6 (1) p. 1, point c) of the GDPR.
Data processed when purchasing coupons and tickets or recharging the MovieCard
The following services
- ticket purchases and ticket reservations for our cinemas
- coupon purchases (online sale of cinema vouchers for self-printing)
- recharging the customer card (MovieCard) and
- orders made using the online shop
are provided via the online shop of the provider kinoheld GmbH, Prinzregentenplatz 15, 81675, Munich, Germany (‘kinoheld’). When soliciting the aforementioned products and services, a contractual relationship shall exclusively exist between the customer (meaning you) and kinoheld. You may, however, redeem these services with us.
The online shop offered by kinoheld has been integrated into our site using iframe, meaning that you will not be able to see the address of the kinoheld internet site in the URL bar of your internet browser. The required personal data needed to enter into and carry out the respective contracts is exclusively processed by the kinoheld online shop. The data protection policy of the provider shall apply to the kinoheld website integrated into our site using iframe. You can view this policy at any time by following this link: https://www.kinoheld.de/datenschutz. This policy will also be provided to you for your information prior to entering into a contract with kinoheld. Whenever a payment is processed on this site, your personal data will be transferred to the payment provider.
After the contract has been concluded, kinoheld will provide us with the personal data needed to execute your contract, e.g. your name, reservation number, seat number, etc.
The legal basis for this form of data processing is the performance of a contract with respect to the customer pursuant to article 6 (1) point b) of the GDPR.
Links to third-party sites
In the context of our Active Home Entertainment feature, our website contains links to services provided by third parties, such as Apple iTunes, Google Playstore and Amazon Video. By clicking on one of the links to the aforementioned third-party sites, your personal data will be collected by these websites and may potentially be transferred to and stored on servers located outside of the EU. We do not have any influence over data processing conducted by the named service providers. Additional information about personal data processing when using the services offered by the third-party providers named above can be found here:
iTunes: https://www.apple.com/de/privacy/
Google Play-Store: https://policies.google.com/privacy?hl=de
Amazon-Video: https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=201909010
Embedded YouTube videos
Our website includes embedded YouTube videos provided by ‘Google’, part of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’), which we offer on the basis of extended data protection, meaning that less user data is transferred to Google. Additional information about the purpose and scope of data collection and data processing by the provider can be found in the privacy policy of the provider. This policy contains additional information about your associated rights and the configuration options for protecting your privacy:
http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and is bound to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. An opt-out option offered by the provider can be found here: https://adssettings.google.com/authenticated.
Embedded Google Maps
Our website makes use of the mapping features of ‘Google Maps’, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’). Additional information about the purpose and scope of data collection and data processing by the provider can be found in the privacy policy of the provider. This policy contains additional information about your associated rights and the configuration options for protecting your privacy:
http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and is bound to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. An opt-out option offered by the provider can be found here: https://adssettings.google.com/authenticated.
Google Fonts
ur website makes use of ‘Google Fonts’, offered by the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The privacy policy of the provider can be found here: https://www.google.com/policies/privacy/ An opt-out option can be found here: https://adssettings.google.com/authenticated.
Data retention periods and data erasure
Personal data collected by the controller will be deleted when these are no longer needed for executing the contract or when the agreed-upon purpose of use has lapsed and these data are not subject to any retention obligations.
Rights of the data subject
You have the following rights pertaining to your personal data in relation to us:
- the right to obtain information about the personal data concerning you that has been processed by us, pursuant to article 15 of the GDPR;
- the right to request rectification or completion of personal data concerning you that we have stored, pursuant to article 16 of the GDPR;
- the right to request the erasure of personal data concerning you that we have stored, pursuant to article 17 of the GDPR;
- the right to request a restriction on the processing of personal data concerning you, pursuant to article 18 of the GDPR;
- the right to be provided with all personal data concerning you in a structured, commonly used and machine-readable format or to request that such data are transferred to another data controller, pursuant to article 20 of the GDPR;
- the right to lodge a complaint with a supervisory authority, pursuant to article 77 of the GDPR.
Right to object
You may object to the processing of your personal data by the controller with future effect at any time. This objection may be provided to the controller in written form or via email.
Withdrawing your consent
If data processing is carried out based on your consent, pursuant to article 6 (1) point a) of the GDPR, you may withdraw this consent in relation to the controller at any time with future effect (article 7 (3) GDPR). This withdrawal may be provided to the controller in written form or via email.
Reservation of changes
It may be necessary for us to modify this data protection policy in response to future developments on our website or on the basis of altered legal requirements. The controller shall notify the user of any changes to the data protection requirements in an appropriate manner. You may access and print out the latest version of our data protection policy from our website at any time.