Privacy Policy - PANTAFLIX AG

PANTAFLIX AG – Privacy policy

1. Controller

PANTAFLIX AG, Holzstrasse 30, 80469 Munich, Germany, represented by the board: Nicolas Paalzow and Stephanie Schettler-Köhler („PANTAFLIX“ or "we") are pleased about your visit on our websites under the domain www.pantaflixgroup.com ("websites").

All personal data will be stored, processed and used by us in accordance with the applicable data protection laws (in particular the provisions of the General Data Protection Regulation (DSGVO), the Federal Data Protection Act (BDSG) and the Telemedia Act (TMG)).

Personal data shall mean any information relating to an identified or identifiable natural person ('data subject'); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, a location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

No personal data, on the other hand, is information that cannot be linked to your real identity; this includes, for example, the number of users of our websites or comparable summarized information.

2. Purposes and legal basis of the processing

By default, our web servers temporarily log the connection data of the requesting computer, the web pages you visit on our site, the date and duration of your visit, the identification data of the browser and operating system type used, and the web page from which you visit us. We use tracking software to determine the frequency of use and the number of users of our website.

With this software we do not collect any data that will give us information about your person, but we do collect the IP address used by you to access the website. The data is used exclusively in anonymous and summarized form for statistical purposes and for the development of the website. These purposes constitute our legitimate interest in data processing (Art. 6 para. 1 f) DSGVO. You can object to the collection and use of your IP address for statistical purposes by deactivating "Track user" depending on the Internet browser used.

Notwithstanding this, you can visit our websites without us collecting any personal data from you. These web pages contain in particular information for investor relations purposes and general public information about the PANTAFLIX group of companies.

Personal data is collected, processed and used by us as Controller if you provide us with such data of your own accord for the purpose of executing a contract or for the implementation of pre-contractual measures, when opening a customer account or when contacting us (Art. 6 para. 1 b) DSGVO) or if you have given your consent to the respective processing (Art. 6 para. 1 a) DSGVO). Furthermore, we may process your personal data if the processing is necessary to protect our legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms that require the protection of personal data prevail (Art. 6 para. 1 f) EU-DSGVO) as further explained below in the context of this privacy policy or if it is necessary to fulfill a legal obligation to which PANTAFLIX is subject (Art. 6 para. 1 c) DSGVO or a corresponding provision in the applicable law of a member state of the European Union).

a) Communication

We will use your name, company name, home or business address, e-mail address, telephone number and any other personal information that you may voluntarily provide to us to the extent necessary to process your communications or inquiries with us. The legal basis for this is generally, insofar as the communication concerns contractual or pre-contractual aspects, Art. 6 para. 1 b) DSGVO, otherwise Art. 6 para. 1 f) DSGVO.

b) Applications

On our websites we may publish advertisements for vacancies with us or with one of our affiliated companies. The company named in the job advertisement is responsible for filling the vacancies and processing the respective applications.

If you submit an application to us or to one of our affiliated companies in the PANTAFLIX group of companies, we or the company affiliated with us will process the information and documents submitted with your application, including the personal data contained therein such as your name, address, e-mail address, telephone number, information on your professional career/resume, certificates or any other information you provide us with in the context of your application, for the purpose of processing your application (§ 26 para. 1 BDSG). The provision of your personal data is necessary for the application process. You are not legally or contractually obligated to provide personal data for application purposes. Please note, however, that - if you do not provide personal data - your application cannot be processed.

If we or the company affiliated with us to which you have applied cannot currently consider you when filling a vacancy, but would like to save your application so that we can possibly consider you in a later vacancy, we or the company affiliated with us will contact you and ask for your consent (Art. 6 para. 1 a) DSGVO). With regard to the details (e.g. the storage period of your application), we or our associated company will inform you expressly in advance.

3. Transfer to third parties

Under certain circumstances, your personal data may be processed by service providers commissioned by us who support us in our business operations (to avoid cases of abuse, advertising agencies, IT service providers to operate our websites).

In these cases, however, the scope of the transmitted data is limited to the minimum required to achieve the purposes pursued with the data processing.

If we are legally obliged to disclose certain personal data due to a court decision or as a result of a request for information from law enforcement or supervisory authorities or authorized third parties in connection with an investigation or suspicion of a crime, illegal act or other acts from which legal liability may arise for us or you, we will disclose data necessary for the investigation such as name, address, e-mail address or order history (Art. 6 para. 1 c) DSGVO). We also reserve the right to process and use your personal data to enforce or defend against claims.

4. Transfer of data to countries outside the EEA/EU

Your personal data may also be disclosed to third parties based in non-EEA/EU countries. Insofar as data is transferred to third countries, this is done exclusively in compliance with the legal requirements for admissibility. If there is no decision on adequacy within the meaning of Art. 45 DSGVO for a third country, processing will in any case be based on suitable guarantees in accordance with Art. 46 DSGVO. By concluding the standard data protection clauses issued by the European Commission with the recipient in the third country in accordance with Art. 46 DSGVO, we achieve an adequate level of data protection.

5. Newsletter

On our website you have the possibility to subscribe to a free e-mail newsletter. When registering for the newsletter, the data from the input mask for registration are transmitted to us (name, e-mail address, possibly telephone number for SMS). For the processing of the data we will ask you for your consent (Art. 6 para. 1 a) DSGVO, § 7 para. 2 UWG) during the registration process or during one of your later visits to our websites and we will also refer you to this privacy policy.
If you give your consent, we can send you newsletters via the newsletter delivery platform of EQS Group AG, Karlstr. 47, 80333 München („EQS“).

We and EQS have entered into a data processing agreement. EQS is hereby committed to protect the data of our users, to process it on our behalf according to the regulations of the Data Processing Agreement and in particular not to pass it on to third parties. Further information about data processing by EQS can be found in the privacy policy of EQS.
Further details on the processing of your personal data will be made available to you transparently before you complete your registration for the newsletter.

6. Cookies

On various pages we use cookies to make visiting our websites more attractive and to enable the use of certain functions. These are small text files that are stored on your computer. Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit to our website.

In addition, we use permanent cookies that enable us to recognize you on your next visit to optimize user settings. The legal basis for the setting of cookies for the operation of our websites and for the provision of the services you request is generally Art. 6 Para. 1 lit. f) DSGVO. As far as legally required, however, we will obtain your consent (Art. 6 para. 1 lit. a) DSGVO). You can generally prevent the storage of cookies on your computer by adjusting your Internet browser settings accordingly. In this case, however, the ability to navigate our website may be restricted.

7. Google Tag Manager

PANTAFLIX also uses the Google Tag Manager. With this service, website tags can be managed through an interface. The Google Tag Manager only implements tags. This means that no cookies are used by the Google Tag Manager and no personal data is collected. The Google Tag Manager triggers other tags, which in turn may collect data, but the Google Tag Manager does not access this data. If certain websites have been deactivated at the domain or browser level (see above under point 6 for the deactivation of cookies), it remains in effect for all tracking tags, provided that these are implemented with the Google Tag Manager.

8. Rights of data subjects

You have the following rights at all times in accordance with the applicable data protection regulations:

You can request information about the personal data stored about you;
You can demand the correction or deletion of incorrect personal data;
You may, if necessary, request that the processing of your personal data be restricted (in some cases provided for by law, e.g. in the case of statutory storage obligations, your data may be blocked instead of deleted);
you may object to the processing of your personal data processed by us on the basis of a legitimate interest (Art. 6 para. 1 f) DGSVO); and
In the event of consent or data processing based on a contract between you and us, you can demand that the personal data concerning you and provided by you be released to you or to a new Controller in a structured, common and machine-readable format, insofar as this is technically feasible ("right to data transferability").
If you have given your consent to us, you also have the right to revoke this consent with effect for the future. This shall not affect the lawfulness of any processing carried out on the basis of the consent until revocation.

You can assert the aforementioned rights against us, e.g. by notifying us using one of the contact channels listed at the end of this privacy policy. We will notify any recipients to whom we have disclosed your personal data of any correction or deletion of the personal data or of any restriction on processing, unless this proves impossible or involves a disproportionate effort.

You also have the opportunity to contact the competent supervisory authority in the event of complaints about the handling of your personal data.

9. Duration of storage

In compliance with the applicable data protection regulations, we will also delete the personal data stored about you without your intervention, if the knowledge of this data is no longer required to fulfill the purpose for which it was stored or if its storage is not permitted for other legal reasons. In some cases provided for by law (e.g. in the case of legal storage obligations) your data can be blocked instead of being deleted.

In the event of an application, your application documents will be deleted or blocked and any personal data in paper form will be returned to you in accordance with the following provisions.
If you have applied exclusively to a specific job advertisement, your application data will be stored until the final decision on filling this position has been made, plus a maximum of six months from the time you are notified of this decision. After this period, the data you have provided and the documents you have sent will be deleted.
This only applies if an employment relationship is established on the basis of your application or if a legal provision permits further storage of your data in exceptional cases; in this case, your application data will also be processed for the purpose of carrying out the employment relationship (§ 26 Para. 1 BDSG ) or stored for longer periods in accordance with the legal provisions and, if a legal provision permits this, processed and used. In this case, we will inform you accordingly before the respective storage, processing or use of your personal data in accordance with the applicable data protection regulations if you do not already have this information.

10. Data protection officer

If you have any questions regarding this data protection declaration or the handling of your personal data, you can contact our data protection officer Mr. Igor Soundakov, who will also be at your disposal in case of requests for information, suggestions or complaints, at any time in the following ways:

by mail:
PANTAFLIX AG
Holzstrasse 30
80469 Munich, Germany

by e-Mail:
datenschutz@pantaflix.com