Thank you for visiting the Mediapool Content Services GmbH file-sharing platform (‘FSP’). This privacy policy is intended to inform you about the processing of personal data when using the FSP.
1. Contact person
The contact person and so-called controller for the processing of your personal data within the meaning of the EU General Data Protection Regulation (GDPR) is
Mediapool Content Services GmbH
Neuer Wall 71
20354 Hamburg
Tel.: +49(0)40-432007-0
We will be happy to respond to your requests and feedback on the subject of data privacy. Simply email us at datenschutz[at]mediapool-content.de.
2. Data processing during registration and use of the FSP
2.1 Which data we collect when creating a user account
You need an user account to use the FSP. There are so-called admin accounts, which we create for you, and other employee accounts, which you – as an admin – can create yourself.
To enable the creation of user accounts, the following data is processed:
2.1a When we create an admin account for you:
Company or channel name
Name
Email address
Password
2.1b When you – as an admin – create employee accounts on the platform yourself:
Title
Surname
Email address
Password
The data is used to enable us to give you access to the FSP and identify you. The processing is carried out to fulfil the licence agreement with you. Once employee accounts have been created, they can also be disabled and deleted again on the platform at any time. To delete the admin account, you can contact the following email address at any time: support@mediapool-content.de.
2.2 Which data you provide voluntarily
Channels can use the FSP to upload channel material such as logos, images, trailers, etc. (‘Content’) to the FSP (Upload). The participating platform providers can obtain this Content following approval by us (Download). The uploaded content is stored on the FSP and may also contain personal data. We do not verify the lawfulness of the personal data that may be contained.
2.3 Which log files are automatically stored when using the FSP
Whenever you use our platform, we collect the access data that is automatically transmitted by your browser to enable you to visit the FSP website. In particular, the access data contains:
- IP address of the requesting device
- Date and time of request
- Content of the request (specific page)
- Status of access/HTTP status code
- Website from where the request was made
- Browser (e.g. Google Chrome)
- Operating system and its interface (e.g. Windows 10)
- Language and version of the browser software.
The processing of this access data is technically necessary to enable you to visit the platform and to ensure the stability and security of our systems. In this respect, we have a legitimate interest in the processing of this data. The information stored in the log files cannot be traced back to you personally.
2.4 Which usage data is also processed during interaction with the FSP
To enable us to check whether the uploaded Content is working properly, and because we must give our approval in this regard before it can be downloaded by the platform providers, we process usage data about your interaction with the FSP to see which users have uploaded which content and to be informed of this. We can also see which users have downloaded which content, enabling us to check whether it is being used lawfully. This means that we can see when an activation email with access data has been sent, when new employees are created or blocked by admin, when files are uploaded and when which files are deleted.
The processing is carried out to fulfil the licence agreement with you and to protect our legitimate interest in ensuring lawful use of the uploaded Content.
You can always object to the processing of your data on the basis of a legitimate interest. Further information on this is provided in Section 6.
3. Making contact
There are various ways for you to get in touch with us. This includes contacting us by email in the case of support requests or technical queries related to the use of the FSP. In this regard, we will collect the data that you provide to us for the purpose of processing your query, such as your first name, surname, email address, telephone number, subject matter, etc. Data collected for this purpose will be deleted after the need for its storage ceases to exist, or we will restrict the processing if there are legal retention obligations.
4. Use of service providers and sharing of data
Some of the data processing undertaken by us can be carried out by our service providers. This includes providers who host our platform and databases, IT service providers who service our systems and consultancy companies in particular. When we share data with our service providers, they may use the data exclusively for the fulfilment of their tasks. The service providers have been carefully selected and engaged by us. They are contractually bound by our instructions and have suitable technical and organisational measures in place for the protection of the rights of the data subjects.
Furthermore, data may be shared with third parties in connection with official inquiries, court decisions and legal proceedings, if this is required for the purpose of prosecution or enforcement, or if there is any other legal basis for such sharing.
5. Duration of storage
Unless otherwise stated above, your personal data will, in principle, be deleted or blocked as soon as the purpose of the storage ceases to exist. Further storage can take place if this has been provided for by appropriate regulations to which we are subject, if further storage is required for purposes of preserving legitimate interests or if you have given us your consent. Data may also be blocked or deleted if a storage deadline stipulated by applicable standards passes, unless there is need for continued storage of the data for the purpose of concluding a contract or fulfilling a contract.
6. Your rights
You have the following legal data protection rights subject to the respective legal prerequisites:
- Right of access (Article 15 GDPR, Section 34 BDSG (Bundesdatenschutzgesetz [German Federal Data Protection Act])
- Right to erasure (Article 17 GDPR, Section 35 BDSG)
- Right to rectification (Article 16 GDPR, Section 34 BDSG)
- Right to restriction of processing (Article 18 GDPR)
- Right to data portability (Article 20 GDPR)
- Right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR, Section 19 BDSG)
- Right to withdraw consent (Article 7(3) GDPR)
- Right to object to certain data processing measures (Article 21 GDPR).
When we base the processing of your data on our legitimate interests, you may object to the processing at any time. When exercising your right to object, we kindly ask that you provide the reasons why we should not process your data. In the event of a legitimate objection, we will review the situation and either cease or adapt the processing or notify you of our compelling legitimate grounds for having to continue the processing.
7. Contact
For all questions or concerns regarding data privacy, please contact us via the contact details provided above (Section 1).
Last updated: August 2020