Privacy Policy

The following information concerns the processing of your personal data in accordance with the provisions of data protection law, in particular the EU General Data Protection Regulation (DSGVO), in order to process your request. When the City of Hannover processes personal data, this means that we collect, store, use, transmit or delete this data, for example. 

In the following, we inform you why we collect your personal data, from whom we collect it and what we do with this data. In addition, we inform you about your rights in data protection matters and which contact persons you can turn to in this regard.

Responsible unit within the meaning of Art. 13, 14 DSGVO:

City of Hannover

The Lord Mayor

Trammplatz 2

30159 Hanover

0511/168-42298

OB@hannover-stadt.de

Responsible office for data processing:

City of Hanover

Department of Culture - Cultural Office

OU 41.12 - Municipal cinema

Sophienstrasse 2

30159 Hanover

0511/168-44732

koki@hannover-stadt.de

Data Protection Officer

If you have any questions on the subject of data protection, please contact: 

Mr Wolfgang Mahrenholz

Theodor-Lessing-Platz 1

30159 Hanover

0511/168-45355

18.DSB@hannover-stadt.de

a) When visiting the website

When you visit our website, the browser used on your terminal device automatically sends information to our website server. This information is temporarily stored in a so-called log file.

The following information is collected without your intervention and stored until you leave the website:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the file accessed
• Website from which access was made (referrer URL)
• Browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The aforementioned data is processed by us for the following purposes:

• Ensuring a smooth connection setup of the website
• Ensuring a comfortable use of our website
• evaluation of system security and stability as well as
• for other administrative purposes.

The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest follows from the data collection purposes listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.

b) When registering and using the offer

If you want to use the full offer, e.g. watch films, you must register and take out a subscription. Your personal data is entered in an input mask and transmitted to us and stored. We collect the following data:

• First name, surname
• date of birth
• e-mail address
• Your password 
• Streamed titles

When you register, a user account is created with your e-mail address. In the user account, the films that the user has marked (watchlist), any parental control PIN that may have been assigned and the language setting are permanently stored.

Furthermore, we collect the following data with your registration for invoicing purposes:

• salutation
• title
• Street/house number
• Postcode/City
• country
• Telephone (optional)

Furthermore, your individual transaction data will be stored:

• IP address
• Date of use
• Type of use (subscription period)
• Cost of the subscription
• Streaming duration

This data is collected

• to be able to identify you as our customers;
• to be able to provide you with our services;
• to correspond with you;
• to manage our customer data.

As part of the registration process, we obtain your consent to process this data.

The data processing is carried out on the basis of your registration and is necessary for the appropriate processing of your use in accordance with Art. 6 para. 1 p. 1 lit. b DSGVO for the aforementioned purposes.

Upon deletion of your account, the following data will be deleted directly:

• IP address
• Watchlist 
• Streamed titles
• Streaming duration
• Date of birth 
• Password (password) 
• Parental PIN
• Language setting

The following data will be deleted after expiry of the tax and commercial law retention and documentation obligations of 10 years in accordance with Article 6 Para. 1 S. 1 lit. c DSGVO in conjunction with HGB, StGB and AO:

• Salutation
• Title
• First name, last name
• e-mail address
• Street/house number
• Postcode/City
• country
• Telephone (optional)
• Date of use
• Type of use (subscription period)
• Cost of the subscription

c) When playing a film (Intertrust ExpressPlay)

Our film offers are copy-protected. To view the films, the "Intertrust ExpressPlay" service of Intertrust Technologies Corporation, 920 Stewart Drive, Sunnyvale, CA 94085, USA (Intertrust) is required. For this purpose, the user's browser establishes a connection to the Intertrust licence servers in order to retrieve the keys required to decrypt the films. The browser transmits the data required for proper display to the Intertrust servers, including the user's IP address. 

We cannot exclude the possibility that further information about the system used by the user is transmitted to the server. Google uses Widewine as a copy protection programme. We do not send any data to Widewine ourselves, but we cannot determine what data you transmit to Widewine when you use it. For more information, please contact https://policies.google.com/privacy or ask Google within the scope of your data protection rights. 

The data exchange described is necessary for the display and playback of the films within the scope of our contractual offer. It also serves to prevent abuse. At the same time, the above-mentioned reasons also constitute our legitimate interest.

The keys provided by Intertrust for decryption are valid for a limited period of time. We do not store any further information on the use of Intertrust services. The data is deleted as soon as it is no longer required for playing the film.

Further information can be found in the Intertrust data protection declaration: www.intertrust.com/privacy-policy/.

d) When using our contact form

In case of questions of any kind, we offer you the possibility to contact us via a form provided on the website. In doing so, it is necessary to provide a name, a valid e-mail address and your request so that we know from whom the request originates and in order to be able to answer it. Further information can be provided voluntarily.

Data processing for the purpose of contacting us is based on your voluntarily given consent in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO.

The personal data collected by us for the use of the contact form will be deleted by us after we have dealt with your enquiry.

Right to information:

You can request information about your personal data processed by us (Art. 15 DSGVO). In your request for information, you should specify your request in order to make it easier for us to compile the necessary data. Therefore, if possible, information on the specific administrative procedure should be provided in the request.

Right to rectification:

If the information concerning you is not (or no longer) correct, you can request a correction. If your data is incomplete, you can request that it be completed (Art. 16 GDPR).

Right to deletion:

You can request the deletion of your personal data stored by us under the conditions of Art. 17 DSGVO. Your right to erasure depends, among other things, on whether the data relating to you is still needed by us to fulfil our legal duties (see point 4.).

Right to restriction of processing:

In the cases mentioned in Art. 18 DSGVO (e.g. if you dispute the accuracy of your stored data), you have the right to request a restriction of the processing of the data concerning you. Processing may still take place despite the restriction if there is an important public interest in the processing.

Right to object:

You have the right to object to the processing of your personal data, insofar as there are grounds for doing so that arise from your particular situation and insofar as there is no overriding public interest in the processing or a legal provision obliges us to process it (Art. 21 DSGVO).

Right of withdrawal in case of consent:

If the processing of personal data is based on your consent, you can revoke this at any time with effect for the future. Please note that in this case, the use of our offers may no longer be possible for you. 

Right of complaint:

If you believe that we have not complied with your request or have not complied with it in full, you can lodge a complaint with the State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hannover.

General information about these rights:

In some cases, we may or may not comply with your request. If permitted by law, we will always inform you of the reason for the refusal in this case.

However, we will generally respond to you within one month of receiving your request. If we need more than one month for a final clarification, you will receive an interim message.