Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obligated to provide the data. Failure to provide it will have no consequences. This only applies if no other information is provided during the subsequent processing operations.
“Personal data” means any information relating to an identified or identifiable natural person.
You can visit our website without providing any personal information.
Each time you access our website, usage data is transmitted to us or our web host/IT service provider via your internet browser and stored in log files (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider. Processing is based on Art. 6 (1) (f) GDPR, based on our overriding legitimate interest in ensuring the smooth operation of our website and improving our offering.
Your data may be transferred to third countries outside the European Union for which an adequacy decision has been issued by the EU Commission. Unless there is an adequacy decision from the EU Commission, such as for transfers to the USA, the data transfers are based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, available at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de
Kontakt
Responsiblity
Please contact us if you wish.
The person responsible for data processing is:
Michael Heinzelmann,
Marktgasse 4,
56626 Andernach, Germany,
+49 30 520043614,
support@ghostflix.tv
Customer’s proactive contact via email
If you initiate business contact with us via email, we will only collect your personal data (name, email address, message text) to the extent you provide it. The data processing serves to process and respond to your contact request.
If the contact serves to carry out pre-contractual measures (e.g., consultation in the event of a purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 (1) (b) GDPR.
If contact is made for other reasons, this data processing is based on Art. 6 (1) (f) GDPR due to our overriding legitimate interest in processing and responding to your request.
In this case, you have the right to object at any time to the processing of personal data concerning you based on Art. 6 (1) (f) GDPR, for reasons arising from your particular situation.
We will only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.
Customer account
When you open a customer account, we collect your personal data to the extent specified therein. The data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of your consent until the revocation. Your customer account will then be deleted.
Collection, processing, and transfer of personal data when placing orders
When placing an order, we only collect and process your personal data to the extent necessary to fulfill and process your order and to process your inquiries. Providing this data is required to conclude a contract. Failure to provide this data will result in no contract being concluded. Processing is based on Art. 6 (1) (b) GDPR and is necessary to fulfill a contract with you.
Your data will be transferred, for example, to the shipping companies and dropshipping providers you have chosen, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly adhere to the legal requirements. The scope of data transfer is limited to a minimum.
Your data may be transferred to third countries outside the European Union for which an adequacy decision has been issued by the EU Commission. Unless there is an adequacy decision from the EU Commission, such as for transfers to the USA, data transfers are based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, available at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de
Advertising
Use of the email address for sending newsletters
We use your email address, regardless of the contract processing, exclusively for our own advertising purposes to send newsletters, provided you have expressly consented to this. Processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.
Your data will be passed on to an email marketing service provider as part of their contract processing. It will not be passed on to any other third parties.
Payment service provider
Use of PayPal
All PayPal transactions are subject to the PayPal Privacy Policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Cookies
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is visited again.
Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies already stored can be deleted at any time. However, please note that if you do this, you may not be able to fully use all of the features of this website.
The following links provide information on how to manage (including deactivate) cookies in the most important browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically Necessary Cookies
Unless otherwise stated in the privacy policy below, we only use these technically necessary cookies for the purpose of making our service more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after you change pages and to offer you services. Some functions of our website cannot be offered without the use of cookies. These require that the browser be recognized even after you change pages.
Use of Cookiebot
We use the consent management tool Cookiebot from Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (“Cookiebot”) on our website.
This tool enables you to grant consent to data processing via the website, in particular to the use of cookies, as well as to exercise your right to withdraw consent you have already granted. Data processing serves the purpose of obtaining and documenting the necessary consent to data processing and thus complying with legal obligations.
Cookies may be used for this purpose. The following information, among others, may be collected and transmitted to Cookiebot: anonymized IP address, date and time of consent, URL from which the consent was sent, anonymous, random, encrypted key, and consent status. This data will not be shared with other third parties.
Data processing is carried out to fulfill a legal obligation based on Art. 6 (1) (c) GDPR.
Further information on Cookiebot’s privacy policy can be found at: https://www.cookiebot.com/de/privacy-policy/
Analysis Advertising Tracking
Use of Google Analytics
We use the web analysis service Google Analytics provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; „Google“) on our website.
The data processing serves the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide the website operator with other services related to website activity and internet usage. The following information may be collected, among other things: IP address, date and time of page access, click path, information about the browser you use and the device you use, pages visited, referrer URL (website from which you accessed our website), location data, and purchasing activities. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Google Analytics uses technologies such as cookies, web storage in the browser, and tracking pixels, which enable an analysis of your use of the website. The information generated in this way about your use of the website is usually transferred to a Google server in the USA and stored there. There is no adequacy decision from the EU Commission for the USA. The data is transferred on the basis of standard contractual clauses as appropriate guarantees for the protection of personal data, available at: https://policies.google.com/privacy/frameworks and https://business.safety.google/adsprocessorterms/. Both Google and US government authorities have access to your data. Google may link your data to other data, such as your search history, your personal accounts, your usage data from other devices, and any other data that Google has about you.
IP anonymization is activated on this website. This means that your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
Your personal data is processed on the basis of Art. 6 (1) (f) GDPR out of our overriding legitimate interest in the needs-based and targeted design of the website. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation.
You can prevent Google Analytics from collecting and processing data related to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de
To prevent Google Analytics from collecting and storing data across all devices, you can set an opt-out cookie. Opt-out cookies prevent your data from being collected in the future when you visit this website. You must opt out on all systems and devices used for this to be effective. If you delete the opt-out cookie, requests will be sent to Google again. If you click here, the opt-out cookie will be set: Deactivate Google Analytics.
Deactivate Google Analytics
Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/ and at https://policies.google.com/technologies/cookies?hl=de.
Use of the Facebook Pixel
We use the „Custom Audiences“ remarketing function of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, „Facebook“) on our website.
Meta Platforms Ireland and we are jointly responsible for the collection of your data when integrating the service and the transmission of this data to Facebook. This is based on an agreement between us and Meta Platforms Ireland regarding the joint processing of personal data, which defines the respective responsibilities. The agreement is available at https://www.facebook.com/legal/controller_addendum. We are therefore particularly responsible for fulfilling the information obligations pursuant to Articles 13 and 14 GDPR, for adhering to the security requirements of Article 32 GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Articles 33 and 34 GDPR, insofar as a breach of the protection of personal data affects our obligations under the joint processing agreement. Meta Platforms Ireland is responsible for enabling the rights of those affected pursuant to Articles 15 – 20 GDPR, for adhering to the security requirements of Article 32 GDPR with regard to the security of the service, and for the obligations under Articles 33 and 34 GDPR, insofar as a breach of the protection of personal data affects Meta Platforms Ireland’s obligations under the joint processing agreement.
The application serves the purpose of targeting website visitors with interest-based advertising on the Facebook social network. For this purpose, the Facebook remarketing tag has been implemented on the website. This tag establishes a direct connection to the Facebook servers when you visit the website. This transmits to the Facebook server which of our pages you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the Facebook social network, you will then see personalized, interest-based Facebook ads.
Your data may be transferred to the USA. There is no adequacy decision from the EU Commission for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://www.facebook.com/legal/EU_data_transfer_addendum.
Your personal data is processed on the basis of Art. 6 (1) (f) GDPR out of our overriding legitimate interest in targeting page visitors with interest-based advertising. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation. You can deactivate the „Custom Audiences“ remarketing function here.
For more information about how Facebook collects and uses data, your rights in this regard, and options for protecting your privacy, please see Facebook’s privacy policy at https://www.facebook.com/about/privacy/.
Plug-ins and Other
Use of YouTube
We use the function for embedding YouTube videos on our website from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; „YouTube“). YouTube is an affiliated company of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; „Google“).
This function displays videos stored on YouTube in an iFrame on the website. The „Enhanced Privacy Mode“ option is activated. This means that YouTube does not store any information about website visitors. Only when you watch a video is information about it transmitted to YouTube and stored there. Your data may be transferred to the USA. There is no adequacy decision from the EU Commission for the USA. Data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, available at: https://policies.google.com/privacy/frameworks.
Your personal data is processed on the basis of Art. 6 (1) (f) GDPR, based on our overriding legitimate interest in tailoring the website to meet your needs and target your interests. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation.
Further information on the collection and use of data by YouTube and Google, your rights in this regard, and options for protecting your privacy can be found in YouTube’s privacy policy at https://www.youtube.com/t/privacy.
Use of Vimeo
We use plug-ins from Vimeo Inc. (555 West 18th Street, New York, New York 10011, USA; „Vimeo“) on our website to embed videos from the „Vimeo“ portal.
When you access pages of our website containing such a plug-in, a connection to Vimeo’s servers is established, and the plug-in is displayed on the page by sending a message to your browser. This transmits both your IP address and information about which of our pages you have visited to Vimeo’s servers.
If you are logged in to Vimeo, Vimeo assigns this information to your personal user account. When you use the plug-in functions (e.g., by starting a video by clicking the corresponding button), this information is also assigned to your Vimeo account.
Your data may be transferred to the USA. There is no adequacy decision from the EU Commission for the USA. Data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, available at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
Your personal data is processed on the basis of Art. 6 (1) (f) GDPR, based on our overriding legitimate interest in tailoring our website to meet your needs and in a targeted manner, as well as Vimeo’s legitimate interest in market analysis and improving its services in a needs-based and targeted manner. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation.
If you do not want Vimeo to directly associate the collected information with your Vimeo account, you must log out of Vimeo before visiting our website.
Further information on the purpose and scope of the collection, as well as on the further use and processing of data by Vimeo, as well as your rights and options for protecting your privacy, can be found in Vimeo’s privacy policy: https://vimeo.com/privacy
Use of Google Fonts
We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; „Google“) on our website.
The purpose of data processing is to ensure the consistent display of fonts on our website. To load the fonts, a connection to Google servers is established when the page is accessed. Cookies may be used for this purpose. Among other things, your IP address and information about the browser you use are processed and transmitted to Google. This data is not linked to your Google account.
Your data may be transferred to the USA. There is no adequacy decision from the EU Commission for the USA. Data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, available at: https://policies.google.com/privacy/frameworks.
Your personal data is processed on the basis of Art. 6 (1) (f) GDPR, based on our overriding legitimate interest in a user-friendly and aesthetic design of our website. You have the right to object to this processing of personal data concerning you based on Art. 6 (1) (f) GDPR at any time by notifying us, for reasons arising from your particular situation.
Further information on data processing and data protection can be found at https://www.google.de/intl/de/policies/ and at https://developers.google.com/fonts/faq.
Rights of Data Subjects and Storage Period
Storage Period
After the contract has been fully processed, the data will initially be stored for the duration of the warranty period, then taking into account statutory retention periods, in particular those under tax and commercial law, and then deleted after the expiry of the period unless you have consented to further processing and use.
Rights of the data subject
You are entitled to the following rights under Articles 15 to 20 GDPR if the legal requirements are met: Right to information, rectification, erasure, restriction of processing, and data portability.
Furthermore, pursuant to Article 21 (1) GDPR, you have the right to object to processing based on Article 6 (1) (f) GDPR, as well as to processing for direct marketing purposes.
Right to lodge a complaint with the supervisory authority
According to Article 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is unlawful.
Right to object
If the personal data processing listed here is based on our legitimate interest pursuant to Article 6 (1) (f) GDPR, you have the right to object to this processing at any time with future effect for reasons arising from your particular situation.
Once you have objected, the processing of the data in question will be terminated unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.
Last updated: January 10, 2022
