Status: March 2025
Megaherz Gmbh (hereinafter: “megaherz” or “we“) takes the protection of personal data very seriously. In the following, we explain which data we process in the context of providing our website, when and for what purposes.
1. Responsibility
The controller pursuant to Art. 4 (7) of the European General Data Protection Regulation (GDPR) is:
megaherz Gmbh
Siedlerstraße 2
85774 Unterföhring
Germany
Phone +49 89 950004 0
Fax +49 89 950004 130
e-mail info@megaherz.org
You can contact our data protection officer at any time with concerns about data protection, e.g. by e-mail to datenschutz@megaherz.org or at our postal address with the addition “the data protection officer”.
2. Legal basis, purpose and storage period of the processing of personal data
a) Website visit
Each time our website is accessed, our system automatically collects the following data and information from the computer system of the accessing computer:
- Browser type and version used
- Operating system of the user
- Date and time of access
- Internet service provider of the user
- IP address of the user
- Amount of data transferred
- Notification of successful retrieval
- Website from which the user’s system accesses our website
- Website that is accessed by the user’s system via our website
The legal basis for the temporary processing of this information is Art. 6 para. 1 lit. f GDPR. The temporary storage of this data is necessary to enable the user to use the website in a fully functional manner. For this purpose, the user’s IP address in particular must remain stored for the duration of the session. In addition, we use the data for the technical optimisation of the website and to ensure the security of our information technology systems. These purposes also constitute our legitimate interest in data processing, Art. 6 para. 1 lit. f GDPR.
The data is generally deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. Log file information is stored for a maximum of 7 days for security reasons (e.g. to investigate misuse or fraud) and then deleted. Data whose further storage is required for evidence purposes is excluded from deletion until the respective incident has been finally clarified.
b) Contact
If you send us a message, e.g. by e-mail, we process the following data provided by you: Name, e-mail address and any other personal data that you provide in your message to us.
The legal basis for the collection of data in the context of contacting us is Art. 6 para. 1 lit. b GDPR (processing is necessary for the fulfilment of a contract with the data subject) if a contractual relationship is sought or already exists. The legal basis is Art. 6 para. 1 lit. f GDPR (processing is necessary for the purposes of our legitimate interests) if no contractual relationship exists or is intended, e.g. if the contact is of a general nature. In the latter case, our legitimate interest is to respond to your enquiry in an appropriate manner.
The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected or for documentation purposes. Mandatory statutory provisions – in particular retention periods – remain unaffected.
c) Applications
You can apply for a job with us by sending us an e-mail with your application documents or by post.
We process the information that we receive from you as part of the application process, e.g. your name, e-mail address, telephone number, CV, letter of motivation and information from correspondence with you. Your personal data will be processed exclusively for the purpose of carrying out the application process. Your data will be treated as strictly confidential.
The legal basis for the processing described above as part of the application procedure is Sec. 26 (1) BDSG (processing as part of the decision on the establishment of an employment relationship).
Basically, we do not require any special categories of personal data within the meaning of Art. 9 GDPR, such as health data, for the application process. If such information is exceptionally relevant for the application process (e.g. in the case of a severe disability, so that we can fulfil our legal obligations under labour and social law), we process it together with the other data you provide. The legal basis for data processing in this case is Art. 9 para. 2 lit. b GDPR in conjunction with Art. 26 para. 3 BDSG. § Section 26 para. 3 BDSG.
If your application is successful, the documents and information provided will become part of your personnel file and will be stored and processed for the purpose of implementing and terminating the employment relationship.
If you are not considered as part of the application process, your data and application documents will be deleted within 90 days of the end of the application process, unless you have given us your express consent during the application process to continue to store your data and application documents, e.g. for consideration of your person for another or future position; in this case, your data will be deleted one year after the end of the application process.
d) Use of cookies
Cookies are small text files that store information on the use of our website (e.g. web pages visited, number of visits, visit times, time spent on individual pages, browser used, operating system used, etc.) on your computer or device if you allow this via your browser settings. Cookies cannot execute programmes or transfer viruses to your computer. In addition to cookies, so-called pixels (also known as tracking pixels or web beacons) may also be used on our website. Pixels are small, invisible graphics that are integrated into the website and can also be used to analyse information on the use of our website by website visitors. For the sake of standardisation, the term “cookies” is used below when other cookie-like technologies such as those in the previous sentence are used and/or also in the case of e.g. the storage of data as a “local storage item” in the browser.
When you use our website, we only use cookies to save the language selection you have made for our website. The purpose of using these cookies, which are necessary for the operation of the website, is to enable the proper and meaningful usability of our website. We do not use any analysis or marketing cookies.
The legal basis for the processing of information from technically necessary cookies is Sec. 25 (2) No. 2 of the Act on Data Protection and Privacy in Telecommunications and Digital Services (TDDDG). Insofar as personal data, in particular your IP address, is processed in the context of technically necessary cookies, the legal basis for the processing is Art. 6 para. 1 lit. f GDPR (processing is necessary to safeguard our legitimate interests). We have a legitimate interest in being able to offer our website visitors a properly functioning, user-friendly and modern website. Basic functions of our website cannot be offered without the use of cookies. Our legitimate interest also lies in these purposes.
These cookies are deleted after one year.
e) Videos and images
Videos and images that you can view on our website are provided via Content Delivery Network (CDN). The following data is processed for this purpose: IP address, user agent and low-resolution geolocalisation data derived from the IP address.
The legal basis for the aforementioned data processing is Art. 6 para. 1 sentence 1 lit. f GDPR (processing is necessary for the purposes of our legitimate interests). As a film production company, we present the films (or teasers of these films) we have produced on our website in order to give people an impression of our portfolio. This is also our legitimate interest.
The data is processed within the EU.
The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected or for documentation purposes.
f) Social media channels
We maintain so-called fan pages or accounts on the social networks Instagram, LinkedIn and Vimeo in order to provide you with information about our company and our projects within social networks, as well as to offer you other ways to contact us and find out about our company’s services. In the following, we will inform you which data we or the respective social network process in connection with your accessing and using our fan pages/accounts.
You do not need to be a member of the respective social network to view the content of our social media presence. Please note, however, that the social networks also collect and store data from website visitors without a user account when the respective social network is accessed (e.g. technical data to be able to display the website to you) and use cookies and similar technologies, over which we have no influence whatsoever. Details on this can be found in the privacy policy of the respective social network.
When using our fan pages on the social media platforms Instagram, LinkedIn and Vimeo, megaherz and Meta Platforms Ireland Limited, LinkedIn Ireland Unlimited Company and Vimeo, LLC are jointly responsible for the processing of personal data of visitors to our Instagram fan page.
(1) Processing by megaherz
If you wish to interact with the content on our social media presences, e.g. comment on, share or like our posts/contributions and/or wish to contact us via messenger functions, prior registration with the respective social network and the provision of personal data is required
If you interact with us via the respective social network, we generally process your user name that you use to contact us and may store other data provided by you if this is necessary to process/respond to your request. The legal basis for this is Art. 6 para. 1 lit. f GDPR (processing is necessary for the purposes of the legitimate interests pursued by the controller). Our legitimate interest lies in responding to your contact enquiry.
Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the deletion will take place after these reasons no longer apply.
(2) Processing by the social media platforms
We have no influence on the data processing by the social networks in the context of your use. To the best of our knowledge, your data is stored and processed in particular in connection with the provision of the services of the respective social network and also for the analysis of user behaviour (using cookies, pixels/web beacons and similar technologies) on the basis of which advertising based on your interests is displayed both within and outside the respective social network. It cannot be ruled out that your data will also be stored by the social networks outside the EU/EEA and passed on to third parties.
Information on the exact scope and purposes of the processing of your personal data, the storage period/deletion and guidelines on the use of cookies and similar technologies as part of the registration and use of social networks can be found in the data protection provisions/cookie guidelines of the social networks, where you will also find information on your rights and objection options.
We recommend that you assert your rights under data protection law to information, correction, deletion, restriction of processing, objection and data transfer directly against the respective social network, insofar as data processing by the social networks is involved:
- Instagram: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
- LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
- Vimeo, Vimeo, LLC, 555 West 18th Street, New York 10011
3. Data transfer
Like every company, we also use service providers who provide web hosting services to us. In this context, we transmit your personal data to our web host SpaceNet AG, Joseph-Dollinger-Bogen 14, D-80807 Munich.
In the case of some social media platforms, it cannot be ruled out that personal data will be transferred outside the EU/EEA to third countries (in particular the USA) due to the interconnectedness of the group. In these third countries, there is usually no level of protection for data security comparable to that in the EU/EEA. In order to ensure an adequate level of data protection, we make sure that the social media platforms we select are certified under the EU-US Data Privacy Framework Agreement and/or conclude so-called EU standard clauses, according to which the corresponding platform undertakes to comply with standards set by the EU Commission in order to protect your personal data. We also select social media platforms according to whether they provide additional guarantees, such as acquired protection certificates and/or proof of additional and appropriate technical and organisational measures to protect your personal data (e.g. data encryption).
4. Non-existence of automated decision-making
Please note that you will not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you.
5. No obligation to provide personal data
The provision of personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are therefore not obliged to provide the personal data. However, in order to be able to use our website (see the description of the respective services in section 2), it is necessary to provide the personal data required for this.
6 Rights of the data subject
You have the following rights vis-à-vis us with regard to your personal data:
- Right to information (Art. 15 GDPR),
- Right to rectification (Art. 16 GDPR),
- Right to erasure (Art. 17 GDPR; “right to be forgotten”),
- Right to restriction of processing (Art. 18 GDPR),
- Right to object to processing (Art. 21 GDPR),
- Right to data portability (Art. 20 GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement concerning the processing of your personal data by us if you consider that the processing of personal data relating to you is unlawful.
If you have given us your consent to process your data, you can revoke this at any time with effect for the future. This does not affect the lawfulness of the processing of your data until you withdraw your consent. To assert your rights or for other data protection concerns, you can contact us at any time via the contact channels listed in section 1 above and/or the contact channels listed in our legal notice.
We would also like to point out that if your personal data is processed on the basis of a legitimate interest in the context of the balancing of interests pursuant to Art. 6 para. 1 lit. 1 f GDPR, you have the right to object to the processing of your personal data at any time.