{"id":2393,"date":"2023-12-08T17:54:21","date_gmt":"2023-12-08T15:54:21","guid":{"rendered":"https:\/\/blog.cinfinity.de\/?page_id=2393"},"modified":"2026-03-31T11:58:54","modified_gmt":"2026-03-31T09:58:54","slug":"datenschutz","status":"publish","type":"page","link":"https:\/\/cinfinity.de\/en\/datenschutz\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Privacy policy<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Privacy policy<\/strong><\/p>

Scope: This privacy policy applies to the website www.cinfinity.de and the CINFINITY app. The separate CINFINITY store at store.cinfinity.de, the online stores of participating cinemas, the app stores and other external websites and services are subject to their own data protection notices.<\/p><\/td><\/tr><\/tbody><\/table>

\u00a0<\/p>

1) Information on the collection of personal data and contact details of the controller<\/strong><\/p>

1.1 General information<\/strong><\/p>

Thank you for visiting our website and for using the CINFINITY app. In the following, we will inform you about which personal data we process, for what purposes this is done and on what legal basis the processing takes place. Personal data is all data with which you can be personally identified.<\/p>

1.2 Person responsible<\/strong><\/p>

The controller in charge of data processing within the meaning of the General Data Protection Regulation (GDPR) is CINFINITY GmbH, Theaterplatz 1, 23909 Ratzeburg, Germany, phone: 04541 - 885 82 0, email: info@cinfinity.de.<\/p>

1.3 Data protection contact<\/strong><\/p>

If you have any questions about data protection and the assertion of your rights as a data subject, you can contact us at any time at datenschutz@cinfinity.de.<\/p>

1.4 Encryption<\/strong><\/p>

Our website and the CINFINITY app use SSL or TLS encryption for security reasons and to protect the transmission of confidential content.<\/p>

2) Data collection when visiting our website<\/strong><\/p>

If you use our website for purely informational purposes, i.e. if you do not register, submit forms or send us information in any other way, we only collect the data that your browser transmits to our server (server log files). This data is technically necessary to display the website to you and to ensure stability, security and functionality.<\/p>

  • Website or specific subpage accessed<\/li>
  • Date and time of access<\/li>
  • Amount of data transferred<\/li>
  • Referrer URL or source of origin<\/li>
  • Browser and operating system used<\/li>
  • IP address used, if necessary in anonymized form<\/li><\/ul>

    The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure and technically error-free provision of our website.<\/p>

    3) Hosting and technical infrastructure<\/strong><\/p>

    The hosting of our website and the backend of the CINFINITY app are provided by our technical service provider Cinuru Research GmbH. Cinuru processes personal data on our behalf as a processor in accordance with Art. 28 GDPR. A corresponding data processing agreement has been concluded.<\/p>

    Cinuru uses Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg, as a sub-processor for the server infrastructure. Data processing is generally carried out on servers within the European Union. Due to internal support and maintenance processes within the Group, it cannot be completely ruled out that data may also be accessed from the USA in individual cases. If personal data is transferred to a third country, this is done on the basis of the EU-U.S. Data Privacy Framework and - if necessary - additionally on the basis of the standard contractual clauses of the EU Commission.<\/p>

    4) Cookies, similar technologies and consent management<\/strong><\/p>

    We use cookies and similar technologies on our website. Some of these are technically necessary to provide the website and its basic functions. We only use other cookies and technologies if you have consented to this, for example for statistical, analytical or marketing purposes.<\/p>

    The legal basis for the use of technically necessary cookies is Art. 6 para. 1 lit. f GDPR or - as far as the storage or access to information in your terminal device is concerned - \u00a7 25 para. 2 TDDDG. The legal basis for optional cookies and comparable technologies is your consent in accordance with Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG.<\/p>

    You can change or revoke your consent at any time with effect for the future via our cookie consent tool. You can also configure your browser so that cookies are only permitted in individual cases, generally rejected or automatically deleted when the browser is closed. Please note that individual functions of the website may be restricted if cookies are deactivated.<\/p>

    5) Contact, support and contract-related communication<\/strong><\/p>

    If you contact us by e-mail, contact form, telephone or by other means, we process the data you provide exclusively for the purpose of processing your request, for technical administration, for customer support and - if necessary - for the initiation or execution of a contractual relationship.<\/p>

    Which data is processed depends on your request. In particular, this may include your name, your e-mail address, your telephone number, your request, associated contract or booking data and the content of your message. The legal basis is Art. 6 para. 1 lit. b GDPR, insofar as your request serves to initiate or execute a contract, and otherwise Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the proper processing of inquiries and support cases.<\/p>

    6) Newsletter<\/strong><\/p>

    We offer you the opportunity to subscribe to our newsletter on our website and, if applicable, as part of your app usage. To subscribe, we need your e-mail address; further details such as your name are voluntary and are used to address you personally.<\/p>

    We use the double opt-in procedure for newsletter registration. This means that we will send you an e-mail after your registration in which we ask you for confirmation. If no confirmation is received, your registration will not take effect and the data will be deleted after a reasonable period of time.<\/p>

    The newsletter is sent via the service provider Profinews, which acts as a processor on our behalf. The legal basis is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future, in particular via the unsubscribe link in every newsletter email or by sending a message to info@cinfinity.de.<\/p>

    7) CINFINITY App<\/strong><\/p>

    7.1 Download and installation<\/strong><\/p>

    The CINFINITY app is available via the Apple App Store and the Google Play Store. When the app is downloaded, the necessary information is transmitted to the respective app store operator, in particular user ID, time of download and device-related information. We have no influence on this data processing; the respective platform operator is solely responsible in this respect.<\/p>

    7.2 Registration and user account<\/strong><\/p>

    In order to use essential functions of the CINFINITY app, it is necessary to set up a user account. In particular, we process the following data if you provide it or if it is required for registration:<\/p>

    • First and last name<\/li>
    • Address<\/li>
    • E-mail address<\/li>
    • Profile photo<\/li>
    • optionally other contact data voluntarily provided by you, in particular a telephone number<\/li><\/ul>

      The profile photo is used in particular to assign your user account and your personal proof of admission to the participating cinemas. By completing the registration process and confirming the GTC, you also confirm that you have taken note of this privacy policy. The processing of the data required for registration, account management, authentication, proof of admission, contract management and the associated communication - in particular your e-mail address - is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Insofar as we process data to fulfill legal obligations, Art. 6 para. 1 lit. c GDPR is the legal basis; insofar as individual processing operations are necessary for IT security, abuse prevention, fraud prevention or appropriate service communication, we rely on Art. 6 para. 1 lit. f GDPR. Separate consent under data protection law to the use of the email address required for registration and contract execution is not required for this. If separate consent is required by law for individual optional or additional processing, we will obtain this separately.<\/p>

      7.3 Using the app and booking cinema visits<\/strong><\/p>

      When you use the app, we process the data required to provide you with the functions of the app and the use of your CINFINITY subscription. This includes in particular<\/p>

      • Booking data such as movie, cinema, performance, seat, booking time, QR code, scan and cancellation status<\/li>
      • Usage data such as app views, interactions, favorites, linked accounts and bookings for other people<\/li>
      • technical data such as device type, operating system, app version and comparable technical information<\/li><\/ul>

        This processing is carried out to fulfill the usage and subscription contract, to provide the app functionalities, to prevent misuse, for quality assurance and to further develop our offer. The legal basis is Art. 6 para. 1 lit. b GDPR and additionally Art. 6 para. 1 lit. f GDPR.<\/p>

        In addition, we process customer, booking, usage and transaction data from the use of the CINFINITY app and - if relevant - in connection with our offers, insofar as this is necessary to carry out internal statistical evaluations, business analyses, reach and usage analyses, the further development of our offer and the planning, control and evaluation of our own marketing measures. As far as possible, these evaluations are carried out in aggregated or pseudonymized form. The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the economic and user-oriented further development of CINFINITY, the improvement of our offer, internal corporate management and the effective planning and evaluation of our own marketing measures.<\/p>

        7.4 Location-related functions<\/strong><\/p>

        If you allow the app to access location data, we process your approximate location or the location provided by your device in order to show you participating cinemas in your area and to enable location-based functions of the app. The legal basis is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this authorization at any time via the settings of your end device. Unless required for the specific function, we do not store location data permanently.<\/p>

        7.5 Conclusion, administration and billing of subscriptions and other paid services<\/strong><\/p>

        If you use the app to take out, manage, extend, change or cancel a CINFINITY subscription or use other paid services, we process the necessary inventory, contract, billing and transaction data. This includes, in particular, the selected product or tariff, term, start and end date, price, discounts, status information, internal transaction identifiers, billing data and information on payment success, chargebacks, revocations or terminations.<\/p>

        Complete payment data, in particular credit card or account data, is generally processed by the respective payment service provider used or the respective app store operator. Insofar as we receive data in connection with a payment, this is limited to the information required for contract execution, accounting, fraud prevention and processing customer concerns. The legal basis is Art. 6 para. 1 lit. b GDPR and - insofar as statutory retention obligations exist - Art. 6 para. 1 lit. c GDPR.<\/p>

        7.6 Additional services, companion tickets and online stores of the participating cinemas<\/strong><\/p>

        If you book additional services, supplements or tickets for accompanying persons via the app, the booking can be transferred to the online store of the respective participating cinema or linked to its system. The respective cinema is generally responsible for data processing within the scope of its online store, in particular for payment processing there. In this context, we only receive or transmit the data that is necessary for the technical initiation, allocation and execution of the booking.<\/p>

        7.7 App backend and order processing by Cinuru<\/strong><\/p>

        The development, technical support and operation of the CINFINITY app and the associated backend are carried out by our technical service provider Cinuru Research GmbH as a processor. The data collected during registration and use of the app is processed in the systems operated for us by Cinuru. Processing takes place exclusively on our instructions and within the scope of the contractually agreed purposes.<\/p>

        7.8 Technical protocols, fault diagnosis and IT security<\/strong><\/p>

        To ensure stable and secure app operation, we also process technical log data, internal identifiers, device-specific information, error messages, diagnostic and crash data as well as comparable data, insofar as this is necessary for operation, error analysis, abuse prevention, security and support. The legal basis is Art. 6 para. 1 lit. b GDPR, insofar as the processing is necessary for the provision of the app, as well as Art. 6 para. 1 lit. f GDPR.<\/p>

        7.9 E-mail communication, advertising to existing customers and marketing<\/p>

        We use the email address you provide when registering, using the app or taking out a CINFINITY subscription to send you contract, account, booking, security and service-related information about your user account, your bookings and your subscription. The legal basis is Art. 6 para. 1 lit. b GDPR, insofar as the respective message is necessary for the execution of the user or subscription contract, Art. 6 para. 1 lit. c GDPR, insofar as legal obligations exist, and otherwise Art. 6 para. 1 lit. f GDPR. Separate consent is not required for this. Insofar as the legal requirements of Section 7 (3) UWG are met, we may also use the e-mail address received in connection with the conclusion of a contract to send you advertising for CINFINITY's own similar products or services. The legal basis in this respect is Art. 6 para. 1 lit. f GDPR in conjunction with Section 7 para. 3 UWG. You can object to such use at any time with effect for the future without incurring any costs other than the transmission costs according to the basic rates. We obtain separate consent in accordance with Art. 6 para. 1 lit. a GDPR for any further newsletter mailings or other advertising emails that do not fall under Section 7 para. 3 UWG.<\/p>

        7.10 Push notifications<\/strong><\/p>

        The CINFINITY app can send push notifications. We use booking, account, security and fault-related push notifications, insofar as they are necessary for the use of the app, the execution of the contract or the security of your account, on the basis of Art. 6 para. 1 lit. b or lit. f GDPR; technical delivery also requires that you have activated push permissions on your device. A device-specific push ID is processed in this case. We only send promotional push notifications or push notifications that are not required for the execution of the contract on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can deactivate push permissions at any time in the settings of your end device.<\/p>

        7.11 Use by minors<\/strong><\/p>

        If CINFINITY is used by minors and the contract is concluded or the subscription is managed by a parent or guardian, we process the data of the parent or guardian required for this purpose as well as the data of the underage user account required to use the offer. The processing is carried out for the performance of the contract and to fulfill accompanying legal obligations on the basis of Art. 6 para. 1 lit. b and lit. c GDPR.<\/p>

        8) Recipients and categories of recipients<\/strong><\/p>

        Your personal data will only be passed on to third parties if this is necessary for the stated purposes, if we are legally obliged to do so or if you have given your consent. Recipients may be in particular<\/p>

        • Cinuru Research GmbH as processor for hosting, backend, development and technical operation of website and app<\/li>
        • Amazon Web Services EMEA SARL (AWS) as sub-processor for the server infrastructure<\/li>
        • Profinews as processor for newsletter distribution<\/li>
        • App store operators and payment service providers used, insofar as this is necessary for the conclusion, renewal, billing or reversal of subscriptions or other paid services<\/li>
        • participating cinemas as independently responsible parties, insofar as bookings, surcharges or additional services are processed via their systems<\/li>
        • Google Ireland Limited for Google Analytics, YouTube and Google Maps<\/li>
        • Meta Platforms Ireland Limited for the Meta Pixel<\/li>
        • Complianz B.V. for consent management<\/li><\/ul>

          9) Data transfer to third countries<\/strong><\/p>

          If we use services from providers based in or affiliated with third countries, in particular in the USA, personal data may be transferred to these countries. This applies in particular to Google services, Meta and the infrastructure provided by AWS. Insofar as the providers concerned are certified under the EU-U.S. Data Privacy Framework, we base data transfers on the corresponding adequacy decision of the European Commission. In addition, standard contractual clauses of the EU Commission may be used.<\/p>

          10) Embedded content: YouTube<\/strong><\/p>

          Videos from the YouTube service may be integrated on our website. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. When you access the relevant subpages or play a video, personal data, in particular your IP address and information about usage, may be transmitted to Google. If legally required, this will only be done with your consent in accordance with Art. 6 para. 1 lit. a GDPR and \u00a7 25 para. 1 TDDDG. You can revoke your consent at any time via the cookie consent tool.<\/p>

          11) Web analytics and online marketing<\/strong><\/p>

          11.1 Google Analytics<\/strong><\/p>

          We use Google Analytics, a web analysis service of Google Ireland Limited, to evaluate the use of our website, to improve our offer and to analyze marketing measures. In particular, pages viewed, interactions, approximate location data, abbreviated IP addresses, technical information, sources of origin and pseudonymous identifiers may be processed. Where legally required, processing is only carried out on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG.<\/p>

          Google may also transfer the collected data to servers in the USA. According to our settings, user-related data in Google Analytics is deleted after 14 months; cookies can be stored for up to two years. You can revoke your consent at any time using the cookie consent tool or prevent the collection of data using suitable browser settings or browser add-ons.<\/p>

          11.2 Meta pixels<\/strong><\/p>

          We use the meta pixel of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, on our website to measure the effectiveness of our advertising measures and to optimize the display of advertising. This allows us to track whether users interact with our website after clicking on a Meta ad.<\/p>

          If extended matching is activated, contact details, in particular hashed e-mail addresses and, if applicable, other data entered by you in forms, may also be transmitted to Meta within the scope of your consent, insofar as this is necessary for the allocation and optimization of our campaigns. Insofar as personal data is collected on our website with the help of the Meta pixel and forwarded to Meta, we and Meta are jointly responsible for this collection and transmission. The legal basis is your consent in accordance with Art. 6 para. 1 lit. a GDPR and \u00a7 25 para. 1 TDDDG. You can withdraw your consent at any time with effect for the future.<\/p>

          12) Further tools<\/strong><\/p>

          12.1 Compliance<\/strong><\/p>

          To manage your cookie consent, we use the Complianz consent tool from Complianz B.V., Atoomweg 6b, 9743 AK Groningen, Netherlands. This tool stores whether and to which data processing you have consented or rejected. The legal basis is Art. 6 para. 1 lit. c GDPR and - where relevant - Art. 6 para. 1 lit. f GDPR, as we are legally obliged to document consent in a verifiable manner.<\/p>

          12.2 Google Maps<\/strong><\/p>

          Google Maps may be integrated on individual subpages of our website in order to visually display locations and facilitate directions. The provider is Google Ireland Limited. When such a page is accessed, personal data, in particular your IP address and technical usage data, may be transmitted to Google. Insofar as legally required, this is only used with your consent in accordance with Art. 6 para. 1 lit. a GDPR and \u00a7 25 para. 1 TDDDG. You can revoke your consent at any time via the cookie consent tool.<\/p>

          13) Rights of the data subject<\/strong><\/p>

          In particular, you are entitled to the following rights in accordance with the statutory provisions:<\/p>

          • Right to information in accordance with Art. 15 GDPR<\/li>
          • Right to rectification in accordance with Art. 16 GDPR<\/li>
          • Right to erasure in accordance with Art. 17 GDPR<\/li>
          • Right to restriction of processing in accordance with Art. 18 GDPR<\/li>
          • Right to information in accordance with Art. 19 GDPR<\/li>
          • Right to data portability pursuant to Art. 20 GDPR<\/li>
          • Right to withdraw consent granted pursuant to Art. 7 (3) GDPR<\/li>
          • Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR<\/li><\/ul>

            The competent supervisory authority for our company is the Independent State Center for Data Protection Schleswig-Holstein (ULD), Holstenstra\u00dfe 98, 24103 Kiel.<\/p>

            13.1 Right of objection<\/strong><\/p>

            If we process your personal data on the basis of Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time with effect for the future for reasons arising from your particular situation. If personal data is processed for the purpose of direct marketing, you have the right to object to the processing for this purpose at any time.<\/p>

            14) Duration of storage of personal data<\/strong><\/p>

            We only store personal data for as long as this is necessary for the respective purposes, a corresponding legal basis exists or statutory retention obligations require longer storage. The following principles apply in particular:<\/p>

            • We generally store account data from the app for the duration of the existing user account; after deletion of the account, it will be deleted, provided that there are no statutory retention obligations or legitimate interests, in particular for legal defense, to the contrary.<\/li>
            • We store data relevant to contracts, invoicing and tax law for the duration of the statutory retention periods.<\/li>
            • We generally store contact and support requests until the final processing of the respective process and beyond that only insofar as this is necessary for legal or organizational reasons.<\/li>
            • We store newsletter data until you withdraw your consent or unsubscribe from the newsletter. We store data that we use to the extent permitted by law for advertising to existing customers in accordance with Section 7 (3) UWG until you object to this use or until the legal requirements for this no longer apply.<\/li>
            • We store proof of consent from the cookie consent tool for as long as is necessary to prove that your consent has been properly obtained and managed.<\/li>
            • We only store push IDs, technical logs and diagnostic data for as long as is necessary for operation, security, troubleshooting and support.<\/li><\/ul>

              15) Up-to-dateness and amendment of this privacy policy<\/strong><\/p>

              This privacy policy is valid as of March 13, 2026. Due to the further development of our website, our app, our offers or due to changed legal or official requirements, it may become necessary to adapt this privacy policy. The current version is available on our website.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

              Datenschutz­erkl\u00e4rung Datenschutzerkl\u00e4rung Geltungsbereich: Diese Datenschutzerkl\u00e4rung gilt f\u00fcr die Website www.cinfinity.de und die CINFINITY App. F\u00fcr den separaten CINFINITY Shop unter shop.cinfinity.de, die Online-Shops der teilnehmenden Kinos, die App-Stores sowie sonstige externe Websites und Dienste gelten deren eigene Datenschutzhinweise. \u00a0 1) Information \u00fcber die Erhebung personenbezogener Daten und Kontaktdaten des Verantwortlichen 1.1 Allgemeines Wir freuen uns […]<\/p>","protected":false},"author":6,"featured_media":5978,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-2393","page","type-page","status-publish","has-post-thumbnail","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/cinfinity.de\/en\/wp-json\/wp\/v2\/pages\/2393","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cinfinity.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/cinfinity.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/cinfinity.de\/en\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/cinfinity.de\/en\/wp-json\/wp\/v2\/comments?post=2393"}],"version-history":[{"count":53,"href":"https:\/\/cinfinity.de\/en\/wp-json\/wp\/v2\/pages\/2393\/revisions"}],"predecessor-version":[{"id":8863,"href":"https:\/\/cinfinity.de\/en\/wp-json\/wp\/v2\/pages\/2393\/revisions\/8863"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cinfinity.de\/en\/wp-json\/wp\/v2\/media\/5978"}],"wp:attachment":[{"href":"https:\/\/cinfinity.de\/en\/wp-json\/wp\/v2\/media?parent=2393"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}