Print page

General Terms and Conditions of Richtwerk GmbH

§ 1 - Scope, Definitions

  1. To the business relations between Richtwerk GmbH (hereinafter "Offeror") and the customer (hereinafter "Customer"), the General Terms and Conditions below as amended from time to time shall solely apply. Diverging Terms and Conditions of the Customer shall not be accepted unless the Offeror explicitly accepts their validity.
  2. The Customer is a consumer unless the purpose of the ordered supplies and services can be allocated to his or her commercial or self-employed professional activity. In contrast, entrepreneur means any natural or legal person or a legal partnership that, when contract is entered into, acts by exercising their commercial or self-employed professional activity.
  3. Upon conclusion of the contract, the Customer assures being an entrepreneur as defined above when creating contractual relations with the Offeror.

§ 2 - Conclusion of the Contract

  1. The Customer may select products and services from the assortment and collect them in what is called a basket by using the "Buy" button. By using the "Check out" button, the Customer makes a binding offer to purchase the goods in the basket. Prior to submitting the order, the Customer can change and view the data at any time. The offer can only be made and submitted if the Customer has accepted these Terms and Conditions and by clicking the "Accept Terms and Conditions" button and incorporated them into his or her offer.
  2. The contract shall be concluded if the Offeror declares acceptance of the offer to the Customer. This is carried out via email, the so-called "Order Confirmation".

§ 3 - Prices and Shipping Costs

All given prices, including those in the order confirmation, shall be non-binding. In case of substantial changes in the factors determining the prices prior to definite acceptance of the order, a corresponding adjustment to such changes shall be reserved.


§ 4 - Payment Terms

  1. The Customer may make payment by credit card, advance payment or PayPal.
  2. Payment of the purchase price shall be due directly upon conclusion of the contract.

§ 5 - Delivery

If the Customer chooses payment by credit card, required access to the online application will be effected immedietly, latest within 24 hours via the email address that the customer indicated.

§ 6 - Subject Matter of the Agreement

  1. The subject matter of this contract is the access of the online service indicated in the order confirmation, including the associated user documentation ("Contractual Software") and granting of the utilization rights described in item 7.
  2. The offeror shall make the contractual access available for the customer on its homepage (http://www.DCPtools.com). The user name required for logging into the protected area of its website and the relevant password shall be created by the customer.
  3. The quality and functionality of the contractual access shall be exclusively determined in the order confirmation and the product description. The details contained therein shall be understood as service descriptions and not as guarantees.
  4. Installation and configuration services shall not be a part of the contract. Neither shall checking data or files (e.g. server certificates) which the offeror takes over without modification from the customer or third parties (e.g. databases) and which it uses for the customer, be a part of the contract.

§ 7 - Granting of Rights

  1. The Customer shall be granted a non-exclusive use for a definite period of time or volume to use the contractual online access. The admissible use shall comprise access to the contractual online system and the use by the customer for the intended purpose. The activation as well as the type and extent of use shall be determined by the order confirmation.
  2. The Customer shall, in no case, be entitled to rent the acquired contractual online acess or to sublicense it in any other way, to publicly display them wired or wireless or to make them accessible or to make them available to third parties against payment or free of charge.
  3. Copyright notices, serial numbers and any other features serving software identification must not be modified or removed from the contractual online system.

§ 8 - Material Defects Warranty, Guarantee

  1. The offeror shall be liable for material defects pursuant to the applicable statutory provisions, including but not limited to Sections 434 et seqq. of the German Civil Code (BGB). The warranty duty of the offeror shall be limited to the usage time or usage amount during buying.
  2. Claims for damages relating to defects due to intentional or gross negligent infringement of duties on the part of the Offeror, a legal representative (gesetzlicher Vertreter) or person used to perform any obligations (Erfüllungsgehilfe) for injury to life, body or health, for guaranteed quality feature or defects that have been fraudulently concealed, and breach of fundamental contractual obligations (cardinal obligations - Kardinalpflichten; cf. item 9 no. 1) and claims under the German Product Liability Act (Produkthaftungsgesetz), the statutory limitation periods shall apply.
  3. The Offeror shall only provide an additional guarantee if such guarantee was explicitly given in the order confirmation for the relevant item.

§ 9 - Liability

  1. Claims for damages of the Customer are excluded. Exceptions shall be claims for damages of the Customer for injury to life, body, health or breach of fundamental contractual obligations (cardinal obligations - Kardinalpflichten) and liability for other damage based on intentional or gross negligent infringement of duties on the part of the Offeror, its legal representatives (gesetzlicher Vertreter) or persons used to perform its obligations (Erfüllungsgehilfe). Fundamental contractual obligations shall refer to such obligations whose performance is required to achieve the objective of the Contract.
  2. The amount of liability shall be limited to foreseeable damage typical of such a contract.
  3. The restrictions of paragraphs 1 and 2 shall also apply toward the legal representatives (gesetzlicher Vertreter) or persons used to perform its obligations (Erfüllungsgehilfen) of the Offeror if claims are asserted directly against them.
  4. The provisions of the German Product Liability Act (Produkthaftungsgesetz) shall remain unaffected.

§ 10 - Information on Data Processing

  1. The Offeror collects data of the Customer within the course of carrying out contracts. It adheres to, inter alia, the provisions of the German Federal Data Protection Act (Bundesdatenschutzgesetz) and the German Tele Media Act (Telemediengesetz). Without the prior approval of the Customer, the Offeror will only collect, process or use inventory data and data on usage to the extent required to carry out the contract and to enable the use and invoice of telemedia.
  2. Without the Customer's prior approval, the Offeror will not use data of the Customer for advertising, market research or opinion polling purposes.

§ 11 - Final Provisions

  1. Contracts concluded between the Offeror and the Customer shall be governed by the laws of the Federal Republic of Germany to the exclusion of the UN Convention on the Sale of Goods.
  2. If the Customer is a merchant, a legal body under public law or special fund under public law, the place of jurisdiction for all disputes arising out of contract relations between the Customer and the Offeror shall be the headquarters of the Offeror.
  3. Including but not limited, conventional telephony and submission of information via Internet shall be deemed communications channels. For transparent and purpose-oriented communications, the parties intend, as a rule, to communicate by email. The parties shall encrypt or sign electronic messages or data only if explicitly agreed in writing. In the event that any indicators for potential interferences regarding correspondence by email become apparent, the parties shall be obligated to immediately take any required measures and to immediately inform the other party.
  4. The remaining parts of the Contract shall remain binding even if individual items are invalid. The invalid items shall be replaced by the statutory provisions if available. If this would result in unreasonable hardship to a party, the contract shall become invalid it its entirety.

Privacy Policy

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data means any data by which you can be personally identified. Detailed information on data protection can be found in the Privacy Policy set out below.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. The operator’s contact details can be found in the section “Information on the Controller” in this Privacy Policy.

How do we collect your data?

Some data is collected when you provide it to us. This may, for example, include data that you enter into a contact form.

Other data is collected automatically or with your consent by our IT systems when you visit the website. This primarily includes technical data, such as your internet browser, operating system or the time at which the page was accessed. This data is collected automatically as soon as you access this website.

What do we use your data for?

Some data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour. Where contracts can be concluded or initiated via the website, the data transmitted will also be processed for contractual offers, orders or other service enquiries. In addition, we process data insofar as this is necessary for the provision and use of our DCPtools services, particularly DCPshare, KDM Studio and KDM Inspector.

What rights do you have regarding your data?

You have the right, at any time and free of charge, to obtain information about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you may withdraw this consent at any time with effect for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You may contact us at any time regarding this or any other questions relating to data protection.

Analytics Tools and Third-Party Tools

When you visit this website, your browsing behaviour may be statistically evaluated. This is primarily carried out using analytics programs.

Detailed information on these analytics programs can be found in the following Privacy Policy.

2. Hosting and Technical Provision

We host the content of our website with the following provider:

Our website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.

When you access our website, the hosting provider processes technical access data required to deliver the website, maintain operational stability, ensure system security and analyse errors. This may include, in particular, your IP address, the date and time of access, pages or files accessed, the amount of data transferred, browser type, operating system, referrer URL and technical status information.

Processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, reliable and high-performance operation of our website. Where consent is required for individual processing activities, processing is based on Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG.

A data processing agreement pursuant to Article 28 GDPR has been concluded with the hosting provider.

3. General Information and Mandatory Disclosures

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this Privacy Policy.

When you use this website, various personal data is collected. Personal data means data by which you can be personally identified. This Privacy Policy explains which data we collect and what we use it for. It also explains how and for what purpose this is done.

Please note that data transmission via the internet, for example when communicating by email, may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information on the Controller

The controller responsible for data processing on this website is:

Richtwerk GmbH
Eiblwiesweg 2
82418 Murnau
Germany

Telephone: +49 8841 99579
Email: info@DCPtools.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names, email addresses or similar information.

Storage Period

Unless a more specific storage period has been stated in this Privacy Policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you submit a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing your personal data, such as retention periods under tax or commercial law. In the latter case, the data will be deleted once these grounds no longer apply.

General Information on the Legal Bases for Data Processing on This Website

If you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR or Article 9(2)(a) GDPR where special categories of data pursuant to Article 9(1) GDPR are processed. Where you have expressly consented to the transfer of personal data to third countries, data processing is also based on Article 49(1)(a) GDPR. Where you have consented to the storage of cookies or access to information on your terminal device, for example through device fingerprinting, data processing is additionally based on Section 25(1) TDDDG. Consent may be withdrawn at any time.

Where your data is required for the performance of a contract or to take steps prior to entering into a contract, we process your data on the basis of Article 6(1)(b) GDPR. Furthermore, where your data is required to comply with a legal obligation, we process it on the basis of Article 6(1)(c) GDPR. Data processing may also be based on our legitimate interest pursuant to Article 6(1)(f) GDPR. The applicable legal bases in each individual case are explained in the following sections of this Privacy Policy.

Data Protection Officer

Jochen Ritzel
Eiblwiesweg 2
82418 Murnau

Telephone: +49 8841 99579
Email: privacy.policy@DCPtools.com

Information on Data Transfers to Third Countries That Are Not Considered Secure Under Data Protection Law and Transfers to US Companies That Are Not DPF-Certified

Among other services, we use tools provided by companies based in third countries that are not considered secure under data protection law, as well as US-based tools whose providers are not certified under the EU-US Data Privacy Framework, or DPF. When these tools are active, your personal data may be transferred to and processed in these countries. Please note that a level of data protection comparable to that of the European Union cannot be guaranteed in third countries that are not considered secure under data protection law.

Please note that, as a secure third country, the United States generally provides a level of data protection comparable to that of the European Union. A transfer of data to the United States is therefore permitted where the recipient is certified under the EU-US Data Privacy Framework, or DPF, or has appropriate additional safeguards in place. Information on transfers to third countries, including the recipients of the data, can be found in this Privacy Policy.

Recipients of Personal Data

As part of our business activities, we cooperate with various external parties. In some cases, this also requires the transfer of personal data to these external parties. We only disclose personal data to external parties where this is necessary for the performance of a contract, where we are legally obliged to do so, for example when transferring data to tax authorities, where we have a legitimate interest in the disclosure pursuant to Article 6(1)(f) GDPR, or where another legal basis permits the disclosure.

When using processors, we only disclose our customers’ personal data on the basis of a valid data processing agreement. Where data is processed jointly, a joint controllership agreement is concluded.

Withdrawal of Your Consent to Data Processing

Many data processing activities are only possible with your express consent. You may withdraw consent that you have already given at any time. The lawfulness of the data processing carried out before the withdrawal remains unaffected by the withdrawal.

Right to Object to Data Collection in Specific Cases and to Direct Marketing pursuant to Article 21 GDPR

WHERE DATA PROCESSING IS BASED ON ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT, AT ANY TIME AND ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA. THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE APPLICABLE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS. THIS CONSTITUTES AN OBJECTION PURSUANT TO ARTICLE 21(1) GDPR.

WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT, AT ANY TIME, TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT MARKETING PURPOSES. THIS CONSTITUTES AN OBJECTION PURSUANT TO ARTICLE 21(2) GDPR.

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work or the place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

Right to Data Portability

You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract in a commonly used, machine-readable format, or to have it transmitted to a third party. Where you request the direct transfer of the data to another controller, this will only be carried out where technically feasible.

Access, Rectification and Erasure

Within the scope of the applicable statutory provisions, you have the right, at any time and free of charge, to obtain information about your stored personal data, its origin and recipients and the purpose of the data processing. Where applicable, you also have the right to request the rectification or erasure of this data. You may contact us at any time regarding this or any other questions relating to personal data.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. You may contact us at any time to exercise this right. The right to restriction of processing applies in the following cases:

  • If you dispute the accuracy of your personal data stored by us, we generally require time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.

  • If the processing of your personal data was or is unlawful, you may request the restriction of data processing instead of erasure.

  • If we no longer require your personal data, but you require it for the establishment, exercise or defence of legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.

  • If you have submitted an objection pursuant to Article 21(1) GDPR, your interests and our interests must be balanced against each other. Until it has been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

Where you have restricted the processing of your personal data, this data may, with the exception of storage, only be processed with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of your browser changes from “http://” to “https://” and by the padlock symbol in your browser bar.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Encrypted Payment Transactions on This Website

Where, following the conclusion of a paid contract, you are required to provide us with your payment details, such as your bank account number for a direct debit authorisation, this data is required to process the payment.

Payment transactions using common payment methods, such as Visa, Mastercard or direct debit, are carried out exclusively via an encrypted SSL or TLS connection. You can recognise an encrypted connection by the fact that the address bar of your browser changes from “http://” to “https://” and by the padlock symbol in your browser bar.

With encrypted communication, the payment data you transmit to us cannot be read by third parties.

Objection to Promotional Emails

We hereby object to the use of contact details published as part of our legal notice obligations for the purpose of sending unsolicited advertising and informational materials. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of promotional information, such as spam emails.

4. Data Collection on This Website

Cookies

Our websites use so-called “cookies”. Cookies are small data packages and do not cause any damage to your terminal device. They are stored on your terminal device either temporarily for the duration of a session, known as session cookies, or permanently, known as permanent cookies. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your terminal device until you delete them yourself or they are automatically deleted by your web browser.

Cookies may originate from us, known as first-party cookies, or from third-party companies, known as third-party cookies. Third-party cookies enable the integration of certain services provided by third-party companies within websites, such as cookies used to process payment services.

Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them, such as the shopping cart function or the display of videos. Other cookies may be used to evaluate user behaviour or for advertising purposes.

Cookies required to carry out electronic communications, to provide certain functions requested by you, such as the shopping cart function, or to optimise the website, such as cookies used to measure the website audience, are stored on the basis of Article 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimised provision of its services. Where consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of this consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

You can configure your browser to inform you when cookies are set, to permit cookies only in individual cases, to exclude the acceptance of cookies in certain cases or in general, and to automatically delete cookies when the browser is closed. Disabling cookies may restrict the functionality of this website.

Where additional cookies and services are used on this website, further information can be found in this Privacy Policy.

Consent Management with TermsFeed Cookie Consent

Our website uses the consent technology provided by TermsFeed Cookie Consent to obtain your consent to the storage of certain cookies on your terminal device or to the use of certain technologies and to document this consent in compliance with data protection law.

When you access our website, your consent decisions, withdrawals and other cookie-related settings are stored. This enables us to demonstrate that the legally required consent has been obtained.

The storage and processing of consent data is based on Article 6(1)(c) GDPR in order to comply with our legal obligations and on Article 6(1)(f) GDPR in order to demonstrate that consent has been properly obtained.

Further information can be found in the TermsFeed Privacy Policy at https://www.termsfeed.com/privacy-policy/

Server Log Files

Whenever our website is accessed, technical data that your browser transmits to our server or hosting provider is automatically processed. This particularly includes:

  • Browser type and browser version

  • Operating system used

  • Referrer URL

  • Host name of the accessing system

  • Time of the server request

  • IP address

  • URL accessed

This data is required to deliver the website, identify technical disruptions, trace attempted misuse and ensure the security of our systems. This data is not combined with other data sources unless this is necessary to investigate security incidents or pursue legal claims.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and technically error-free provision of our online services.

Contact via Form

When you contact us through the contact form or by email, we process the information you provide in order to handle your enquiry. This may particularly include your name, email address, company, customer number, the content of your enquiry, technical information relating to your issue and any other information provided voluntarily.

Where your enquiry relates to a contract or steps prior to entering into a contract, processing is based on Article 6(1)(b) GDPR. In all other cases, it is based on Article 6(1)(f) GDPR, as we have a legitimate interest in efficiently handling incoming enquiries. Where you have given us your consent, Article 6(1)(a) GDPR constitutes the legal basis.

The data will be stored for as long as necessary to process your enquiry. Statutory retention periods and legitimate documentation interests remain unaffected.

Customer Account

When you create a customer account on our website, we process the registration and account data required for this purpose. This may particularly include your name, company, address, email address, access credentials, order history, billing data, licence data, download information, certificate data and support cases.

The customer account is used to manage your orders, licences, downloads, certificates, activations and support enquiries. Processing is based on Article 6(1)(b) GDPR where it is required to establish and use the customer account and to perform our contractual relationship.

In addition, we process certain technical and administrative data on the basis of Article 6(1)(f) GDPR in order to ensure the security of the customer account, protection against misuse and the proper provision of our services.

The data is stored for as long as your customer account exists or statutory retention obligations require further storage. You may request the deletion of your customer account, provided that no statutory or contractual grounds prevent deletion.

5. Use of DCPtools Services

DCPshare

DCPshare is a platform for managing, storing, checking and providing digital film and project materials.

When using DCPshare, customers can upload and manage various files and content. These include, in particular, DCPs, other video files, images, press kits, accompanying materials, project information and other files provided by the customer. Depending on the file and project, this content may contain personal data, such as names, contact information, images, credits, rights information or information relating to project participants.

DCPshare also enables customers to create project-related film websites and make them publicly available. The customer decides which content is published and whether a film website is publicly accessible. Publicly available content may be accessed by third parties.

For the provision of the service, we particularly process account data, project data, uploaded files, file metadata, technical validation information and technically necessary system and security data. Downloads of or access to provided content are not logged on a product-specific basis within DCPshare.

Uploaded files may be automatically subjected to technical checks. In particular, an internal validation procedure checks whether files are complete. The content of uploaded files is not evaluated as part of this process.

Content uploaded and managed by the customer is stored for as long as the customer leaves the content within the service or until the customer account or respective project is deleted. There is currently no automatic deletion period. Customers may decide to delete their content themselves using the available product functions. Statutory retention obligations and legitimate documentation and security interests remain unaffected.

In order to handle support enquiries and analyse errors, our support team may access customer accounts, project data and uploaded content to the extent necessary. Such access is limited to support, maintenance, security or error-analysis purposes.

KDM Studio

KDM Studio is used to manage releases, DKDMs, KDMs, cinema and screen data, certificates, booking periods and the distribution of KDMs.

When using KDM Studio, customers may process release data, film and CPL information, DKDMs, KDMs, booking information, screening periods, time zones, cinema and screen data, certificate data and KDM recipient data. KDM recipient data may particularly include the recipient’s name, organisation, cinema, location, email address, screen or auditorium information, technical certificate information, delivery status and error reports.

DKDMs and KDMs are stored in the system in order to enable the creation, management, documentation and distribution of KDMs. KDMs may be sent through the system by email to recipients selected by the customer. Emails are sent using the technical email infrastructure of Richtwerk GmbH.

KDM Studio also contains a certificate database. Technical screen and server certificates and associated technical information may be stored and made available within this database. Certificates may particularly originate from publicly accessible databases or be provided by customers. Certificate data is used for the technical creation and verification of KDMs and to assign KDMs to the respective cinema or screen systems.

Delivery and error reports may be stored in connection with the distribution of KDMs. These are used to trace delivery activities, analyse errors, provide documentation to customers and ensure a proper KDM workflow.

KDMs may be sent worldwide. Depending on the recipients selected by the customer, KDMs and associated personal data may also be transmitted to recipients outside the European Union or the European Economic Area. As part of their use of the product, customers decide to which recipients KDMs are sent.

Data processed within KDM Studio is generally stored for as long as it is required to provide the service, manage the respective processes, trace previous activities, analyse errors, ensure system security or comply with statutory obligations. Certain records may remain stored within the system after they have been removed from the active view where this is necessary for technical, documentation or security-related reasons.

In order to handle support enquiries, analyse errors and ensure the proper operation of the service, our support team may access customer accounts and product-related data to the extent necessary. Such access is limited to support, maintenance, security or error-analysis purposes.

KDM Inspector

KDM Inspector is a technical analysis tool for examining and evaluating digital cinema files and associated certificates. It may be used anonymously; no login or customer account is required to use KDM Inspector.

As part of its use, users may upload files such as CPLs, server or screen certificates, KDMs or DKDMs. Uploaded files are processed only temporarily in order to perform the requested technical analysis.

Only information that can be technically or publicly read from the uploaded files is extracted. This may particularly include technical metadata, certificate information, identifiers, validity periods, CPL information, recipient information, signature information or other technical details contained in the files. Protected content is not decrypted and the content of film files is not evaluated.

Uploaded files are not stored permanently. They are processed only for the duration of the respective analysis and are subsequently discarded or deleted. Analysis results and upload logs are not stored permanently.

As the service is used anonymously and the uploaded files and analysis results are not intended to be stored permanently, there is no product-related support access to uploaded content or analysis results.

Processing for the provision of the technical analysis function is based on Article 6(1)(b) GDPR where the service is used within the context of an existing or anticipated contractual relationship. In all other cases, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in providing a technical validation tool for KDMs, DKDMs, CPLs and certificates and in ensuring the secure and functional provision of the service.

6. Analytics Tools and Advertising

Google Tag Manager

We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is used to centrally manage and technically trigger certain website functions, analytics services and marketing services. To our understanding, Google Tag Manager itself does not create its own user profiles or independently analyse user behaviour. However, it may process technical information required to execute the integrated tags.

Where services requiring consent are integrated through Google Tag Manager, these services will only be activated after you have given the relevant consent. In this case, the legal basis is Article 6(1)(a) GDPR and Section 25(1) TDDDG. Where Google Tag Manager is used for technically necessary administration and security purposes, processing is based on Article 6(1)(f) GDPR.

In connection with Google services, the transfer of personal data to Google entities outside the European Union cannot be ruled out.

Further information about data processing by Google can be found in Google’s Privacy Policy: https://policies.google.com/privacy?hl=de.

Further information about Google’s certification under the EU-US Data Privacy Framework is available at: https://www.dataprivacyframework.gov/participant/5780.

Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics helps us understand how visitors use our website. The data processed may include page views, time spent on the website, clicking behaviour, browser used, operating system, approximate geographical origin, device type, referrer information and interactions with our website. We use this information to improve our website, our services and the user experience.

Google Analytics uses technologies such as cookies or comparable recognition mechanisms where you have given your consent. Processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future.

We use Google Analytics with IP anonymisation enabled. As a result, your IP address is generally shortened within the European Union or European Economic Area before being processed further. Only in exceptional cases may the full IP address be transferred to Google servers.

A data processing agreement pursuant to Article 28 GDPR has been concluded with Google. Further information about data processing by Google can be found in Google’s privacy information: https://support.google.com/analytics/answer/6004245?hl=de.

Google Signals

We may use the Google Signals function within Google Analytics where you have consented to the relevant analytics and marketing processing.

Google Signals enables the cross-device analysis of usage data where users are signed in to their Google Account and have enabled personalised advertising within their account. Additional information, such as approximate location data, interests or demographic characteristics, may be incorporated into reports in aggregated form.

Google does not provide us with directly identifiable profiles of individual users. We use the reports provided to analyse and optimise our website and marketing activities.

Processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time.

Google Analytics E-Commerce Measurement

Where you have given your consent, we also use e-commerce functions within Google Analytics. These enable us to understand how users interact with our shop, which products are viewed, at which stages purchasing processes are initiated or abandoned and which orders are placed through the website.

The data processed may particularly include product information, order values, transaction identifiers, shopping cart contents, the timing of the purchasing process and technical usage data. This analysis is used to improve our shop, the user experience and the economic effectiveness of our marketing activities.

Processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.

7. Newsletter

Newsletter Data

When you subscribe to our newsletter, we process your email address and the information required for registration, distribution and verification of consent. This may particularly include the date and time of registration, the date and time of confirmation, your IP address, language settings and delivery status.

The newsletter is only sent where you have previously given your consent. The legal basis is Article 6(1)(a) GDPR. Registration is generally carried out using a double opt-in procedure. After registering, you will receive an email through which you can confirm your newsletter subscription.

You may withdraw your consent at any time with effect for the future, for example by using the unsubscribe link in the newsletter or by contacting us. After unsubscribing, your data will be removed from the active mailing list unless statutory retention periods or legitimate interests in retaining evidence prevent this.

To prevent further unwanted distribution, your email address may be stored on a suppression list. This processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in permanently respecting your withdrawal and ensuring that no further newsletters are sent to unsubscribed addresses.

8. Plugins and Tools

YouTube

Videos from YouTube may be embedded on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you access a page containing an embedded YouTube video or play a video, a connection may be established to Google or YouTube servers. The data processed may particularly include your IP address, device information, browser data, the page accessed, the time of access and interactions with the video. If you are signed in to your Google or YouTube account, Google may associate this information with your account.

Where YouTube videos are only loaded after you have given your consent, processing is based on Article 6(1)(a) GDPR and Section 25(1) TDDDG. Where the integration is technically necessary or takes place without technologies requiring consent, processing may be based on Article 6(1)(f) GDPR. Our legitimate interest lies in presenting our content in a clear and engaging manner.

Further information can be found in Google’s privacy information: https://policies.google.com/privacy?hl=de.

Google reCAPTCHA

We use Google reCAPTCHA, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is used to protect entries made on our website against automated use, spam and abusive access. For this purpose, the service may evaluate various technical information and interaction data, such as your IP address, browser and device information, time spent on the website, mouse movements, keyboard input or other characteristics required to distinguish between human use and automated access.

Processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in protecting our website, forms and IT systems against misuse, spam and automated attacks. Where consent is required for the use of reCAPTCHA, processing is based on Article 6(1)(a) GDPR and Section 25(1) TDDDG.

Further information about data processing by Google can be found in Google’s privacy information: https://www.dataprivacyframework.gov/participant/5780.

Zendesk

We use Zendesk to handle support and customer enquiries. The provider is Zendesk, Inc., 1019 Market Street, San Francisco, CA 94103, USA.

When you send us an enquiry, the contact and communication data you provide may be processed within Zendesk. This particularly includes your name, email address, company, customer number, the content of your enquiry, attachments, technical information relating to your issue and the communication history.

Zendesk helps us record enquiries in a structured manner, assign them internally, process them efficiently and document their processing status.

Where your enquiry relates to a contract or steps prior to entering into a contract, processing is based on Article 6(1)(b) GDPR. In all other cases, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in the reliable and efficient handling of support and customer enquiries.

A data processing agreement has been concluded with Zendesk. Where data is processed in countries outside the European Union or the European Economic Area, this is carried out on the basis of the applicable data protection safeguards.

Alternatively, you may also contact us by email, telephone or post.

9. E-Commerce and Payment Providers

Processing of Customer and Contractual Data

We process personal data required to establish, perform, amend and terminate contractual relationships. This particularly includes contact and billing data, company data, order data, payment status, licence data, contract terms, product usage to the extent relevant to the contract, and communication and support data.

Processing is based on Article 6(1)(b) GDPR where it is required for the performance of a contract or to take steps prior to entering into a contract. Where we are legally obliged to retain or transmit certain data, processing is based on Article 6(1)(c) GDPR. In addition, we may process data on the basis of Article 6(1)(f) GDPR where this is necessary to protect legitimate interests, such as the establishment or defence of claims, fraud prevention or internal documentation.

Data Transmission When Entering into Contracts for Digital Content and Services

When you purchase digital content, software licences, services or other paid services through our website, we process the data required for concluding the contract, providing the service, issuing invoices and processing payments.

Personal data is only disclosed to third parties where this is necessary to perform the contract, where there is a statutory obligation, where you have given your consent or where another legal basis permits the disclosure. This may particularly include payment service providers, technical service providers, tax advisers, public authorities or partners involved in providing the product.

The legal basis is Article 6(1)(b) GDPR. Where statutory obligations are concerned, Article 6(1)(c) GDPR applies. In individual cases, processing may also be based on Article 6(1)(f) GDPR, for example to secure and enforce legal claims.

Payment Services

We use external payment service providers to process payments. Depending on the payment method selected, payment data is processed directly by the respective payment service provider. This may particularly include your name, billing address, email address, order amount, currency, payment method, payment status, transaction number and, depending on the means of payment, further payment information.

Processing serves to carry out the payment and therefore to perform the contract. The legal basis is Article 6(1)(b) GDPR. We also have a legitimate interest in secure, efficient and user-friendly payment processing. The legal basis for this is Article 6(1)(f) GDPR.

The respective payment service provider’s own privacy information additionally applies to any further data processing performed by that provider. Payment service providers may also process personal data under their own responsibility, particularly for fraud prevention, risk assessment, compliance with regulatory obligations and payment processing.

PayPal

If you select PayPal as your payment method, the payment will be processed through PayPal. The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg.

As part of the payment process, personal data may be transmitted to or processed by PayPal. This particularly includes the payment amount, order information, contact details and transaction data. Processing for payment purposes is based on Article 6(1)(b) GDPR.

Further information can be found in PayPal’s privacy information: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Unzer

We use the payment service provider Unzer GmbH, Vangerowstraße 18, 69115 Heidelberg, Germany, to process credit card payments.

When you pay by credit card, the data required to process the payment is processed. This may particularly include your name, billing information, payment amount, currency, order information, payment status, transaction number and card-specific payment information. We do not permanently store complete card details ourselves. Instead, these are processed by the integrated payment service providers.

Depending on the card used, payment data may also be transmitted to other parties involved in the payment process, particularly card-issuing banks, acquirers, technical payment service providers and card schemes such as Visa, Mastercard or American Express.

Processing is carried out to perform the payment and therefore to fulfil the contract on the basis of Article 6(1)(b) GDPR. Where processing is required for fraud prevention, payment security, error analysis or the enforcement of legitimate claims, it is additionally based on Article 6(1)(f) GDPR.

Further information can be found in Unzer’s privacy information: https://www.unzer.com/de/datenschutz/.

Legal Notice

Richtwerk GmbH
Eiblwiesweg 2
82418 Murnau
Germany

Managing Director: Thea Kummeth

Contact

Mail: info@DCPtools.com
Phone: +49 8841 99579

Register

Registered Office: Murnau
Register court Munich
Register number: HRB 148732
Sales tax identification number: DE172185378

Disclaimer

Limitation of liability for internal content

The content of our website has been compiled with meticulous care and to the best of our knowledge. However, we cannot assume any liability for the up-to-dateness, completeness or accuracy of any of the pages.

Pursuant to section 7, para. 1 of the TMG (Telemediengesetz - Tele Media Act by German law), we as service providers are liable for our own content on these pages in accordance with general laws. However, pursuant to sections 8 to 10 of the TMG, we as service providers are not under obligation to monitor external information provided or stored on our website. Once we have become aware of a specific infringement of the law, we will immediately remove the content in question. Any liability concerning this matter can only be assumed from the point in time at which the infringement becomes known to us.

Limitation of liability for external links

Our website contains links to the websites of third parties („external links“). As the content of these websites is not under our control, we cannot assume any liability for such external content. In all cases, the provider of information of the linked websites is liable for the content and accuracy of the information provided. At the point in time when the links were placed, no infringements of the law were recognisable to us. As soon as an infringement of the law becomes known to us, we will immediately remove the link in question.

Copyright

The content and works published on this website are governed by the copyright laws of Germany. Any duplication, processing, distribution or any form of utilisation beyond the scope of copyright law shall require the prior written consent of the author or authors in question.