PRIVACY POLICY

This Privacy Policy applies to the processing of your personal data by Canal+ Luxembourg S.à r.l. and by Canal+ Austria GmbH, provided that you have expressly consented to the processing of your personal data by Canal+ Austria GmbH.

This Privacy Policy aims to provide you with information on how CANAL+ collects and processes your personal data. This includes any data you provide through this website when you sign up for our newsletter, purchase a product or service, or participate in a competition.

The CANAL+ website is not intended for children, and we do not knowingly collect data from children.

CANAL+ requires different data from you on various occasions (competition, newsletter, specific products). To ensure you understand exactly how and why we use your data, it is important that you read this Privacy Policy alongside any other privacy notices we provide on specific occasions when we collect and process personal data. This Privacy Policy supplements those notices and is not intended to override them.

Canal+ Luxembourg S.à r.l., headquartered in Luxembourg at 4 rue Albert Borschette, L-1246 Luxembourg, registered in the Luxembourg Trade Register under number B 87.905, is responsible for your personal data (referred to as “CANAL+,” “we,” “us,” or “our” in this Privacy Policy).

If you have any questions about this privacy notice, including any requests to exercise your rights, please contact us using the details provided below.

To contact us by email: [email protected]

Um uns per Post zu kontaktieren: Postfach 38, 1103 Wien.

In accordance with the GDPR, a Data Protection Officer has been appointed to facilitate compliance with the provisions of the GDPR. You can reach the Data Protection Officer by email at [email protected] or you can send your inquiry by post to the address provided in the contact details, marked "Attention: Data Protection Officer." In the event that you exercise your rights as a data subject, the Data Protection Officer reserves the right to reasonably verify your identity.

It is important that the personal data we hold about you is accurate and up to date. Please inform us if your personal data changes during the course of the contract.

Personal data or personal information, according to the GDPR, includes all information about an individual that can be used to identify that person. This does not include data that has been anonymized, where the connection to the individual has been removed (so-called anonymous data).

We may collect, use, store, and transfer various types of personal data about you. These include:

Identity Data
This includes your first name, last name, title, gender, username (or similar), and date of birth.

Contact Data
This includes your billing address, delivery address, email address, and telephone numbers.

Financial Data
This includes information about your bank account and the payment methods you have chosen.

Transaction Data
This includes information required for invoicing, payments to and from you, and other details about products and services you have purchased from us.

Technical Data
This includes your IP addresses, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technologies on the devices you use to access this website.

Profile Data
This includes your username, password, IP addresses, your purchases or orders, your interests, preferences, feedback, and survey responses.

User Data
This includes information about how you use our website, products, and services. For internet and telephone services, usage data includes the caller's identification, the total number of units to be billed for the billing period, the designation of the called line, the type, start time, and duration of the call, or the amount of data sent, and the date of the service or connection. For Video On Demand (VOD) services, usage data includes the ordered item, the start time and duration of the viewed item, and the order date.

Marketing and Communications Data
This includes your preferences for receiving marketing from us and our third parties, as well as your communication preferences.

We also collect, use, and share so-called aggregated data, such as statistical or demographic data. While aggregated data is derived from your personal data, it is not considered personal data under the GDPR, as it does not directly or indirectly reveal your identity. For example, we may aggregate your usage data to calculate the percentage of users accessing a particular feature on a website. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data, which will then be used in accordance with this privacy policy.

We do not collect personal data belonging to the special categories as defined by the GDPR. These categories include information about your race or ethnic origin, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health information, and genetic and biometric data. Additionally, we do not collect information about criminal convictions and offenses.

If we are legally required to collect your personal data or need it to fulfill a contract with you, and you fail to provide this data when requested, we may be unable to enter into the contract or perform the contractual services. In such cases, we may have to cancel a product or service you have ordered and terminate the contract. We will notify you if this is the case at the time.

We use various methods to collect data from and about you. These include:

• Direct Interaction

You may provide us with your identity, contact, and financial data by filling in forms or by corresponding with us by post, phone, email, or otherwise. This includes personal data you provide when you:

Order our products or services

Create an account on our website

Subscribe to our service or publication

Request marketing or production information to be sent to you

Enter a competition, promotion, or survey

Give us feedback.

• Automated Technologies or Interactions

While you use our website, we automatically collect technical data about your devices and browsing activities. We gather this personal data using cookies and other similar technologies. For more information, please see our Cookie Policy.

• Personal Data Received from Third Parties or Publicly Available Sources

We may also receive personal data about you from other companies to whom you have provided your information with permission to share, or from publicly accessible sources.

We only use your personal data when the law allows us to. In most cases, we will use your personal data in the following circumstances:

When we need to fulfill the contract we are bout to enter into or have entered into with you..

• When it necessary for our legitimate interests (or those of a third party) and your interests and fundamental right do not override those interests.
• When we need to comply with a legal or regulatory obligation.
  

We will process your personal data to send direct marketing communications to you via email or SMS only based on your consent as the legal basis for processing. You have the right to withdraw your consent to marketing at any time by contacting us.

In the following table, we have described how we use your personal data and the legal bases we rely on. Where appropriate, we have also identified our legitimate interests.

Please note that we may process your personal data for more than one lawful ground, depending on the specific purpose for which we are using your data.

If you select the payment method "Credit Card (VISA and Mastercard) and PayPal," the payment processing will be carried out through the payment service provider Adyen N.V., Simon Carmiggeltstraat 6-50, 1011 DJ Amsterdam, Netherlands. We will forward the information you provided during the ordering process, along with the details of your order, to Adyen in accordance with Art. 6(1)(b) GDPR. 

The transfer of your data occurs solely for the purpose of payment processing with the payment service provider Adyen and only to the extent necessary for this purpose. You can find more information about Adyen's privacy policy at the following internet address.

We use your identity, contact, technical, usage, and profile data to gain an understanding of what we believe you want or need, or what might be of interest to you. This allows us to determine which products, services, and offers may be relevant to you (we call this marketing).

You will receive marketing communications from us if you have:

Requested information from us, or

Purchased goods or services from us, or

Provided us with your data when participating in a contest, or

Registered for a promotional event

and have opted in for this.

If you subscribe to our newsletter and thereby give us your consent (Art 6(1)(a) GDPR), we will process your name and email address for the purpose of sending our newsletter. Your personal data will be stored until you unsubscribe from the newsletter or withdraw your consent. You can withdraw your consent at any time or unsubscribe from the newsletter by clicking the unsubscribe link at the end of each newsletter or by notifying us in another form.

We will obtain your explicit consent before sharing your personal data with third parties for marketing purposes.

You can request at any time that we stop sending you marketing messages.

For email marketing, simply click the opt-out link in any marketing communication we previously sent you.

If you are contacted by phone, simply inform the operator who called you.

In all other cases, contact us directly.

We are currently working hard to enable you to manage your marketing preferences on our website and in our app. Very soon, you will be able to log in to the website or app and check the appropriate boxes to adjust your marketing preferences.

If you opt out of receiving these marketing communications, this does not apply to personal data provided to us as a result of and for the purpose of managing a purchase of products/services, warranty registration, product/service experience, or other transactions.

You can set your browser to refuse all or some cookies or to notify you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. For more information about the cookies we use, please see our Cookie Policy.

This privacy policy also applies to the use of social media by CANAL+, including but not limited to:

CANAL+ Facebook

CANAL+ Instagram

CANAL+ YouTube

CANAL+ X

CANAL+ TikTok

This privacy policy also applies to other publications and offers from CANAL+ on social media.

By visiting and using our websites, social media channels, or applications, you consent to the potential processing of data. Information about which data is processed through social media channels can be found in the section "How We Use Your Personal Data" of this document. However, the processing of personal data through social media channels is also subject to the privacy policies of the respective social media platforms. If you have any questions, please first review the privacy policy for the social media channel. For further information on this topic, please contact us.

We use your personal data only for the purposes for which we collected it, unless we believe we need to use it for another reason that is compatible with the original purpose. If you would like an explanation of how processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your personal data for a different purpose, we will inform you and explain the legal grounds that permit this, or we will ask for your consent.

Please note that we may process your personal data without your knowledge and consent in accordance with the rules outlined above, if required or permitted by law.

In some of our activities, we collaborate with our partners and/or entities affiliated with CANAL+ to ensure the highest quality of services provided. These partners and affiliated entities require access to your personal data. Our partners and the affiliated entities act as data processors. They process your data only according to our instructions and for the purposes disclosed to you.

We work with partners and affiliated entities in various areas, primarily for:

• Administrative support
• IT systems and software support
• Marketing services
• Customer communication
• Debt collection
  
  
  We share your personal data with our trading partners. We only disclose your data to government bodies or courts based on legitimate and lawful requests.

We require all third parties to respect the security of your personal data and to handle it in accordance with the law. We do not permit our partners and affiliated entities to use your personal data for their own purposes and allow them only to process your personal data for specific purposes and according to our instructions.

We have implemented appropriate security measures to prevent your personal data from being unintentionally deleted or misused, accessed, altered, or disclosed in an unauthorized manner. Additionally, we restrict access to your personal data to employees, agents, contractors, and other third parties who need access for their professional duties. They will process your personal data only under our instruction and are bound by confidentiality obligations.

We have established procedures to handle any suspected data breaches and will notify you and the relevant authorities of a breach if we are legally required to do so.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including meeting legal, accounting, or reporting obligations.

When determining the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether these purposes can be achieved by other means, as well as applicable legal requirements.

In certain circumstances, you may request the deletion of your data: for more information, please refer to the section on requesting deletion.

Under specific circumstances, we may anonymize your personal data for research or statistical purposes (so that it can no longer be linked to you), and we may use this information indefinitely without further notification to you.

Under certain circumstances, you have data protection rights regarding your personal data. Please click on the links below to learn more about these rights:

• Request access to your personal data
• Request of correction of your personal data
• Request deletion of your personal data
• Object to the processing of your personal data
• Request restriction of the processing of your personal data
• Request transfer of your personal data
• Right of withdrawal

If you wish to exercise any of these rights, please contact us.

You do not need to pay a fee to access your personal data (or to exercise other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request under these circumstances.

We may need to request specific information from you to verify your identity and confirm your right to access your personal data (or to exercise any other rights). This ensures that personal data is not disclosed to unauthorized individuals. To respond to your request more efficiently, we may contact you if we require additional information regarding your inquiry.

We aim to respond to all valid requests within one month. However, it may take longer than a month if your request is particularly complex or if you have made multiple requests. In such cases, we will notify you and keep you updated on the progress.

You also have the right to lodge a complaint with a supervisory authority. In Austria, this is the österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Wien,
Telephone: +43 1 52 152-0,
Email: [email protected],
Web: https://www.dsb.gv.at/.

Legitimate Interest refers to our interest in analyzing your data to provide you with the best service and products. We ensure that we consider all potential impacts on you (both positive and negative) and weigh these rights against our interest before processing your personal data under the basis of legitimate interest.

Compliance with Legal or Regulatory Obligations means that we process your personal data only in accordance with legal requirements or when we are obligated to do so by law or regulatory authority.

Third Parties (with whom we share your personal data to fulfill our contractual or legal obligations. Any processing by third parties is done solely based on our instructions).

You have the right to:

Request access to your personal data, which is commonly known as a "data subject access request." This allows you to obtain a copy of the personal data we hold about you and verify whether we process it lawfully.

Request correction of the personal data we hold about you. This allows you to have incomplete or inaccurate data corrected. We will need to verify the accuracy of the new data you provide.

Request deletion of your personal data. This allows you to ask us to delete personal data when there is no legal reason to continue processing it. You also have the right to request deletion if you have exercised your right to object (see below), if we have processed your data unlawfully, or if we need to delete your data to comply with local laws. However, please note that we may not always be able to fulfill your request for deletion due to certain legal reasons, which we will inform you of at the time of your request.

Object to the processing of your personal data. If you believe our use of your data impacts your rights, you can object to such processing. We will inform you if we are required to process data due to legal obligations or if we need it to fulfill a contract. You also have the right to object if we process your data for direct marketing purposes.

Request restriction of the processing of your personal data. This allows you to ask us to suspend processing your personal data under the following conditions: (a) if you want us to verify the accuracy of the data; (b) if our use of the data is unlawful, but you do not want us to delete it; (c) if you need us to keep the data even if we no longer require it, such as for the establishment, exercise, or defense of legal claims; or (d) if you have objected to our use of your data, but we need to verify whether we have overriding legitimate grounds for processing it.

Request transfer of your personal data to you or a third party. We will provide your personal data in a structured, commonly used, and machine-readable format to you or a third party of your choice. Please note that this right applies only to automated information you have provided to us for processing or that we have used to fulfill a contract with you.

Withdraw consent if we rely on your consent to process your personal data. The legality of processing your data up to the point of your withdrawal is not affected by your withdrawal. If you withdraw your consent, we may not be able to provide certain products or services to you. We will inform you if this is the case.