Data Processing Agreement (AVV) | Cine Power Planner

This agreement applies when you use Cine Power Planner in the course of a business or profession and store personal data of other people in it, for example crew, cast, clients or suppliers. It forms part of the contract under our Terms of Service and is concluded in electronic form (Art. 28(9) GDPR) when you create your account or, for existing accounts, when it takes effect under the Terms. It does not apply to purely personal or household use. The German version is authoritative.

1. Subject matter and duration

We store, synchronise, back up and deliver the data you enter in the service, on your behalf and only for the purpose of providing the service. The agreement runs for as long as you have an account and ends when all of your data has been deleted as described in section 9.

2. Nature and purpose of the processing, data and data subjects

Processing consists of hosting, cloud synchronisation between your devices, collaboration with the people you invite, encrypted backups, sending emails and documents you trigger, and serving the public links you create (quotes, call sheets, signing and request links). Data subjects are the people you record: crew and cast, contacts at clients, rental houses and suppliers, and recipients of your documents. Categories of data are the ones you enter: names, roles, contact details, addresses, schedule and location data, contract, invoice and payment details, signatures and images. If you record dietary or allergy information, this includes special categories of personal data (Art. 9 GDPR).

3. Your instructions

We process the data only on your documented instructions. Your instructions are this agreement, the Terms of Service and what you do in the app (creating, changing, sharing, exporting and deleting data). Further instructions can be given in text form to support@cine-power-planner.com. We tell you without delay if we believe an instruction infringes data protection law and may suspend it until you confirm or change it. We process the data in a way other than instructed only where Union or Member State law requires it; we then inform you beforehand unless that law forbids it.

4. Confidentiality

Persons authorised to process the data have committed themselves to confidentiality or are under a statutory obligation of confidentiality. The service is operated by the operator personally; there is no support staff with access to your content.

5. Security of processing

We take the technical and organisational measures listed in Annex 1 (Art. 32 GDPR). We may develop them further as long as the level of protection does not fall.

6. Sub-processors

You give general authorisation to engage the sub-processors listed in Annex 2. We tell you in text form at least 30 days before adding or replacing a sub-processor. You can object for good reason within that time; if we cannot resolve the objection, you may terminate the contract with effect from the change. We bind every sub-processor by contract to data protection obligations equivalent to this agreement and remain liable to you for its performance.

7. Assistance

The app lets you answer requests from data subjects yourself: you can view, correct, export and delete every record. If a data subject contacts us directly about your data, we refer them to you and do not answer on your behalf. On request we give reasonable support with your obligations under Art. 32 to 36 GDPR (security, breach notifications, data protection impact assessments, prior consultation) with the information available to us.

8. Personal data breaches

We notify you without undue delay, and where feasible within 48 hours, after becoming aware of a personal data breach affecting your data, to the email address of your account. The notice describes the nature of the breach, the data and people concerned as far as known, the likely consequences and the measures taken or proposed.

9. Deletion and return

You can export your data at any time in the formats the app offers. When you delete data or your account, we delete the cloud copy from our active systems within 30 days. Deleted data can remain in encrypted backups for up to 4 years until those backups are overwritten on schedule; it is not restored into the active system except to recover from a failure. Data that we must keep under statutory retention duties stays locked for that period and is then deleted.

10. Evidence and audits

We make available the information needed to demonstrate compliance with Art. 28 GDPR, in the first place this agreement with its annexes and written answers to your questions. If that is not sufficient in a specific case, you may carry out an audit yourself or through an auditor bound to confidentiality, with at least 30 days’ notice, during business hours, without disturbing operations and at most once a year unless there is a specific reason. The service runs in a third-party data centre that we cannot open to visitors; for the physical measures we rely on the data centre operator’s certifications.

11. Place of processing

Your content is processed on servers in Germany (Hetzner, Nuremberg). We do not transfer it to a country outside the EU or EEA. A transfer would take place only with your prior instruction and under the conditions of Art. 44 ff. GDPR. Features that contact a third party for you are listed in Annex 2.

12. Liability and final provisions

Liability follows Art. 82 GDPR and the liability rules of the Terms of Service. If this agreement and the Terms conflict on data protection, this agreement prevails. Changes need text form; we announce changes as described in the Terms. German law applies.

Annex 1: Technical and organisational measures

Access control: the server accepts administrative logins only by SSH key on a non-standard port, root login and password login are disabled, a firewall denies everything not explicitly opened, and repeated failed requests are blocked automatically.
Separation: every table is protected by row-level security, so an account can read only its own data and the projects shared with it.
Encryption: all connections use TLS. Contacts, billing data and profile data are additionally encrypted with AES-256-GCM before they are stored; project chat is encrypted with a key per project. Passwords are stored only as salted hashes.
Accounts: optional two-factor authentication, sessions can be listed and revoked, and bot protection on sign-in forms.
Availability: daily encrypted backups to separate storage at the same provider in Germany, a weekly integrity check and a weekly test restore.
Logging and data minimisation: server logs are kept for 52 days with shortened IP addresses and with tokens removed from addresses; no analytics or advertising trackers are used.
Uploaded files are scanned for malware before they are made available to others.
Organisation: a written incident response procedure, a record of processing activities and a yearly review of these measures.

Annex 2: Sub-processors and other recipients

Sub-processor: Hetzner Online GmbH, Gunzenhausen, Germany. Hosting of the application server, database, file storage and encrypted backups in Germany.
No other sub-processor receives your content. The database, file storage and the mail server are software we run ourselves on that server.
Recipients contacted only when you use the feature: OpenStreetMap Foundation (United Kingdom) for looking up an address you type and for map tiles, and HeiGIT gGmbH (Germany) for route and travel-time calculation. They receive the address or coordinates, not the names of the people in your project. An AI provider you connect with your own key receives what you send to it under your own contract with that provider.
Stripe, Apple, RevenueCat and Cloudflare process data about your own account and subscription as described in the Privacy Policy. They do not receive the data you store about other people.