Data Protection Declaration (Datenschutzerklärung)

1. Controller and Scope

The controller within the meaning of the GDPR (DSGVO) is onescreen GmbH, Bothmerstr. 14 RGB, 80634 München. This Data Protection Declaration applies to our website, the app platform, our self-service and managed-service offerings, as well as our marketing and social media activities.

onescreen's offering is directed exclusively at businesses (B2B). Data is transmitted in encrypted form using SSL/TLS (HTTPS).

2. Principles of Processing

Personal data is processed only where a legal basis exists:

• Consent (Art. 6 Abs. 1 lit. a DSGVO)
• Performance of a contract (Art. 6 Abs. 1 lit. b DSGVO)
• Legal obligation (Art. 6 Abs. 1 lit. c DSGVO)
• Legitimate interests (Art. 6 Abs. 1 lit. f DSGVO)

3. Hosting and Infrastructure

We use the following service providers to operate our services:

• Domain: IONOS SE (Germany)
• Website and platform hosting: Amazon Web Services (AWS), Amazon Web Services EMEA SARL (USA/EU)
• Backend services: Supabase Inc. (USA) and Amazon Web Services

Data transfers to the USA are based on Standard Contractual Clauses and the EU-US Data Privacy Framework.

4. Cookies and Consent Management

Technically necessary cookies are permitted without consent. Analytics and marketing cookies are only set following explicit consent. To manage consents, onescreen uses Cookiebot, a service of Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark.

5. Analytics and Marketing Services

Following explicit consent, the following services may be used:

• Google Tag Manager (used to embed and manage tracking services)
• Google Analytics (with IP anonymisation enabled)
• Google Ads Conversion Tracking
• Meta Pixel
• LinkedIn Insight Tag

The Google services are controlled via Google Consent Mode: before consent is given, only anonymised, cookieless signals without device identifiers are transmitted, full processing only takes place after consent is given.

6. Newsletter and HubSpot

Newsletters are sent using the double opt-in procedure. onescreen uses HubSpot (Cambridge, USA) for newsletter distribution, lead management and marketing automation.

7. Payment Processing

Payment data is processed by Stripe Payments Europe Ltd., Dublin, Ireland, acting as a processor and as an independent controller in its own right.

8. Social Media Presences

On Facebook and Instagram, joint controllership applies pursuant to Art. 26 DSGVO. The respective platform operators additionally process data on their own responsibility for market research and advertising purposes.

9. AI Check (Automated Ad Creative Review)

The optional AI Check analyses and automatically adapts uploaded ad creatives. The legal basis is explicit consent pursuant to Art. 6 Abs. 1 lit. a DSGVO. External AI service providers are engaged as processors and are not permitted to use the data for AI training purposes. Adapted ad creatives are submitted for approval before being served.

10. Data Subject Rights

You have the right at any time to:

• Access to the personal data stored about you
• Rectification of inaccurate data
• Erasure (unless a statutory retention obligation applies)
• Restriction of processing
• Data portability
• Object to processing based on legitimate interests
• Object without restriction to direct marketing

Retention period: Until revoked (consent-based processing), in accordance with statutory retention periods (contractual data), until the purpose no longer applies (legitimate interests).

11. Contact

For questions regarding data protection, please contact: vlad@onescreen.tv