Privacy Policy
At the European Film Academy, we take protecting your privacy and the personal data you provide us very seriously. We therefore attach great importance to ensuring that your data is secure and that data processing complies with applicable data protection regulations, in particular the General Data Protection Regulation (“GDPR”) and the Federal Data Protection Act (BDSG).
The controller within the meaning the General Data Protection Regulation (“GDPR”) and other data protection laws of the Member States of the EU and other data protection-related regulations is:
European Film Academy Productions gGmbH
Stralauer Allee 2A, 10245 Berlin
+49 (0) 30 887 167 0
Below, we will provide you with information about the collection and processing of your personal data regarding your use of our website, the registration process and the participation in our events. Personal data comprise individual details about personal or factual circumstances of an identified or identifiable natural person, e.g. name, postal address, e-mail addresses, IP addresses, user behaviour, etc.
We collect and process personal data of our users only as far as this is necessary for the provision of a functional website and our contents and offers and as described below, for the registration procedure for the member area and the participation in our events.
The processing of personal data is only lawful if there is a legal basis for the processing. Without limitation, the legal basis for processing pursuant to Art. 6(1)(a)-(f) GDPR may include:
You are entitled to the following rights with regard to data collection and processing by us in accordance with the articles of the General Data Protection Regulation listed in each case:
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes your rights to privacy pursuant to the GDPR.
The personal data of the affected person will be blocked or deleted as soon as the purpose for retaining such data ceases to apply. Notwithstanding the generality of the foregoing, data may be stored if required by Union or Member State law to which we are subject. Data will also be blocked or deleted if a retention period prescribed by the aforementioned laws and regulations expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
Every time you visit our website, our system automatically collects data and information from the device system of the device from which access is made:
When you visit our website, our web server collects and stores the following data:
The data is also stored in the log files on our system. This data is not stored together with other personal data of the user.
This data is stored on rented servers at Hetzner Online GmbH, which are maintained on our behalf by the meap GmbH. The servers are located within the European Union.
The legal basis for processing this data is Art. 6 (1) (f) GDPR.
The legitimate interest within the meaning of Art. 6(1)(f) GDPR comprises our interest in the functionality of our website and its availability.
Temporary storage of IP address by the system is necessary to enable delivery of the website to the user’s computer. The user’s IP address must remain stored for the duration of the session for this purpose.
The data are stored in order to ensure the website’s functionality. In addition, the data aids us in optimizing the website and ensuring the security of our information technology systems. No analysis of this data is conducted for marketing purposes in this context.
The log files are deleted after seven days, unless it is necessary to keep the data for the aforementioned purpose in light of specific events.
Storage for longer periods is possible. In this case, the IP addresses of the users will be deleted or altered so that it is no longer possible to assign them to a specific user.
The collection of data for the provision of the website and storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no right of objection.
As a member of the European Film Club you have access to the password-protected members’ area of our website. To access this area, you must log in with your e-mail address and your personal password.
In the members’ area, you can join existing film clubs and become a member or create your own film club. Film club members can interact with other verified members, as well as watch films either individually or through the Watch Party fuctionality, rate and review the watched films.
In the members’ area we also offer you access to your personal member profile, in which your personal data from the registration form for membership is stored: First name and last name, email, birthday, country, nationality, gender, language. Optionally you can upload a profile picture of yourself.
We use your e-mail address as part of a member e-mail distribution list, for sending information about the European Film Club events. We also use your e-mail address for sending general member information and the newsletter.
Member e-mails and the newsletter are sent via a server rented from Hetzner Online GmbH, which is maintained by systematrix Service UG (limited liability) on our behalf. The server is located within the European Union. Your personal data will not be processed by Hetzner Online GmbH or systematrix Service UG (limited liability).
If you have forgotten your personal password, we offer you the possibility to reset your password by entering your e-mail address stored in the member profile. When using this function, we will send you, to the e-mail address stored in your member profile, a link to the section where you can create your personal password.
The processing of your personal data of your member account, the registration and participation in events is generally based on the necessity to fulfil a contract in accordance with Article 6(1)(b) GDPR. The contractual relationships comprise primarily the membership relationship with the organization and participation in events.
If personal data is collected without the processing being necessary for the fulfilment of the contract, the processing shall be based on consent in accordance with Art. 6(1)(a) in conjunction with Art. 7 GDPR or based on our legitimate interest in accordance with Art. 6(1)(f) GDPR.
Personal data is processed for the carrying on of the membership relationship, your registration or participation in events. We use your e-mail address to contact you electronically for information purposes.
Subject to any applicable legal retention periods, your data will be stored only until you delete it from your personal member profile or as long as this is necessary to achieve the purpose of the processing. You can also completely delete your personal member profile at any time.
The user can delete a personal member profile created by them at any time, or may revoke their consent to the processing of stored personal data or to object to further use. An objection or revocation of consent automatically leads to a deletion of the personal member profile and all data stored in it.
You may subscribe to a free newsletter on our website with which we inform you once or twice a month on average during the year about the European Film Club, the various activities and events. When subscribing to the newsletter, the data from the registration form will be transmitted to us. In addition, the date and time of registration for the newsletter and the IP address used will be stored. As part of the double opt-in confirmation process for your newsletter subscription, the date and time at which you click the confirmation link for the newsletter subscription and the IP address used will also be stored.
The newsletter is sent to your e-mail address via a server rented from Hetzner Online GmbH, which is maintained by systematrix Service UG (limited liability) on our behalf. The server is located within the European Union. Your personal data will not be processed by Hetzner Online GmbH or systematrix Service UG (limited liability).
The legal basis for processing the data when registering for the newsletter is the consent provided during the registration process pursuant to Art. 6(1)(a) GDPR.
The purpose of storing e-mail addresses is to permit contact by electronic means for information purposes. The date and IP address of the registration as well as the confirmation of the registration are recorded in order to document consent to receiving the newsletter in a conclusive manner and to prevent misuse.
The information is shared with the service provider for the purpose of sending the newsletter in bulk.
If you have expressly consented to receiving the newsletter, we will only delete or block the e-mail address for newsletter mailing after you have revoked your consent. The data collected in connection with the confirmation of the newsletter subscription will be stored for the same period of time.
You can revoke your consent to the use of your e-mail address for receiving our newsletter at any time, and without giving reasons, with effect for the future. You will not incur any costs other than fees charged by your telecommunications provider. You can click on the link at the end of each newsletter to unsubscribe.
Under the heading “Contact”, we offer the ability to contact via email link. In this case, the user’s personal data that is transmitted along with the email will be stored.
The legal basis for the processing of data transmitted in the course of sending us an e-mail is Art. 6(1)(f) GDPR. The legitimate interest within the meaning of Art. 6(1)(f) GDPR comprises our interest in responding to user inquiries.
The purpose of data storage is making contact at the request of the website user.
The data will be stored for as long as it is necessary to process the request or the subsequent conversation.
Users have the option at any time to revoke their consent to the processing of personal data or to object to the further use of such data. A user who has contacted us by e-mail may object to the storage of their personal data at any time. The data can only be erased if there is no legal retention obligation; in this case, however, the data will be blocked for any other use. In such cases, the conversation cannot be continued.
Within the framework of European Film Club events, we reserve the right to create, process and distribute photo, video and audio recordings of artists, visitors and the venue, unless objected to in individual cases. This will be pointed out in a suitable manner when registering for the event. The photographs are used in the form of articles and photo galleries on our websites, in newsletters and other publications. In addition, the image and sound recordings produced are also used to provide information about our events on the social media channels, in particular Facebook, Tik Tok, Instagram and YouTube. The image and sound recordings produced are also passed on to media representatives of newspapers, radio stations and online editorial offices for editorial reporting as part of our press work.
We can also make image and sound material available to the partner companies, funders, organisations or institutions involved in the respective event for individual post-event reporting and publicity.
The legal basis is Art. 6 para. 1 lit. f) DSGVO. It is our legitimate interest to inform and draw attention to EFC events as part of our PR and public relations work.
The image and sound recordings of artists, visitors and the venue are processed for PR and public relations purposes and to promote awareness of the films, filmmakers and events presented.
We process and store the recordings only for the period of time necessary to achieve the purpose of the processing or as long as there is an obligation to store.
The parties concerned may object to the use of the recordings. This can be addressed to the contact data given under point I. 1.
In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk in association with the browser you are using and by which the body which sets the cookie receives certain information. Cookies cannot run programs or deliver viruses to your computer. They serve to make the website more user-friendly and efficient.
This website and our services use the following types of cookies, the scope and functionality of which are explained below:
Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID with which various requests from your browser can be assigned to the common session. This allows your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close the browser.
Persistent cookies are automatically deleted after a specified period which may differ depending on the cookie in question. You can delete the cookies at any time using your browser’s security settings.
You can configure your browser settings as desired and, for example, refuse to accept third-party cookies or all cookies. So-called “third party cookies” are cookies set by a third party, therefore, not by the actual website you are currently visiting. Please note that by deactivating cookies you may not be able to use all functions of this website.
Our website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). This software collects information about how you use the website and uses it to generate various statistics. Without limitation, usage data collected includes the specific selection of links, the length of stay on individual pages and the sequence of use of the website as well as the frequency of page visits. This data is collected together with your IP address. The IP address provided by your browser as part of Google Analytics will not be combined with other data from Google.
Google Analytics uses “cookies” which are text files that are stored on your computer and enable to analyse how you use the website. As a rule, the information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. We have activated IP anonymisation on our homepage, i.e. Google will shorten your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area before transmission to the United States.
Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and shortened there. Google describes its data processing operations under the following link https://www.google.com/policies/privacy/.
The legal basis for processing personal data in connection with the use of the website is Art. 6 (1)(f) GDPR. The legitimate interest within the meaning of Art. 6(1)(f) GDPR comprises our interest in the customer-focused design of our website that both meets the needs of the users and takes their usage preferences into account. The legal basis for transferring data to Google is provided by Art. 28(3), Art. 45(3) GDPR. The service provider is certified under the Privacy Shield Framework and is therefore subject to the EU Commission’s Appropriateness Decision (Implementation Decision 2016/1250), i.e. the data protection level of the service provider is recognised as equivalent to the GDPR, although it is based in the United States.
The intended purpose of the data processing is to aid in analysing this website and the usage behaviour of its visitors.
The data is made anonymous immediately after collection. Personal data is therefore only collected in the context of the transmission and is not permanently stored.
You can prevent the storage of cookies, including the generation and transmission of data to Google, by restricting or prohibiting the use of cookies in your browser software. This may also result in the deactivation of cookies that are not related to Google and may impair your ability to use all of the functions of this website to their full extent.
You may prevent the collection of data generated by the cookie and related to your use (including your IP address) and its transmission to Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de
We use state-of-the-art encryption methods (e.g., SSL) via HTTPS to protect the security of your data during transmission.
