Privacy Policy

Controller

The controller within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

Joachim Steinigeweg Allerweltskino e. V. Alteburger Str. 113 50678 Köln Germany contact@iranian-filmfestival.com

Your rights as a data subject

Using the contact details provided above, you may exercise the following rights at any time under the EU General Data Protection Regulation (GDPR):

  • access to your data stored by us and information on how it is processed (Art. 15 GDPR),
  • rectification of inaccurate personal data (Art. 16 GDPR),
  • erasure of your data stored by us (Art. 17 GDPR),
  • restriction of processing where we are not yet permitted to erase your data due to legal obligations (Art. 18 GDPR),
  • objection to the processing of your data by us (Art. 21 GDPR), and
  • data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us your consent, you may withdraw it at any time with effect for the future. You may lodge a complaint with a supervisory authority at any time, e.g. with the competent supervisory authority of the federal state in which you reside or with the authority responsible for us as the controller. A list of supervisory authorities (for the non-public sector) with their addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Processing activities

Collection of general information when visiting our website

Nature and purpose of the processing

When you access our website, i.e. when you do not register or otherwise submit information, information of a general nature is collected automatically. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar. It is processed in particular for the following purposes:

  • ensuring a problem-free connection to the website
  • ensuring smooth use of the website
  • evaluating system security and stability, in particular for the detection of misuse
  • for the technically correct display and optimisation of the website

We do not use your data to draw conclusions about you as a person. However, we reserve the right to subsequently review the server log files should there be concrete indications of unlawful use.

Legal basis and legitimate interest

Processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website as well as ensuring system security and detecting misuse.

Recipients

Recipients of the data may be technical service providers acting as processors for the operation and maintenance of our website.

Storage period

Data is stored in server log files in a form that allows the data subjects to be identified for a maximum of 7 days, unless a security-relevant event occurs (e.g. a DDoS attack). In the event of such an incident, server log files are stored until the security-relevant event has been resolved and fully clarified.

Provision required or necessary

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address the service and functionality of our website cannot be guaranteed. In addition, individual services and functions may be unavailable or restricted.

Objection

Please refer to the information on your right to object under Art. 21 GDPR further below.

Contacting us

Nature and purpose of the processing Our website provides a contact form which can be used for electronic contact. If a user makes use of this option, the data entered in the input mask is transmitted to us and stored. At the time the message is sent, the following data is also stored:

  • date and time of the enquiry
  • URL from which the enquiry was made

Contact can also be made via the e-mail addresses provided. In this case, the user’s personal data transmitted with the e-mail is stored. This includes the date and time of sending the e-mail, the e-mail address, IP addresses and information about the servers involved in the e-mail communication. Regardless of the means of communication chosen, we collect the content of your enquiry. Your data is stored for the purpose of individual communication with you.

Legal basis

The data is processed on the basis of a legitimate interest (Art. 6 (1) lit. f GDPR). Our legitimate interest in processing your data is to enable straightforward contact. If you contact us to request a quote, the data is processed in order to carry out pre-contractual measures (Art. 6 (1) lit. b GDPR).

Recipients

Recipients of the data may be technical service providers acting as processors for the operation and maintenance of our website.

Storage period

Data is deleted no later than 6 months after the enquiry has been processed. If a contractual relationship arises, we are subject to the statutory retention periods. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.

Provision required or necessary

The provision of your personal data is voluntary. However, we can only process your enquiry if you provide us with the required data and the reason for the enquiry.

Objection

Please refer to the information on your right to object under Art. 21 GDPR further below.

Newsletter

Nature and purpose of the processing

In order to deliver our newsletter or comparable information, we collect personal data that is transmitted to us via an input mask. For an effective registration we require a valid e-mail address. To verify that a registration is actually made by the owner of an e-mail address, we use the double opt-in procedure. For this purpose, we log the registration for the newsletter, the sending of a confirmation e-mail and the receipt of the requested response. No further data is collected. At the time the registration form is sent, the following data is also stored:

Legal basis

On the basis of your expressly granted consent (Art. 6 (1) lit. a GDPR), we send you our newsletter or comparable information by e-mail to the e-mail address you have provided on a regular basis.

Recipients

We use a service provider for dispatch who acts as our processor.

Storage period

The data is processed in this context only for as long as the corresponding consent is in place.

Provision required or necessary

The provision of your personal data is voluntary and based solely on your consent. Without existing consent, we cannot send you our newsletter.

Withdrawal of consent

You can withdraw your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. You can request unsubscription via the link contained in every e-mail or via the contact information listed in this privacy policy.

Reach measurement

Nature and purpose of the processing

Reach measurement serves to evaluate the visitor flows to our online offering and may include behaviour, interests or demographic information about visitors, such as age or gender, as pseudonymous values. With the help of reach analysis we can, for example, identify at what times our online offering or its functions or content are used most frequently or invite reuse. We can also determine which areas need adjustment. You can find out which tools we use for reach measurement further below.

Legal basis

Processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest. Measuring reach and the resulting information are suitable for adapting our web offering.

Recipients

We use technical service providers for the operation and maintenance of our website who act as our processors.

Storage period

Information on the storage period can be found in the information on the tools used below.

Provision required or necessary

The provision of the data is neither legally nor contractually required.

Objection

Please refer to the information on your right to object under Art. 21 GDPR further below.

Tools used for reach measurement

Matomo (without cookies)

For reach measurement we use the locally installed analysis tool Matomo (formerly Piwik). With the help of this tool we evaluate user behaviour locally on the server. Matomo does not collect the data itself but draws on the web server’s database. The web server truncates every requesting IP address before it is stored in the log file. The data basis is thus sufficiently anonymised and no conclusions can be drawn about individual persons.

Cookies

A cookie is a small data record that is created when a website is visited and temporarily stored on the website visitor’s system. If the website visitor accesses the server of this website again, the user’s browser sends the previously received cookie back to the server. The server can evaluate the information obtained in this way. Cookies can, in particular, make navigating a website easier. Detailed information on the subject of cookies, and which cookies are used on this website and for what purpose, can be accessed at any time in the cookie settings.

Deleting cookies

You can delete individual cookies or the entire cookie inventory. You can also obtain information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you can find the necessary information at the following links:

In addition, you can prevent the loading of so-called scripts by default. NoScript only allows JavaScript, Java and other plugins to be executed on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from your browser provider (e.g. for Mozilla Firefox: https://addons.mozilla.org/en-US/firefox/addon/noscript/).

Technically necessary cookies

Nature and purpose of the processing

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change. We need cookies for the following applications: An overview of the cookies used can be found in our cookie consent tool.

Legal basis and legitimate interest

In this respect, the data processing is carried out solely on the basis of our legitimate interest in a user-friendly design of our website and in the documentation of consent pursuant to Art. 6 (1) lit. f GDPR in conjunction with a balancing of interests under Section 25 (2) TDDDG.

Recipients

Recipients of the data may be technical service providers acting as processors for the operation and maintenance of our website.

Storage period

Please refer to the cookie consent tool for the respective storage period of the cookies.

Provision required or necessary

The provision of the aforementioned personal data is neither legally nor contractually required. However, without this data the service and functionality of our website cannot be guaranteed. In addition, individual services and functions may be unavailable or restricted.

Objection

Please refer to the information on your right to object under Art. 21 GDPR further below.

Provision required or necessary

The provision of your data is voluntary and based solely on your consent. However, we point out that in this case you may not be able to use all functions of this website to their full extent.

Withdrawal of consent

You can withdraw your consent for the future in the cookie consent tool.

Profiling

With the help of technically non-necessary cookies, the behaviour of website visitors can be evaluated and their interests analysed. For this purpose, we create a pseudonymous user profile.

Information on your right to object under Art. 21 GDPR

Right to object in individual cases

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 (1) lit. f GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Recipient of an objection

Joachim Steinigeweg Allerweltskino e. V. Alteburger Str. 113 50678 Köln Germany contact@iranian-filmfestival.com

Changes to our privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or in order to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

Questions about data protection

If you have any questions about data protection, please send us an e-mail to the controller named above.

Copyright notices

This privacy policy was created with the help of activeMind AG – the experts for external data protection officers (version #2024-10-25).