Legal Disclaimer
The responsible organization with regard to the EU’s General Data Protection Regulation (GDPR) and other data protection laws issued by EU member states as well as regulations regarding data protection law is:
Arsenal – Institut für Film und Videokunst e.V.
Potsdamer Str. 2
10785 Berlin
+49 30 26955100
mail@arsenal-berlin.de
www.arsenal-berlin.de
Data Protection officer:
Frank Schultz
sumit.de Computersysteme GmbH
Datenschutz@sumit.de
+49 30 / 23 50 94 - 0
1. Definition of personal data
Personal data is information that relates to an identified or identifiable living individual. This includes names, telephone numbers and email addresses. According to the GDPR and a ruling by the German Federal Court of Justice, a computer’s IP address also counts as personal data.
2. Extent of processing of personal data
We collect and process personal data only insofar as this is necessary for a functioning website and to allow users access to our content and services. Data is only collected and used after consent is given. There are certain exceptions when, for example, prior consent cannot be sought for technical reasons and legal regulations allow for the processing of data. This is the case for log files (see Point II).
3. Legal basis for processing personal data
Art. 6, para. 6, 1 lit. a of the GDPR serves as the legal basis when we seek consent to process personal data.
If processing is necessary for the purposes of the legitimate interests of our organization or that of a third party, in so far as the interests or fundamental rights and freedoms of the data subject are overridden, then Art. 6, para. 6, lit. f of the DRPR serves as the legal basis for the processing.
4. Saving and deletion of data
A subject’s personal data is either deleted or blocked once it has served its purpose. This also happens once a predetermined period for storing data has elapsed, unless there is a need to continue storing data for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Our web server automatically stores information transmitted by your browser in its log files. This includes:
- Browser type/version
- Operating system
- Referrer URL (identifies address of previously visited site)
- Date and time of server request
- Computer’s IP address
We store IP addresses for 31 days. We do this for reasons of data security, i.e. to maintain the stability and operating security of our system Moreover, the log data is used to statistically evaluate the traffic on our website. To maintain data protection, the IP address is anonymized before statistical evaluation. The log files are stored separately from, and never combined or compared with other personal data you may have provided during your visit of our site.
We use the software AWStats to statistically analyze our log data. This is an open source Web analytics reporting tool installed on a server located in Germany: no data is transmitted to other servers for analysis.
Cookies are small text files that contain information related to the computer on which they are temporarily installed. On this website, cookies are only used when you acknowledge our use of Youtube and Vimeo for the embedding of videos which entails the tracking by Google Analytics (see Point VIII). Your acknowledgment is saved in a permanent cookie.
There is no information passed on to a social media platform when you visit the Arsenal website. If you click on the buttons linking to social media platforms such as Facebook, Twitter or Instagram at the bottom of the page, you will be directed to the respective social media page of the Forum. The URL of the last page you visited on the Arsenal website will be transmitted as a GET-request.
At the current time, it has not been conclusively established whether and to what extent Facebook offers its service in accordance with European Data Protection Directives. As soon as any new, legally binding perspectives emerge to this end with respect to our Facebook pages (Arsenal, Berlinale Forum, and Forum Expanded), we will address these without delay. Until then, you should carefully assess what personal data you are making available to Facebook by using our fan pages.
We would like to explicitly draw your attention to the fact that Facebook stores its users’ data (such as personal information, IP addresses, etc.) in line with its data policy and makes commercial use of it accordingly. More information about how Facebook uses data can be found at the following link: https://www.facebook.com/policy
Your privacy settings can be adjusted at the following link:
https://www.facebook.com/about/basics/manage-your-privacy
Arsenal has no influence on how Facebook stores your data and makes further use of it. We have no information about what volume of data is stored at which location and for which length of time, the extent to which Facebook complies with existing deletion obligations, which analyses and links are carried out with the data, and who might receive it.
The videos on our website are embedded by the video portal Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA.
Every time a page that offers one or many Vimeo video clips is called up, a direct connection is created between your browser and a Vimeo server in the USA. Information about your visit and your computer’s IP address is stored there. Your interaction with the Vimeo player (e.g. clicking the Start button) is also transmitted to Vimeo and stored.
If you have a Vimeo account but do not want Vimeo to collect data about you via the Arsenal website and connect it with data that you have stored at Vimeo you will have to log out of Vimeo before visiting Arsenal.
You will find Vimeo’s privacy policy and information about how the company collects and uses personal data by clicking here http://vimeo.com/privacy.
The iframe that opens when a Vimeo video is clicked also launches the tracking service Google Analytics. We have no control over this analysis and no access to the collected data. You can prevent Google Analytics from tracking your activity by using deactivation tools that Google provides for certain browsers. You can also download and install a browser plugin that will prevent Google collecting and analyzing your activity on the Arsenal website and of your personal data (incl. your computer’s IP address) by clicking here: http://tools.google.com/dlpage/gaoptout?hl=en.
You have the right to request information about the personal data that we store and its use and you can ask for it to be amended, blocked or deleted at no cost. However, we would like to point out that you have the right to amend false information or delete personal data only as long as there is no legal obligation to store it.
We will immediately delete all data after receiving a request to revoke consent to store personal data, if there is no legal obligation to keep it or it is needed to fulfill a contract.
Please contact us at datenschutz(at)arsenal-berlin.de or 030-26955-100 if you have any questions on the collection, processing or use of personal data or if you would like any information to be amended, blocked or deleted.