Name and address of the responsible organization
The responsible organization with regard to the EU’s General Data Protection Regulation (GDPR) and other data protection laws issued by EU member states as well as regulations regarding data protection law is:
Arsenal – Institut für Film und Videokunst e.V.
Potsdamer Str. 2
10785 Berlin
+49 30 26955100
mail@arsenal-berlin.de
www.arsenal-berlin.de
Data Protection officer:
Frank Schultz
sumit.de Computersysteme GmbH
Datenschutz@sumit.de
+49 30 / 23 50 94 - 0
I General
1. Definition of personal data
Personal data is information that relates to an identified or identifiable living individual. This includes names, telephone numbers and email addresses. According to the GDPR and a ruling by the German Federal Court of Justice, a computer’s IP address also counts as personal data.
2. Extent of processing of personal data
We collect and process personal data only insofar as this is necessary for a functioning website and to allow users access to our content and services. Data is only collected and used after consent is given. There are certain exceptions when, for example, prior consent cannot be sought for technical reasons and legal regulations allow for the processing of data. This is the case for log files (see Point II).
3. Legal basis for processing personal data
Art. 6, para. 6, 1 lit. a of the GDPR serves as the legal basis when we seek consent to process personal data.
If processing is necessary for the purposes of the legitimate interests of our organization or that of a third party, in so far as the interests or fundamental rights and freedoms of the data subject are overridden, then Art. 6, para. 6, lit. f of the DRPR serves as the legal basis for the processing.
4. Saving and deletion of data
A subject’s personal data is either deleted or blocked once it has served its purpose. This also happens once a predetermined period for storing data has elapsed, unless there is a need to continue storing data for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
II Provision of the website and creating log files
Our web server automatically stores information transmitted by your browser in its log files. This includes:
- Browser type/version
- Operating system
- Referrer URL (identifies address of previously visited site)
- Date and time of server request
- Computer’s IP address
We store IP addresses for 31 days. We do this for reasons of data security, i.e. to maintain the stability and operating security of our system Moreover, the log data is used to statistically evaluate the traffic on our website. To maintain data protection, the IP address is anonymized before statistical evaluation. The log files are stored separately from, and never combined or compared with other personal data you may have provided during your visit of our site.
We use the software AWStats to statistically analyze our log data. This is an open source Web analytics reporting tool installed on a server located in Germany: no data is transmitted to other servers for analysis.
III Use of cookies
Cookies are small text files that contain information related to the computer on which they are temporarily installed. On this website, cookies are used in either of these cases:
1. Cookies are necessary to access the password-protected areas, such as the press and viewing areas. These are known as “session cookies” which are automatically deleted after a visit. You can prevent cookies from being installed by changing the settings of your browser software. However, this will prevent you from entering password-protected areas.
2. A Cookie is set when you agree to your browser being connected to a streaming service in order to view videos (see Point VI). Your acknowledgment is saved in a permanent cookie. If you do not agree, no cookie will be installed, and no video content will be shown.
IV Links to social media platforms
There is no information passed on to a social media platform when you visit the Arsenal website. If you click on the buttons linking to social media platforms such as Facebook, Twitter or Instagram at the bottom of the page, you will be directed to the respective social media page of the Forum. The URL of the last page you visited on the Arsenal website will be transmitted as a GET-request.
V The Arsenal Facebook pages
At the current time, it has not been conclusively established whether and to what extent Facebook offers its service in accordance with European Data Protection Directives. As soon as any new, legally binding perspectives emerge to this end with respect to our Facebook pages (Arsenal, Berlinale Forum, and Forum Expanded), we will address these without delay. Until then, you should carefully assess what personal data you are making available to Facebook by using our fan pages.
We would like to explicitly draw your attention to the fact that Facebook stores its users’ data (such as personal information, IP addresses, etc.) in line with its data policy and makes commercial use of it accordingly. More information about how Facebook uses data can be found at the following link: https://www.facebook.com/policy
Your privacy settings can be adjusted at the following link:
https://www.facebook.com/about/basics/manage-your-privacy
Arsenal has no influence on how Facebook stores your data and makes further use of it. We have no information about what volume of data is stored at which location and for which length of time, the extent to which Facebook complies with existing deletion obligations, which analyses and links are carried out with the data, and who might receive it.
VI Embedding of videos by Vimeo and Youtube
The videos on our website are embedded either by the video portal Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA or by the video portal Youtube (Google LLC), 901 Cherry Ave., San Bruno, CA 94066, USA.
If you have agreed to viewing videos on out site, then every time a page that offers a video clip is called up, a direct connection is established between your browser and the server of the respective streaming service, where information about your visit, IP address, and interaction with the player is stored.
The iframe that opens when a Vimeo video is clicked also launches the tracking service Google Analytics. You can prevent Google Analytics from tracking your activity by using deactivation tools that Google provides for certain browsers. You can also download and install a browser plugin that will prevent Google collecting and analyzing your activity on the Arsenal website and of your personal data (incl. your computer’s IP address) by clicking here tools.google.com/dlpage/gaoptout
You will find Vimeo’s privacy policy and information about how the company collects and uses personal data by clicking here vimeo.com/privacy.
You will find Youtube's privacy policy and information about how the company collects and uses personal data by clicking here www.youtube.com/intl/en_us/howyoutubeworks/user-settings/privacy/
VII Information, amendments, deletion and revoking consent
You have the right to request information about the personal data that we store and its use and you can ask for it to be amended, blocked or deleted at no cost. However, we would like to point out that you have the right to amend false information or delete personal data only as long as there is no legal obligation to store it.
We will immediately delete all data after receiving a request to revoke consent to store personal data, if there is no legal obligation to keep it or it is needed to fulfill a contract.
VIII Contact details
Please contact us at datenschutz(at)arsenal-berlin.de or 030-26955-100 if you have any questions on the collection, processing or use of personal data or if you would like any information to be amended, blocked or deleted.
