DOCUMENTS

PRIVACY POLICY
of the FILMFORUM.PL website

1. INTRODUCTION

§1

The FILMFORUM Association, located at ul. Gen. Władysława Andersa 35, 00-159 Warsaw, Poland, processes information to maintain the FILMFORUM.PL website (hereinafter referred to as the “Portal”). This information includes data that, according to Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of¹ personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the General Data Protection Regulation² or GDPR), constitutes personal data.

§2

According to current regulations, especially the GDPR, to ensure necessary personal data protection, the data subject must be informed about the processing of their personal data according to Article 13 or 14 of the GDPR.

§3

The Data Controller is the FILMFORUM Association (hereinafter referred to as the Service Provider), located at ul. Gen. Władysława Andersa 35, 00-159 Warsaw, Poland, registered in the National Court Register by the District Court of Warsaw, XVII Commercial Division as KRS 0000178435, VAT ID 778-141-37-39, REGON 634536362.

§4

You can contact the Service Provider in writing by postal mail to ul. Gen. Władysława Andersa 35, 00-159 Warsaw, Poland, or by email to rodo@filmforum.pl.

§5

The Service Provider has appointed a Data Protection Officer, who can be contacted in writing by postal mail to ul. Gen. Władysława Andersa 35, 00-159 Warsaw, Poland, or by email to rodo@filmforum.pl.

§6

1. The Service Provider respects the privacy of the Portal’s Users. This Privacy Policy explains what kind of data is collected by the Portal and how it may be used.
2. Users provide their personal data voluntarily and it is necessary to use the Portal’s functionalities.

1. USE OF INFORMATION

§7

The Portal may collect the following data provided by the User, with the specific data collected depending on the service used:

1. First and last name, postal address or postal code, email address, instant messaging account names, social media contact details (Facebook, Instagram, Twitter), phone number, date of birth, likeness, online payment data
2. Information provided by the User who decides to rate the Portal’s content, share their preferred interests, account settings (including preferences given on the “user profile” page at the Portal), and any other information provided through the Portal or elsewhere.

The Portal collects data in various ways, for example, as it is entered by the User, during their use of the Portal, or in contact with the Portal’s administration.

§8

1. No personal data is automatically stored by the Portal.
2. The Service Provider specifies the personal data essential to provide the service available in each functionality of the Portal.

§9

Some data that do not constitute personal data are automatically collected upon a visit to the Portal. Their sole purpose is to improve the User’s experience of the Portal’s content and are part of the standard operation of the Portal’s servers. This data includes:

1. User’s browser information
2. User’s operating system information
3. IP address allowing an approximation of the User’s geolocation
4. Information about the User’s activity on the Portal
5. Information about the User’s interaction with emails and text messages, and the Service Provider’s messages sent via notifications or internet communication channels
6. Advertising identifiers
7. Properties of the devices and software used by the User (type and configuration)
8. Information about the User’s internet connection
9. Page views and their sources (i.e., URLs) statistics
10. Information collected through cookies, web beacons, and other technologies, including advertising data (i.e., available and displayed ads, website’s URL, date and time)

§10

When a new User registers on the Portal, the registration forms may require them to provide their contact information (such as name, surname, email address, online payment data). During the registration process, the Portal sends an email message requesting the User’s consent to the registration. This registration is mandatory for certain functionalities of the Portal to be available (such as the possibility to submit an article in the “News” page, access to films in the VOD service, commenting on or rating the Portal’s resources). The data gathered in this way may be used by the Service Provider for marketing purposes.

§11

The Portal collects the User’s personal data when it is essential to fulfill a signed contract (for example, to provide VOD services). In some cases, the Service Provider may be obliged by existing laws to collect User’s personal data that are pertinent to protecting their or another person’s vital interests (e.g., for the purpose of payment fraud prevention or to confirm the User’s identity).

§12

With the User’s consent, the Service Provider may send emails containing information about the Service Provider’s cultural and educational activities and invitations to events, contests, workshops, festivals, and film reviews in Poland and abroad. The User may withdraw their consent at any time.

§13

The data collected by the Service Provider through the Portal is highly confidential information and will not be used for any other purpose. The data may be supplemented through other sources (e.g., application forms filled for the purpose of recruitment for film events, workshops, conferences, etc., organized by the Service Provider), after receiving prior consent from the User.

§14

In relation to data processing, the User retains the right to:

1. Request access to their personal data from the Service Provider;
2. Request the Service Provider to rectify their personal data;
3. Request the Service Provider to erase their personal data;
4. Request restrictions on the processing of their personal data;
5. Object to the use of their personal data;
6. Data portability;
7. Lodge a complaint with the supervisory authority.

§15

The User’s personal data may be disclosed to third parties for specific purposes and based on the following principles:

1. To render services on behalf of the Portal or to support the Portal in rendering services for Users by specialized entities (IT support, processing online payments using credit cards or other means of payment)
2. To provide services for the User
3. To analyze data on User activity to improve the functionality of the Portal.

Third parties are not authorized to use or disclose User personal data unless it is essential to render their services (including the maintenance and improvement of these services).

§16

The Service Provider may allow access to the User’s personal data in extraordinary cases when there is reason to believe that sharing this data may be essential to identify or contact a person whose activity may lead to infringement of the Service Provider’s or other Portal users’ copyrights (both domestically and internationally) of a third party or anyone who may be harmed by actions that break the law or data protection rights.

§17

In cases of sharing personal data to countries outside the European Economic Area and other regions adhering to comprehensive personal data protection laws, the Service Provider guarantees that they will share the data according to this Privacy Policy and in ways that comply with existing data protection laws.

§18

The User may voluntarily disclose their personal data on the Portal in the following ways:

1. Some Portal elements may feature tools by means of which the User may share data via email, text messages, social media applications, or other applications where information is disclosed by means of clients and applications installed on the User’s device.
2. Via social media applications, plugins, and other similar technologies allowing data sharing.

§19

Social media plugins and applications are managed by operators of social applications and adhere to their separate terms and conditions and privacy policies.

§20

The Service Provider may, through the Portal, collect information from other sources. This data is protected according to the principles set out in this Privacy Policy. Additional limitations imposed by the source of the data also apply. These include:

1. Entities rendering services allowing the Service Provider to geolocate the User in order to appropriately adjust the Portal’s functionality.
2. Payment service providers who disclose payment information or updates to the Service Provider pursuant to the legal agreements between them and the User and/or the Service Provider.

§21

1. The User has the right to request access to the personal data retained by the Service Provider and has the right to rectify or update the data. To file a request or a question regarding the privacy protection rules of the Service Provider, the User should contact the Data Protection Officer via email at rodo@filmforum.pl
2. The Service Provider responds to all requests from natural persons who want to exercise their rights in accordance with existing data protection laws.
3. The User may object to the processing of their personal data, request the Service Provider to restrict the use of their data, or request data portability.

III. ACCOUNT ACCESS AND “USER PROFILE”

§22

To facilitate access to the User’s account, the User may utilize the “Remember me on this device” function when logging into the Portal. This function makes use of a technology that allows the Portal to give the User direct access to their account and allows them easier management of the Portal without the need to enter their password or other data that could identify the User when they access the Portal in their internet browser.

§23

1. The User is not allowed to share their Portal account and its resources with third parties.
2. The User is obliged not to disclose the password allowing access to a Portal account to third parties and bears sole responsibility for any damages caused by such disclosure.

§24

The User has the possibility to delete access to their account and all personal data available at the Portal at any time. This functionality is accessible via the “User Profile” website. The deletion of data does not include archived articles, ratings, comments, and any other activity performed by the User while using the Portal.

§25

1. If the User wishes to resign from receiving email correspondence from the Service Provider, they may do so via the User Profile page or by clicking on the email service resignation link in the email message.
2. The User may not resign from receiving messages related to their use of the Portal, such as messages regarding transactions carried out via the Portal.

§26

1. Only persons of legal age may register on the Portal.
2. Minors may only independently use the generally available (that is, not requiring account registration) functionalities of the Portal.
3. The Portal does not gather personal data or information from minors (below the age of 18) without the consent of their parents or legal guardians.
4. Minors may only use the functionalities of the Portal requiring account registration only under the supervision and with the consent of their parents or legal guardians.

§27

Users visiting the Portal are personally responsible for the content of comments published on the Portal. Users visiting the Portal should be aware that including personal information (i.e., information that could allow identification and/or contact) gives access to that information to other users of the Portal.

1. COOKIES AND INTERNET ADVERTISING

§28

1. “Cookies” are small pieces of information (data) that a website sends to the User’s computer (saving it on their hard drive). Their sole purpose is to improve the reception of the Portal’s content, gather statistical information, and adjust to the User’s needs and hardware capabilities. “Cookies” facilitate access to the Portal’s services, enable the improvement of these services, and analyze and interpret the ways in which they are used. “Cookies” also allow for the enforcement of the terms and conditions of using the Portal and the prevention of fraud, allow for the improvement of the website’s functionality, monitor traffic, and activities on the website.
2. The Service Provider does not gather any personal data from the User via “cookie” files.

§29

Pursuant to the placement of advertisements on the Portal, advertisers may receive certain limited and anonymized information identifying the recipients of ongoing advertising campaigns. This information is used solely for the purpose of assessing the effectiveness and optimizing specific campaigns.

§30

By using the FILMFORUM.PL Portal, the User agrees to this Privacy Policy. If the User does not agree to this Privacy Policy, they may refrain from using the Portal.

§31

The Service Provider bears no responsibility for the content and practices of other websites linked from the Portal. Users should familiarize themselves with the privacy policies and features of such websites.

§32

This Privacy Policy may be updated periodically to reflect changes in applicable laws, relevant standards, or the rules for providing services through this Portal. The Service Provider will inform Users of any such changes, including their effective date, as required by law. Continued use of the Portal by the User constitutes acknowledgment (and, where applicable, acceptance) of these changes. If the User does not agree to the changes to this Privacy Policy, they may cease using the Portal.

§33

The editorial board of the Portal can be contacted as follows:

E-mail: redakcja@filmforum.pl
Phone: +48 22 392 03 22

Personal data collected via email, such as name, surname, and email address, will be used solely for the purpose of responding to inquiries and will not be processed further or shared with third parties.