Τhe Thessaloniki International Film Festival, recognizes and respects the right to protection of personal data of the internet users, in accordance with European Regulation 2016/679 (“Regulation") of Law 4624/2019 and Law 3471/2006. This policy document outlines the collection and processing of the user’s data, when visiting or using the services provided on our Website. The visitor of our Website and/or user of our services is obliged to carefully read the terms and conditions on the protection of their personal data, as mentioned here.
Data Protection Officer (DPO)
TIFF has appointed a Data Protection Officer, who is responsible for monitoring the compliance with the Regulation, cooperating with the Hellenic Data Protection Authority (“Authority”), as well as functioning as the person of contact with the Authority and with the subjects of the data.
The contact details of the TIFF’s Data Protection Officer are:
What constitutes as personal data
According to the law, personal data constitutes any information that concerns an identified or identifiable natural person (“data subject”), such as full name, e-mail address, TIN, etc. The term Identifiable is legally defined as the natural person whose identity can be verified, directly or indirectly, through reference to an identifier — such as name, ID number, location data, linear ID recognition (IP address, e-mail, etc.), or through one or more factors that are characteristic of their physical, physiological, genetic, psychological, economic, cultural, or social identity.
What is personal data processing
Personal data processing is any action or sequence of actions carried out, with or without the use of automated means, on personal data such as the collection, registration, organization, arrangement, storage, customization, modification, retrieval, information retrieval, usage, transmission to third parties, dissemination, correlation, combination, restriction, deletion, and destruction of personal data.
What personal data do we collect and for what purpose?
a) Browsing Data
When visiting and navigating on the Festival’s website, the users’ Internet Protocol address and login details are automatically registered. However, the identifiable information of the user’s physical identity is not disclosed — these details are used exclusively, and only for statistical purposes to measure the performance of our website. In addition, the cookies, which you have given your consent to process, are collected. Processing of data is undertaken in order to give you access to the information on our Website.
When giving your consent to receive newsletters, we use your e-mail address to send you regular updates on the objectives, activities, and services of TIFF — as well as on our programme of events and film screenings in the cinema theatres organized by TIFF. You can withdraw your consent at any time.
c) Contact Form
When using the contact form to communicate with our website, we will receive your e-mail address, with your consent, so that we can contact you.
d) Online Store
With your registration to TIFF’s webpage, you can participate in; e-commerce activities by our provision to you -with your explicit consent- of product payment services and/or services that you have acquired, using payment platforms that have been appended for this purpose.
For the purchasing of movie screening tickets using a third-party electronic platform, it is required to provide us with the necessary personal data for the online booking.
When purchasing products and completing orders on our online store, we collect and process the following information: a) full name, b) address, c) email, d) telephone no., e) fax no. to complete the order, whereas when requesting the issuing of an invoice, we additionally collect the following data: a) registered name, b) TIN, c) profession.
Through the Eventival platform we collect the necessary data for organizing each Festival, such as contact details, information regarding the films’ crew and key team members, accreditations and tickets and the participation of guests in the individual activities of each event.
f) Volunteer Programme
In order to participate in the volunteer programme of the Festival, it is necessary for the interested parties to submit an application using the following personal data: a) Full name, b) father’s name, c) mother’s name d) address, e) profession, f) e-mail, g) copy of ID card or passport.
g) Internship Programme
To apply for an internship position, it is required to apply with a CV, which contains the following personal data: a) Full name, b) address, c) telephone no., d) e-mail, e) university degree f) knowledge of foreign languages, g) work experience.
h) Photographs and video
We collect image and audio data when taking photos and videos at our events, which are sometimes also displayed on our website and social networking services.
Legal basis for the processing of personal data
The legal basis for the processing of personal navigation data is article 6 para. 1 item f of the Regulation. The data is necessary for the operation of our website but also for its optimization, as well as for us to ensure the security of our information systems.
As for the personal data we collect when registering to our newsletter, filling in the contact form, participating in the events promoted through the Eventival platform, applying for the volunteer programme and the internship programme, as well as when taking photos and videos, the legal basis is the free consent of the subject, after being informed.
Finally, the basis for the processing of the data necessary for the online purchasing of a ticket, as well as for purchases from our online store, is the contract drawn between TIFF and the customer for the provision of all relevant services.
The personal data of visitors and/or users of the services provided on our Website are not being transferred to third-party recipients — except for the case, where you provide your consent for this purpose, or for the establishment, exercise, or support of legal claims, or, if necessary, for the compliance with our legal obligations.
Data retention time
The personal data concerning visitors of the Website and/or users of our online services are collected and maintained for the necessary time and then they are erased.
For the protection of personal data of users and visitors on our website, we use the secure connection (https://) and data security measures to prevent the risk of loss, misuse, unauthorized access or sharing of your personal information.
PLUG-INS of social networking sites
Our webpages incorporate social networking application, interfaces, or add-ons (Plug-ins), for social networking services — such as the services provided by Facebook, Twitter etc. With the add-ons, information can be transferred to the corresponding platform for you, without this being immediately noticeable. The information includes the identification number of uses of the platform, the webpages you have visited etc. Plug-ins are governed by the data protection policy of the respective social networking service.
Regarding the protection of your personal data, you have the following rights:
- the right to access, that is, the right to be informed if your personal data is processed,
- the right to rectification, that is, the right to demand the rectification of inaccurate personal data,
- the right to deletion, that is, the right to request any of your personal data to be erased under specific conditions,
- the right to restriction of processing, when the accuracy of the data is contested, or the processing is unlawful, or for other reasons
- the right to data portability, that is, the right to request that you receive the data concerning you in a structured, commonly used, and machine-readable format, as well as to transfer such data to another controller, and
- the right to object to the processing of your personal data, unless there are compelling and legal grounds for processing, which prevail over your interests, rights, and freedoms.
Right of Complaint