Who is responsible?

 

Freund_Innen* des Pornographischen Films, Email: office@pffv.at ("PFFV", "we", "us") is committed to protecting your personal data. Therefore, PFFV complies with all applicable legislation on the protection, lawful handling, and confidentiality of personal data as well as data security. We process your personal data in accordance with the General Data Protection Regulation (GDPR), national data protection laws, and other relevant laws.

 

If you have any questions about data protection, you can contact us at office@pffv.at. 

 

For what purpose and on which legal basis may we process your data? What types or categories of data are processed?

​

• Registration and accreditation (e.g. guests, press, industry participants)

If you register or apply for accreditation, we process the information you provide in order to assess your request, manage access rights and organise your participation in the festival. This enables us to ensure proper access control, coordinate events and screenings  and communicate with you before, during and after the festival. The processed personal data may include your name, address, email-address, phone number, position or function, organisational affiliation, and information about films, workshops, performances, media or festivals, as well as accommodation requirements. The processing of data is based on Art. 6(1)(b) GDPR for the performance of a contract or pre‑contractual measures, and on Art. 6(1)(f) GDPR based on our legitimate interest in the orderly organisation and security of the festival.

​

• Contact requests and communication

When you contact us via contact forms, email or other communication channels, we process your contact details and the content of your message in order to respond to your enquiry and handle your request. This includes your name, email-address and the information you provide in your message. The processing is based on Art. 6(1)(b) GDPR where the communication is related to contractual or pre‑contractual matters, and otherwise on Art. 6(1)(f) GDPR based on our legitimate interest in efficient and transparent communication.

​

• Ticket sales

For the sale and administration of tickets, we process personal data necessary to conclude and perform the ticket purchase contract, manage access to events and comply with accounting and legal obligations. The processed data may include your name, date of birth, email-address, payment data as well as ticket number, type and event details. The processing is based on Art. 6(1)(b) GDPR for the performance of a contract and on Art. 6(1)(c) GDPR to comply with statutory obligations, in particular accounting and tax law requirements.

​

• Event organisation, cooperation and sponsoring
In the context of organising festival events and cooperating with partners, sponsors and funding bodies, we process personal data to coordinate activities, fulfil contractual obligations and meet reporting or documentation requirements. This may include identification and contact data, information about roles, functions and affiliations, as well as contractual and project‑related information. The processing is based on Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(f) GDPR based on our legitimate interest in the efficient organisation and financing of the festival.

​

• Volunteers and team members
If you apply as a volunteer or team member, we process your data to assess your application, organise assignments, coordinate schedules, provide accommodation where necessary and communicate with you throughout the festival. The processed data may include your name, pronouns, contact details, social media name, motivation, expectations, previous experience, languages, availability, feedback, information about accommodation or internships, and other information you voluntarily provide, such as preferences regarding roles or nudity. The processing is based on Art. 6(1)(b) GDPR for the establishment and performance of a contractual or quasi‑contractual relationship, on Art. 6(1)(f) GDPR based on our legitimate interest in running the festival, and, where special categories of data are concerned, on your explicit consent pursuant to Art. 9(2)(a) GDPR.

​

• Newsletter subscription
If you subscribe to our newsletter, we process your name and email address to send you information about the festival, programme updates and related events. The processing is based exclusively on your consent pursuant to Art. 6(1)(a) GDPR, which you may withdraw at any time with effect for the future.

​

• Photo, video and audio recordings during the festival
During the festival, photo, video and audio recordings may be made for documentation, public relations, reporting, marketing and archival purposes. These recordings may contain images or audio of identifiable persons. Information about such recordings is provided on‑site during the festival. The processing is based on Art. 6(1)(f) GDPR, reflecting our legitimate interest in documenting and communicating the festival, and, where required, on Art. 6(1)(a) GDPR based on consent. 

​

• Exhibitions and film submissions
When you submit films or other works for exhibitions or screenings, we process your data to evaluate submissions, curate the programme, communicate with submitters and manage screening rights. The processed data may include identification and contact details, film‑related information such as titles, synopses and credits, as well as submission materials and related correspondence. The processing is based on Art. 6(1)(b) GDPR for the performance of a contract or pre‑contractual measures and on Art. 6(1)(f) GDPR based on our legitimate interest in the artistic and organisational execution of the festival.

​

• Website analytics and use of social media buttons
When you visit our website, certain technical information is processed to ensure the secure operation, stability and optimisation of the website as well as to analyse its use and reach. This includes, in particular, the use of analytics tools such as Google Analytics or comparable services, as well as the integration of social media buttons or links (e.g. Facebook, Instagram, YouTube, X, Bluesky). In this context, data such as your IP address, browser and device information, usage data, referrer URLs and access times may be processed. Interaction with social media buttons may result in data being transmitted to the respective platform providers, which process the data under their own responsibility.

The processing is based on your consent pursuant to Art. 6(1)(a) GDPR, where required (e.g. cookies or similar technologies), and otherwise on our legitimate interests pursuant to Art. 6(1)(f) GDPR in operating, securing and improving our website.

​

The provision of the listed personal data may be contractually required in order to conclude and perform contracts with us (e.g. registration, accreditation, ticket purchase, participation as a volunteer or submission of films) or necessary to take steps at your request prior to entering into a contract. In certain cases, the provision of personal data is also required to comply with legal obligations. If you do not provide the personal data required in the respective context, we may be unable to process your request or conclude the relevant contract, which may result, for example, in the denial of accreditation, participation, ticket purchase or submission. We do not carry out any automated decision‑making including profiling. 

​

To whom is your data disclosed?

​

We disclose personal data only to the extent absolutely necessary for the purposes described above and in compliance with applicable data protection law. Recipients of personal data may include the following categories: Cinemas and venues (for the organisation and execution of film screenings and festival events), public funding bodies and sponsors (where required to fulfil contractual or funding‑related reporting and documentation obligations), service providers acting as processors (such as IT service providers, ticketing and accreditation systems, hosting providers, communication tools and payment service providers, who process personal data on our behalf and under our instructions), online platforms and analytics providers and social media platforms.

​

If any data recipients is located outside the European Union or the European Economic Area. In such cases, data transfers take place only where an adequate level of data protection is ensured, in particular through adequacy decisions of the European Commission or appropriate safeguards in accordance with Art. 44 et seq. GDPR.

​

How long is your data stored?

​

We generally store your data only as long as necessary to achieve the purposes listed above and in accordance with the statutory retention periods up to a maximum of ten years after the end of the year in which the data was initially collected.

​

What rights do you have?

​

In principle, we will provide you with information about all your personal data that we process at any time. Additionally, in some cases, you have the right to data portability, meaning the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format Under certain conditions, you can request the restriction of processing, rectification and deletion of your personal data and withdraw your consent. You also have the right to object to processing based on legitimate interests if there are reasons relating to your particular situation.

​

In the event of a complaint, you can contact us using the contact details provided above. Additionally, you have the right to lodge a complaint with the Austrian Data Protection Authority: Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna.