1. An Overview of Data Protection
General Information
The following information provides a simple overview of what happens with your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

Data Recording on This Website
Who is responsible for the data recording?
The data on this website is processed by the website operator (the “Controller”).

How do we record your data?

Directly from you: This includes information you enter into contact forms, membership applications, or film submission forms.

Automatically: Technical information (e.g., internet browser, operating system, or time of access) is recorded automatically by our IT systems to ensure the error-free provision of the website.

2. Information About the Controller
The data processing controller on this website is:

XPOSED Film Festival e.V. c/o Moviemento

Kottbusser Damm 22

10967 Berlin, Germany

Phone: +49 (0) 176 85036865

Email: info@xposedfilmfestival.com

3. Your Rights as a Data Subject
Under the GDPR, you have the following rights at any time and free of charge:

Right of access: Information about your archived personal data.

Right to rectification/erasure: Request to correct or delete your data.

Right to restrict processing: Limit how your data is used.

Right to object: Object to data processing based on legitimate interests (Art. 21 GDPR).

Right to complain: Lodge a complaint with the competent supervisory authority (Berliner Beauftragte für Datenschutz).

4. Hosting and External Providers
Hosting (All-Inkl)
Our website is hosted by ALL-INKL.COM (Neue Medien Münnich) in Germany. We have a Data Processing Agreement (DPA) with them to ensure your data is processed securely and in compliance with the GDPR.

5. Cookies and Consent Tools
Complianz
We use the Complianz consent management tool to obtain and document your consent for the use of cookies. Functional cookies are set based on our legitimate interest in providing a working website. Analytical and marketing cookies are only activated if you provide your express consent.

6. Analysis and Third-Party Tools
Google Analytics
We use Google Analytics (Google Ireland Limited) to analyze user patterns.

Anonymization: We have activated IP Anonymization. Your IP address is shortened within the EU before being transferred to the USA.

Data Transmission: Transfers to the US are based on Standard Contractual Clauses (SCC).

YouTube & Vimeo
Videos are embedded in “Extended Data Protection Mode” (YouTube) or “Do-Not-Track” (Vimeo). This prevents these platforms from tracking your behavior until you actively start playing the video.

Google Maps
We use Google Maps to show festival locations. When activated, your IP address is transferred to Google servers.

7. Payments and Donations
Twingle
If you use our membership or donation widget, your data is processed by twingle GmbH (Berlin). Data is stored exclusively on German servers for the purpose of processing your contribution. We have a DPA in place with twingle.

8. Social Media
Shariff Solution
To protect your privacy, we use the “Shariff” solution for social media buttons. This ensures that no data is sent to Facebook, Instagram, or Twitter unless you actively click on the share buttons.

9. Contact and Inquiries
If you contact us via email or the contact form, your inquiry and personal data will be stored for the purpose of processing your request. We do not share this information without your consent.