Culture & Diversity Film Festival – Privacy Policy
This is the Privacy Policy for the Culture & Diversity Film Festival (collectively referred to as “CDFF”, “we”, “us” or “our” in this policy) and our website https://cdfilmfest.com. You must read this Privacy Policy before contacting us via our email address or via the Contact page of this website.
We are strongly committed to keeping your personal data safe. We do not sell your personal data. We keep your personal data only for the purposes and duration specified below.
Definition: Your personal data is any information about you which we may collect and or which you may provide to us by which you can be identified or be identifiable, including your name, company name (if applicable), email address, postal address, phone number, and mobile phone number. We do not collect financial information, as we use third parties to handle payments for goods and/or services. Our website hosts may collect certain information about your device or web browser or the IP address you used to access our website, goods or services; however, we do not store such information in our company databases.
Purpose: We use personal data collected through our website only when we have a valid reason to do so, such as your consent, responding to your inquiries or messages, the performance of a contract with you, a legal obligation to retain information such as transaction information, or our legitimate interest in screening and promoting audio/visual projects and establishing a network of like-minded audio/visual artists and supporters of such artists, as illuminated below.
Filmmakers: If you submitted your creative project via Film Freeway, then we have access to whatever information you provided in your submission. If we do not select your project, then we do not use that information in any way other than to send to you via Film Freeway the notice that we did not select your project. If we select your project, then we may use the information you provided to Film Freeway to contact you and access the images, videos, biographical information or other information relevant to your project and hosted on the Film Freeway site so that we may facilitate your participation in the festival and promote your project to the public.
Others: If you contacted us via a message or email not facilitated by Film Freeway, then we may have access to whatever information you provided, such as: your name, your email address, any other contact information you provided, any social media contact information you provided, any images you provided, any audio/visual content you provided, any links you provided which access external sites. We may use this information to assess and/or respond to your message or email, and we may store this information for the purposes of future communications.
All persons: We do not collect special categories of data from you - such as personal data concerning your race, political opinions, religion, health or sexual orientation. In the event that you chose to provide that type of data to us, we do not store such data. We are primarily concerned with being able to communicate with you via your name, company name (if applicable), email address, postal address, and phone number.
Prizes, awards and events: Generally, we do not share your personal information with any of our advertising partners or sponsors. However, if you are the recipient of a prize or award by one of our advertising partners or sponsors, and, you have expressly authorized us to provide your personal information with respect to your receipt of that prize or award, then upon your consent we will provide your personal information to that advertising partner or sponsor so that you may receive the prize or award. In addition, we may share your personal data with sponsors of CDFF events when you have given your permission for us to do so. We may also share your personal data, if required and upon your consent, with our advertising partners or sponsors for event administration or security purposes.
We have implemented appropriate technical and organizational controls to protect your personal data against unauthorized processing and against accidental loss, damage or destruction.
Social media: Your personal data may be shared with other organizations when our web pages use social plug-ins from these organizations (such as liking or sharing on social media). These other organizations may receive and use personal data about your visit to our sites or apps. If you browse our site or view content on our apps, personal data they collect may be connected to your account on their site. For more information on how these organizations use personal data, please read their privacy policies.
If required by law: We may reveal your personal data to any law enforcement agency, court, regulator, government authority, or in connection with any legal action if we are required to do so to meet a legal or regulatory obligation, where the request is proportionate, or otherwise to protect our rights or the rights of anyone else (for example, in response to a valid and properly served legal process such as subpoena or warrant). If we have your contact details, we will take reasonable steps to attempt to notify you prior to disclosing your data unless (i) prohibited by applicable law from doing so, or (ii) there are clear indications of unlawful conduct in connection with your use of CDFF services.
Other limitations: We do not use cookies to collect any personal data. We do not use generative AI on our website or in our email or telephone communications. We do not aim any of our products or services directly at children under the age of 13 and we do not knowingly collect personal data about children under 13 in providing our services.
Duration: We keep your personal data for only as long as we need to. How long we need your personal data depends on what we are using it for, as set out in this privacy policy. For example, we may need to use it to answer your queries about our products or services and as a result may keep your personal data while you are still using our product or service. To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means. We may also need to keep your personal data for accounting purposes, for example, where you have interacted with us via Film Freeway or other entity.
If we no longer need your data, we will delete it or make it anonymous by removing all details that identify you. If we have asked for your permission to process your personal data and we have no other lawful grounds to continue with that processing, and you withdraw your permission, we will delete your personal data. However, when you unsubscribe from marketing communications, we will keep your email address to ensure that we do not send you any marketing communications in the future.
Your rights: You have a number of rights with regard to the personal data that we hold about you and you can contact us with regard to the following rights in relation to your personal data:
You have the right to receive a copy of the personal data we hold about you.
You have the right to correct the personal data we hold about you.
Where applicable, you may also have a right to receive a machine-readable copy of your personal data.
You also have the right to ask us to delete your personal data or restrict how it is used. There may be exceptions to the right to erasure for specific legal reasons which, if applicable, we will set out for you in response to your request.
Where applicable, you have the right to object to processing of your personal data for certain purposes.
Where you have provided us with consent to use your personal data, you can withdraw this consent at any time.
If you would like to exercise any of your rights specified above, please email us at privacy@cdfilmfeset.com . We will respond to all standard legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a large number of requests. In this case, we will notify you and keep you updated.
We may need verification of your identity to proceed with a request. If you provide us with proof of identity containing information that does not match our records, we may request further proof of identity from you. This is a security measure to ensure that your personal data is not disclosed to any person who does not have a right to receive it.
You will not have to pay a fee to obtain a copy of your personal data (or to exercise any of the other rights). However, for any further copies requested by you, we may charge a reasonable fee based on administrative costs.
California rights: The California Consumer Privacy Act 2018 (“CCPA”) and California Privacy Rights Act 2020 (“CPRA”) provide certain rights to residents of California. The CCPA and CPRA are collectively referred to as “CCPA” below.
If you are a resident of California you may contact us with regard to the following rights in relation to your personal data:
Right to Know: At or before the time of collection, you have a right to receive notice of our practices, including the categories of personal data and sensitive personal data to be collected, the purposes for which it is collected and used, whether such personal data is “sold or shared” and for how long personal data is retained. These details are set out in this Privacy Policy.
Right to Access: You have the right to request access to the personal data we may hold on you for the past twelve (12) months. You may submit up to two (2) requests per year of access to your personal data.
Right to Correct: You have the right to correct inaccurate personal data we hold about you.
Right to Opt-Out of Sale of Personal Data: For individuals sixteen (16) years or older, you have the right to opt-out of sale of personal data we may hold on you. You can exercise this right at any time by pressing the “California resident - Do not sell” link in the footer of every page on our site. For individuals between thirteen (13) to sixteen (16) years old, you have the right to opt-in to the sale of personal data we may hold on you.
Right to Deletion: You also have the right to ask us to delete personal data we may hold on you or restrict how it is used. There may be exceptions to the right to deletion which, if applicable, we will set out for you in response to your request.
Right to Limit Use and Disclosure of Sensitive Personal Data: Where applicable, you have the right to limit our use of sensitive personal data for any purposes other than to provide the services you request or as otherwise permitted by law.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your California Consumer Privacy Act rights.
If you want to make any of these requests, please email us at privacy@cdfilmfest.com. We will deal with requests for access to your personal data within forty-five (45) days for California-specific requests.
To help us respond as you expect, please specify that you are making a request under the CCPA. We may need to request specific information from you to help us confirm your identity. For example, we will verify your identity before complying. If you provide us with proof of identity containing information that does not match our records, we may request further proof of identity from you.
You can designate an “authorized agent” to make requests to exercise your rights on your behalf under the CCPA. We will clarify that any “authorized agent” has your written permission in making that request. We may also contact you directly to verify your identity.
Record of requests: We keep a record of requests that we received from users exercising their CCPA rights. We have set out this record of requests for the last calendar year from 1 July 2024 below:
California “Shine the Light” privacy rights: Residents of California can ask us to provide a list of the types of personal data we have disclosed to third parties for direct marketing purposes and the identity of those third parties. We do not generally disclose personal data as defined under the California “Shine the Light” law. To the extent that we share email addresses with third parties in connection with online marketing that could be covered, you may opt-out through your “Manage My Account” choices.
To make a “Shine the Light” request, please email dataprotection@theguardian.com with “Shine the Light” in the subject line.
Contact: If you would like to understand more about this Privacy Policy or wish to contact us concerning any matter relating to this Privacy Policy, you may email us at privacy@cdfilmfest.com. We will endeavor to respond to your question(s) or concern(s) within 30 days. Keep in mind that we are a small festival and do not have full-time year-round staff, so please accept our apologies in advance for any unintentional delays.
Changes: If we decide to change our privacy policy, the updated privacy policy will be posted on this page. If the changes are significant, we may also choose to email all our registered users with the new details. If required by law, we will get your permission or give you the opportunity to opt out of any new uses of your data.