Privacy Policy

Effective date: April 3, 2023

1. Who we are

This website is operated by:

Name / Company name: FilmEU Association

Email: maxime.vansant@filmeu.eu

If you have any questions about this privacy policy or how your data is handled, you can contact us via the email address above.

2. What personal data we process

This website does not actively collect personal data from visitors: there are no forms, no newsletter sign-up and no visitor accounts.

However, when you visit this website, some technical data is processed automatically to deliver the pages to your browser:

  • IP address
  • Browser type and version
  • Device and operating system
  • Date and time of access and the page requested

This data is processed as part of the normal operation and security of the website. Our web server does not keep a log of visits. If a request fails, it records a technical error message in which only the network part of the IP address is kept, not the full address.

The people who maintain the content of this website (FilmEU staff and partners) have an account for the content management system. For these accounts we store a name, an email address, a role and a password, which is stored in encrypted (hashed) form. These details are used only to give them access to edit the website.

3. Hosting

This website is hosted by Scaleway, a service provided by Scaleway SAS (France).

The website, its database and its images are stored on Scaleway servers in the Paris region (France, European Union). Scaleway processes technical data (such as IP addresses) on our behalf to deliver the website securely and reliably. This data is not transferred outside the European Economic Area for hosting.

Fonts, scripts, images and the map on this website are served from our own hosting. Visiting the website does not load content from other companies.

4. Cookies

This website does not use cookies for visitors: no tracking, marketing or analytics cookies, and no other cookies either.

Only the people who log in to the content management system receive strictly necessary cookies, to keep them logged in and to let them preview unpublished changes.

Because the website itself does not set cookies for visitors, it does not show a cookie banner. Embedded videos are an exception once you choose to play them (see section 5).

5. Embedded video and social media

Video: the video on the homepage is hosted on YouTube, a service of Google. The video player is only loaded when you click play, using YouTube's privacy-enhanced mode (youtube-nocookie.com). From that moment, Google receives technical data such as your IP address and may use cookies or similar technologies, as described in Google's privacy policy. Google may process this data outside the European Economic Area.

Instagram: the "Latest news" section shows posts from our Instagram account. The images are copied to our own hosting, so viewing this section does not send any data to Instagram. When you click a post, it opens on Instagram (Meta) in a new tab, where Meta's privacy policy applies.

Links: links to social networks and to partner websites take you to those websites, which have their own privacy policies.

6. Purpose of data processing

Personal data is processed solely for the following purposes:

  • Delivering the website correctly
  • Ensuring security and stability
  • Preventing abuse or misuse
  • Giving the content editors access to maintain the website

No data is used for profiling, marketing, or analytics purposes.

7. Legal basis

The processing described in this policy is based on our legitimate interest in providing a secure and functional website and in maintaining its content, in accordance with Article 6(1)(f) of the General Data Protection Regulation (GDPR).

8. Data retention

Technical data is only processed for as long as needed to deliver the page you requested. The error messages mentioned in section 2 are kept in log files of limited size, which are overwritten automatically.

Content editor accounts are kept for as long as the person maintains the website and are deleted when their access is no longer needed.

A backup of the website's database, which includes the editor accounts, is made every night. Backups are stored with Scaleway in France and kept for 30 days.

9. Your rights

Under the GDPR, you have the right to:

  • Access your personal data
  • Request correction or deletion of your data
  • Object to or restrict processing
  • Lodge a complaint with a supervisory authority

To exercise these rights, you can contact us using the details above.

10. Changes to this policy

This privacy policy may be updated if the website changes (for example, if forms, analytics, or third-party services are added).

The most recent version will always be available on this page.