General
This privacy policy informs you about how Zurich Film Festival AG (hereinafter also "we") handles your personal data (hereinafter also "your data"). We attach great importance to protecting the personal rights of the users (hereinafter also "users" or "you") of our services, comply with the applicable data protection regulations and take the necessary measures to protect your data.
Third-party websites that can be reached via our websites are not subject to the data protection regulations set out here. We assume no responsibility or liability for the observance of data protection by third party websites.
Data processing and purposes
General
"Personal data" are all data and information that relate to a specific or identifiable person. This includes e.g. contact data such as name, telephone number, address or e-mail address, as well as other information that you provide us with, for example, when registering, as part of an order, or when participating in prize draw or surveys and similar.
"Processing" is any handling of personal data, in particular the collection, storage, management, use, transmission, disclosure or deletion of your data.
Your data will only be used for the respective purposes stated. These purposes are communicated to you in this data protection declaration. We take the necessary measures to protect your personal data from loss, theft and misuse.
In the following, we will inform you about the instances we collect data about you, which of your data we process, for what purposes we use your data and to whom it may be passed on. In addition, we also explain what rights you have with us in relation to your data and how you can assert them.
Since Zurich Film Festival AG belongs to the NZZ Group, your data can also be transmitted between certain subsidiaries of the NZZ Group and used by these subsidiaries for the purposes mentioned in this data protection declaration.
Non-anonymous user
As part of the registration process for a "My ZFF" user account, when registering for a newsletter and when participating in a contest or prize draw, we collect personal data from you, such as your first and last name, address, e-mail address, payment details and, if applicable, other data such as telephone numbers or date of birth, as well as all data voluntarily entered by the registered user in his or her user profile. Your data may also be supplemented by data acquired from third parties.
We use this data to enable and verify your access ("My ZFF") to our online services and to notify and/or publish the winners of competitions and prize draws.
The online transmission of personal data between the user's browser and the servers of Zurich Film Festival AG is encrypted using the HTTPS protocol. In order to enable the functionality of this encryption technology, the user is required to use the latest browser versions.
Anonymous users of our website
When visiting our websites, we and third parties collect, store and use data from both registered and non-registered users, which is collected via so-called "cookies" and similar technologies. These small text files that are stored on the user's computer enable the use of our services and products to be analysed. This technology makes it possible to recognise individual users as (returning) visitors and to provide them with personalised services and products. Certain online services on the websites of Zurich Film Festival AG, for example, require the use of cookies in order to store your personal settings. In general, the use of cookies serves to improve our services and make them more effective and secure. Such cookies may also be necessary, for example, to use shopping carts or payment functions. Users of our websites can prevent the storage of cookies by selecting "do not accept cookies" in their browser settings. However, this may hinder the functionality of the services offered and make it more difficult to optimise online services for users.
In addition, the use of our digital offers is measured and evaluated by means of various technical systems, predominantly by third-party providers. These measurements can be both anonymous and personal. The analytics services we use are Adobe Analytics, Google Analytics and Google Remarketing, which use cookies that are stored on your computer and enable the way you use our websites to be analysed.
The above-mentioned technologies are collected in particular to analyse the surfing behaviour of users and for reach measurement. Reach measurement can be used to determine how many people can be reached by an advertiser's advert. The information collected with such technologies can also be used for marketing purposes, to improve the services and the websites, to evaluate user behaviour, to deliver target group-specific advertising formats and to design them according to needs (e.g. by means of pop-ups).
Disclosure of personal details to thrid parties
We do not disclose personal data to third parties, unless this is required by law or ordered by a court decision. This excludes the transfer to third parties
a) for the legal protection of users;
b) to comply with legal requirements;
c) to defend and protect the rights of Zurich Film Festival AG or other legitimate interests;
d) to comply with the terms of use or data protection regulations;
e) to resolve technical difficulties of the services;
f) to cooperate with service partners who require the transfer of data for orders or order processing. The transmission of data is limited to the minimum necessary for the order to be fulfilled. In particular, in connection with the execution of contracts for services or products subject to a charge, credit card data will be forwarded to the relevant credit card organisation.
g) To cooperate with service partners of Zurich Film Festival AG who support us, in particular in the marketing area, for the analysis of certain technical data and for data processing and/or storage functions,
h) for their marketing purposes, if and only if these third parties support us financially as sponsors and we have contractually agreed with these third parties on the transfer of personal data.
We work with a limited number of trusted external service partners who have been carefully selected by us and meet high data protection and security standards. Data is disclosed to the service partners only to the extent necessary to provide the services offered.
In the event of a sale, merger or other reorganisation of some or all of our company's assets, personal data may be transferred, assigned, sold or otherwise shared with third parties as part of that transaction or reorganisation.
Transmission to foreign countries
If necessary and appropriate for the form of data processing described in this privacy policy, we may also transfer your personal data to third parties abroad. If the level of data protection in the country in question is not adequate, we contractually ensure that the protection of your personal data is at such a level. We provide this assurance by concluding EU standard contractual clauses with the companies concerned and/or by the existence of Binding Corporate Rules (BCR) recognised by a European data protection authority at the companies concerned.
Third party plug-ins and other offer integrations
Our digital offers are networked with third-party functions and systems in a variety of ways, such as through the integration of plug-ins by third-party social networks, such as Facebook or Twitter in particular, or when you visit our presence on third-party websites (e.g. Facebook Fanpage, etc.). If you have a user account with these third parties, it may also be possible for these third parties to measure and evaluate your use of our digital offers. In the process, further personal data, such as IP address, personal browser settings and other parameters may be transmitted to these third parties and stored there. We have no control over the use of such personal data collected by third parties and accept no responsibility or liability.
Legal basis for data processing
We always process your personal data in accordance with the applicable data protection regulations.
When processing personal data for the purpose of handling a contractual relationship, the contractual relationship serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
For data processing that is necessary to comply with a legal obligation, the relevant legal obligation serves as the legal basis.
For further processing, we rely on our overriding interest, for example, to optimally adapt and continuously improve our offers to the needs of our customers and to carry out marketing activities in order to be able to offer you suitable products or services, as well as to display advertisements that are relevant to you. This is an important basis for the financing and further development of our offers. To achieve these interests, the processing of personal data as described by us is necessary. We have also compared our interests with the interests of our users and have come to the conclusion that we do not unduly affect the interests or fundamental rights of our users with our data processing and that our interests in this data processing are accordingly outweighed. If you are of a different opinion, you have the right to object to this data processing at any time within the legally permissible framework (see sections 8 and 9).
Storage period
We will only use and retain your data for as long as is necessary and in accordance with the processing purpose in question, or for as long as there is another legal basis for doing so. We retain data that we hold on the basis of a contractual relationship with you for at least as long as that contractual relationship exists and limitation periods for possible claims by us run, or statutory or contractual retention obligations exist.
Your rights
Right to information and rectification
You have the right to receive information from us at any time and free of charge about whether and what personal data we process about you. In addition, you can request that we correct or complete incorrect data about you in our systems.
Right to erasure and restriction
You have the right to request that we delete or restrict the processing of your personal data.
Please note that even after your request for deletion of your personal data, we may have to retain it due to legal or contractual retention obligations (e.g. for billing purposes) and in this case we will only restrict or block your data as necessary. Furthermore, deletion of your data may mean that you can no longer obtain or use the services you have registered.
Right to object
You have the right to object to the processing of your data, and you may assert that with us (see details in section 9).
Right to data portability
Where applicable, you may also exercise your right to data portability.
Revocation of consent
You can revoke your consent to data processing with full effect for the future at any time. In the event of a revocation, we may no longer be able to provide you with personalised use of free and/or paid products
.Right to complain
If applicable, you have the right to lodge a complaint regarding data processing with the relevant supervisory authority. You may do so with the supervisory authority at your place of residence, place of work or the place of the suspected data breach.
Objection
You have the right to object to the processing of your personal data in accordance with the legal requirements at any time.
Anonymous user
If you wish to stop retargeting when you visit our websites as a non-registered or non-logged-in - i.e. anonymous - user, we are unfortunately unable to comply as we cannot establish the link between an anonymous user of our websites and a person registered with us. However, you can prevent such retargeting yourself by selecting "do not accept cookies" in your browser settings and thus prevent the storage of those cookies necessary for retargeting.
If you do not wish us to carry out any other processing of your personal data mentioned under 2.3, then we ask you express this wish in accordance with the instructions in the description of the respective data processing in section 2.3.
.Targeted advertising (logged-in users)
If you no longer wish to receive targeted advertising when visiting our website as a registered and logged-in user, you can send an e-mail to info@zff.com with the comment "No targeted advertising as a logged-in user". If you also wish to stop retargeting when you visit our website if you are not logged in, then we ask you to proceed as described in Section 9 letter a).
Marketing activities
If you do not want your personal data to be used for any marketing activities, you can send an email to info@zff.com with the comment "No marketing activities".
Disclosure withing the NZZ Group
If you do not wish your personal data to be shared within the NZZ Group, you can send an email to info@zff.com with the comment "No sharing within the Group" or "No sharing with [insert specific subsidiary of the NZZ Group].
.Newsletter
You can unsubscribe from the ZFF newsletter at any timehere or via the relevant link in the newsletter itself.
Contact
If you have any questions or suggestions about our data protection practice, for information regarding your rights in accordance with sections 8 and 9 or for asserting them, you can contact us at the following address:
Zurich Film Festival AG
Bederstrasse 51
8002 ZürichSchweiz
E-Mail:info@zff.com
Adjustments
We expressly reserve the right to adjust this data protection declaration at any time. If such adjustments are made, we will publish them immediately on our website. It is your responsibility to find out about the currently applicable version of the data protection declaration on our website. We therefore recommend that you consult this data protection declaration regularly.
Version 1.2, valid from August 4, 2021 until revoked
