Data Privacy Policy
At the Ooty Short Film Festival (OSFF), your privacy is of utmost importance to us. This policy explains how we collect, use, and protect your personal data when you interact with us, submit films, or visit our website.
1. Data Collection
We collect personal data to provide our services, such as your name, email address, contact details, and any other information you provide when submitting a film or signing up for our newsletter. We may also collect non-personal data (e.g., IP addresses, browsing behavior) through cookies to improve user experience.
2. Legal Basis for Processing Personal Data
We process your personal data based on:
- Consent: When you submit a film or subscribe to our newsletter, you consent to the collection and use of your personal data.
- Contract: Data is necessary to fulfill agreements when you participate in the festival or submit a film.
- Legitimate Interests: To enhance and maintain the festival’s quality and ensure it runs smoothly.
3. Use of Data
Your personal data is used to:
- Process film submissions via platforms like FilmFreeway or Festhome.
- Send updates regarding the festival and other relevant communications.
- Improve our website and services based on feedback and usage patterns.
- Ensure the smooth operation of the OSFF.
4. Data Retention
We retain personal data only for as long as it is necessary for the purpose for which it was collected, in compliance with applicable laws. For example, we will retain your data as long as you are engaged with the festival or our newsletter. After that, your data will be securely deleted.
5. Sharing Your Data
We do not sell or share your personal data with third parties for marketing purposes. Data may be shared with third-party service providers (e.g., film submission platforms or email service providers) that assist us in delivering festival-related services. These service providers are contractually obligated to ensure your data is kept secure and only used for agreed purposes.
6. Transfer of Data Outside the India
If your data is transferred outside the India and EU (e.g., stored on cloud servers located outside the India and EU), we ensure that appropriate safeguards are in place to protect your personal data, such as relying on India and EU-approved data transfer mechanisms or contracts.
7. User Rights Under GDPR
As per GDPR, you have the following rights:
- Right to Access: You can request a copy of your personal data.
- Right to Rectification: You can request corrections to any inaccurate data.
- Right to Erasure (Right to be Forgotten): You can request the deletion of your data.
- Right to Restriction of Processing: You can request restrictions on how your data is processed.
- Right to Data Portability: You can request to receive your data in a structured, commonly used, and machine-readable format, or to have your data transferred to another service provider.
- Right to Object: You can object to the processing of your data, especially for direct marketing purposes.
- Right to Withdraw Consent: You can withdraw your consent to process your data at any time without affecting the lawfulness of the processing based on consent before its withdrawal.
To exercise any of these rights, please contact us at nilgirifilmclub@gmail.com.
8. Data Security
We take all necessary measures to protect your data, including encryption, secure servers, and limited access to personal information. However, please note that no method of transmission over the Internet or electronic storage is completely secure.
9. Cookies
Our website uses cookies to enhance your browsing experience and for analytics. You can control cookie settings in your browser, but some features of the website may not function correctly without cookies.
10. Data Breach Notification
In the event of a data breach that poses a risk to your personal data, we will notify the relevant supervisory authority and affected individuals within 72 hours, as required under GDPR.
11. Changes to the Privacy Policy
We may update this privacy policy from time to time. When we do, we will notify you through our website or other communication channels. Please review the policy periodically for any changes.
12. Contact Information
For any inquiries or to exercise your GDPR rights, please contact us at nilgirifilmclub@gmail.com.