Privacy Policy

1. Introduction

Flicker Club ("we", "us", or "our") operates as a non-commercial film screening community in Berlin, Germany. We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and German data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

Flicker Club
Berlin, Germany
Email: hello@flickerclub.com

3. What Data We Collect

We collect and process the following personal data when you register for our events:

• Contact Information: First name, last name, email address
• Social Media: Instagram handle or other social media profiles (optional)
• Accessibility Needs: Special requirements you share with us (optional)
• Comments: Any additional information you provide (optional)
• Technical Data: IP address, browser type, and device information (automatically collected)

4. Legal Basis for Processing

We process your personal data based on:

• Your Consent (Art. 6(1)(a) GDPR): You explicitly consent to data processing when registering for events
• Legitimate Interest (Art. 6(1)(f) GDPR): Event organization, communication, and community management

5. How We Use Your Data

We use your personal data exclusively for:

• Processing your event registration and waitlist applications
• Sending you event details, updates, and reminders
• Managing event capacity and check-ins
• Communicating about future Flicker Club screenings
• Accommodating accessibility needs you've shared with us

We do NOT: Sell, rent, or share your data with third parties for marketing purposes. We do NOT use your data for commercial purposes.

6. Data Storage and Security

Your data is stored securely on servers located in Germany:

• Database: Supabase (Frankfurt, Germany region)
• Website Hosting: Hostinger (Germany)
• Security Measures: Encryption in transit (HTTPS), access controls, and regular security updates

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Event Registration Data: Deleted 6 months after the event date
• Waitlist Applications: Deleted 3 months after rejection or 6 months after the event
• Account Data: Retained while your account is active, deleted upon request

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access (Art. 15 GDPR): Request a copy of your personal data
• Right to Rectification (Art. 16 GDPR): Correct inaccurate or incomplete data
• Right to Erasure (Art. 17 GDPR): Request deletion of your data ("right to be forgotten")
• Right to Restriction (Art. 18 GDPR): Limit how we use your data
• Right to Data Portability (Art. 20 GDPR): Receive your data in a structured format
• Right to Object (Art. 21 GDPR): Object to processing based on legitimate interests
• Right to Withdraw Consent (Art. 7(3) GDPR): Withdraw consent at any time

To exercise any of these rights, please contact us at hello@flickerclub.com.

9. Cookies and Third-Party Services Loaded by the Browser

We only use technically necessary cookies. No tracking or advertising cookies are deployed.

• Session cookie: One essential HTTP-only cookie set by our authentication provider (Supabase) to keep you signed in. It is deleted when you log out or your session expires. No consent is required as it is strictly necessary for the service to function.
• Google Fonts: This website loads typefaces from fonts.googleapis.com. When your browser requests a font, Google receives your IP address and browser information. Google's use of this data is governed by Google's Privacy Policy. The legal basis is our legitimate interest in providing a consistent visual experience (Art. 6(1)(f) GDPR).
• Google Maps embeds: Event pages may display an embedded Google Map for venue location. If a map is shown, your browser contacts Google's servers and Google receives your IP address. This occurs only on pages where a map is displayed. Google's use of this data is governed by Google's Privacy Policy.

We do not use analytics cookies, advertising cookies, or any other third-party tracking.

10. Third-Party Services

We use the following third-party services that may process your data:

• Supabase: Database and authentication (servers in Frankfurt, Germany)
• Hostinger: Website hosting and email delivery service (GDPR-compliant)

All third-party services are GDPR-compliant and have appropriate data processing agreements in place.

11. International Data Transfers

Your data is stored and processed exclusively within the European Union (Germany). We do not transfer your data outside the EU/EEA.

12. Children's Privacy

Our events are intended for adults (18+). We do not knowingly collect data from individuals under 18 years of age.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes via email or through a notice on our website.

14. Contact and Complaints

If you have questions about this privacy policy, contact us at:

Email: hello@flickerclub.com