1. Scope
This policy explains how Kaaffilm handles personal information when people use Kaaffilm websites, create or use a Kaaffilm identity, receive a festival invitation, use a private filmmaker workspace, access screening services, purchase an entitlement, contact Kaaffilm, or otherwise interact with Kaaffilm services.
2. Contact
Privacy enquiries and data-rights requests may be sent to privacy@kaaffilm.com .
General service enquiries may be sent to support@kaaffilm.com .
3. Information Kaaffilm processes
Depending on the service used, Kaaffilm may process:
- identity information such as name and email address;
- authentication, verification, session and account-security information;
- password-recovery and account-recovery information;
- invitation and activation information for selected filmmakers;
- festival-package information including film metadata, synopsis, biography, credits, artwork, stills and related materials;
- film-delivery links, uploaded media and technical media state;
- rights declarations and package-completion information;
- payment and entitlement information associated with paid services;
- service, security and diagnostic information reasonably needed to operate and protect Kaaffilm;
- communications sent to or received from Kaaffilm.
Kaaffilm does not need readable plaintext copies of account passwords and must not intentionally store passwords in readable plaintext.
4. Why information is used
Information may be used to:
- create and secure Kaaffilm identities;
- verify account ownership;
- authenticate users and maintain sessions;
- provide password and account recovery;
- activate invitation-bound selected-film access;
- operate private filmmaker workspaces;
- receive and technically process festival materials;
- operate private screening services;
- provide and verify purchased entitlements;
- prevent abuse and protect service security;
- respond to support and privacy requests;
- comply with applicable legal obligations.
5. Registration and service authority
Creating a Kaaffilm identity creates an account identity only. Registration does not automatically grant Festival Access, selected-film authority, screening access, publication authority, awards status, timetable authority or operator access.
6. Selected filmmakers
Selected-filmmaker invitations may be bound to the invited email identity. Private material supplied through a filmmaker workspace remains private unless Kaaffilm separately establishes authority to publish or otherwise use that material.
Selection, publication approval, screening admission, rights clearance and timetable placement are separate states.
7. Infrastructure and processors
Kaaffilm uses service infrastructure to operate identity, storage, media-processing, transactional-email and payment functions.
Current Kaaffilm architecture includes Cloudflare infrastructure for web delivery and service storage, Stripe for payment processing where paid services are offered, and transactional email infrastructure for account and festival communications.
Service providers process information only for the functions for which they are engaged, subject to their applicable agreements and legal obligations.
8. Payments
Where a paid Kaaffilm service is offered, payment processing may be handled by Stripe. Kaaffilm treats verified server-side fulfilment as entitlement authority; merely opening checkout or returning from a payment page is not treated as proof of a completed payment.
9. Transactional email
Kaaffilm may send transactional messages for account verification, password recovery, account security, invitations and necessary service communications.
Marketing communications, where used, are separate from required transactional account or festival communications.
10. Storage and private media
Private account and filmmaker information is access-controlled. Private film media does not become public merely because it has been uploaded, technically processed or marked technically ready.
11. Retention
Kaaffilm retains personal information only for as long as reasonably necessary for the service for which it was collected, security and abuse prevention, contractual administration, festival administration, financial recordkeeping, dispute handling, and applicable legal obligations.
Different records may require different retention periods. Requests concerning retention or deletion may be sent to privacy@kaaffilm.com.
12. Security
Kaaffilm uses technical and organisational controls designed to restrict access to private account, invitation, festival and media information. No online service can guarantee absolute security.
13. Cookies and sessions
Kaaffilm may use cookies or equivalent browser storage necessary for authentication, session continuity, security and service operation.
Any non-essential analytics or marketing technology must be governed separately according to the technology actually enabled in production and applicable law.
14. Data rights
Depending on applicable law, people may have rights concerning access, correction, deletion, restriction, objection, portability and withdrawal of consent where consent is the relevant legal basis.
Requests may be sent to privacy@kaaffilm.com .
15. International processing
Some service providers may process information in more than one country. Where international-transfer safeguards are legally required, the applicable service-provider and legal mechanisms govern those transfers.
16. Changes
Kaaffilm may update this policy when services, providers or legal obligations change. The effective date shown on this page will be updated when a revised policy becomes effective.