Privacy Policy

General Information

This Privacy Policy explains how personal data may be processed when visitors access or interact with mirafestivalberlin.com.

This Privacy Policy is a GDPR-oriented template and must be adapted to the website’s actual technical configuration. In particular, the final version should reflect the hosting provider, server logs, cookies, analytics, advertising technologies, contact mechanisms, embedded media, social-media integrations, newsletter systems, and other third-party services actually used by the website.

The GDPR establishes principles including lawfulness and transparency, purpose limitation, data minimization, storage limitation, accuracy, security, and accountability. 

Personal Data That May Be Processed

Depending on the technical configuration of the website, information that may be processed can include IP address, browser type, operating system, device information, access time, requested pages, referring information, technical logs, and other information generated when a visitor accesses the website.

If a visitor voluntarily submits information through a contact form or other communication feature, information included in that communication may also be processed.

Only information necessary for a stated and legitimate purpose should be collected.

Purposes of Processing

Personal data may be processed when necessary to operate, maintain, secure, and improve the website; respond to communications; investigate technical problems; prevent misuse; understand website performance; comply with legal obligations; or perform another clearly identified purpose.

The final Privacy Policy should correspond to the website’s actual processing activities.

Legal Bases

Depending on the specific processing activity, personal-data processing may be based on an applicable GDPR legal basis, including consent, contractual necessity, compliance with a legal obligation, protection of vital interests, a public-interest task, or legitimate interests where the relevant requirements are satisfied.

Where consent is required, it should be freely given, specific, informed, and unambiguous. The European Commission emphasizes that consent requests should clearly explain how personal data will be used. 

Server Logs and Security

The hosting infrastructure may automatically process technical information in server logs. Such information may be used for security, troubleshooting, website administration, abuse prevention, and maintaining reliable website operation.

The applicable retention period should be determined based on the actual hosting configuration, security needs, legal obligations, and legitimate operational requirements.

Cookies and Similar Technologies

mirafestivalberlin.com may use cookies or similar technologies depending on its actual technical setup.

Essential technologies may be used where legally permitted and necessary for website functionality. Analytics, advertising, personalization, or other non-essential technologies should be implemented according to applicable privacy and consent requirements.

The final policy should identify the actual cookies, providers, purposes, retention periods, and consent mechanisms used by the website.

Analytics and Audience Measurement

If analytics services are used, information about website visits, interactions, device characteristics, and general usage may be processed.

The final Privacy Policy should identify the actual provider, explain the purpose and legal basis for the processing, state applicable retention information, and address relevant international transfers where applicable.

Embedded Content

Articles may contain embedded content such as videos, images, maps, social-media posts, music-related media, or other third-party resources.

Embedded content can result in third-party processing depending on how the provider’s technology works. The final Privacy Policy and consent mechanism should therefore be reviewed against the actual embedded services used on the website.

Third-Party Providers

The website may use external providers for hosting, security, analytics, content delivery, embedded media, website functionality, or other technical services.

Where a provider processes personal data on behalf of the website operator, the relevant GDPR requirements concerning controller-processor relationships and appropriate safeguards should be considered. 

Where personal data is transferred outside the European Economic Area, applicable international-transfer requirements and safeguards should also be addressed.

Data Retention

Personal data should generally not be retained longer than necessary for the purpose for which it was collected, subject to applicable legal obligations and other lawful retention requirements.

Actual retention periods should be determined according to the website’s technical systems, purposes, contracts, legal obligations, and security requirements.

Data Security

Appropriate technical and organizational measures should be used to protect personal data against unauthorized access, unlawful processing, accidental loss, destruction, or damage.

However, no internet-based system can guarantee absolute security. Visitors should avoid submitting unnecessary sensitive or confidential information through ordinary website communication features.

GDPR Rights

Depending on the circumstances and applicable law, individuals may have rights including the right to be informed, access, rectification, erasure, restriction of processing, data portability, and objection. The GDPR also provides rights relating to certain forms of automated decision-making and profiling. 

Where processing is based on consent, individuals may generally withdraw consent, subject to applicable legal conditions.

Individuals may also have the right to lodge a complaint with a competent data protection supervisory authority.

Requests concerning personal-data rights should be directed to the responsible controller using the actual details included in the final version of this Privacy Policy.

Changes to This Privacy Policy

This Privacy Policy may be updated when the website’s technologies, processing activities, third-party services, or applicable legal requirements change.

Visitors should periodically review the current version.