GDPR INFORMATION NOTICE

Aware of the importance of protecting privacy and individual freedoms, ARTE GEIE (hereinafter, “ARTE” or “We”) is committed to ensuring such protection in compliance with applicable law, including Regulation (EU) 2016/679 of 27 April 2016, and the amended French Data Protection Act No. 78-17 of 6 January 1978 (together referred to as the “Applicable Regulation”).

This document aims to inform you about the principles governing the way we process your personal data when you use the mini-site dedicated to the ARTE KINO FESTIVAL, accessible via the URL https://artekinofestival.arte.tv/ (hereinafter, the “ArteKino Festival Site”), as well as about your rights regarding your personal data.

The data controller is ARTE GEIE, a European Economic Interest Grouping registered with the Strasbourg Trade and Companies Register under number C 382 865 624, with its registered office at 4 Quai du Chanoine Winterer, 67000 Strasbourg.
ARTE has appointed a Data Protection Officer (DPO). For any questions regarding the processing of your personal data, you may contact the DPO:

• By post: ARTE GEIE – Service DPO / Legal Department, 4 Quai du Chanoine Winterer, 67000 Strasbourg
• By email: dpo-arte@arte.tv.

In accordance with the principle of data minimisation, we strive to collect and use only the data that is relevant and strictly necessary for the purposes for which it is processed.

When you use the Arte Kino Festival Site, ARTE may collect and process the following information: your email address, voting data (the film(s) you voted for, the date and time of your vote, and the number of votes cast), as well as your technical connection data (IP address).

We also inform you that ARTE may use cookies and other trackers, some of which may require your consent. For more information on the cookies and trackers we use, please refer to the section “ARTE and Cookies.”

Additionally, to learn more about how your personal data is processed in connection with the management of your MyARTE account, please refer to the section “ARTE and Your Personal Data.”

When you use the ArteKino Festival Site, we may process your personal data for the following purposes and on the following legal bases:

Purpose
To enable you to vote on the ArteKino Festival Site
Legal Basis
Performance of the contract between us (i.e. our Terms of Use)

Purpose
To organise and manage the festival
Legal Basis
Performance of the contract between us

Purpose
To count the votes cast as part of the ArteKino Festival
Legal Basis
Performance of the contract between us

Purpose
To send you electronic communications about the ArteKino Festival and its future editions
Legal Basis
Your consent

Purpose
To ensure the security and proper functioning of the ArteKino Festival Site
Legal Basis
Our legitimate interest in ensuring the proper functioning, reliability, and security of the Site

Purpose
To handle any GDPR rights requests
Legal Basis
Legal obligation

Purpose
To manage any disputes or complaints
Legal Basis
ARTE’s legitimate interest in protecting itself against potential claims and, if necessary, defending its rights and interests in case of a dispute

Within ARTE, only authorised persons – by virtue of their duties or functions – may access personal data, and only to the extent necessary for the fulfilment of their responsibilities. This includes in particular authorised staff responsible for managing the ArteKino Festival.

Your personal data may also be shared with our processor, but only where necessary to achieve the intended purposes. Specifically, ARTE uses a third-party processor responsible for hosting, maintaining, and technically and operationally managing the Arte Kino Festival Site.

This processor is not authorised to share or use the data for other purposes. ARTE has ensured that its relationship with this processor is governed by a contract guaranteeing an adequate level of data security.

Furthermore, your personal data may be shared with ARTE France Cinéma, registered with the Nanterre Trade and Companies Register under number 383 987 864, with its registered office at 8 Rue Marceau, 92130 Issy-les-Moulineaux.

In exceptional cases, your personal data may also be transmitted to legally authorised administrative or judicial authorities, in strict compliance with the applicable regulations.

Your data may be transferred to a country outside the European Union. In such cases, we always take appropriate measures to ensure that recipients provide a level of protection equivalent to that required under French and European regulations, in particular through the signing of standard contractual clauses adopted by the European Commission.

Your personal data will be retained in a form that allows your identification for no longer than is necessary for the purposes for which it is processed.
In principle, your personal data will be kept until 30 January 2026 at the latest, after which it will be deleted or anonymised in accordance with the Applicable Regulation.
By exception, if you have consented to receive communications relating to the Arte Kino Festival, your email address will be retained until you unsubscribe (in particular via the unsubscribe link provided in each communication) or, failing that, for a maximum period of two years from the end of the 2025 edition of the Arte Kino Festival (scheduled for 31 December 2025).

We are committed to maintaining the confidentiality, integrity, availability and security of your personal data. In accordance with the Applicable Regulation, we implement appropriate technical and organisational measures to ensure a level of security adapted to the risks associated with processing your data. We also take steps to prevent, as far as possible, any loss, accidental destruction, alteration, or unauthorised access to your personal data.

In accordance with the Applicable Regulation, you have the right to:

• Access and rectify your personal data;
• Object to the processing of your personal data on legitimate grounds;
• Request the restriction and/or erasure of your personal data, in cases provided for by law;
• Request the portability of your personal data, for your own use or for transmission to a third party of your choice;
• Withdraw your consent at any time, when the processing is based on consent.

You also have the right to lodge a complaint with a supervisory authority, such as the Commission Nationale de l’Informatique et des Libertés (CNIL).

For more information about your rights, please consult the CNIL website.

For any questions regarding the processing of your personal data and/or to exercise your rights, you may contact our Data Protection Officer:

• By post: ARTE GEIE – Service DPO / Legal Department, 4 Quai du Chanoine Winterer, 67000 Strasbourg.
• By email: dpo-arte@arte.tv.

To protect your privacy, we may take reasonable steps to verify your identity before responding to your request.

Last updated: 1 November 2025

This notice may evolve, in particular in response to changes in the legal or regulatory context, or to decisions made by data protection authorities (especially the CNIL). We therefore invite you to consult this notice regularly to stay informed of any updates.