Last updated: April 5, 2026

1. Introduction

This Privacy Policy describes how the Amsterdam Koerdisch Film Festival (“we”, “us”, or “the Foundation”) collects, uses, and discloses your personal information when you use our website and related services. It also explains your privacy rights under the General Data Protection Regulation (GDPR) and how you can exercise them.

2. Data Controller

The Amsterdam Koerdisch Film Festival is the data controller responsible for the processing of your personal data as described in this Privacy Policy.

Contact information:

Amsterdam Koerdisch Film Festival
Noorderstraat 45-1 1017 TR Amsterdam
The Netherlands Email: info@akff.nl

3. Personal Data We Collect

When you use our website and services, we may collect the following categories of personal data:

• First and last name (when you contact us or subscribe to our newsletter)
• Email address (when you contact us or subscribe to our newsletter)
• IP address and browser information (collected automatically for security monitoring)
• Website usage data (collected via Google Analytics after you consent to cookies)

4. Legal Bases for Processing

Under Article 6 of the GDPR, we process your personal data on the following legal bases:

Consent (Article 6(1)(a)): We rely on your consent for sending you newsletters via Mailchimp and for placing Google Analytics cookies on your device. You may withdraw your consent at any time.

Legitimate interest (Article 6(1)(f)): We process IP addresses and browser data to protect our website against malicious activity and to ensure the security of our systems. Our legitimate interest is the security and proper functioning of our website.

Performance of a contract or pre-contractual steps (Article 6(1)(b)): When you contact us with a request, we process your name and email address to respond to your inquiry.

5. Purposes of Processing

We collect and process personal data for the following purposes:

1. To respond to your emails, questions, or other communications.
2. To send you newsletters about the Amsterdam Koerdisch Film Festival (only with your explicit consent).
3. To inform you of changes to this Privacy Policy or our User Agreement.
4. To notify you in the event of a data breach that may affect your personal data.
5. To analyse website traffic and improve the user experience of our website (via Google Analytics, with your consent).
6. To monitor and prevent malicious activity on our website, such as hacking attempts and spam.

6. Children’s Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16 without verifiable parental consent. If you are a parent or guardian and believe your child has provided us with personal data without your permission, please contact us at info@akff.nl. We will take steps to remove such data from our systems promptly.

7. Sensitive Personal Data

We do not collect or process any special categories of personal data as defined in Article 9 of the GDPR, including data relating to health, religion, sexual orientation, political opinions, or ethnic origin.

8. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected:

• Contact information (name, email): Retained until communication with you is completed, and for no longer than 2 years thereafter.
• Newsletter subscribers (name, email): Retained in our systems and in Mailchimp until you unsubscribe from the newsletter.
• IP addresses for security purposes: Retained for as long as reasonably necessary to protect the website, with regular reviews to assess whether continued retention is justified. Blocked IP addresses will be reviewed at least annually and removed when no longer necessary.
• Google Analytics data: Retained in accordance with Google’s data retention settings. We have configured the retention period to 14 months.

9. Cookies and Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google LLC, to understand how visitors interact with our site. Google Analytics uses cookies to collect anonymous usage data, including the number of visitors, geographic location, pages visited, and session duration.

Google Analytics cookies are disabled by default and are only activated after you provide explicit consent via our cookie consent banner. You may withdraw your consent at any time through the cookie settings on our website.

We have taken additional steps to protect your privacy in connection with Google Analytics:

• IP anonymisation is enabled, meaning your full IP address is not stored by Google.
• We have entered into a data processing agreement with Google.
• We have disabled data sharing with other Google services.

For more information about how Google processes data, please visit: https://policies.google.com/privacy

10. Sharing of Personal Data with Third Parties

We share personal data with the following third-party service providers, solely for the purposes described below. We have entered into data processing agreements with each provider to ensure they handle your data in compliance with the GDPR.

Mailchimp (The Rocket Science Group LLC / Intuit Inc.): If you subscribe to our newsletter, your name and email address are stored and processed by Mailchimp. Mailchimp is based in the United States. The transfer of your data to the US is safeguarded by Standard Contractual Clauses (SCCs) approved by the European Commission. You can read Mailchimp’s privacy policy at: https://mailchimp.com/legal/privacy/

Mollie B.V.: If you make a donation through our website, the payment information required for the transaction is collected and processed exclusively by Mollie. We do not store credit card or bank account details on our systems. You can read Mollie’s privacy policy at: https://www.mollie.com/privacy

Google LLC: If you consent to analytics cookies, anonymised usage data is processed by Google Analytics. Google is based in the United States. Transfers are safeguarded by Standard Contractual Clauses.

We do not sell your personal data to any third party.

11. International Data Transfers

Some of our third-party service providers (Mailchimp and Google) are based in the United States. When your personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place in accordance with Chapter V of the GDPR, including the use of Standard Contractual Clauses approved by the European Commission. You may request a copy of these safeguards by contacting us at info@akff.nl.

12. Automated Decision-Making

The Amsterdam Koerdisch Film Festival does not use automated decision-making or profiling as defined in Article 22 of the GDPR.

13. Your Rights Under the GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Article 15): You may request a copy of the personal data we hold about you.
• Right to rectification (Article 16): You may request that we correct inaccurate or incomplete personal data.
• Right to erasure (Article 17): You may request that we delete your personal data, subject to legal obligations.
• Right to restrict processing (Article 18): You may request that we limit the processing of your data in certain circumstances.
• Right to data portability (Article 20): You may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to object (Article 21): You may object to the processing of your data where we rely on legitimate interest as the legal basis.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please send an email to info@akff.nl. We will respond to your request within one month of receipt. To verify your identity, we may ask you to provide certain identifying information. We aim to keep any identity verification proportionate and will not request more information than is necessary.

14. Right to Lodge a Complaint

If you believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

Autoriteit Persoonsgegevens Bezuidenhoutseweg 30 2594 AV Den Haag The Netherlands Website: https://autoriteitpersoonsgegevens.nl Telephone: +31 (0)70 888 8500

15. Data Security

The Amsterdam Koerdisch Film Festival takes the security of your personal data seriously. We have implemented appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted via our website.
• Up-to-date antivirus software and firewalls.
• Continuous monitoring of our website for malicious activity.
• Regular review of our security practices.

If you suspect a security vulnerability or believe your personal data has been compromised, please contact us immediately at info@akff.nl.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay, and in any case within 72 hours of becoming aware of the breach, in accordance with Articles 33 and 34 of the GDPR.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you by email (if we have your email address) and by posting a notice on our website. The date of the most recent update is shown at the top of this document. We encourage you to review this Privacy Policy periodically.

17. Contact

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us:

Amsterdam Koerdisch Film Festival Noorderstraat 45-1 1017 TR Amsterdam The Netherlands Email: info@akff.nl