Data Protection and Privacy Policy

We would like to explain how personal data is collected and processed when a user visits Arsenal’s website.

Name and address of the responsible organization

The responsible organization with regard to the EU’s General Data Protection Regulation (GDPR) and other data protection laws issued by EU member states as well as regulations regarding data protection law is:

Arsenal – Institut für Film und Videokunst e.V.
Potsdamer Str. 2
10785 Berlin
+49 30 26955100

Data Protection officer:
Frank Schultz Computersysteme GmbH
+49 30 / 23 50 94 - 0

I General

1. Definition of personal data
Personal data is information that relates to an identified or identifiable living individual. This includes names, telephone numbers and email addresses. According to the GDPR and a ruling by the German Federal Court of Justice, a computer’s IP address also counts as personal data.

2. Extent of processing of personal data
We collect and process personal data only insofar as this is necessary for a functioning website and to allow users access to our content and services. Data is only collected and used after consent is given. There are certain exceptions when, for example, prior consent cannot be sought for technical reasons and legal regulations allow for the processing of data. This is the case for log files (see Point II).

3. Legal basis for processing personal data
Art. 6, para. 6, 1 lit. a of the GDPR serves as the legal basis when we seek consent to process personal data.

If processing is necessary for the purposes of the legitimate interests of our organization or that of a third party, in so far as the interests or fundamental rights and freedoms of the data subject are overridden, then Art. 6, para. 6, lit. f of the DRPR serves as the legal basis for the processing.

4. Saving and deletion of data
A subject’s personal data is either deleted or blocked once it has served its purpose. This also happens once a predetermined period for storing data has elapsed, unless there is a need to continue storing data for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

II Provision of the website and creating log files

Our web server automatically stores information transmitted by your browser in its log files. This includes:
- Browser type/version
- Operating system
- Referrer URL (identifies address of previously visited site)
- Date and time of server request
- Computer’s IP address

We store IP addresses for 31 days. We do this for reasons of data security, i.e. to maintain the stability and operating security of our system Moreover, the log data is used to statistically evaluate the traffic on our website. To maintain data protection, the IP address is anonymized before statistical evaluation. The log files are stored separately from, and never combined or compared with other personal data you may have provided during your visit of our site.

We use the software AWStats to statistically analyze our log data. This is an open source Web analytics reporting tool installed on a server located in Germany: no data is transmitted to other servers for analysis.

III Newsletter

We need a valid email address if you sign up for our newsletter. To ensure that a third party does not incorrectly enter an email address in our mailing list, we use a “double opt-in mechanism” in accordance with the law. When somebody signs up for a newsletter and sends a confirmation email, this information and the fact that confirmation has been received is recorded.

The Arsenal Distribution newsletter is sent out by our server, but we use the Berlin organization data kulturklinik AG’s newsletter system to send out the newsletter relating to Arsenal’s monthly program. Tracking codes are incorporated in this newsletter to track opening and click rates. Personal data (e.g. email addresses) is replaced by a code so that data collection is anonymized. No personal data is compared with user data and there is no way that these data can be amalgamated at a later date.

At no point is data used to send out the Arsenal’s newsletters ever compared with data collected in other areas of our site. No data is ever transmitted to third parties, in any circumstance.

IV Press mailing list

We need a valid email address if you request to be put on our press mailing list. To ensure that a third party does not incorrectly enter an email address in our mailing list, we use a “double opt-in mechanism” in accordance with the law. If someone is put on our mailing list and sends a confirmation email, this information and the fact that confirmation has been received is recorded.

In order to be entered on our mailing list, you have to give us your first and last name as this information is indispensable for press relations based on personal contact.

At no point is data used to enter somebody on our press mailing list compared with data collected in other areas of our site. No data is ever transmitted to third parties, in any circumstance.

V Registration for the viewing or press area

If you register for the viewing area or the press area on our website, we collect personal data, as shown in the registration form. First name, last name, activity, medium, institution and e-mail address are not optional entries.

We collect this data to monitor access to material that is protected by copyright and which we can only provide for purposes of press or research.

Registered users can change their data or delete their accounts if necessary.

At no point is data used to register in our viewing or press area compared with data collected in other areas of our site. No data is ever transmitted to third parties, in any circumstance.

VI Use of cookies

Cookies are small text files that contain information related to the computer on which they are temporarily installed. On this website, cookies are only used in password-protected areas, such as the press and viewing areas. When you first enter the viewing area we ask you to acknowledge our use of Vimeo for the embedding of videos which entails the tracking by Google Analytics (see Point VIII). Your acknowledgment is saved in a permanent cookie. Furthermore, we use session cookies which are automatically deleted after a visit. You can prevent cookies from being installed by changing the settings of your browser software. However, this will prevent you from entering the password-protected areas.

VII Links to social media platforms

There is no information passed on to a social media platform when you visit the Arsenal website. If you click on the buttons linking to social media platforms such as Facebook, Twitter or Tumblr at the bottom of the page, you will be directed to the registration page or to your own account if you are already registered. The URL of the last page you visited on the Arsenal website will be transmitted as a GET-request.

VIII The Arsenal Facebook pages

At the current time, it has not been conclusively established whether and to what extent Facebook offers its service in accordance with European Data Protection Directives. As soon as any new, legally binding perspectives emerge to this end with respect to our Facebook pages (Arsenal, Berlinale Forum, and Forum Expanded), we will address these without delay. Until then, you should carefully assess what personal data you are making available to Facebook by using our fan pages.

We would like to explicitly draw your attention to the fact that Facebook stores its users’ data (such as personal information, IP addresses, etc.) in line with its data policy and makes commercial use of it accordingly. More information about how Facebook uses data can be found at the following link:
Your privacy settings can be adjusted at the following link:

Arsenal has no influence on how Facebook stores your data and makes further use of it. We have no information about what volume of data is stored at which location and for which length of time, the extent to which Facebook complies with existing deletion obligations, which analyses and links are carried out with the data, and who might receive it.  

IX Embedding of videos by Vimeo

The videos on our website are embedded by the video portal Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA.

Every time a page that offers one or many Vimeo video clips is called up, a direct connection is created between your browser and a Vimeo server in the USA. Information about your visit and your computer’s IP address is stored there. Your interaction with the Vimeo player (e.g. clicking the Start button) is also transmitted to Vimeo and stored.

If you have a Vimeo account but do not want Vimeo to collect data about you via the Arsenal website and connect it with data that you have stored at Vimeo you will have to log out of Vimeo before visiting Arsenal.

You will find Vimeo’s privacy policy and information about how the company collects and uses personal data by clicking here

The iframe that opens when a Vimeo video is clicked also launches the tracking service Google Analytics. We have no control over this analysis and no access to the collected data. You can prevent Google Analytics from tracking your activity by using deactivation tools that Google provides for certain browsers. You can also download and install a browser plugin that will prevent Google collecting and analyzing your activity on the Arsenal website and of your personal data (incl. your computer’s IP address) by clicking here:

X Payment via paypal

For payment we work together with the external payment provider PayPal. PayPal provides the technical infrastructure for processing the payments. PayPal is a TÜV-certified means of payment: TÜV-Saarland has awarded PayPal the title "Certified Online Payment System". The multi-level test procedure includes, among other things, data protection management and the technical requirements for data encryption.

We ourselves do not store any of your payment information (account data, credit card number, etc.) - with the exception of the payment method (PayPal, credit card).

The storage of your payment information is exclusively carried out by the external and certified payment systems of PayPal. PayPal's privacy policy can be found here.

XI Information, amendments, deletion and revoking consent

You have the right to request information about the personal data that we store and its use and you can ask for it to be amended, blocked or deleted at no cost. However, we would like to point out that you have the right to amend false information or delete personal data only as long as there is no legal obligation to store it.

If you would like to revoke your consent to store data and your e-mail address to receive the newsletter or press releases you have the following possibilities:

•You can unsubscribe from the newsletter at At the end of the Arsenal Distribution newsletter, you will find a link to the Arsenal website, while at the end of the Arsenal Newsletter there is an email address to which you can write to in order to unsubscribe.
• You can unsubscribe from a press mailing list at You can find a link to this website at the end of each press release.
• You can unregister from the press or viewing areas by deleting your account.
• You can also revoke your consent by contacting us directly (see Point X).

We will immediately delete all data after receiving a request to revoke consent to store personal data, if there is no legal obligation to keep it or it is needed to fulfill a contract.

XII Contact details

Please contact us at datenschutz(at) or 030-26955-100 if you have any questions on the collection, processing or use of personal data or if you would like any information to be amended, blocked or deleted.