Log-In Tickets

Privacy Policy

Last updated: February 10, 2026

This privacy policy informs you about the type, scope and purposes of the processing of personal data on this website and its related pages and functions.

1. Controller

MITOSFILM
Oranienstr. 191
10999 Berlin
Germany
Phone: +49 (0)30 54 71 94 62
Email: info@mitosfilm.com

2. Legal Basis

We process personal data in particular on the basis of Art. 6(1) lit. a, b, c and f GDPR. Where information is stored on or read from your end device (e.g. cookies or similar technologies), this is done under Par. 25 TDDDG, either on the basis of your consent (Par. 25(1) TDDDG) or where processing is technically required (Par. 25(2) TDDDG).

3. Hosting and Server Log Files

When this website is accessed, technically necessary connection data is processed (e.g. IP address, date/time, URL, referrer, user agent, status code) to provide the website, ensure system security and detect abuse. Legal basis is Art. 6(1) lit. f GDPR.

4. Contact Requests

If you contact us by email or via available contact channels, we process your data to handle your request. Legal basis is Art. 6(1) lit. b GDPR (pre-contractual/contractual communication) or Art. 6(1) lit. f GDPR (general requests).

5. User Account, Login and Session Management

For login areas and protected functions, we process required account data and technical session information. This processing is necessary to provide secure user sessions. Legal basis: Art. 6(1) lit. b and f GDPR and Par. 25(2) TDDDG.

6. Consent Management (Cookie Banner)

We use our own consent management to technically apply and document your consents and rejections. In particular, consent status, timestamps and session references are processed. Legal basis: Art. 6(1) lit. f GDPR and Par. 25(2) TDDDG.

7. Necessary Services (incl. Stripe)

Certain services are required for technical operation and contract fulfillment and are therefore treated as necessary. These include in particular:

  • Session and security functions of the website
  • Payment processing via Stripe for ticket and donation payments
  • Delivery of media content via Cloudinary

Legal basis: Art. 6(1) lit. b GDPR (contract/payment), Art. 6(1) lit. f GDPR (technical operation).

8. Analytics (only with consent)

If you give consent, we use analytics services (e.g. Google Analytics and Microsoft Clarity) to understand and improve website usage. Without consent, these optional analytics services are not activated. Legal basis: Art. 6(1) lit. a GDPR and Par. 25(1) TDDDG.

9. Marketing Storage (only with consent)

If marketing consent is granted, marketing-related storage settings (e.g. ad_storage, ad_user_data, ad_personalization) may be enabled, provided corresponding campaign/advertising integrations are used. Legal basis: Art. 6(1) lit. a GDPR and Par. 25(1) TDDDG.

10. External Media: YouTube (only with consent)

YouTube content is loaded only after your consent. During loading/playback, personal data (e.g. IP address, browser/device data, referrer, cookies/IDs) may be transmitted to YouTube/Google. Legal basis: Art. 6(1) lit. a GDPR and Par. 25(1) TDDDG.

11. Newsletter

If you subscribe to our newsletter, we process your email address and selected topics to send you requested information. Legal basis is Art. 6(1) lit. a GDPR. You may withdraw your consent at any time for the future (e.g. via unsubscribe link/unsubscribe page).

12. Recipients and Third-Country Transfers

We use contractually bound service providers. If data is transferred to third countries, this is carried out only under the legal requirements (e.g. adequacy decision, standard contractual clauses).

13. Storage Duration

We store personal data only as long as necessary for the respective purposes or as long as statutory retention obligations exist. After that, data is deleted or anonymized.

14. Your Rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), objection (Art. 21 GDPR) and withdrawal of granted consents (Art. 7(3) GDPR).

15. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular with the authority responsible for Berlin.

16. Updates to this Privacy Policy

We adapt this privacy policy when required due to legal, technical or organizational changes.