Privacy Statement Stichting Amsterdams Filmhuis Rialto

1. What personal data do we process? 

We process personal data when you visit our website, purchase tickets, subscribe to a newsletter, participate in activities, or otherwise contact us. 

Depending on the purpose, we may process the following personal data: 

• first and last name; 

• address details; 

• email address; 

• phone number; 

• date of birth; 

• payment and transaction details; 

• data regarding purchased tickets and visits; 

• data related to donations and memberships of Friends of Rialto; 

• application data, such as CV and cover letter; 

• data you provide in correspondence or phone contact; 

• technical data about your use of our website, such as IP address, browser data, and cookie information. 

2. For what purposes do we process personal data? 

We process personal data for the following purposes: 

Ticket sales and reservations 
To sell tickets, process reservations, inform visitors about their purchases, and grant access to performances, events, and festivals. 
Legal basis: Execution of an agreement. 

Visitor administration and ticket history 
To consult previous purchases, answer visitor questions, and execute our services. 
Legal basis: Execution of an agreement and legitimate interest. 

Newsletters and personalized communication 
To send newsletters, program information, special promotions, events, and other information about Rialto. We may use information about previous visits and purchases to better tailor our communication to the interests of visitors. 
Legal basis: Consent and, where permitted, legitimate interest. 

Website improvement and online marketing 
To gain insight into the use of our website, improve our services, and measure the effectiveness of our communication and campaigns. 
Legal basis: Consent as legally required, otherwise legitimate interest. 

Public research, statistics, and accountability 
To gain insight into the reach and use of our activities, for public research, statistical analyses, evaluations, and accountability to grant providers, funds, and other financiers. Where possible, we use anonymized or pseudonymized data for this purpose. 
Legal basis: Legitimate interest. 

Friends of Rialto and donations 
To manage memberships, donations, payments, benefits, invitations, and communication with participants in Friends of Rialto. 
Legal basis: Execution of an agreement and legitimate interest. 

Contact and customer service 
To handle questions, requests, complaints, and other correspondence and improve our services. 
Legal basis: Legitimate interest or execution of an agreement. 

Administration and legal obligations 
For processing payments, maintaining financial administration, and complying with legal obligations. 
Legal basis: Legal obligation. 

Volunteers, employees, and applicants 
For the recruitment, selection, administration, and guidance of employees, volunteers, and applicants. 
Legal basis: Execution of an agreement, legal obligation, and legitimate interest. 

Business relationships 
To maintain contacts with suppliers, distributors, filmmakers, producers, sponsors, grantors, landlords, partners, and other business relationships. 
Legal basis: Legitimate interest and execution of an agreement. 

3. Photo and video recordings 

During performances, festivals, events, premieres, and other activities, photos and video recordings may be made for documentation, archiving, promotional purposes, publications on our website, social media, print media, and other communications from Rialto. 

We will try to take into account the privacy of visitors. If you are depicted in a recognizable manner and object to the publication of the image material, you can contact us via info@rialtofilm.nl. We will carefully evaluate your request. 

4. Automated decision-making 

Rialto does not make decisions based solely on automated processing that have significant consequences for individuals. 

5. Retention periods 

We do not retain personal data longer than necessary for the purpose for which they were collected. 

In principle, we apply the following retention periods: 

• ticket, reservation, and account data: a maximum of 4 years after the last activity; 

• newsletter data: until you unsubscribe from the newsletter; 

• contact requests and correspondence: a maximum of 2 years after processing; 

• data of Friends of Rialto and donors: a maximum of 7 years after the termination of the relationship as necessary for administrative and tax obligations; 

• financial administration and payment data: 7 years; 

• application data: a maximum of 4 weeks after the completion of the procedure or a maximum of 1 year with the applicant's consent; 

• staff and volunteer administration: in accordance with legal retention periods; 

• data processed for statistical purposes will be anonymized where possible. 

6. Sharing personal data with third parties 

We may share personal data with parties that support us in our services, including: 

• Active Tickets for ticket sales and reservations; 

• Cineville for processing Cineville visits; 

• Mailchimp for sending newsletters; 

• payment service providers for processing payments; 

• website and hosting providers; 

• providers of analytical and marketing services, including Google Analytics and Meta; 

• accountants, auditors, and administrative service providers; 

• IT service providers and software suppliers. 

With parties that process personal data on our behalf, we conclude data processing agreements where legally required. 

7. Transfer outside the European Economic Area 

Some of our service providers, including Mailchimp and Meta, may process personal data outside the European Economic Area (EEA). 

When personal data is processed outside the EEA, we ensure that appropriate safeguards are in place in accordance with the GDPR, for example by using standard contractual clauses approved by the European Commission. 

8. Cookies and similar techniques 

Our website uses functional, analytical, and marketing cookies. 

We use, among others: 

• functional cookies that are necessary for the operation of the website; 

• analytical cookies from Google Analytics to gain insight into the use of our website; 

• marketing cookies from Meta/Facebook to measure the effectiveness of our campaigns and show relevant information. 

For analytical and marketing cookies, we ask for consent where legally required. 

More information about the use of cookies and options to adjust your preferences can be found in our cookie policy. 

9. Security of personal data 

Rialto takes appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, unwanted disclosure, and unlawful alteration. 

10. Your rights 

You have the right to: 

• request access to your personal data; 

• have personal data corrected; 

• have personal data deleted; 

• restrict processing; 

• object to processing; 

• withdraw your consent; 

• request data portability. 

Requests can be sent to info@rialtofilm.nl. We generally respond within one month to your request. 

11. Complaints 

If you have a complaint about the processing of your personal data, we would like to hear from you first. Additionally, you have the right to submit a complaint to the Dutch Data Protection Authority. 

12. Changes 

Rialto may change this privacy statement. The most current version will always be published at:   

• https://rialtofilm.nl/nl/legal/privacyverklaring 

• https://depijp.rialtofilm.nl/nl/legal/privacyverklaring 

• https://silo.rialtofilm.nl/nl/legal/privacyverklaring