Privacy Policy

Introduction

Warsaw Glitch: International Film & Media Festival (“GLITCH,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website (warsawglitch.com), purchase tickets, submit films, or interact with our services.

Data Collection

We collect the following types of personal data:

• Contact information — name, email address, and phone number when you submit a contact form, purchase tickets, or register for workshops.
• Payment information — payment details are processed securely by Stripe. We do not store your credit card numbers on our servers.
• Film submission data — filmmaker name, project details, and related materials submitted through our competition forms.
• Usage data — anonymized analytics data including pages visited, browser type, and device information, collected to improve our website.

Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. These include:

• Essential cookies — required for the website to function properly (e.g., session management, cart functionality).
• Analytics cookies — help us understand how visitors use our website. We use Google Analytics to collect anonymized usage data.
• Third-party cookies — set by services we integrate, such as embedded maps or payment processors.

You can manage your cookie preferences through your browser settings. Disabling cookies may affect the functionality of certain features.

Third-Party Services

We use the following third-party services that may process your data:

• Firebase (Google) — used for contact form submissions, authentication, and backend data storage. Data is processed in accordance with Google's privacy policies.
• Stripe — used for secure payment processing for tickets and merchandise. Stripe handles all payment data in compliance with PCI DSS standards. See Stripe's privacy policy at stripe.com/privacy.
• Google Maps — embedded maps may collect location and usage data. See Google's privacy policy at policies.google.com/privacy.
• Luma — used for workshop sign-ups and event RSVPs. Luma processes your name and email address for event registration.

Data Retention & Security

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, and resolve disputes. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

Your Rights

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data.
• Object to or restrict processing of your data.
• Request data portability.
• Withdraw consent at any time where processing is based on consent.