Privacy policy.

How CineNest Films handles personal data when you visit this website or send us a message.

Last updated · August 2026

Who we are

Stichting CineNest Films, a film foundation registered in the Netherlands (CoC/KvK 99020963, VAT/BTW NL868752435B01), is the controller for the personal data described here within the meaning of the General Data Protection Regulation (GDPR / AVG). For any question about this policy, to exercise your rights, or to request our registered postal address, write to info@cinenest.org. We are not required to appoint a data protection officer; your request reaches the board directly.

What we collect

• Details you send us through the contact form: your name, email address, phone number, project or company name, and the message you write.
• Basic technical data your browser sends when you open the site, such as your IP address and browser type, kept in server logs.

We do not use tracking or advertising cookies, and we do not build profiles of visitors.

Why we use it

We use the details from the contact form only to answer you and, where it leads somewhere, to discuss a possible collaboration; the legal basis is your consent (article 6(1)(a) GDPR), which you give by sending the form and may withdraw at any time. Technical data in server logs is used to keep the site available and secure; the legal basis is our legitimate interest in operating a functioning website (article 6(1)(f) GDPR). Sending us a message is entirely voluntary — you are under no obligation to provide any data, and the only consequence of not doing so is that we cannot reply. We take no automated decisions about you and do no profiling.

Who can see it

Form submissions are delivered to our own mailbox through a form-processing service, our email runs on a business email provider, and the website is served by a hosting provider. These parties act only on our instructions under a processing agreement (article 28 GDPR). Where a provider processes data outside the European Economic Area, that transfer relies on an adequacy decision or on the European Commission’s standard contractual clauses; you can ask us which safeguard applies to a given provider. We never sell your data, we do not use it for advertising, and we share it with no one else unless the law obliges us to.

How long we keep it

Messages are kept for as long as the conversation is relevant and for up to two years after our last contact, after which they are deleted. Where a message leads to a collaboration, related records are kept for as long as the project requires and for the seven-year period Dutch tax law imposes on administrative records. Server logs are kept for a short technical period of no more than a few months. You can ask us to delete your message sooner at any time.

Your rights

Under the GDPR you have the right to access your data and receive a copy, to have it corrected, to have it erased, to restrict its use, to object to processing based on our legitimate interest, to receive the data you gave us in a portable machine-readable form, and to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Email info@cinenest.org and we will respond within one month, free of charge. If you are not satisfied, you may lodge a complaint with the Dutch Data Protection Authority, Autoriteit Persoonsgegevens, in The Hague (autoriteitpersoonsgegevens.nl), or with the supervisory authority of your country of residence.

Security

The site is served over an encrypted connection, access to our mailbox is protected by strong authentication, and only board members who need the information can read it. If a data breach ever affects your rights, we notify the Autoriteit Persoonsgegevens and, where required, you.

Cookies

This website places strictly necessary storage only, which under article 11.7a of the Dutch Telecommunications Act needs no consent. Optional cookies are never placed without your prior permission. Details are in our cookie policy.

Children

The site is not directed at children under sixteen and we do not knowingly collect their data. If a parent or guardian believes we hold data about a child, email us and we will delete it.

Changes

When this policy changes we update the date at the top of this page, and where a change materially affects you we will say so in the notice on the site.