Here you decide which optional categories are enabled. Necessary services are always active because otherwise the website cannot function correctly.
Necessary (always active)
Always active
Required for operation, security, session management and payment processing.
In-house Consent Management (Necessary)
Provider: Kurdish Film Festival
Purpose: Storage and proof of your cookie selection.
Data: Consent status, timestamp, technical session information
Legal basis: Art. 6(1) lit. f GDPR, Par. 25(2) TDDDG
Session Management (Server) (Necessary)
Provider: Kurdish Film Festival / PostgreSQL
Purpose: Secure session handling (login, checkout, consent assignment).
Data: Session ID, technical request data, security information
Legal basis: Art. 6(1) lit. b and f GDPR, Par. 25(2) TDDDG
Stripe Checkout (Necessary)
Provider: Stripe, Inc.
Purpose: Secure payment processing for tickets and donations.
Data: Payment and transaction data, technical browser/device data, IP address
Legal basis: Art. 6(1) lit. b GDPR
Cloudinary (Necessary)
Provider: Cloudinary Ltd.
Purpose: Efficient delivery of images and videos.
Data: IP address, technical request data, browser/device information
Legal basis: Art. 6(1) lit. f GDPR
Google Analytics (via gtag) (Statistics / Analytics)
Provider: Google Ireland Limited
Purpose: Audience measurement and analysis of website usage.
Data: Cookie IDs, usage data, browser/device data, shortened IP address
Legal basis: Art. 6(1) lit. a GDPR, Par. 25(1) TDDDG
Microsoft Clarity (Statistics / Analytics)
Provider: Microsoft Ireland Operations Limited
Purpose: Usage analytics and UX optimization (e.g. interaction analysis).
Data: Interaction data, browser/device data, technical metadata
Legal basis: Art. 6(1) lit. a GDPR, Par. 25(1) TDDDG
Marketing Storage (gtag) (Marketing)
Provider: Google
Purpose: Control of ad_storage, ad_user_data and ad_personalization for optional ad integrations.
Data: Marketing consent status and, if applicable, ad/campaign IDs
Legal basis: Art. 6(1) lit. a GDPR, Par. 25(1) TDDDG
YouTube (External Media)
Provider: Google Ireland Limited
Purpose: Embedding video content.
Data: IP address, referrer, browser/device info, possibly cookies/IDs
Legal basis: Art. 6(1) lit. a GDPR, Par. 25(1) TDDDG
