rgpd - Cinema Official

01

Who We Are

CinemaOfficial.com is an international cinema platform that indexes professional profiles, audiovisual works, and hosts the Cinema Official Awards. We also operate the Cinema Official mobile application (Android), which lets users discover films and episodes, publish short videos, validate and comment on content, share (repost), exchange direct messages, and purchase access to films.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and our mobile application, in compliance with the European General Data Protection Regulation (GDPR — Regulation EU 2016/679) and other applicable privacy laws.

By using CinemaOfficial.com or the Cinema Official mobile app, you acknowledge that you have read and understood this Privacy Policy.

02

The Mobile App & Accounts

Most of the mobile app — browsing films, episodes and creator profiles — can be used without signing in. A lightweight account is required only for interactive features.

2.1 — How accounts work

To validate, comment, publish a video, share, or send messages, you identify yourself with an email address. The app uses your email as your account identifier. Your email is stored on your device for convenience so you do not have to re-type it each time.

2.2 — What an account enables

Creating a public creator profile (name and photo)
Publishing short videos visible to other users
Validating (liking), commenting, and sharing (reposting) content
Sending and receiving private direct messages (DM)
Finding friends you know who are already on the platform (via your contacts, with permission)
Purchasing access to films through the app
Receiving push notifications about activity on your content

The app is intended for users aged 13 and over. See Section 13 (Children’s Privacy).

03

Data We Collect

We collect data in two ways: data you provide directly, and data collected automatically — both on the website and in the mobile app.

3.1 — Website data you provide

Data	Context	Required
Full name	Profile or film submission	Yes
Email address	Confirmation & contact	Yes
Phone / WhatsApp	Private admin contact	Yes
Physical address	Private admin contact	Yes
Profession / Nationality	Public profile	Yes
Biography, filmography, career	Public profile content	Yes
Profile photo / Film poster	Visual identity on platform	Yes
Video / Showreel URL	Certified profiles only	Optional
Professional contact details	Availability section	Optional
Awards & distinctions	Public profile	Optional

3.2 — Mobile app data you provide

Data	Context	Required
Email address	Account identity (validate, comment, publish, message, purchase)	Yes (for these features)
Profile name & photo	Public creator profile in the app	Optional
Videos & media you publish	Short videos shared in the feed	Optional
Comments	Posted under films / episodes / videos	Optional
Validations & shares	Your likes and reposts	Optional
Direct messages	Private conversations with other users	Optional
Phone contacts (names, numbers, emails)	Friend matching — only with your permission, to suggest people you already know who are on the platform	Optional (permission-based)
Your phone number	So friends who have your number can find you in suggestions (kept confidential)	Optional
Purchase information	Films you buy through the app	Only if you purchase

3.3 — Data collected automatically

IP address at the time of submission (stored privately, never displayed publicly)
Browser type and device information (via server logs)
Pages visited and navigation behavior on the website (via cookies — see Section 10)
In-app activity (e.g. content viewed, view counts, features used) to operate the feed and statistics
Push notification token — a device identifier provided by Firebase Cloud Messaging to deliver notifications
Advertising identifier — used by Google AdMob to display ads in the app (see Section 11)
Date and time of submission or activity

3.4 — Phone contacts & friend matching

To help you find people you already know, the app can — only after you explicitly grant permission — read the names, phone numbers and email addresses in your device’s contact list. This information is compared with profiles already registered on Cinema Official in order to suggest friends you may want to connect with.

Your contacts are used solely to find friends on the platform. They are never sold, never shared with any third party, and never used for advertising. You can refuse this permission and still use the entire app — friend suggestions simply won’t appear. You can revoke the permission at any time in your device settings.

04

Why We Collect Your Data

We collect and process your personal data for the following purposes:

Purpose	Details
Account & identity	Identify you (via email) so you can validate, comment, publish, message and purchase
Profile creation & display	Publish your professional profile, film page, or creator profile
Social interaction	Operate comments, validations, shares, and private direct messages
Content publishing	Host and display the short videos you publish
Friend suggestions	Match your phone contacts (with your permission) against registered profiles so you can find and connect with people you know
Push notifications	Notify you of validations, comments, shares, and messages on your content
In-app purchases	Process and record film purchases made through the app
Advertising	Display ads in the app via Google AdMob
Certification process	Verify the authenticity of submitted information
Email communication	Submission confirmation, certification notifications, and platform updates
Cinema Official Awards	Process nominations and manage Awards participation
Security & fraud prevention	Detect and prevent false submissions, impersonation, and abuse
Legal compliance	Respond to legal requests and enforce our Terms of Service
Platform improvement	Analyze usage patterns to improve the service (anonymized)

05

Legal Basis for Processing

Under the GDPR, we process your personal data under the following legal bases:

Contractual necessity — Processing required to fulfill the service you requested (account, profile creation, social features, purchases, certification)
Legitimate interest — Security, fraud prevention, content moderation, and platform quality assurance
Consent — For access to your phone contacts (friend matching), cookies, advertising identifiers, push notifications, and optional marketing communications. Consent is requested explicitly and can be withdrawn at any time
Legal obligation — When required to comply with applicable law

06

User Content & Moderation

The mobile app lets users publish videos, post comments, and exchange messages. To keep the community safe, we apply the following measures:

Reporting — Any user can report a video or piece of content they find inappropriate
Automatic hiding — Content that receives multiple reports is automatically hidden pending review
Blocking — Users can block another user to stop receiving messages from them
Removal — We may remove content that violates our Terms of Service or applicable law

You are responsible for the content you publish. Do not upload content that is illegal, infringing, hateful, sexually explicit, or that violates the rights of others.

Direct messages are private between participants. We do not display them publicly, but they are stored on our servers to deliver the conversation and may be reviewed if reported for abuse or required by law.

07

Data Retention

We retain your personal data for as long as your profile, content, or account is active on the platform. If you request deletion, we will remove your data within 30 days.

Data type	Retention period
Public profile data	Duration of account activity + 30 days after deletion request
Account email & in-app identity	Until you request deletion of your account
Published videos & comments	Until you delete them or request account deletion
Direct messages	Automatically deleted after a few days; or on account deletion / request
Status updates (stories)	Automatically deleted shortly after they expire
Phone contacts	Not stored — used in real time for matching, then discarded. Only your own confidential phone number is kept (to let friends find you)
Push notification token	Until you disable notifications or uninstall the app
Private contact details (email, phone, address)	Duration of account + 1 year for legal purposes
IP address	6 months maximum
Email communication logs	2 years
Purchase / payment records	10 years (legal accounting obligation)
Cookie consent	180 days (renewed on each visit)

08

Data Sharing

We do not sell, rent, or trade your personal data. We may share data only in the following strictly limited circumstances:

Hosting provider — Our server provider processes data to host the website and app backend (under a data processing agreement)
Payment processors — Google Play Billing (in-app film purchases on Android) and, on the website, third-party payment services such as FedaPay or PayPal. They are independently compliant with applicable regulations
Push notifications — Firebase Cloud Messaging (Google) processes your device token to deliver notifications
Advertising — Google AdMob may process an advertising identifier to display ads in the app
Email service — Used to send transactional emails (confirmation, certification notifications)
Other users — Content you choose to make public (profile, videos, comments) is visible to other users; direct messages are shared only with the recipient
Phone contacts — Used only to find friends on the platform. Never sold, never shared with third parties, and never used for advertising
Legal authorities — Only when required by law or valid court order

Your phone contacts are used only to find friends on the platform — never sold, never shared, never used for advertising. Your private contact details (email, phone, address, IP) are never displayed publicly on the platform under any circumstances.

09

Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data. You may exercise any of these rights by contacting us at cinema@cinemaofficial.com. This includes deleting your account and the content associated with it.

Right of Access Request a copy of the personal data we hold about you

Right to Rectification Correct inaccurate or incomplete personal data

Right to Erasure Request deletion of your account and personal data (“right to be forgotten”)

Right to Restriction Limit how we process your data in certain circumstances

Right to Portability Receive your data in a structured, machine-readable format

Right to Object Object to processing based on legitimate interest

Withdraw Consent Withdraw consent at any time for consent-based processing

Right to Complain Lodge a complaint with your national data protection authority

We will respond to all requests within 30 days. We may ask for proof of identity before processing your request.

10

Cookies & App Storage

CinemaOfficial.com uses cookies to improve your browsing experience. Our cookie banner allows you to accept or decline non-essential cookies.

Essential cookies (always active)

Analytics cookies (require consent)

Third-party cookies

Mobile app local storage

The mobile app does not use browser cookies. Instead, it stores a small amount of data locally on your device (for example, your last-used email and preferences) so you do not have to re-enter them. This data stays on your device and can be cleared by signing out or uninstalling the app.

You may manage or delete cookies at any time through your browser settings. Disabling cookies may affect certain platform features.

11

Third-Party Services

CinemaOfficial integrates the following third-party services, each with their own privacy policies:

Google Play Billing — Processes in-app film purchases on Android. We do not store payment card details
Google AdMob — Displays advertising in the mobile app and may use an advertising identifier
Firebase Cloud Messaging (Google) — Delivers push notifications via a device token
FedaPay / PayPal — Payment processing on the website. We do not store payment card details
YouTube / Vimeo / Dailymotion / Loom — Embedded video players. Video data is processed by these platforms independently
Google Analytics — Anonymized usage statistics (if accepted via cookie consent)
WordPress / Hosting provider — Infrastructure for the platform and app backend

We encourage you to review the privacy policies of these third-party services.

12

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

HTTPS encryption for all data transmitted between the app/website and our servers
Private storage of sensitive data (email, phone, address, IP, messages) — never exposed publicly
Access restricted to authorized administrators only
Content moderation tools (reporting, automatic hiding, blocking)
Regular security reviews of the platform

In the event of a data breach that poses a risk to your rights, we will notify the relevant supervisory authority within 72 hours, and affected users as required by law.

13

Children’s Privacy

The Cinema Official app and website are intended for users aged 13 and over and are not directed at children under 13. We do not knowingly collect personal data from children under 13.

For users in the European Union, where national law sets the age of digital consent at up to 16, a parent or guardian’s consent may be required for users under that age.

If you believe a child has provided us with personal data, please contact us immediately at cinema@cinemaofficial.com and we will delete it promptly.

14

International Data Transfers

As an international platform, some of your data may be processed outside the European Economic Area (EEA) — for example, by our hosting provider or third-party services such as Google (Play Billing, AdMob, Firebase), YouTube, or PayPal.

In such cases, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent protection mechanisms.

15

Policy Updates

This Privacy Policy may be updated periodically to reflect changes in our practices or legal requirements. We will update the “Last updated” date at the top of this page.

We encourage you to review this policy regularly. Continued use of the platform or app following any update constitutes acceptance of the revised policy.

16

Contact & Data Protection

For any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data — including account or data deletion — please contact us directly.

You also have the right to lodge a complaint with your national data protection authority (for EU residents: your country’s CNIL equivalent — in France: www.cnil.fr).