PÖFF : BNFF

PÖFF Loyalty Programme rules

Valid from 01.02.2023

Users of the website of the Black Nights Film Festival (called PÖFF) and holders of PÖFF Passes are loyalty program of the NGO Black Nights Film Festival, registered at 80044767, Telliskivi 60a/2, 10412 Tallinn, Estonia, which provides discounts and special offers to members of the Wolf Pack. The NGO Black Nights Film Festival reserves the right to change the terms and conditions of the loyalty programme at any time without prior notice. Not all benefits are available to users who remain anonymous.

1. Joining

In order to join the wolf pack, it is necessary to create a user account on the PÖFF website, by which the user confirms that he/she has read and accepted the terms and conditions of the NGO Black Nights Film Festival and agrees to the processing of his/her data in accordance with the Privacy Policy. A contract (hereinafter referred to as the "Contract") shall be concluded between the Member of the Wolf Series and the NGO Black Nights Film Festival in accordance with these Terms and Conditions.

Persons aged 18 or over (or younger with parental consent) can create a user account on the PÖFF website. In order to become a PÖFF Passport holder, it is necessary to have or create a PÖFF website user account. When a PÖFF Pass is purchased, an email will be sent to the purchaser or to the person registered as the PÖFF Pass holder, together with the confirmation of purchase and the instructions for using the PÖFF Pass.

2. Membership

The PÖFF website account is personal and may not be given to any other person.
The owner of the PÖFF website account will be identified at the PÖFF points of sale on the basis of the personal code and the photo used to create the account. Passport holders are also expected to be prepared to prove their status by showing their passport at the time of entry to the stand, either by presenting a neck badge or on the PÖFF account.
The terms and conditions of membership of the PÖFF Loyalty Programme will be reviewed prior to each festival in the light of Loyalty Programme usage statistics and feedback received from members of the Wolf Pack.

3. Benefits and advantages

PÖFF account holders will benefit from:

Buy PÖFF passes, both for themselves and for others.
Create a My Programme
Get film recommendations
Receive part of PÖFF partner offers

Get access to partners of PÖFF partners:

Wolf Pass 25 holders
Wolf Pass 40 holders
Metseen Wolf Pass holders
Holders of a Just Film Pass (for Just Film sessions)
Just Film Pass holders (for KinoFF sessions) Just Film Pass holders (for KinoFF sessions).

4. Termination of the contract

A Wolf Pack member has the right to terminate his membership at any time. The contract can be terminated by clicking on the corresponding link in the settings of your account or by sending a corresponding statement to the e-mail address info@poff.ee.

Once membership is terminated, member benefits and discounts are no longer available. The customer will no longer be able to log in to his poff.ee account, all data related to the customer will be deleted, and this action cannot be reversed later.

If the customer has a festival neck card or passport, it will also cease to be valid.

MTÜ Pimedate Ööde Filmfestival reserves the right to terminate the contract with the client if the client does not fulfill the terms of the contract or misuses his rights.

If you have any questions, please contact us by phone +372 5665 4108 or by e-mail at info@poff.ee.

General conditions

Valid from 01.02.2023

The general conditions apply to the ordering of products and services on the website poff.ee (hereinafter the Website) of the NGO Pimedate Ööde Filmfestival, registry code 80044767, address Telliskivi 60a/2, 10412 Tallinn, Estonia (hereinafter PÖFF). In addition to these general terms and conditions, the relationship between the Customer and PÖFF is governed by the procedure for processing personal data of PÖFF customers (privacy policy), the price list of products on the Website, legal regulations in force in the Republic of Estonia and established good practices.

These general terms and conditions, the privacy policy and the price list of products / services can be found on the PÖFF website.

1. Ordering products and services

The customer of products and services (hereinafter the Client) must register as a user of PÖFF's online environment.
The order can be submitted in Estonian, English and Russian.
The customer chooses the product or service he likes from the Website, then chooses the payment method that suits him and begins to pay for the order.
All prices of products and services shown on the Website are in euros and include VAT (except for donations) and are indicated next to the products and services.
You can pay for ordered products or services:
- via Swedbank, SEB, LHV, Luminor or Coop bank bank links, via Pocopay or mTasku, with a VISA or Mastercard credit card.
- NB! When paying with a bank link, be sure to press the "Back to the merchant" button on the bank's page.
The contract between the customer and PÖFF is deemed concluded when the customer has confirmed the order and PÖFF has forwarded the order confirmation to the customer.
PÖFF is the responsible processor of personal data, and PÖFF transmits the personal data necessary for making payments to the authorized processor Maksekeskus AS.
PÖFF cinema tickets are purchased through AS Piletilevi's system and are based on AS Piletilevi's general principles of personal data processing, which can be found on Piletilevi's website.

2. Receiving the products

Exact information about receiving the products will be sent to the Customer's e-mail address after the order has been confirmed.
Depending on the purchased product or service, the Customer will be issued a neck card with the Customer's first and last name and portrait picture printed on it. The neck card can be received from 27. from October 2023 and 24 hours after purchase at the PÖFF information point at the Apollo Kino Coca-Cola Plaza.
The customer is obliged to pick up his collar card during the festival.

3. Withdrawal from the order

The right of withdrawal does not apply to the contract, the subject of which is the provision of a service, if the PÖFF's obligations arising from the contract have been fully fulfilled and the provision of the service has begun with the express prior consent of the Client and confirmation that he loses his right of withdrawal upon the performance of the contract by the PÖFF. It also applies to the contract, the subject of which is a leisure service, if PÖFF undertakes to provide the service by a certain date or within a certain period of time when concluding the aforementioned contract.
In the exceptional case that the exclusions of the right of withdrawal do not apply, the direct costs related to the return of the thing handed over to the Customer as the object of the contract shall be borne by the Customer.

4. Customer rights

The customer has the right to order products and services in the internet environment at a price set by PÖFF.
The customer has the right to receive a product that meets the conditions and description set out on the website.
The customer has the right to rely on legal remedies provided by law if the product or service does not meet the contract conditions.

5. Customer's Obligations

When completing the order, the Customer is obliged to provide the necessary data for the execution of the order:
- first and last name;
- e-mail address;
- phone number;
- country of residence;
- date of birth;
- gender;
- a portrait picture (if the type of product purchased requires it).
If the data provided by the Customer is incorrect and/or incomplete, PÖFF cannot guarantee the fulfillment of the order. In case of discovery of an error or missing data, the Customer undertakes to contact PÖFF in order to supplement and/or correct the data.
When completing the order, the Customer confirms that he agrees to these general terms and conditions and undertakes to comply with them.
If the Customer notices suspicious activity on his account, he is obliged to inform PÖFF immediately.

6. The rights of the NGO Pimedate Ööde Filmfestival

PÖFF has the right to change these general terms and conditions without prior notice. New valid terms and conditions will be published online.
PÖFF has the right to change the prices of products and services in the internet environment at any time. New prices are published online.
PÖFF has the right to cancel the order if the wrong price for the product or service has been indicated by mistake.
If the Customer does not fulfill the obligations specified in these general conditions, PÖFF cannot guarantee the fulfillment of the order, and PÖFF has the right to delete the Customer's account.

7. Obligations of the NGO Black Nights Film Festival

PÖFF is obliged to ensure that the Customer receives the correct product or service.

If you have any questions, please contact us by phone +372 5665 4108 or by e-mail at info@poff.ee.

Privacy notice

This privacy notice describes how the non-profit association Pimedate Ööde Filmfestival (registry code 80044767, location Telliskivi 60a/2, 10412 Tallinn, Republic of Estonia; hereinafter we or PÖFF) processes personal data.

We may process your personal data in different processes and relationships, depending on how you are related to us. This privacy notice is divided into different parts based on different situations when we may need to process your personal data. To get a precise overview of the personal data processing principles that concern you, find the section(s) below that characterize your contact with PÖFF (point 1 of the privacy notice). In addition, familiarize yourself with our general principles of personal data processing, which are given at the end of this privacy notice and which describe the principles that generally apply to all personal data processing operations carried out by us (points 2-8 of the privacy notice).

The concepts used in the privacy notice should be interpreted as it is done in the General Regulation on the Protection of Personal Data of the European Union (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data and Directive 95/46/EC on annulment; hereinafter general regulation). By film festival we mean the various film festivals that PÖFF organizes (Black Nights Film Festival, Just Film festival for youth and children's films, short film festival PÖFF Shorts, film industry meeting Industry@Tallinn, Haapsalu Adventure and Fantasy Film Festival, Tartu Love Film Festival tARTuFF, Kumu Dokumentaal). By Eventival we mean film festival management portal.

1. Composition of personal data, purposes and legal bases of processing and storage of personal data

1.1. I am an invited or registered guest or journalist of the film festival and/or Industry

For the purposes of this privacy notice, invited guests to the film festival and/or Industry are all persons who have received the corresponding accreditation from PÖFF for participation in the film festival and/or Industry or who apply for it (including film guests, accompanying film guests, press, jury members, persons who have presented film for the film festival, guests of the film industry).

We may process your following personal data (categories of personal data may differ depending on which data you have chosen to provide to us):

personal data (first and last name, date of birth, gender, languages spoken, nationality);
contact information (e-mail address, telephone number, address);
photo;
professional information (country, position, field, specialty, affiliation with a specific company);
payment details.

If, as a result of the agreement between us, we also make transport and accommodation service reservations for you, we may additionally process the following personal data:

details of the identity document;
details about the transport and accommodation service (e.g. route, duration);
special types of personal data concerning the specifics of the transport service or accommodation service (e.g. information about food intolerances, information about special physical needs).

As a rule, we collect your personal data from you and store them on your profile in Eventival. You can also create an Eventival account and add and change data yourself. Your Eventival account will be linked to your Eventival profile. In order to simplify the creation of an account for you, we can, with your consent, create an account for you by adding the necessary personal data from your profile. If you have given us your consent to create an Eventival account, after pre-filling the account, we will provide you with access to the Eventival user account, which allows you to manage the personal data in your account (including choosing your own password). When pre-filling your profile and account or for the purpose of establishing the first contact with you, we may also collect your name, contact information and work information from public sources (Google, LinkedIn, Cinando, your organization's homepage).

We process your personal data for the following purposes and legal bases:

we process your personal data (name, contact details, professional information) in order to contact you and invite you to the film festival and/or Industry, in which case the legal basis for the processing is our legitimate interest in inviting you to participate there and thereby the film festival and/or Industry to make it more qualitative and attractive, which in our opinion outweighs your interests and fundamental rights and freedoms (Article 6 (1)(f) of the General Regulation), first of all considering that it is your work-related information and it is also in the interest of your own professional activity;
we process your personal data (name, contact data, professional information, photo, payment data) in order to enable you to visit the film festival and/or Industry, including in order to issue you the necessary personal neck card with a picture and to contact you in connection with the event, in which case your the legal basis for the processing of personal data is the fulfillment or conclusion of an agreement between us by which you have received accreditation to participate in the film festival and/or Industry (Article 6 (1)(b) of the General Regulation);
we process your personal data in order to organize transport and accommodation services for you (if we have agreed accordingly), in which case the legal basis for processing your personal data is the fulfillment of the agreement between us (Article 6 (1) (b) of the General Regulation);
we process your personal data (name, contact data, professional information, languages, country) in order to offer you a personal reception when visiting the film festival and/or Industry (except if you are accompanying a film guest), in which case the legal basis for the processing is our legitimate interest to do so, in order to thereby make the film festival and/or the Industry more high-quality and attractive, which in our opinion outweighs your interests and fundamental rights and freedoms (Article 6 (1)(f) of the General Regulation), first of all considering that this is your work-related information;
we process your personal data (name, contact data, professional information, photo) for the printing of the “Industry Guide” distributed to Industry participants and the “Who is Here” Eventival online catalog (except if you are an escort of a film guest), in which case the processing is legal based on our legitimate interest to thereby make the film festival and Industry more quality and attractive, which in our opinion outweighs your interests and fundamental rights and freedoms (Article 6 (1)(f) of the General Regulation), above all considering that it is your work-related information, you there is control over the data to be printed, and this is also in the interest of your own professional activity;
we process your personal data to fulfill our obligations arising from legislation (Article 6 (1)(c) of the General Regulation);
if necessary, we will process your personal data to file claims and defend ourselves against claims, in which case the legal basis for processing is our legitimate interest to do so, to the extent that, in our opinion, outweighs your interests and fundamental rights and freedoms in this case (Article 6 (1)(f) of the General Regulation )).

The data of film guests and jury members (including name and professional information) will also be published in connection with the film festival on the PÖFF website and in other sources. The legal basis for publication is our legitimate interest in providing sufficient information about the film festival, which in our opinion outweighs your interests and fundamental rights and freedoms (Article 6 (1)(f) of the General Regulation), first of all, considering that it is your professional information and it is also your in the interest of his professional activity. We retain your personal data as long as it is necessary due to the purpose for which we collected it. If it is necessary to protect our rights or fulfill our legal obligations, we may keep your personal data longer. For example, we retain personal data necessary to fulfill accounting obligations for at least 7 years after the end of the relevant financial year, and personal data necessary to submit claims or defend ourselves against claims for 10 years.

1.2. I am a guest who bought a ticket to the film festival

If you are a visitor who bought a ticket to the film festival, we generally do not process your personal data, as the tickets are not personalized. We may process your personal data (name, contact details) if you participate in, for example, audience voting. In this case, the legal basis for personal data processing is your consent (Article 6 (1)(a) of the General Regulation). Please note that you have the right to withdraw the given consent at any time by informing info@poff.ee of your wish. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal. We retain your personal data as long as it is necessary due to the purpose for which we collected it.

1.3. I am a member of the loyalty program

For the purposes of this privacy notice, members of the loyalty program are all persons who have joined the PÖFF loyalty program Hundikari by creating a user on the PÖFF website or by purchasing a PÖFF pass.

We process your following personal data:

first and last name;
e-mail address;
phone number;
country;
date of birth;
gender;
a portrait picture (if the type of passport being purchased requires it);
user account login data;
Your activity as a member of the loyalty program (e.g. selected keywords, history of ticket purchases, films rated by you and the rating given to them).

We process your personal data for the following purposes and legal bases:

we process your personal data to enable you to use various functions of the loyalty program, including so that you can prepare a movie schedule of your preferred movies, so that we can offer you movie recommendations based on selected keywords and discounts from us/us and our partners, in which case the legal basis for the processing is the fulfillment of the contract between us (Article 6 (1)(b) of the General Regulation);
we process your personal data to fulfill our obligations arising from legislation (Article 6 (1)(c) of the General Regulation);
if necessary, we will process your personal data to submit claims and defend ourselves against claims, in which case the legal basis for processing is our legitimate interest to do so, to the extent that, in our opinion, outweighs your interests and fundamental rights and freedoms in this case (Article 6 (1)(f) of the General Regulation )).

We retain your personal data as long as it is necessary due to the purpose for which we collected it. If it is necessary to protect our rights or fulfill our legal obligations, we may keep your personal data longer. For example, we retain personal data necessary to fulfill accounting obligations for at least 7 years after the end of the relevant financial year, and personal data necessary to submit claims or defend ourselves against claims for 10 years.

1.4. I am an employee or volunteer candidate

For the purposes of this privacy notice, applicants are all persons who express a desire to work at PÖFF (on the basis of an employment contract or a service provision contract) or to be a volunteer.

We process the following personal data of applicants:

first and last name;
date of birth;
national security number;
document number;
e-mail address;
phone number;
address;
information regarding qualifications (e.g. information about acquired education and/or professional qualifications);
data on previous work and/or volunteer work experience;
other data that you have decided to provide us in your CV, motivation letter or otherwise.

We process your personal data for the following purposes and legal bases:

we process your personal data in order to find among the applicants the most suitable candidates for us to conclude contracts with, in which case the legal basis for the processing of your personal data is to take measures prior to the conclusion of the contract in accordance with your request (Article 6 (1)(b) of the General Regulation);
we process your personal data in order to offer you jobs and opportunities to volunteer in the future, but only if you have given us your consent (Article 6 (1)(a) of the General Regulation). Please note that you have the right to withdraw the given consent at any time by notifying the relevant person to whom you communicated this information. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal;
we process your personal data in order to facilitate the verification of discounts available to employees and volunteers (incl. catering) and to make contracts and agreements where necessary;
if necessary, we will process your personal data to submit claims and defend ourselves against claims, in which case the legal basis for processing is our legitimate interest to do so, to the extent that, in our opinion, outweighs your interests and fundamental rights and freedoms in this case (Article 6 (1)(f) of the General Regulation )).

As a rule, we store your personal data for 1 year from the time the recruitment decision is made. If you have given us your consent to make job offers in the future, we will store your personal data for up to 7 years or until you withdraw your consent. If it is necessary to protect our rights or fulfill our legal obligations, we may keep your personal data longer.

1.5. I am a recipient of the newsletter

For the purposes of this privacy notice, the recipients of the newsletter are all persons who have subscribed to the PÖFF, PÖFF Shorts or Just Film newsletter list. We send you the PÖFF, PÖFF Shorts or Just Film newsletter only with your consent, with the aim of informing you about various offers, events and other activities of ours that may be of interest to you. In addition, we conduct surveys from time to time to receive feedback on our services and to improve the services based on this.
In order to send the newsletter, we process your first and last name, e-mail address and preferences for the field of the newsletter.

You have the right to withdraw your consent to receive the newsletter at any time by clicking on the link at the end of the newsletter or by sending an e-mail to press@poff.ee. Please note that the withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.
We will keep your personal data until you ask to be removed from the list of newsletter recipients.

1.6. I am someone who has contacted PÖFF or participated in a draw organized by PÖFF

If you contact us by phone or e-mail or using other means or participate in one of our campaigns, we may process the data that you yourself have made available to us (e.g. name, contact details, content of the contact). In this case, the legal basis for personal data processing is your consent (Article 6 (1)(a) of the General Regulation). Please note that you have the right to withdraw the given consent at any time by informing info@poff.ee of your wish. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal. We retain your personal data as long as it is necessary due to the purpose for which we collected it. If it is necessary to protect our rights or fulfill our legal obligations, we may keep your personal data longer.

2. Transmission of personal data

We share your personal data with third parties only if there is a justified need and extent, and only if we have a legal basis for doing so. For example, in our activities we use the following service providers who may gain access to your personal data (authorized processors): Eventival, Google, e-mail service provider, accounting software provider, payment platform provider, movie streaming platform provider, IT service providers; in the case of invited guests of the film festival and Industry, also our contractors and volunteers. We only use authorized processors who provide sufficient assurance that they implement appropriate technical and organizational measures to ensure the protection of your personal data. To this end, we have signed appropriate data processing agreements with all authorized processors, and we remain responsible for ensuring the protection of your personal data.

We may also transfer your personal data to the following third parties who act as independent controllers of your personal data:

To recipients of the PÖFF report, such as film producers, media, Ministry of Culture, Tallinn City Office. The name and professional information of the deleted guests of the film festival and Industry (except for accompanying film guests) are reflected in the report. The legal basis for the transmission is our legitimate interest, which, in our opinion, outweighs your interests and fundamental rights and freedoms (Article 6 (1)(f) of the General Regulation), first of all, given that it is your work-related information;
To the Enterprise Development Foundation to fulfill our obligations arising from legislation (data of foreign guests in connection with the obligation to prove the receipt of marketing subsidies for major events) (Article 6 (1) (c) of the General Regulation);
if relevant, to third parties through whom transport and accommodation services are organized for the invited guests of the film festival and Industry, in which case the legal basis for the transmission is the fulfillment of the agreement between us (Article 6 (1)(b) of the General Regulation);
to third parties who organize events within the framework of the PÖFF film festival and Industry, in which participation takes place for the guests of the film festival and Industry on the basis of personal invitations or a list, in which case the legal basis for transmission is your consent (Article 6 (1) (a) of the general regulation);
to third parties involved in the protection of our rights (for example, legal advisors), in which case the legal basis for the transfer of personal data is to the extent of our legitimate interest, which in our opinion outweighs your interests and fundamental rights and freedoms (Article 6 (1)(f) of the General Regulation) ;
to third parties to whom the obligation to transfer your personal data arises from the law or other legislation (for example, auditors, supervisory authorities), in which case the legal basis for the transfer is the fulfillment of our obligation arising from the law (Article 6 (1)(c) of the General Regulation).

3. Transfer of personal data outside the European Union

We transfer your personal data outside the European Union only if we have a legal basis for doing so, including to the recipient of the data:

who is located in a country where, according to the European Commission, the protection of personal data is ensured at an adequate level (this includes organizations certified under the Privacy Shield);
on the basis of a contract that meets the requirements of the European Union for the transfer of personal data to personal data processors located outside the European Union. If you would like more detailed information about the transfer of your personal data outside the European Union (e.g. the names of the recipients of the data and the legal basis for the transfer), please contact us using the contact details below.

4. Security

We apply adequate technical and organizational security measures in our opinion to protect your personal data, taking into account:
i) level of technology,
ii) implementation costs,
iii) the nature, scope, context and purposes of the processing, and
iv) Risks arising from processing for you.

5. Your Rights

You have all the rights in relation to your personal data provided by the applicable legislation, including the general regulation, under the conditions and to the extent stated therein:

the right to request access to your personal data (including receiving a copy of your personal data);
the right to request correction of personal data;
the right to demand deletion of personal data;
the right to demand restriction of personal data processing;
the right to request the transfer of personal data;
the right to object if the processing of personal data takes place on the basis of our legitimate interest and if the processing takes place for the purpose of direct marketing.
If you want to exercise the aforementioned rights or have questions about the processing of your personal data, please contact us using the contact details below.

If you believe that your personal data has been processed in violation of this privacy notice or that your rights related to your personal data have been violated, please inform us of this via the contact details provided at the end of the privacy notice. In the event of a violation, you also have the right to contact the Data Protection Inspectorate or the court. If your permanent residence or workplace is in a member state of the European Union, also to the data protection authority of that member state.

6. Modification of Privacy Notice

If our personal data processing practice changes or if we need to change the privacy notice due to applicable data protection legislation, other legislation, case law or guidelines or practice issued by competent authorities, we have the right to unilaterally change the privacy notice at any time. If the changes significantly affect you, we will notify you by e-mail reasonably before the changes take effect.

7. Governing Law

The non-profit association Pimedate Ööde Filmfestival is an association registered in the Republic of Estonia, therefore the law of the Republic of Estonia applies to the processing of your personal data.

8. Contact information

If you have any questions about the processing of your personal data or if you want to exercise your rights regarding your personal data, please contact us at the following contact details:

The non-profit organization Black Nights Film Festival
Address: Telliskivi 60a/2, 10412 Tallinn, Republic of Estonia
E-mail address: info@poff.ee
Phone: +372 5665 410