This page says what happens to your data when you use ouidembois.com, and what you can do about it.
Who is responsible
Ouidembois LLC, 8605 Santa Monica Boulevard, PMB 90285, West Hollywood, CA 90069, USA. Email dan@ouidembois.com.
When you visit
The site is hosted by Vercel Inc. in the United States. When your browser loads a page, Vercel’s servers receive your IP address, the page you asked for, the time and your browser type, and keep them for a short time in server logs. We need this to deliver the site and keep it secure (Art. 6(1)(f) GDPR).
To stop abuse of our forms, the site keeps a scrambled form of your IP address in memory for a few minutes. If you start a ticket checkout, that scrambled form is also saved with the checkout in our Stripe account and stays there. It is how the site stops one visitor from holding more seats than the limit while they pay.
Counting visits
We use Vercel Web Analytics to count page views. It sets no cookies and does not follow you from site to site (Art. 6(1)(f) GDPR).
Tickets
Payment runs through Stripe (USA). You enter your name, email address and card details on Stripe’s page. We never see your card details. We receive your name, your email address, what you booked and whether it was paid. We use this to keep the door list, send your confirmation and meet accounting rules (Art. 6(1)(b) and (c) GDPR). We keep no database of our own, so the booking stays in our Stripe account.
While a checkout is open, your browser keeps its reference in the tab’s session storage. If you come back to the ticket page without paying, the page uses it to give your seats back, then forgets it.
Our emails are sent through Resend (USA), which receives your address and the content of the email. When an email is sent or fails, our server log notes it with a shortened form of the address: the first letter and the part after the @.
Waiting list and reminders
If you join a waiting list or ask for a reminder, we store your email address, how many tickets you wanted and when you asked, and use them only for that screening. They are kept in our Stripe account, as notes on a checkout record that takes no payment. You confirm a waiting-list address by opening a link we email you and pressing the button on that page, and the confirmation is kept the same way (Art. 6(1)(a) GDPR).
You can stop these emails with the link in each one. If you do, a note saying so is kept in our Stripe account with your address, so that we do not write to you again.
Follow the work
If you sign up to follow the work, we email you a link that works for three days. Nothing is stored until you open it and press the button on that page. Then your email address is stored in our list at Resend. We use it to tell you about releases, screenings and events, and for nothing else. Every email has an unsubscribe link, or you can write to us (Art. 6(1)(a) GDPR).
Watching online
When online viewing is open, payment again runs through Stripe, and the viewing stays in our Stripe account with your email address. We email you a personal link to the film. If you ask for that link again, we look your address up among those viewings. The film is streamed by Bunny (bunny.net, Slovenia), which receives your IP address and device details and records how much of the film was played. Your browser keeps your personal viewing link and the point where you stopped on your own device, so you can pick up again (Art. 6(1)(b) GDPR).
Links to other sites
Links to Instagram, YouTube, Substack, Google Maps, Google Calendar and Cal.com are plain links. Nothing is loaded from those sites until you follow one. After that, their own rules apply.
The trailer on the Ringatory page is played by YouTube, which belongs to Google. It is a still image until you press play. Only then does your browser load YouTube’s player, and from that moment YouTube’s own rules apply.
How long we keep it
Booking and payment records are kept for as long as tax and accounting law requires. Waiting-list and reminder addresses are not used after the screening they were given for, and they remain in those Stripe records. The scrambled form of an IP address saved with a checkout remains there too. Follow-list addresses are kept until you unsubscribe or ask us to remove you.
Your rights
You can ask what we hold about you, and ask us to correct it, delete it, restrict its use or hand it to you in a portable form. You can object to processing that rests on our legitimate interests, and you can withdraw a consent at any time. Write to dan@ouidembois.com.
You can also complain to a data protection authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.