Personal Data Processing Policy
MEDIAFEST LLC · guest registration system of the 10th International Film Festival “Eurasian Bridge”
Version v1 of 29.09.2026
This is a translation for information purposes. In case of any discrepancy, the Russian version prevails.
1. General
1.1. This Policy sets out how MEDIAFEST LLC (TIN 9710026955, PSRN 1177746326680, address: floor 2, premises I, room 206, 11 Maly Kozikhinsky Lane, bldg. 1, Moscow, 123001, Russia) (the “Operator”) processes and protects personal data in the registration system at ebff.ru (the “System”).
1.2. The Policy follows Federal Law No. 152-FZ of 27.07.2006 “On Personal Data” (the “Law”) and is published in accordance with Article 18.1(2) of the Law.
1.3. Contact for personal data matters: v.kolontay@moscowfilmfestival.ru, +7 999 808-46-27.
2. Whose data we process
2.1. Festival guests who registered via an invitation link or were added by the Operator's staff (filmmakers, students, press, festival guests, jury members, partners).
2.2. Guests' companions — names only, if provided by the guest.
2.3. Operator's staff and volunteers using the System — name, login, role, activity log.
3. Purposes, data and legal grounds
| Purpose | Data | Legal ground |
|---|---|---|
| Registration and booking of seats for Festival screenings on 5–9 October 2026 | name, e-mail, phone, affiliation, category, booking details, companions' names | consent (Art. 6(1)(1) of the Law) |
| Sending invitations and notices | e-mail, name, language, booking details | consent |
| Checking invitations and recording admission | name, category, booking code, admission details | consent |
| Protecting the System from automated and abusive activity | IP address, user agent, technical logs | consent |
| Proof of consent | date, time and text version of consent, IP address, user agent | Operator's legal obligation (Art. 9(1) of the Law) |
| Festival statistics and reports | anonymised data | processing of anonymised data |
| Staff work in the System | name, login, role, activity log | contract, legitimate interest |
3.1. The Operator does not process special categories of personal data or biometric personal data. Photo and video recording at Festival events is covered by a separate consent.
4. Processing
4.1. Processing is carried out with and without automation: collection, recording, systematisation, accumulation, storage, clarification, retrieval, use, transfer (provision, access), blocking, deletion, destruction.
4.2. Localisation. Personal data of Russian citizens is recorded, systematised, accumulated, stored, clarified and retrieved using databases located in the Russian Federation (Art. 18(5) of the Law). No cross-border transfer takes place.
4.3. Processor. The System is developed and administered by the Operator itself. Processing is entrusted to Yandex.Cloud LLC (TIN 7704458262, PSRN 1187746678580): hosting of the System and database (Yandex Cloud), e-mails (Yandex Cloud Postbox), form protection (Yandex SmartCaptcha), under an instruction meeting Art. 6(3) of the Law.
4.4. Transfer. Gosfilmofond of Russia (Illusion cinema) receives name, number of seats and booking code as needed to admit guests.
4.5. Retention. Until the purposes are achieved, but no later than 7 January 2027, or until consent is withdrawn. Data is then destroyed or anonymised. Backups are kept for no longer than 14 days.
4.6. Cookies. Only strictly necessary cookies are used: session, interface language, form protection. No advertising or analytics cookies.
5. Security measures
5.1. Data is transmitted over HTTPS only.
5.2. Access is limited to authorised staff with personal logins. Volunteers at the hall entrance see only the guest's name and category; e-mail and phone are not available to them.
5.3. All staff actions on bookings are logged.
5.4. Confirmation and booking management links use random tokens. QR codes contain no personal data.
5.5. Daily backups, protection against automated attacks, rate limiting.
5.6. Person responsible for personal data processing: General Director Natalia M. Semina.
6. Your rights
6.1. You may:
- obtain information about the processing of your personal data (Art. 14 of the Law);
- request clarification, blocking or destruction of data that is incomplete, outdated, inaccurate, unlawfully obtained or unnecessary;
- withdraw your consent;
- appeal to Roskomnadzor (the Russian data protection authority) or to a court.
6.2. Send your request to v.kolontay@moscowfilmfestival.ru or to the Operator's address, stating your name, the e-mail used for registration and, if possible, your booking code.
6.3. The Operator replies within 10 working days; this may be extended by up to 5 working days with notice of the reasons.
7. Final provisions
7.1. The Operator may amend this Policy. The new version takes effect when published at ebff.ru/privacy.
7.2. Russian law applies.