Skip to main content

Privacy Policy

Last updated: 30 August 2026

This policy explains what personal data Fredrikstad Animation Festival collects about you, why we collect it, who we share it with, and what rights you have. It covers animationfestival.no and the forms and services reachable from it.

It replaces our earlier cookie policy. Cookies are still covered in full, in section 5.

1. Who we are

Fredrikstad Animation Festival is organized by the Norwegian foundation Norsk Animasjonsforum, which is the data controller for the processing described here.

Norsk Animasjonsforum
Org. no. 976 147 871
Nygaardsgata 33A
1606 Fredrikstad
Norway
[email protected]

If you have questions about this policy or about how we handle your data, write to us at the address above.

2. The short version

  • You can browse this website without telling us who you are. Analytics and marketing cookies are only set if you agree to them.
  • If you buy a ticket or a pass, the purchase is handled by Eventive, not by us directly.
  • If you sign up for our newsletter, submit a film, or register as a guest or professional, you give us data on purpose and we tell you what we do with it below.
  • You can withdraw a consent, ask for a copy of your data, or ask us to delete it, at any time.

3. What we collect, and why

3.1 Visiting the website

Our web server records ordinary technical information when a page is requested — IP address, browser type, and the page requested. We use this to serve the site, to keep it secure, and to limit abuse of our forms. This is necessary for us to run the site at all, and we rely on our legitimate interest in a working and secure website. We do not use this information to identify you.

If you accept analytics or marketing cookies, we also collect the information described in section 5.

3.2 Newsletter

If you sign up for our newsletter we collect your email address. We use it only to send you the newsletter. We rely on your consent, and you can withdraw it at any time using the unsubscribe link in any newsletter, or by writing to us.

The newsletter is sent using Mailchimp (Intuit Inc.), which stores your email address and records whether you opened a newsletter or clicked a link in it. See Intuit's privacy statement.

3.3 Tickets, passes and your Eventive account

Ticket and pass sales run on Eventive, either embedded in a page on this website or on Eventive's own site. When you buy, or when you log in with Eventive from our site, you deal with Eventive directly: they collect your name, email address, order details and payment information. Card payments are processed by Stripe; we never see or store your card details.

We receive from Eventive the information we need to run the festival — who holds which pass, and which screenings have been booked. We process this on the basis of our contract with you as a ticket holder.

Eventive operates your visitor account and is responsible for it as a separate controller. Please read Eventive's privacy policy and Stripe's privacy policy for what they do with your data.

Nothing is loaded from Eventive or Stripe until you accept functional cookies — see section 5.3.

3.4 Film submissions

If you submit a film to the festival, we collect the information given in the submission form: the film's details, the names of the director and other credited contributors, your contact email, biography, synopsis, still images and any files you upload.

We use this to assess the film for selection, and — if the film is selected — to program and present it, including in the festival catalog, on this website and in press material. We rely on the steps taken at your request before and under our agreement with you, and on our legitimate interest in presenting the program.

3.5 Guest and professional registration

If you are invited as a guest, delegate or professional, our registration form collects your name, contact details, biography and photograph for the catalog, your arrival and departure dates, and your travel preferences.

Where we book or reimburse travel we also collect the details a carrier requires: legal name, date of birth, sex as recorded on your travel document, nationality and address. We use these only for that booking, and rely on our agreement with you.

The form asks for a food preference, chosen from a short fixed list, so that we can cater. That is ordinary information about your stay.

The form also has a free-text box for special needs and comments — allergies, accessibility requirements, anything else we should know. Filling it in is entirely voluntary. You can leave it empty, submit the form and attend exactly as planned; nothing about your invitation depends on it. If you would rather tell us in person than type it into a form, write to us or speak to the guest office instead.

If you do write something there, it may amount to health information, which the law protects as a special category of personal data. We use it for one purpose only: making sure you can take part comfortably. We handle it on the basis of your explicit consent, we keep it from staff who have no need for it, you can withdraw your consent at any time, and we delete it shortly after the festival ends rather than carrying it into the next edition.

3.6 Technical forms

If you are presenting at the festival, our technical form collects your equipment and presentation requirements. We use it to prepare the venue. We rely on our agreement with you.

3.7 Contacting us

If you email us, we keep your message and our reply so we can deal with the matter and refer back to it. We rely on our legitimate interest in answering correspondence.

4. Personal links to our forms

Submission, registration and technical forms are reached through a personal link we send you. Anyone holding that link can see and change the data already in the form, so please do not share it. If you think your link has gone astray, tell us and we will issue a new one.

5. Cookies and similar technologies

5.1 What cookies are

Cookies are small text files stored on your device when you visit a website. Some last only for your visit; others stay until they expire or you delete them. This section also covers local storage, which works differently but likewise keeps information on your device.

5.2 Your consent

We set only strictly necessary cookies without asking. Everything else — functional, analytics and marketing — is set only after you agree, as required by the GDPR and the Norwegian Electronic Communications Act.

On your first visit you are shown a banner where you can accept everything, choose categories individually, or refuse everything except the strictly necessary. Refusing is one click, exactly like accepting.

You can change or withdraw your choice at any time: use the Manage cookies link in the site footer or at the bottom of this page. When you withdraw a category we also delete the cookies we can reach that belong to it. Withdrawing does not affect anything already done on the basis of your earlier consent.

5.3 The categories we use

Necessary — always on. These make the site work and remember your cookie choice. They set no profile and are not shared.

  • has-made-choice and cookie-consent — record whether you answered the cookie banner and what you chose. Set by us, kept for 1 year.
  • faf:previous-path — remembers the page you came from, so a "back" link takes you where you expect. Kept in your browser for the current session only, and cleared when you close the tab.

Functional — off unless you accept. These let you log in to Eventive and buy passes and tickets without leaving this site. Accepting this category is what allows our pages to load code from Eventive and Stripe; until then, no request is made to either and you are offered a link to Eventive's own site instead.

  • __stripe_mid (1 year) and __stripe_sid (30 minutes) — set by Stripe for fraud prevention when a checkout loads.
  • Eventive keeps your login session on its own domain, eventive.org, under its own policy. We cannot read or delete those cookies from here; use Eventive's account settings or your browser.

Analytics — off unless you accept. We use Google Analytics to understand which pages are read, how visitors move through the site, and what is not working. Data is aggregated and used to improve the site.

Marketing — off unless you accept. We use the Meta Pixel so that our festival advertising on Facebook and Instagram reaches people who have shown an interest in the festival.

5.4 Your saved list

You can star films and events to build your own festival program. Starring needs an Eventive account and functional cookies. If you are not signed in, no star is shown at all, and nothing about your interests is recorded.

Your saved list is held by Eventive against your account — not by us, and not on your device. It is the same list you see on Eventive's own festival site, so starring something here shows it there, and the other way round. While you are signed in we read and update that list through Eventive on your behalf.

Eventive's own code also keeps a copy of the list in your browser's local storage, under eventive-wishlist_v2. We clear that copy on every page load so it cannot go stale or outlive your visit.

When you sign out, we remove the list from the browser straight away, so your saved titles do not linger on a shared or public computer. To delete the list itself, use your Eventive account.

5.5 Browser controls

Your browser can block or delete cookies independently of our banner. See your browser's help pages. Blocking strictly necessary cookies may stop parts of the site working.

6. Who we share data with

We do not sell your personal data, and we do not share it for anyone else's marketing. We share it with the service providers we use to run the festival and this website, and where the law requires us to disclose it. They are:

  • Eventive — ticketing, passes and visitor accounts
  • Stripe — payment processing for those purchases
  • Mailchimp (Intuit) — newsletter delivery
  • Google — website analytics, if you accept analytics cookies
  • Meta — advertising, if you accept marketing cookies
  • Notion — where submission and registration data is stored and worked on by the festival team
  • Our hosting and content management providers — who run this website and store its content

7. Transfers outside the EEA

Several of the providers above are established in the United States, so your personal data may be transferred out of the EEA. Where that happens we rely on the transfer safeguards those providers commit to in their own terms — typically the European Commission's standard contractual clauses, or the EU–US Data Privacy Framework where the provider is certified under it. If you want to know what applies to a particular provider, write to us.

8. How long we keep it

  • Newsletter — until you unsubscribe.
  • Cookie choices — 1 year, then you are asked again.
  • Film submissions — kept for the edition they were submitted to. Submissions that are not selected are deleted once that edition has taken place. For selected films, the title, credits and images stay in the festival's permanent archive and program history.
  • Guest and professional registration — contact and catalog details are kept for the edition and its immediate follow-up. Travel document details are deleted once the travel is complete, apart from what bookkeeping law requires us to keep.
  • Special needs, and anything else sensitive you tell us — deleted shortly after the festival ends. It is never carried into the next edition.
  • Accounting records for travel and reimbursement — five years after the end of the financial year, as Norwegian bookkeeping law requires.
  • Correspondence — kept for as long as we need it to deal with the matter and any follow-up.

9. How we protect it

The site is served over HTTPS. Access to submission and registration data is limited to the festival staff who need it. Form links are single-purpose and rate-limited. Payment details never reach our systems.

10. Your rights

Under the GDPR you have the right to:

  • be told what personal data we hold about you, and get a copy of it
  • have inaccurate data corrected
  • have your data deleted, where we have no continuing reason to keep it
  • have our processing restricted while a dispute is resolved
  • object to processing we base on legitimate interest
  • receive data you gave us in a portable format, and have it sent to another controller
  • withdraw a consent at any time, without affecting what was done before you withdrew it

To exercise any of these, write to [email protected]. We answer within one month.

If you believe we are handling your data unlawfully, you may complain to the Norwegian Data Protection Authority, Datatilsynet. We would appreciate the chance to put things right first.

11. Children

This website is not directed at children, and we do not knowingly collect personal data from children under 13. If you believe a child has given us data, contact us and we will delete it.

12. Changes to this policy

We update this policy when what we do with data changes, or when the law requires it. The date at the top shows when it was last changed. Material changes affecting how we use data you have already given us will be notified to you directly.

13. Contact

Fredrikstad Animation Festival
Nygaardsgata 33
1606 Fredrikstad
Norway
[email protected]

You can change or withdraw your cookie choices at any time.