Privacy

Privacy and Cookie Policy (GDPR)

Last updated: 26 October 2026

1. Who we are

This website, peacefestival.us, is operated by the International Peace and Film Festival (“IPFF”, “we”, “us”). For the purposes of the EU/UK General Data Protection Regulation (GDPR), we are the data controller of the limited information described below.

For privacy questions or to exercise your rights, contact us through our monitored Instagram account: @intpeacefest.

2. What we do not do

We do not run user accounts, newsletters, online sales or public registration forms on this website.
New comments are switched off.
We do not sell personal data.
We do not keep our own visitor database. Visit statistics and advertising are provided by Google, and only if you agree (see section 4).

3. Third-party services

Some services we use load content from third parties or set their own cookies. When your browser loads them, those providers receive technical data such as your IP address, browser and device type, the page you are viewing and, where cookies are used, a cookie identifier. Each provider acts as an independent controller of that data under its own privacy policy.

Service	What it is used for	Provider’s privacy policy
Google Analytics 4 (through Google Site Kit)	Visit statistics: pages viewed, approximate location, device and browser. Only loads if you accept Analytics.	policies.google.com/privacy
Google AdSense	Advertising and ad measurement. Only loads if you accept Advertising.	policies.google.com/technologies/ads
YouTube, Vimeo	Embedded festival videos and trailers	policies.google.com/privacy; vimeo.com/privacy
Instagram, Facebook, X (Twitter), TikTok, Pinterest, LinkedIn	Embedded posts and social links	Each platform’s own privacy policy
Issuu, Google Maps, OpenStreetMap	Embedded magazine viewer and maps on some pages	issuu.com/legal/privacy; policies.google.com/privacy; osmfoundation.org/wiki/Privacy_Policy
Google-hosted website code (jQuery) and Google Fonts	Site scripts and text styles, loaded from Google servers	policies.google.com/privacy
Cloudflare	Content delivery, security and performance (processes visitor IP addresses)	cloudflare.com/privacypolicy

Embedded videos, posts and maps load from their providers when you open a page that contains them. If you do not want a provider to receive your data, please do not open pages that contain its content, or block third-party content in your browser.

4. Cookies and your consent choices

This website does not set its own tracking cookies. When you first visit, a banner asks whether you accept two optional categories. Both are off until you choose:

Analytics: Google Analytics sets cookies such as _ga and _ga_* (up to 2 years) to count visits and see which pages are used.
Advertising: Google AdSense may set advertising cookies to show and measure ads. The cookies and their lifetimes are set by Google.

Your choice is saved in your browser’s local storage under the name ipff_consent. It stays on your device, is not sent to us, and is used only to remember your choice.

Change or withdraw your cookie settings at any time. You can also use the “Cookie settings” button at the bottom left of any page. You can view, block or delete cookies in your browser settings too, but doing so may stop embedded videos or other third-party content from working.

5. Server logs

Our web server and Cloudflare automatically record technical request data (IP address, date and time, requested page, browser type) for security and troubleshooting. Server logs are rotated and deleted after roughly 14 days. Our legal basis is our legitimate interest in keeping the website secure and working (GDPR Art. 6(1)(f)).

6. Past comments

Before comments were switched off, some visitors left comments, which stored the name, email address and IP address they entered. These are held on our server. You can ask us to delete or correct a comment at any time.

7. Legal basis

Analytics and advertising cookies: your consent (Art. 6(1)(a)), which you can withdraw at any time as described in section 4.
Security, content delivery, server logs and the embedded content described in section 3: our legitimate interest in running a working, secure and informative website (Art. 6(1)(f)).
Past comments: the consent you gave when you posted.

8. Transfers outside the EU/UK

Many of these providers are based in the United States. Where they are certified under the EU-U.S. Data Privacy Framework, or use Standard Contractual Clauses, transfers are made under those safeguards. Please see each provider’s policy for details.

9. Your rights

Under the GDPR you have the right to access, correct or delete personal data we hold about you, to restrict or object to processing, to data portability, and to withdraw consent at any time. To exercise these rights for data we hold (for example an old comment), contact us as set out in section 1. For data held by third-party providers, please contact them directly.

You also have the right to complain to your local data protection authority. A list of EU authorities is at edpb.europa.eu.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.