UFFB Ticket Scanner — Privacy Policy
Last updated: 26 August 2026
This privacy policy applies to the UFFB Ticket Scanner mobile app, published by
Ukrainian Film Festival Berlin ("UFFB", "we", "us"). The app is used exclusively by UFFB staff and
volunteers to validate festival ticket QR codes at the entrance of our screenings.
1. Data Controller
Ukrainian Film Festival Berlin
Website: uffberlin.de
Contact: info@uffberlin.de
2. Camera Access
The app requests camera permission solely to scan the QR code printed on a festival ticket. No
photo or video is ever captured, stored, or transmitted — the camera feed is processed locally on
the device in real time purely to decode the QR code.
3. Data We Process
When a ticket is scanned, the app sends the ticket's unique identifier to our database (Google
Firebase / Firestore, operated by Google Ireland Ltd. as our data processor) to check whether it is
valid and to mark it as used. The records looked up contain:
- A unique ticket ID
- The screening the ticket is associated with
- A one-way hash of the ticket holder's email address (not the email address itself)
- Optionally, the ticket holder's name, if provided at registration
- Whether the ticket has already been used, and when
This data was already collected when the guest registered for a free ticket, entirely separately
from this app — the app only reads and updates existing records to prevent duplicate entry.
4. What We Don't Do
The app has no user accounts, no analytics or crash-reporting SDKs, no advertising, and does not
share data with any third party other than the Firebase infrastructure described above.
5. Legal Basis (GDPR Art. 6)
Processing is based on our legitimate interest (Art. 6(1)(f) GDPR) in preventing ticket fraud and
duplicate entry at our (largely free) events, and on the performance of the registration process the
ticket holder already took part in (Art. 6(1)(b) GDPR).
6. Data Retention
Ticket and scan records are retained only for the duration needed for the related festival edition
and a reasonable period afterward for reconciliation, after which they are deleted.
7. Your Rights
Under GDPR you have the right to request access to, correction of, or deletion of your data, and
the right to object to processing. Contact us at
info@uffberlin.de. You also have the right to lodge a
complaint with a data protection supervisory authority, such as the
Berlin Commissioner for
Data Protection and Freedom of Information.
8. Changes
We may update this policy from time to time; the "last updated" date above will reflect the most
recent revision.