top of page
Security Camera

Privacy Policy

Privacy Statement for Kampala Film development Foundation (KFDF)                 


At Kampala Film development Foundation, we are committed to protecting and respecting your privacy.


This Privacy Statement will let you know how we look after your personal data with regard to your use of this website and in the context of receiving marketing communications from us. It also informs you as to our obligations and your rights under data protection law.

1. Who is responsible for your personal data?

For the purposes of the General Data Protection Regulation, “Data controllers” are the people who, or organizations which, determine the purposes for which, and the manner in which, any personal data is processed. In particular, we have appointed a Data Protection Officer (“DPO”) within KFDF to monitor compliance with our data protection obligations and with this Privacy Statement and related policies. If you have any questions about this policy or about our data protection compliance please contact us.


2. What personal data do we collect?

“Personal data” means any information relating to an identified or identifiable natural person. We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

Identity Data: includes first name, last name, tax identity number and title.

* Contact Data: includes correspondence address and any billing address, email address and telephone numbers. 

* Financial Data: includes bank account and tax clearance details

* Career Data: includes relevant education and past work experience

* Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.

* Profile Data: includes your username and password

* Usage Data: includes information about how you use our website and services.

* Marketing and Communications Data: includes your preferences in receiving marketing from us and your communication preferences.

* Image Data: includes your image captured by CCTV.


3. How do we collect your personal data?

We collect your personal data as follows:

* Direct interactions. You may give us your Identity and Contact data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:

    - Make an enquiry with regard to our services

    - Register on our on-line application system or our website;

    - Make an application, either on-line or on hard copy;

    - Enter into a contract with us;

    - Request payment for services provided;

    - Leave a message with a member of our staff;

    - Submit an FOI or Data Access Request application; (FOI - Freedom of Information)

    - Request marketing to be sent to you; or

    - Sign up to our newsletter.

* Automated technologies or interactions. As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies.

* Third parties or publicly available sources. We may receive personal data about you, (your IP Address only) from analytics providers such as Google based outside the East African Region;

* Identity and Contact Data from publicly availably sources.


4. For what purposes do we process your personal data and what is our legal basis?


We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so.

Lawful basis for processing

Type of data

Consent Processing is necessary for the performance of a contract


(a) Identity

(b) Contact

(c) Profile

(d) Marketing and Communications

(a) Identity

(b) Contact

(c) Marketing and Communications

To enter you onto our mailing lists where you have requested to be added

To manage our relationship with you which will include:


(a) Notifying you about changes to our terms or privacy policy


(b) Asking you to provide feedback or take a survey

To process your applications, contracts and payments

(a) Identity

(b) Contact

(c) Financial


To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)

To use data analytics to improve our website, services, marketing, customer relationships and experiences

To invite you to events relating to the agency and the Irish screen industries

To protect and secure property, employees and visitors from theft or harm in the form of CCTV

(a) Identity

(b) Contact

(c) (a) Identity

(b) Contact

(c) Profile

(d) Usage

(e) Marketing and Communications

(f) Technical

(a) Identity

(b) Contact

(c) Technical


To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you

(a) Technical

(b) Usage

(a) Identity

(b) Contact

(c) Marketing and Communications



Legitimate Interest

Legitimate Interest

a) Image

Where we rely on consent as a legal basis, you may withdraw consent at any time by contacting us. Withdrawal of consent shall be without effect to the lawfulness of processing based on consent before its withdrawal.

5. Do we share your personal data with anyone else?


We may share your personal data with the following parties in connection with our processing of your personal data:

To provide essential services and to fulfil contractual arrangements in providing our services

Third party Reason for sharing data

Third party 

Service providers handling your information on our behalf

Email service provider – Mail chimp

The service provider allows us to send you email communications and alerts us if you request to be removed from our mailing lists as well as allowing users to update and control their preferences.

On-line application service provider

We collect your personal data and retain backups on a third party provider’s server. Your personal data will be stored on their secure storage system which is then transferred to our secure server.

Backup Provider

We store our document management system on a local server. The encrypted backups are held off site.

External Readers & Assessors

The service providers are necessary to facilitate, where required, the assessment of projects.

External Coordinators & Trainers

The service providers are necessary to facilitate day to day coordination and training on courses.

Competent Authorities, including authorities regulating us

To comply with legal or regulatory obligations or requests

We require all third parties to enter into a data processing agreement with us which complies with our obligations. This agreement requires third parties to have appropriate security systems in place and only to use your personal data on our instructions and in accordance with data protection law.

6. Keeping your personal data secure


We take appropriate security measures against unlawful or unauthorized processing of personal data, and against the accidental loss of, or damage to, personal data. We limit access to your personal data to those employees, agents and other third parties who are required to have access to your personal data and where they have agreed that they are subject to a duty of confidentiality.

Video Camera Lens
bottom of page