Privacy policy
This text is not final. Everything shown in square brackets is a placeholder for details the studio has yet to confirm, and the page is kept out of search results until they are filled in.
Who is responsible
[Name or business name of the controller] [Postal address] [Email address for data protection enquiries] [Data protection officer, or a note that none is appointed because the conditions do not apply]
When you write through the contact form
The form stores your name, your email address and the message itself, so that the studio can read it and reply. The legal basis is Art. 6 (1) (b) GDPR where the message concerns a possible purchase, and Art. 6 (1) (f) GDPR otherwise — answering enquiries is the studio's legitimate interest.
Your IP address is not stored. What is stored is a keyed hash of it, which cannot be turned back into an address, and it is used for one purpose only: to limit how many messages can be sent from one place in an hour. Without it the form would be an open door for spam.
Messages are kept for [retention period] and then deleted.
When you open a page
The site is hosted by [hosting provider, company and country]. Like any web server, it records the request itself — address of the page, IP address, time, browser — for [retention period of the server logs]. The legal basis is Art. 6 (1) (f) GDPR: without those records the site cannot be kept running or defended against attacks.
Images are delivered from [image storage and delivery provider].
When you play a video
Nothing is requested from YouTube while you are simply looking at the Videos page: the player is not loaded, and neither are thumbnails from Google's servers. Only when you press play is the player loaded from youtube-nocookie.com, and from that moment YouTube — Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland — receives your IP address and information about your browser. That happens because you asked for the video, and not before.
Cookies, analytics and tracking
There are none. This site sets no cookies, runs no analytics, embeds no advertising and stores nothing in your browser. That is also why you are not asked to agree to any of it.
Who else sees the data
Messages are read by the studio. Beyond the providers named above, the data is not passed on, sold or used for anything else. [Any further processors — for example an email provider — with the country they operate in]
Your rights
You can ask what is stored about you (Art. 15 GDPR), have it corrected (Art. 16), deleted (Art. 17) or restricted (Art. 18), receive it in a portable form (Art. 20), and object to processing based on legitimate interest (Art. 21). Write to [email address for data protection enquiries] and the studio will answer.
You can also complain to a supervisory authority — the competent one is [supervisory authority of the federal state of the controller].
No decisions about you are made automatically, and there is no profiling.