Legal

Privacy Policy

This policy is a carefully prepared draft based on current GDPR and TTDSG requirements. It does not replace a legal review – please have it checked before going live, especially once a hosting provider or further services are finalized.

Data Controller

Denushan Sarves
Wilhelmstraße 56
59067 Hamm, Germany
Email: info@creative-move-production.eu

Hosting and Server Log Files

When you access this website, our hosting provider automatically collects technical data transmitted by your browser: IP address, date and time of the request, the page accessed, amount of data transferred, browser type and version, and the operating system used. This data serves the technical delivery of the site, its stability, and the defense against attacks, and is stored automatically in log files. The legal basis is our legitimate interest in secure and functional operation (Art. 6(1)(f) GDPR). The hosting provider and the exact retention period of the logs will be added here once hosting is finalized.

Contact Form

When you send us a request via the contact form, we store the data you provide (name, email address, optionally a phone number, topic, message, and whether you would like a phone callback) as well as the IP address and time of the request, solely to process your inquiry and for any follow-up questions. The phone number and the callback request are voluntary and are only used if you provide them. We additionally check technically inconspicuous form submissions automatically for spam (hidden form field, minimum fill time) – no profiles are created about you in the process. The legal basis is the fulfillment of your request or the initiation of a contract (Art. 6(1)(b) GDPR) as well as our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR). Your data is deleted once it is no longer required for processing and no statutory retention obligations apply. The request is sent via our email provider Zoho Mail (Zoho Corporation, EU branch), which acts as our processor under a data processing agreement. Processing takes place via a European data center operated by Zoho, so no data is transferred to countries outside the EU or the EEA. Further information is available in Zoho's privacy policy: zoho.com/privacy.html.

Cookies and Local Storage

This website currently uses exclusively technically necessary cookies or browser storage – for example, to save your choice in the cookie banner. No consent is required for this (§25(2) TTDSG). No analytics or marketing cookies are currently in use. Should such non-essential cookies be added in the future, we will obtain your explicit consent in advance via the same cookie banner (Art. 6(1)(a) GDPR, §25(1) TTDSG); any consent already given can be withdrawn at any time with effect for the future.

Traffic Analysis (Cloudflare Web Analytics)

We use Cloudflare Web Analytics for anonymous traffic measurement (e.g. number of page views, approximate visitor numbers, pages visited, country of origin, device used). The service does not use cookies, does not create profiles of individual visitors, and does not store full IP addresses – it cannot be linked to a specific person. Since no personal data is processed in the sense of the TTDSG, no consent is required under §25(2) TTDSG; the legal basis is our legitimate interest in the statistical evaluation of how our website is used (Art. 6(1)(f) GDPR). The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, acting as our processor under a data processing agreement. As Cloudflare, Inc. is based in the US, processing partly takes place outside the EU/EEA; the transfer is safeguarded through the EU Standard Contractual Clauses and Cloudflare's participation in the EU-US Data Privacy Framework. Further information is available in Cloudflare's own privacy policy: cloudflare.com/privacypolicy.

Embedded Fonts

The fonts used on this site are bundled locally when the website is built and served directly from our own server. There is no connection to servers operated by Google or other font providers, so no data is transmitted to third parties.

SSL/TLS Encryption

For security reasons, this site uses SSL/TLS encryption for transmitting confidential content such as contact form submissions. You can recognize an encrypted connection by the “https://” prefix and the lock icon in your browser's address bar.

Data Security

We implement technical and organizational measures to protect your data against manipulation, loss, destruction, or unauthorized access. These include, among others, end-to-end encryption of data transmission (see above) as well as a careful selection and ongoing updating of the software we use. Since security is a core part of our own work, we continuously review and improve these measures in line with the current state of the art.

No Data Transfer to Third Countries

Hosting, fonts, and the contact form run on servers we operate ourselves or that are located within the EU/EEA; no personal data is transferred to countries outside the EU or the EEA for these. An exception is the anonymous usage statistics described under “Traffic Analysis” above, where a US provider processes technical, non-personal data based on the safeguards described there.

Retention Period

Unless a more specific retention period is stated in this policy, your personal data remains with us until the purpose for processing no longer applies. Statutory retention obligations (e.g. under commercial or tax law) remain unaffected.

Your Rights

You have the following rights: access to your stored data (Art. 15 GDPR), rectification of inaccurate data (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection to processing based on your particular situation (Art. 21 GDPR). Consent already given can be withdrawn at any time with effect for the future (Art. 7(3) GDPR). To exercise these rights, an informal message to the email address above is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR) – in particular the data protection authority of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, LDI NRW).

Changes to this Privacy Policy

We reserve the right to amend this privacy policy whenever the website, the services we use, or legal requirements change. The currently applicable version can always be found on this page.

Last Updated

October 2026.