Privacy Policy - Datenschutz

Privacy Policy - Datenschutz

Privacy Policy

Last updated: August 17, 2026

1. Overview

This privacy policy explains how I, Adriana Berroteran, collect and process personal data when you visit my professional portfolio website www.adrianaberroteran.com.

About This Website:

This website serves as my professional portfolio as a Director of Photography, showcasing cinematographic work from various film and video productions.

Data Controller:

Adriana Berroteran

Maybachufer 1

12047 Berlin, Germany

Email: adriana.berroteran@gmail.com

Phone: +49 15115833163

2. What Data I Collect

Data You Provide

Information you submit through contact forms (name, email, message)

Automatically Collected Data

When you visit this website, the following technical data is automatically collected:

- IP address

- Browser type and version

- Operating system

- Date and time of access

- Pages visited

This data is necessary for the website to function properly and is processed based on my legitimate interest (Art. 6 para. 1 lit. f GDPR).

3. How I Use Your Data

Your data is used to:

- Ensure the website functions properly

- Respond to your inquiries about my cinematography services

- Analyze website usage for improvements

- Process any business inquiries, collaboration requests, or service contracts

Legal basis: Legitimate interest (Art. 6 para. 1 lit. f GDPR) and contract fulfillment (Art. 6 para. 1 lit. b GDPR).

4. Website Hosting

This website is hosted by Framer (https://www.framer.com).

Framer stores the data collected on this website on their servers. This is necessary to provide a secure and reliable website (Art. 6 para. 1 lit. f GDPR).

Framer processes data only as required to fulfill hosting services and follows my instructions.

5. Cookies and Tracking

What Are Cookies?

Cookies are small text files stored on your device that help the website function.

Cookies Used on This Website

This website uses:

- Technically necessary cookies: Required for basic website functions (Art. 6 para. 1 lit. f GDPR)

- Analysis cookies: Only with your consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG)

You can configure your browser to reject cookies, but this may limit website functionality. You can withdraw consent at any time.

6. Third-Party Services

Instagram

This website includes Instagram content from Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland).

When you interact with Instagram content, a connection to Instagram servers is established. Instagram may collect:

- Your IP address

- Information about your visit

- Your Instagram profile data (if logged in)

Legal basis: Your consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG).

Data transfer to USA: Based on EU Standard Contractual Clauses and EU-US Data Privacy Framework certification.

More information: https://privacycenter.instagram.com/policy/

YouTube (Enhanced Privacy Mode)

This website embeds YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

I use YouTube's enhanced privacy mode, which means:

- Videos don't track you until you play them

- No cookies are set initially

- Local storage elements may be saved in your browser

Legal basis: Legitimate interest (Art. 6 para. 1 lit. f GDPR) for attractive content presentation, or your consent if requested (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG).

Data transfer to USA: EU-US Data Privacy Framework certified.

More information: https://policies.google.com/privacy

Vimeo

This website embeds Vimeo videos from Vimeo Inc. (555 West 18th Street, New York, NY 10011, USA).

When you visit pages with Vimeo videos:

A connection to Vimeo servers is established

Vimeo receives your IP address

Vimeo uses cookies or similar tracking technologies

Legal basis: Legitimate interest (Art. 6 para. 1 lit. f GDPR) for attractive content presentation, or your consent if requested (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG).

Data transfer to USA: Based on EU Standard Contractual Clauses and EU-US Data Privacy Framework certification.

More information: https://vimeo.com/privacy

7. How Long I Keep Your Data

I store your personal data only as long as necessary for the purposes stated above. Specifically:

- Contact form data: Until your inquiry is resolved, then deleted

- Technical logs: Typically 7-30 days

- Legal obligations: Some data may be retained longer due to tax or commercial retention requirements (up to 10 years)

8. Your Rights Under GDPR

You have the right to:

- Access: Request information about what personal data I store about you

- Correction: Request correction of inaccurate data

- Deletion: Request deletion of your data (subject to legal retention requirements)

- Restriction: Request limitation of data processing

- Data portability: Receive your data in a machine-readable format

- Objection: Object to data processing based on legitimate interest (Art. 21 GDPR)

- Withdraw consent: Withdraw any consent you've given at any time (does not affect prior processing)

- Complaint: Lodge a complaint with a supervisory authority

To exercise your rights, contact me at: adriana.berroteran@gmail.com

Supervisory authority in Berlin:

Berliner Beauftragte für Datenschutz und Informationsfreiheit

https://www.datenschutz-berlin.de

9. Data Security

I use technical and organizational security measures to protect your data from unauthorized access, loss, or manipulation. However, no internet transmission is completely secure. Data transmission (e.g., via email) may have security vulnerabilities.

10. No Unsolicited Advertising

Use of contact information published in this privacy policy or Impressum to send unsolicited advertising is expressly prohibited. I reserve the right to take legal action against senders of spam or unsolicited promotional emails.

11. Changes to This Privacy Policy

I may update this privacy policy to reflect changes in my practices or legal requirements. The "Last updated" date at the top indicates when changes were made.

Note: This privacy policy complies with the EU General Data Protection Regulation (GDPR), German Federal Data Protection Act (BDSG), and the German Telecommunications Telemedia Data Protection Act (TDDDG, effective May 2024).

Questions? Contact me at adriana.berroteran@gmail.com