Privacy policy
We take the protection of personal data seriously — that of our clients and website visitors, and that of every person who appears in front of our cameras. This policy explains what we process, why, and what rights you have under the EU General Data Protection Regulation (GDPR).
1. Who is responsible
Controller for the processing described here is Videomoon, reachable at hello@videomoon.de. Full company details are available on request at the same address.
2. Visiting the website
The website is hosted by Netlify, Inc. (USA). When you visit it, the server automatically records technical data in log files: IP address, date and time, requested page, referrer, browser and operating system. This is necessary to deliver the website and keep it secure (Art. 6(1)(f) GDPR). Netlify processes this data on our behalf; transfers to the USA are covered by the EU–US Data Privacy Framework and/or the EU Standard Contractual Clauses. Logs are kept only as long as needed for these purposes.
We use no analytics, no advertising pixels and no tracking cookies.
3. Fonts and Google services
To display our typefaces and to prepare the optional sign-in for briefs, the website loads Google Fonts and the Google Identity Services script from servers of Google LLC (USA) / Google Ireland Ltd. In doing so your browser transmits your IP address to Google. Legal basis: our legitimate interest in a consistent, functional presentation (Art. 6(1)(f) GDPR). Transfers are covered by the EU–US Data Privacy Framework. See Google's privacy policy at policies.google.com/privacy.
4. Estimates and briefs
The online configurator calculates your estimate entirely in your browser; your answers are not sent to us. When you send a brief or e-mail us, we receive the data you provide — typically name, company, e-mail, phone number and project details. We use it to answer your request, prepare a quote and carry out the production (Art. 6(1)(b) GDPR). We keep it for as long as the business relationship requires and as statutory retention periods (e.g. for tax and accounting records) oblige us.
5. People in our footage
We film and photograph performers, models, interviewees and event guests. For everyone we cast, we obtain a signed release that defines how their image and voice may be used; for minors, consent is given by a parent or legal guardian. Releases, together with the associated camera originals and their metadata, are stored securely and access is restricted to people who need it. At events, we film on behalf of the organiser and on the basis of their and our legitimate interest in documenting the event (Art. 6(1)(f) GDPR); guests can object at any time on site or by e-mail.
6. Recipients
We share personal data only where needed: with service providers who work on our behalf (hosting, e-mail, secure file transfer, accounting) under data processing agreements, with the client for whom a production is made, with licensees within the scope of a written licence and the releases given, and with authorities where the law requires it. We never sell personal data of website visitors or clients.
7. Security
Files are transferred over encrypted connections and stored on access-controlled systems. Confidential client material, prototypes and NDA footage are handled only by the named crew of the respective production.
8. Your rights
You have the right to access your data, to rectification, erasure and restriction of processing, to data portability, and to object to processing based on legitimate interests (Art. 15–21 GDPR). Where processing is based on consent, you can withdraw it at any time with effect for the future. To exercise your rights, write to hello@videomoon.de. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence or place of work.
9. Changes
We update this policy when our services or legal requirements change. The version published on this page applies.