This policy explains what personal data Mirjan Films collects through this website and in the course of our work, why, for how long, and what your rights are. It is written in plain language on purpose.

1. Who is responsible for your data

Mirjan Films, trading name of the sole proprietorship of Mirjan Gjergjevica
Commercial Centre Alepou, K12, 49150 Corfu, Greece
VAT no. (ΑΦΜ): 153507319 · General Commercial Registry (ΓΕΜΗ) no.: 189322533000
Email: info@mirjanfilms.com

For any privacy question or request, email info@mirjanfilms.com.

2. What we collect and why

Contact and enquiry form

When you send the form we receive: your name, email, phone (optional), the service you are interested in, event date and location (optional), your message and how you found us (optional). We use this only to answer you and prepare a quote.
Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in replying to messages (Art. 6(1)(f)).

The form is delivered by email to our mailbox. It is not stored in a database on the website and is never used for newsletters or advertising.

Clients

If you book us, we process the details needed to perform the agreement (names, contact details, event details, payments, invoices) and, naturally, the footage we film of you and your guests.
Legal basis: performance of a contract (Art. 6(1)(b)) and our legal obligations, e.g. tax and accounting law (Art. 6(1)(c)). Use of footage for our portfolio follows the Booking Terms; baptism footage is never published without your prior written approval, and you may object to any promotional use at any time.

Website technical data

When you visit, our hosting provider Cloudflare processes technical data such as your IP address, browser type, requested page and time, in order to deliver the site and protect it from attacks.
Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f)).

Spam protection

If enabled, the contact form uses Cloudflare Turnstile to tell humans from bots. Turnstile evaluates technical signals from your browser for this single purpose.
Legal basis: legitimate interest in protecting the form from abuse (Art. 6(1)(f)).

If you tap the WhatsApp button, WhatsApp (WhatsApp Ireland Ltd, part of Meta) opens and handles your message under its own privacy policy. Nothing is loaded from WhatsApp before you tap.
Legal basis: your request to contact us (Art. 6(1)(b)).

Visitor statistics

We may use Cloudflare Web Analytics, which counts visits in aggregate without cookies and without identifying you (Art. 6(1)(f)). We do not use Google Analytics or any advertising trackers.

Embedded videos

Our films are hosted on YouTube (Google Ireland Ltd). Nothing is loaded from them until you press play. When you do, the player loads from the provider (through YouTube’s privacy-enhanced youtube-nocookie.com domain), which receives your IP address and may store data on your device.
Legal basis: your own action, pressing play is your request to watch that film (Art. 6(1)(a) and (b)). If you prefer, you can watch the same films directly on YouTube.

3. Who receives your data

Cloudflare, Inc.: hosting, security, email routing and (if enabled) spam protection and cookieless statistics.
Google: our email inbox (Gmail), where form messages and emails arrive.
Notion Labs, Inc.: organising client bookings.
YouTube: only when you press play on a video.
WhatsApp (Meta): only if you choose to message us there.
Our accountant and public authorities: only where the law requires it (e.g. invoices).

We never sell your data and never share it for marketing.

4. Transfers outside the EU

Some of these providers are based in, or use servers in, the United States. Transfers rely on the EU–US Data Privacy Framework adequacy decision and/or the European Commission’s Standard Contractual Clauses.

5. How long we keep it

Enquiries that do not lead to a booking: up to 24 months, then deleted.
Client and invoicing data: for as long as the agreement lasts and afterwards for as long as tax and accounting law requires.
Footage: as described in the Booking Terms (we are not obliged to store files for more than one year after delivery).

6. Your rights

You can ask for access to your data, correction, deletion, restriction of processing, data portability, and you can object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time without affecting what was done before. Email info@mirjanfilms.com; we reply within one month.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), 1–3 Kifisias Ave., 115 23 Athens, www.dpa.gr.

7. Security

The site is served only over encrypted HTTPS. Footage and client files are stored on access-controlled systems with double backups. No method is 100% secure, but we take reasonable technical and organisational measures to protect your data.

8. Children

This website is not aimed at children under 15. Footage of minors (e.g. at baptisms) is handled under the agreement with their parents or guardians.

9. Changes

If our practices change, we will update this page and its date.

10. Cookies

This website sets no cookies of its own and has no cookie banner, because it uses no tracking and no advertising. Only two things are ever stored on your device, and only when you use them: the boxes you tick on the wedding checklist (kept in your browser’s local storage, which you can clear at any time) and, if spam protection is switched on, a short-lived Cloudflare security check on the contact form. When you press play on a video, YouTube may set its own cookies, see Google’s privacy policy.

11. Planning tools and private client pages

The free planning tools (timeline, quiz, countdown, weather, budget, save-the-date and map) run entirely in your browser. They set no cookies and save nothing. A photo you add to the save-the-date maker is never uploaded; the card is made on your device. The countdown page keeps your names and date only inside the link itself, after the “#” sign, which browsers do not send to the server. If you press “Send it to Mirjan” on the timeline, it goes through the contact form described above.

Clients receive a private page protected by a password. The page is stored only in encrypted form and is decrypted on your device; the password is not sent or stored, and no cookie is used. Answers you send from that page are e-mailed to me and not stored on the website. A private page stays online until about 18 months after the wedding, or earlier if you ask me to remove it.

Privacy Policy