Privacy Notice

Privacy Policy
Last updated: August 14, 2026

1. Controller
2. What Personal Data Do We Process?
3. Visiting Our Website and Technical Data
4. Contact Forms and Communications
5. Contracts and Provision of Services
6. Photography, Video and Audio Recordings
7. Portfolio and Published Work
8. Sharing Personal Data
9. Cookies and Similar Technologies
10. Google Services and Tracking
11. YouTube
12. Instagram und soziale Medien
13. International Data Transfers
14. Data Retention
15. Children and Minors
16. Your Data Protection Rights
17. Right to Lodge a Complaint
18. Data Security
19. Changes to This Privacy Policy
20. Contact
Legal Notice / Impressum

1. Controller

The controller responsible for the processing of personal data on this website and in connection with our business activities within the meaning of the EU General Data Protection Regulation (GDPR) is:
Joshua Alan Zermeno
StoryFramed Design
Tarostraße 3
04103 Leipzig
Germany
Email: storyframeddesign@gmail.com
Phone: +49 179 2492688
This Privacy Policy explains what personal data we process, why we process it, the legal basis for the processing, and the rights available to you under applicable data protection law.
We process personal data primarily in accordance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the German Telecommunications-Telemedia Data Protection Act (TDDDG).

2. What personal data do we process?

Depending on how you use our website or our services, we may process the following categories of personal data:

name and contact details, including email address and telephone number;
information submitted through our contact form or by email;
information relating to a requested or commissioned project;
event, scheduling, location and production information;
contractual, invoicing and business information;
technical information relating to your use of our website;
photographs, video and, where applicable, audio recordings;
other information you voluntarily provide to us in connection with a business relationship.

We generally collect only information that is necessary for the relevant purpose.
Special categories of personal data
We do not generally intend to specifically collect special categories of personal data within the meaning of Article 9 GDPR.
However, photographs or video recordings created as part of our services may, in certain circumstances, reveal characteristics that could constitute special categories of personal data. Such processing will only take place where an appropriate legal basis exists and where the processing is necessary or otherwise permitted for the relevant project.

3. Visiting our website and technical data

When you visit our website, certain technical information may be processed by the technical infrastructure used to operate the website. This may include:

IP address;
date and time of access;
browser type and version;
operating system;
device information;
language settings;
referring URL;
information relating to website use and security.

Our website is operated using Wix.com. Wix may process technical information that is necessary to provide, secure, maintain and technically operate our website.
Where we process technically necessary information on the basis of a legitimate interest, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable and technically reliable provision of our online services.
Where information is stored on or accessed from your device, we additionally comply with Section 25 TDDDG.

4. Contact forms and communications

If you contact us through our contact form, by email or by another means, we process the information you provide in order to respond to your request.
This may include your name, email address, telephone number and information relating to your proposed project.
Depending on the circumstances, the processing is based on:

Article 6(1)(b) GDPR where the request relates to taking steps prior to entering into a contract;
Article 6(1)(f) GDPR where we process information to handle general business enquiries;
Article 6(1)(c) GDPR where processing is necessary to comply with a legal obligation.

Our legitimate interest includes efficiently handling enquiries, communicating with prospective and existing clients, and organising our business activities.

5. Contracts and provision of services

If you commission our photography, video, design or other creative services, we process the personal data necessary to perform the relevant contract.
This may include:

contact information;
contractual and project information;
scheduling and location information;
production requirements;
invoicing and payment information;
photographs, video and audio recordings created as part of the project.

Where necessary, processing is based on Article 6(1)(b) GDPR for the performance of the contract.
Where statutory retention or documentation obligations apply, processing may additionally be based on Article 6(1)(c) GDPR.

6. Photography, video and audio recordings

As part of our services, we may create photographs, video recordings and, where applicable, audio recordings in which clients, employees, event participants or other individuals may be identifiable.
Creation and performance of the project
The recordings are initially processed for the creation, editing and delivery of the services agreed under the relevant project.
Where the individual is themselves a party to the relevant contract, processing may be based on Article 6(1)(b) GDPR.
Where recordings concern other individuals, the appropriate legal basis will depend on the circumstances of the project and the specific processing purpose.
Portfolio and self-promotion
The fact that an image was created as part of a client project does not automatically mean that we may publish it for our own promotional purposes.
Publication of photographs, videos or audio recordings on our website, social media channels, YouTube, presentations or other promotional channels will only take place where an appropriate legal basis exists.
This may include valid consent or an appropriate contractual agreement.
Where consent is the legal basis, it may be withdrawn at any time with effect for the future.

7. Portfolio and published work

We may present selected completed projects on our website and through our own communication channels in order to demonstrate our creative work and professional portfolio.
Personal data will only be published where an appropriate legal basis exists.
Where publication is based on consent, that consent may be withdrawn at any time with effect for the future.
Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Where a person validly objects to continued publication or withdraws consent and no other legal basis for publication exists, the relevant content will be removed from our own publication channels within a reasonable period.

8. Sharing personal data

We do not sell personal data.
We may share personal data where this is necessary for the relevant purpose and legally permitted.
Wix
Our website is operated using Wix. Wix may process personal data as a technical service provider and/or processor where necessary to operate and provide our website.
Wix provides a Data Processing Agreement for its users and publishes information about its subprocessors.
Creative service providers and production partners
For photography, video or design projects, we may provide relevant personal data to production partners where necessary to complete the project, including:

second shooters;
assistants;
videographers;
editors;
retouchers;
motion designers;
other project-specific service providers.

Information will only be shared where necessary for the relevant project and where legally permitted.
Legal obligations
We may also disclose personal data where required by law or where disclosure is necessary to establish, exercise or defend legal claims.

9. Cookies and similar technologies

Our website uses cookies and similar technologies.
We distinguish between technologies that are technically necessary and technologies that are not strictly necessary.
Technically necessary technologies
Technically necessary cookies or similar technologies may be used where they are required to provide a website or functionality expressly requested by you, maintain website security, or store your privacy preferences.
Under Section 25(2) TDDDG, consent is not required in the circumstances specified by that provision.
Where the resulting processing involves personal data, the applicable GDPR legal basis will also apply, including Article 6(1)(f) GDPR where our legitimate interest provides the legal basis.
Analytics, marketing and other non-essential technologies
Non-essential cookies and similar technologies will only be used after your prior consent where consent is required under Section 25 TDDDG.
We use Usercentrics as a consent-management solution.
You can change or withdraw your consent at any time through the privacy settings provided on our website.
Withdrawal applies to future processing. It does not affect the lawfulness of processing carried out before withdrawal.
The specific cookies and services currently used on our website are reflected in the available settings of our consent-management system.

10. Google services and tracking

Where Google services or other analytics or tracking technologies are used on our website, they are handled according to their specific functionality and processing purpose through our consent-management system.
Where consent is required under Section 25 TDDDG for storing or accessing information on your device, the relevant technology will only be activated after consent has been obtained.
Depending on the specific service and purpose, subsequent processing of personal data may be based on your consent under Article 6(1)(a) GDPR or another applicable legal basis where legally permitted.
We do not use legitimate interest under Article 6(1)(f) GDPR as a blanket legal basis for all Google or tracking technologies.

11. YouTube

We operate a YouTube channel where we publish content relating to photography, video production, design and related creative subjects.
Our website may contain links to our YouTube channel.
Simply providing an external link to YouTube does not embed YouTube content on our website. You leave our website and access the YouTube platform only when you click the link.
When you use YouTube, Google and/or YouTube may process personal data. This may include your IP address, device and browser information, and information about your use of and interaction with YouTube content.
Google generally processes such information under its own responsibility.
Further information can be found in Google's Privacy Policy:
https://policies.google.com/privacy?hl=en

12. Instagram and Social Media

We operate an Instagram profile through which we publish content relating to photography, video production, design and related creative subjects.

Our website may contain an external link to our Instagram profile. Simply providing an external link to Instagram does not embed Instagram content on our website. You leave our website and access the Instagram platform only when you click the link.

When you use Instagram, personal data may be processed by Meta Platforms Ireland Limited and/or affiliated companies. This may include information about your device, IP address, and your use of and interaction with Instagram content.

The processing of personal data on the Instagram platform is generally carried out under Meta's own responsibility.

Further information about how Meta processes personal data can be found in Meta's Privacy Policy:

https://privacycenter.instagram.com/policy/

If you contact us through Instagram, the information you provide, including messages, comments or other communications, may be processed by us for the purpose of handling your enquiry. The principles described in the “Contact Forms and Communications” section of this Privacy Policy apply to such processing.

13. International data transfers

Because we use Wix to operate our website, personal data may be processed outside the European Union or European Economic Area.
Wix states that personal data may be processed worldwide through different Wix entities and subprocessors, including in the United States, Europe and other jurisdictions.
According to Wix, transfers to third countries may rely on appropriate safeguards depending on the specific transfer, including adequacy decisions, Standard Contractual Clauses and additional technical, contractual and organisational safeguards.
Further information is available in Wix's current privacy documentation and Data Processing Agreement.

14. Data retention

We retain personal data only for as long as necessary for the relevant processing purpose or where statutory retention obligations apply.
Contact and enquiry data
Contact and enquiry data is retained for as long as necessary to process the enquiry. Where no business relationship results and there is no legal or other legitimate reason for continued retention, the information will be deleted when it is no longer required.
Contractual and invoicing information
Contractual, invoicing and other business records are retained in accordance with applicable statutory retention requirements.
Photography, video and production data
Production data is retained according to contractual arrangements and the requirements of project delivery, future delivery and, where applicable, archiving.
Portfolio content
Portfolio content remains publicly available for as long as an appropriate legal basis exists for its publication.
Information contained in technical backups may remain for longer periods. Such information is protected, is not ordinarily used for other purposes, and is removed as part of the normal backup deletion cycle.

15. Children and minors

Our website is intended for a general audience. We do not knowingly collect personal data from minors specifically for marketing purposes.
As part of our photography and video services, recordings may include minors, for example at family events, celebrations or other productions.
The appropriate legal basis and, where required, consent from a parent or legal guardian will be considered depending on the specific project and processing purpose.

16. Your data protection rights

Subject to the applicable legal requirements, you have the following rights:

Right of access under Article 15 GDPR;
Right to rectification under Article 16 GDPR;
Right to erasure under Article 17 GDPR;
Right to restriction of processing under Article 18 GDPR;
Right to data portability under Article 20 GDPR;
Right to object under Article 21 GDPR, particularly where processing is based on Article 6(1)(e) or 6(1)(f) GDPR;
Right to withdraw consent with effect for the future where processing is based on your consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
You may exercise your rights by contacting us using the contact details provided above.
Where necessary, we may request reasonable information to verify your identity before disclosing personal data, in order to prevent unauthorised disclosure to third parties.

17. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that your personal data is being processed unlawfully.
For our place of business in Leipzig, the relevant supervisory authority is:
Sächsischer Datenschutz- und Transparenzbeauftragter
Devrientstraße 5
01067 Dresden
Germany
Website: https://www.datenschutz.sachsen.de/
You may also contact another competent data protection supervisory authority.

18. Data security

We implement appropriate technical and organisational measures designed to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.
Our website is operated using Wix and is generally provided through an encrypted HTTPS connection.
However, no transmission of information over the Internet can be guaranteed to be completely secure.

19. Changes to this Privacy Policy

We may update this Privacy Policy where our services, technologies or legal requirements change.
The current version will be published on this website and identified by the date of the latest update.
Last updated: August 14, 2026

20. Contact

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact:
Joshua Alan Zermeno – StoryFramed Design
Email: storyframeddesign@gmail.com
Phone: +49 179 2492688
Legal Notice / Impressum
Information pursuant to Section 5 DDG
Joshua Alan Zermeno
StoryFramed Design
Tarostraße 3
04103 Leipzig
Germany
Contact
Email: storyframeddesign@gmail.com
Phone: +49 179 2492688
VAT Identification Number
VAT identification number pursuant to Section 27a German VAT Act (UStG):
DE 462205361
© 2026 StoryFramed Design

Privacy Notice

name and contact details, including email address and telephone number;

information submitted through our contact form or by email;

information relating to a requested or commissioned project;

event, scheduling, location and production information;

contractual, invoicing and business information;

technical information relating to your use of our website;

photographs, video and, where applicable, audio recordings;

other information you voluntarily provide to us in connection with a business relationship.

IP address;

date and time of access;

browser type and version;

operating system;

device information;

language settings;

referring URL;

information relating to website use and security.

Article 6(1)(b) GDPR where the request relates to taking steps prior to entering into a contract;

Article 6(1)(f) GDPR where we process information to handle general business enquiries;

Article 6(1)(c) GDPR where processing is necessary to comply with a legal obligation.

contact information;

contractual and project information;

scheduling and location information;

production requirements;

invoicing and payment information;

photographs, video and audio recordings created as part of the project.

second shooters;

assistants;

videographers;

editors;

retouchers;

motion designers;

other project-specific service providers.

12. Instagram and Social Media

Right of access under Article 15 GDPR;

Right to rectification under Article 16 GDPR;

Right to erasure under Article 17 GDPR;

Right to restriction of processing under Article 18 GDPR;

Right to data portability under Article 20 GDPR;

Right to object under Article 21 GDPR, particularly where processing is based on Article 6(1)(e) or 6(1)(f) GDPR;

Right to withdraw consent with effect for the future where processing is based on your consent.