PRIVACY POLICY

Effective date: 29 August 2026

1. Controller
The controller responsible for processing personal data in connection with this website is:
Afterimage GmbH
Frank-Zappa-Straße 11
12681 Berlin
Germany
Managing Director: Nuno Rebelo
Telephone: +49 177 9353670
Email: mail@afterimage.pictures
No data protection officer has been appointed, as Afterimage GmbH is currently not legally required to appoint one.

2. General Information
Personal data means any information relating to an identified or identifiable natural person.
We process personal data only where this is necessary to operate this website, respond to communications, fulfil contractual or legal obligations, protect our legitimate interests, or where you have provided valid consent.
The relevant legal bases are, in particular:
Article 6(1)(a) GDPR for processing based on consent;
Article 6(1)(b) GDPR for processing required to take steps prior to entering into a contract or to perform a contract;
Article 6(1)(c) GDPR for processing required by law; and
Article 6(1)(f) GDPR for processing based on our legitimate interests.

3. Website Hosting and Wix
This website is created and hosted using services provided by Wix.com Ltd., 5 Yunitsman Street, Tel Aviv, Israel, together with Wix group companies and technical sub-processors.
When you access this website, technical data may be processed automatically. This may include:
IP address;
date and time of access;
requested page or file;
referring website;
browser type and version;
operating system;
device type;
language settings;
internet service provider;
access status and transferred data volume; and
technical security and error information.
This processing is necessary to display the website, ensure its stability and security, prevent misuse and investigate technical problems.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the secure, reliable and efficient operation of our website and the protection of our systems.
Wix may process data in Israel and may engage group companies or sub-processors located in other countries. The European Commission has adopted an adequacy decision for Israel. Where data is transferred to a country without an applicable adequacy decision, the transfer must be protected by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.
Further information is available in the Wix Privacy Policy.
Technical log data is retained only for as long as reasonably necessary to operate and secure the website, investigate incidents and comply with legal obligations. It may be retained for a longer period where necessary to establish, exercise or defend legal claims.

4. Technically Necessary Cookies
Wix uses technically necessary cookies and comparable technologies to provide, secure and stabilise this website.
Depending on the technical configuration, these may include:
Cookie
Purpose
Typical duration

XSRF-TOKEN
Fraud prevention and protection against unauthorised requests
Session

hs
Website security
Session

svSession
Security, stability and essential website functionality
Up to 12 months

SSR-caching
Rendering and delivery of website content
Approximately 24 hours

TS*
Detection and prevention of attacks
Session

bSession
Technical system-effectiveness measurement
Approximately 24 hours

fedops.logger.sessionId
Detection of technical errors and service resilience
Up to 12 months

`_wixAB3
*`
Technical platform testing and stability
Up to 6 months
server-session-bind
Protection of technical interfaces
Session

client-session-bind
Protection of technical interfaces
Session

wixSession
Security, stability and essential website functionality
Up to 12 months

The storage of or access to information on your device is based on Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG), insofar as the technology is strictly necessary to provide the website requested by you.
Any subsequent processing of personal data is based on Article 6(1)(f) GDPR. Our legitimate interest is the secure and technically reliable operation of the website.
You may configure your browser to block or delete cookies. Blocking technically necessary cookies may affect the functionality or availability of the website.
5. Analytics and Marketing Technologies
This website does not use Google Analytics, advertising pixels or comparable third-party analytics or marketing technologies.
No non-essential tracking technology is intended to be loaded without the visitor’s prior consent.
If analytics, marketing technologies or other non-essential services are introduced in the future, this Privacy Policy will be updated and an appropriate consent mechanism will be implemented before those services are activated.

6. Contact by Email or Telephone
If you contact us by email or telephone, we process the information you provide, which may include:
your name;
your email address or telephone number;
the date and content of your communication;
information regarding your company, project or professional role; and
any documents or other information you voluntarily provide.
Where your communication relates to a contract or a potential contract, processing is based on Article 6(1)(b) GDPR.
For general business enquiries, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is responding to enquiries, maintaining business communications and managing professional relationships.
Where processing is required to comply with statutory obligations, Article 6(1)(c) GDPR applies.
Communications are deleted when they are no longer required for their original purpose, unless statutory retention requirements, contractual documentation duties or legitimate interests in establishing, exercising or defending legal claims require longer storage. Business and contractual correspondence may therefore be retained for the applicable statutory retention period.
Our email and IT service providers may process information on our behalf. Once the provider used for mail@afterimage.pictures has been conclusively identified, this section should be reviewed and, if necessary, supplemented with that provider’s name and information regarding international data transfers.
Please do not send sensitive or confidential information by unencrypted email unless this is necessary and you accept the associated security risks.

7. External Links
This website contains links to websites operated by third parties, including industry and film-information platforms.
No personal data is transmitted to the operator merely because a normal text link appears on this website. When you click an external link, your browser establishes a direct connection with the relevant third-party website. The third party may then process your IP address and other technical data in accordance with its own privacy policy.
Afterimage GmbH does not control the data processing carried out by independently operated third-party websites.

8. Recipients of Personal Data
Personal data may be disclosed only where this is necessary and legally permitted. Potential recipients or categories of recipients include:
Wix and its technical sub-processors;
hosting, content-delivery, security and IT service providers;
the provider used for company email communications;
professional advisers, accountants or legal advisers where necessary;
public authorities where disclosure is required by law; and
other recipients where you have consented to the disclosure.
Service providers acting on our behalf are contractually required to process personal data only in accordance with our instructions and applicable data-protection law.

9. International Data Transfers
Some service providers or their sub-processors may process personal data outside the European Union or European Economic Area.
Where the recipient country is not covered by an adequacy decision of the European Commission, transfers will take place only where another lawful transfer mechanism is available, particularly Standard Contractual Clauses under Article 46 GDPR, supplemented by additional safeguards where required.
Information about applicable safeguards may be requested using the contact details stated above.

10. Retention
We retain personal data only for as long as necessary for the purpose for which it was collected.
In determining the appropriate retention period, we consider:
the purpose of the processing;
the nature and sensitivity of the information;
contractual requirements;
statutory retention obligations;
security requirements; and
applicable limitation periods and the need to establish, exercise or defend legal claims.
After the relevant retention period expires, personal data will be deleted or anonymised unless continued retention is legally required.

11. Your Rights
Subject to the requirements of applicable law, you have the right to:
request access to your personal data under Article 15 GDPR;
request rectification of inaccurate or incomplete data under Article 16 GDPR;
request erasure under Article 17 GDPR;
request restriction of processing under Article 18 GDPR;
receive data in a portable format under Article 20 GDPR;
object to processing based on Article 6(1)(e) or (f) GDPR under Article 21 GDPR; and
withdraw consent at any time with effect for the future under Article 7(3) GDPR.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, please contact:
mail@afterimage.pictures
We may request reasonable evidence of identity where this is necessary to protect personal data against unauthorised disclosure.

12. Right to Object
Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to that processing at any time on grounds relating to your particular situation.
We will cease processing the relevant personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is required to establish, exercise or defend legal claims.

13. Right to Lodge a Complaint
You have the right to lodge a complaint with a data-protection supervisory authority.
The supervisory authority responsible for Afterimage GmbH is:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Germany
Telephone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de
Website: www.datenschutz-berlin.de
You may also contact another supervisory authority, particularly the authority at your habitual residence or place of work.

14. Data Security
We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
This website uses encrypted HTTPS/TLS transmission. Nevertheless, no method of transmission or storage can guarantee absolute security.

15. Automated Decision-Making
We do not use personal data collected through this website for automated decision-making, including profiling, within the meaning of Article 22 GDPR.

16. Changes to This Privacy Policy
We may update this Privacy Policy where the website, the services used, our processing activities or applicable legal requirements change.
The current version will always be made available on this website.