Privacy Policy

Your privacy matters. This Privacy Policy explains how Palafilm collects, uses and protects your personal data when you visit https://palafilm.com or contact us through our forms or email.

1. Who We Are

Palafilm is a creative and film production company based in Romania. Email: [email protected]
Website: https://palafilm.com

2. What Personal Data We Collect

We collect only essential data to respond to inquiries, improve the website, and provide production services.

2.1 Data you provide voluntarily

Name and email address (contact forms)
Message content and attachments you send
Professional information when requesting pitches, EPKs or collaborations

2.2 Data collected automatically

IP address, device type, browser and OS
Pages visited, time spent on pages, referring sources
Geolocation (approximate region, not exact address)
Cookie preferences and analytics data

2.3 Cookies & tracking technologies

We use cookies for:

Website performance
Security and spam filtering (e.g., reCAPTCHA)
Analytics (Google Analytics / site statistics)

For details, see our Cookies Policy.

3. Why We Process Your Data

We process personal data only for legitimate purposes:

To respond to contact requests and professional inquiries
To offer production services and follow-up communication
To send EPKs, pitch decks or project materials on request
To improve website performance and user experience
To ensure website security and prevent spam or attacks

4. Legal Basis for Processing (GDPR)

Consent – when you submit forms or accept cookies
Legitimate interest – to operate and secure the website
Contractual necessity – when we discuss or sign agreements

5. How Long We Store Data

We retain data only as long as necessary:

Contact form data: up to 24 months
Emails: according to legal archiving obligations
Analytics data: 14 months by default (Google Analytics)
Cookies: according to their individual expiration periods

6. Who We Share Your Data With

We do not sell or rent your data. Limited sharing may occur with:

Web hosting provider (server operations)
Email service providers
Analytics providers (Google Analytics)
Security tools (anti-spam, firewall, reCAPTCHA)

All partners comply with GDPR or industry-standard data protection rules.

7. International Data Transfers

If certain partners or tools store data outside the EU (e.g., Google), transfers follow GDPR rules (Standard Contractual Clauses, adequacy decisions).