Privacy Policy

At Krishyam Production, we respect your privacy and are committed to handling personal data responsibly.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have when you visit our website, contact us, enquire about our services or work with us.

We aim to process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection law.

The data controller responsible for processing personal data is:

• Business name / legal entity: Krishyam Production
• Email: krishyamproduction@gmail.com
• Website: https://krishyam-production.de

Depending on how you interact with our website and services, we may process the following categories of personal data:

Contact information

• Name
• Email address
• Telephone number, if provided
• Business or organisation details, if relevant

Project and booking information

• Project type and description
• Preferred dates and locations
• Event details and creative requirements
• Information provided in messages, quotations and booking forms
• Relevant correspondence and contractual information

Payment and invoicing information

• Billing name and address
• Invoice details
• Payment status and transaction references

Payment card details are processed by the relevant payment provider where applicable. We do not intentionally collect full payment card credentials through ordinary website inquiry forms.

Website and technical information

Depending on the website configuration, we may process IP addresses, browser and device information, access timestamps, server logs and technical information required to operate and secure the website.

Photographs and videos

When providing our services, we may capture photographs and video footage containing identifiable individuals. Such material may constitute personal data under applicable law.

We may process personal data for the following purposes:

• Responding to enquiries and messages
• Preparing quotations and proposals
• Managing bookings and contracts
• Planning and delivering photography and videography services
• Communicating about projects and delivery
• Processing invoices and payments
• Meeting applicable legal and accounting obligations
• Protecting our website, systems and business against misuse
• Managing client requests and exercising or defending legal claims
• Sending marketing communications where legally permitted
• Displaying portfolio images or promotional content where an appropriate legal basis exists

We do not use personal data for purposes incompatible with the original purpose of collection without an appropriate legal basis.

Under Article 6 GDPR, we rely on the legal basis applicable to each processing activity.

Depending on the circumstances, these may include:

Contractual necessity — Article 6(1)(b) GDPR

Processing necessary to respond to certain pre-contractual requests, prepare a booking or perform a contract with you.

Legal obligations — Article 6(1)(c) GDPR

Processing necessary to comply with applicable legal obligations, including relevant accounting and tax requirements.

Legitimate interests — Article 6(1)(f) GDPR

Processing necessary for legitimate interests, such as securing our website, managing business correspondence or establishing and defending legal claims, where those interests are not overridden by your rights.

Consent — Article 6(1)(a) GDPR

Processing based on your freely given consent, where consent is the appropriate legal basis, such as certain marketing activities, optional cookies or specific uses of photographs.

Where consent is used, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

The appropriate legal basis depends on the specific activity and circumstances.

Our photography and videography services may involve capturing identifiable individuals.

The purposes for which images are used depend on the project and the applicable agreement.

Client delivery: We process project images to fulfil the agreed photography or videography service.

Portfolio and promotion: We may wish to display selected work on our website, social media channels, portfolios or promotional materials. We will establish an appropriate legal basis and obtain any necessary permissions before doing so.

Events: Event photography may involve capturing attendees, speakers, performers and other participants. We will address applicable information, consent and other legal requirements according to the event and the intended use of the images.

If you have a question or concern about an identifiable image, contact us using the details provided in this policy. We will assess your request in light of the applicable legal requirements, existing permissions and the rights of other individuals.

Our website may use cookies or similar technologies.

Strictly necessary technologies may be used where required to provide the website or a service you request.

Analytics, advertising or other non-essential technologies will be used only where the applicable legal requirements are met, including obtaining consent where required.

You can manage available cookie preferences through the website's cookie settings, if provided.

The specific cookies and technologies used depend on the website's actual configuration.

Our website is hosted by Vercel, a third-party hosting provider.

When you access the website, technical information may be processed to deliver pages, maintain system security, diagnose errors and prevent abuse.

When you contact us through a website form or by email, we process the information you provide to respond to your enquiry and, where applicable, prepare or manage a project.

We retain this information only for as long as necessary for the relevant purpose, subject to applicable legal retention requirements and legitimate needs to establish or defend legal claims.

Please avoid including unnecessary sensitive personal information in general enquiry forms.

If you book our services, we may process information required to prepare invoices, record payments and meet legal obligations.

If third-party payment services are used, those providers may process personal data under their own applicable privacy terms.

We may use service providers to support our business, including website hosting (Vercel), email, cloud storage, online galleries, invoicing, payments and project management.

Such providers may process personal data on our behalf or act as independent controllers, depending on the service and circumstances.

Where GDPR Article 28 applies, appropriate data processing agreements will be maintained. We will use suitable safeguards for international transfers where required.

We do not sell personal data.

We may disclose personal data where necessary to:

• Service providers supporting our operations
• Professional advisers, such as accountants or legal advisers
• Authorities or other parties where required by law
• Parties involved in establishing, exercising or defending legal claims

We share only the information appropriate to the relevant purpose and subject to applicable legal requirements.

Some service providers may process personal data outside the European Economic Area.

Where personal data is transferred internationally, we will assess the applicable requirements and implement appropriate safeguards where required by GDPR Chapter V.

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.

Retention periods may differ depending on the type of data:

• Enquiries: for the time needed to respond and manage follow-up
• Client and contract records: for the duration of the relationship and any relevant legal limitation period
• Accounting and tax records: for the applicable statutory retention period
• Photographs and project files: according to the project agreement and our documented retention practices
• Technical logs: according to security, operational and hosting requirements

Where data is no longer required, it will be deleted or anonymised where appropriate and technically feasible.

Subject to the applicable legal conditions, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request erasure of personal data
• Request restriction of processing
• Receive certain data in a portable format
• Object to processing based on legitimate interests
• Withdraw consent where processing is based on consent
• Lodge a complaint with a competent data protection supervisory authority

To exercise your rights, contact us using the contact details in Section 2.

We may need to verify your identity before responding. Some requests may be subject to legal exceptions or limitations.

If you believe that our processing of your personal data violates applicable data protection law, you may lodge a complaint with a competent data protection supervisory authority.

If our establishment is in Berlin, the Berlin Commissioner for Data Protection and Freedom of Information may be a relevant authority:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Website: https://www.datenschutz-berlin.de/

The competent authority may depend on the circumstances of the processing.

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure.

Measures may include access restrictions, secure accounts, appropriate storage practices and limiting access to information to people who need it for legitimate business purposes.

No method of transmission or storage can be guaranteed to be completely secure.

Our services and website are not intentionally designed to collect children's personal data through general enquiry forms.

Where photography or videography involves children, we will consider applicable legal requirements and obtain any necessary authorisations or permissions for the relevant processing and use.

We may update this Privacy Policy when our services, website technology, data processing practices or legal obligations change.

The latest version will be published on this page with its updated revision date.

For questions about this Privacy Policy or the processing of your personal data, contact:

Krishyam Production
Email: krishyamproduction@gmail.com

Last updated: 16 October 2026