Privacy Policy

1. Data Controller Identification

This Privacy Policy explains how personal data is collected, processed, and protected when you interact with kzvmedia.com ("Website").

The data controller responsible for the processing of your personal data under Regulation (EU) 2016/679 (General Data Protection Regulation — "GDPR") is:

2. Categories of Personal Data Collected

We adhere to data minimisation (Article 5(1)(c) GDPR). We collect only information required to communicate with prospective business partners and deliver requested digital production services:

• Commercial Inquiry Data: Your name, work email address, company or studio name, website or portfolio URL, market or location context, and any property descriptions you voluntarily submit through our contact form.
• Property Asset Information: Links to sample property photography or cloud folders (e.g. Dropbox, Google Drive) shared by you to assess production feasibility.
• Billing & Invoicing Records: Studio or business name, registered address, fiscal code / VAT identification, and transaction records when entering into an order or pilot engagement.
• Technical Server Logs: IP address, browser user-agent, operating system, and request timestamps, recorded automatically by server infrastructure strictly for security, rate-limiting, and anti-abuse defense.

3. Purposes & Legal Bases for Processing

Under Article 6(1) of the GDPR, personal data is processed under the following legitimate legal bases:

Processing Purpose	Data Categories	Legal Basis (GDPR)
Responding to pilot inquiries, evaluating property photography fit, and B2B communication	Name, work email, studio name, website, market, message	Article 6(1)(b) GDPR: Steps taken at the request of the data subject prior to entering into a contract.
Producing and delivering vertical property reels, coordinating revisions, and order fulfillment	Contact details, asset links, delivery instructions	Article 6(1)(b) GDPR: Performance of a contract to which the data subject is party.
Statutory accounting, commercial invoicing, and fiscal compliance under Romanian law	Billing records, fiscal code, invoice archives	Article 6(1)(c) GDPR: Compliance with legal obligations under applicable fiscal law.
Infrastructure defense, anti-spam honeypot enforcement, rate-limiting, and technical stability	IP address, request headers, timestamp	Article 6(1)(f) GDPR: Legitimate interests pursued by the controller to protect website integrity and prevent abuse.

4. Data Processors & Hosting Infrastructure

We do not sell, rent, monetize, or trade your personal or business information. We share data only with infrastructure providers necessary to operate our website and communicate with you:

• Website Hosting Provider: FastComet Inc. Our current web hosting server is identified under hostname s10857.lon1.stableserver.net, located in London, United Kingdom.
• Email Communications: Secure email transport infrastructure utilized exclusively to receive and reply to partner inquiries.
• Professional Advisors & Public Authorities: Statutory accounting and legal advisors bound by professional confidentiality, and competent fiscal authorities where mandated by law.

5. International Data Transfers

Our current web hosting server is located in London, United Kingdom. The United Kingdom is currently recognised by the European Commission as providing an adequate level of data protection. Where other international transfers occur, we use the safeguards required by applicable data-protection law.

6. Retention Criteria

We retain personal data strictly for as long as necessary to fulfill the relevant processing purpose:

• Inquiry & Pilot Communications: Retained for the duration of active commercial correspondence and pilot evaluation, or as reasonably necessary to follow up on your request, after which it is securely deleted.
• Accounting & Client Invoices: Commercial contracts and invoices are retained for the statutory retention periods mandated by applicable Romanian fiscal and accounting legislation.
• Server Security Logs: IP addresses and technical server access logs are retained only for temporary operational security periods (typically up to 90 days) and rotated automatically.

7. Your Data Subject Rights

Under Articles 15 to 22 of the GDPR, you have enforceable statutory rights regarding your personal data:

• Right of Access (Art. 15): Request confirmation of processing and obtain a copy of your personal data.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal data.
• Right to Erasure (Art. 17): Request deletion of data where statutory retention is no longer required.
• Right to Restriction of Processing (Art. 18): Request temporary suspension of data processing in legally specified situations.
• Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object (Art. 21): Object at any time to processing based on legitimate interests.

To exercise any of these rights, contact us directly at hello@kzvmedia.com. We address verified requests without undue delay in accordance with GDPR timelines.

8. Supervisory Authority

You have the right to lodge a complaint with the competent supervisory authority:

9. Cookies & Technical Tracking

Our Website uses only strictly necessary technical session tokens required for security, anti-bot protection, and form processing. We do not use third-party advertising cookies, behavioral analytics trackers, or commercial retargeting pixels.

10. Policy Updates

We may update this Privacy Policy periodically to reflect technological adjustments or regulatory developments. Updated versions will be published directly on this page with a revised effective date.