Privacy Policy

Last updated: May 22, 2026

This Privacy Policy describes how pic2film, operated by Kfir Harbi, collects, uses, and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

1. Data Controller

Kfir Harbi
13187 Berlin, Germany
Email: hello@pic2film.com | Phone: +49 160 2750106

2. Information We Collect

• Contact Information: Name, email, phone, address, city, postal code, country
• Order Information: Event date, event type, language preference, package selection, message details
• Photos: Images you upload for your film project (may include images of identifiable persons)
• Payment Data: Processed by Stripe; we do not store card details on our servers
• Technical Data: IP address, browser type, device type, referrer URL (collected via Google Analytics only with your consent)

3. Legal Basis for Processing (GDPR Art. 6)

• Contract performance (Art. 6(1)(b)): Processing your order, creating your film, delivery, customer support.
• Legal obligation (Art. 6(1)(c)): Tax and accounting records under German law (retention up to 10 years for invoices).
• Consent (Art. 6(1)(a)): Google Analytics tracking via cookies, and any optional marketing communications.
• Legitimate interest (Art. 6(1)(f)): Fraud prevention and service security.

4. Photos and AI Processing

Photos you upload are processed using artificial intelligence systems (including but not limited to Google AI, OpenAI, and Anthropic) to restore, enhance, and animate them. These AI services may temporarily process your photos on servers located outside the EU (primarily the United States) under appropriate safeguards including Standard Contractual Clauses (SCCs).

We do not use your photos to train AI models. Photos are processed solely to deliver your film.

5. Third-Party Processors

• Stripe (USA): Payment processing. stripe.com/privacy
• Netlify (USA): Website hosting and form processing. netlify.com/privacy
• Airtable (USA): Order database. airtable.com/privacy
• Google Workspace / Google Drive (USA/EU): Photo storage and file delivery. policies.google.com/privacy
• Google Analytics (USA): Website analytics, loaded only after consent. policies.google.com/privacy
• AI processing providers (USA): Google AI, OpenAI, Anthropic. Used for photo restoration and animation.

International data transfers to the United States are protected by Standard Contractual Clauses approved by the European Commission and, where applicable, the EU-US Data Privacy Framework.

6. Data Retention

• Photos: Deleted within 90 days of final film delivery, unless you request earlier deletion.
• Order and contact data: Retained for the duration of the customer relationship plus statutory retention periods.
• Invoices and tax records: Retained for 10 years as required by §147 AO (German Fiscal Code).
• Analytics data: Retained for 14 months (Google Analytics default).
• Form submission data: Retained for up to 3 years for follow-up and dispute resolution.

7. Your Rights (GDPR Art. 15-22)

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time (without affecting prior lawful processing)

To exercise any of these rights, contact: hello@pic2film.com. We will respond within 30 days.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. The competent authority for pic2film is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219, 10969 Berlin, Germany
Phone: +49 30 13889-0
Website: www.datenschutz-berlin.de

9. Cookies

We use:

• Essential cookies: Required for site functionality (language preference, cookie consent state). No consent required.
• Analytics cookies (Google Analytics): Loaded only after you click "Accept All". IP anonymization is enabled. You can withdraw consent at any time by clearing your browser's site data for pic2film.com.

10. Data Security

We use industry-standard security measures including HTTPS encryption, secure passwords, and access controls. Despite all reasonable precautions, no internet transmission is 100% secure.

11. Children

Our services are not directed at children under 16. We do not knowingly collect data from children. If a film is created featuring a minor, we assume the ordering party has the legal authority to provide the photos.

12. Changes to This Policy

We may update this policy from time to time. The "Last updated" date will reflect changes. Material changes will be notified via email where possible.