This site is a portfolio with one form. It sets no cookies, runs no analytics, shows no ads and loads nothing from third parties. The only personal data it handles is what you type into the licence request form, plus the technical logs every web server keeps.
- Controller
- Janusz Szewczak
- Address
- ul. Klaudyny 34, 01-684 Warszawa, Poland
1. Who is responsible for your data
The controller of personal data processed through brokenframe.studio (GDPR, Regulation (EU) 2016/679) is the person or business named above. For anything about your data, write to the email address above; no data protection officer has been appointed.
2. The licence request form
What is collected: your name, email address, optionally your company or production, where the footage will run, the subjects on your shot list, your message and the page language. A hidden anti-spam field is also sent; it should stay empty and is not stored.
Why: to answer your request, send previews and a quote, and, if you decide to license footage, to prepare and perform the licence agreement.
Legal basis: Art. 6(1)(b) GDPR, steps taken at your request before entering into a contract and performing it; and Art. 6(1)(f) GDPR, our legitimate interest in replying to messages and in establishing or defending legal claims.
How long: requests that do not lead to a licence are deleted no later than 12 months after the last message. If a licence is agreed, the correspondence and licence records are kept for the life of the licence and as long as tax and accounting law requires (in Poland, 5 years from the end of the year in which the tax obligation arose).
Providing this data is voluntary, but without an email address we cannot reply.
3. Server logs
Like every website, the server automatically records technical data for each request: IP address, date and time, requested address, referring page, browser and operating system. This is needed to deliver the site, keep it secure and diagnose faults (Art. 6(1)(f) GDPR). The logs are kept by the hosting provider for a limited period and are not combined with other data or used to identify visitors.
4. Your shot list and browser storage
When you add subjects to your shot list, the list is saved in your browser’s local storage (key “bf-shotlist”) so it survives a page reload. It never leaves your device unless you send the form. This is not a cookie and is used only for a feature you asked for. You can empty it by removing the items or clearing this site’s data in your browser.
5. What this site does not do
- No cookies of any kind, so there is no cookie banner.
- No analytics, statistics, advertising or tracking pixels.
- No fonts, videos, maps or scripts loaded from other companies’ servers: everything is served from brokenframe.studio.
- No profiling and no automated decision-making.
- Your data is never sold or shared for marketing.
6. Who else sees your data
The hosting provider, WEBD.pl (Globtel Internet Szymon Hersztek, ul. Matecznikowa 2/1, 80-126 Gdańsk, NIP 9570804786), stores the website, the server logs and the mailbox that receives your request, acting as a processor on our behalf. If you license footage, invoices and licence records may be shared with an accountant and with tax authorities where the law requires it. Nobody else receives your data.
The servers are located in the Netherlands, in a data centre operated by OVHcloud (OVH), which acts as the hosting provider’s sub-processor. Your data therefore stays within the European Union and is not transferred to third countries.
7. Your rights
- Access your data and get a copy (Art. 15).
- Have it corrected (Art. 16) or deleted (Art. 17).
- Restrict processing (Art. 18).
- Receive it in a portable format (Art. 20).
- Object to processing based on legitimate interest (Art. 21).
To use any of these rights, email hello@brokenframe.studio. We reply within one month. You also have the right to lodge a complaint with a supervisory authority; in Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl), or the authority in your own EU country.
8. Security
The site is served only over an encrypted HTTPS connection, and the form is sent to our own server, never to an outside form service.
9. Changes
If the way this site handles data changes, for example if analytics are ever added, this page will be updated before the change and the date above will change with it.