Privacy Policy

1. Overview

This Privacy Policy explains how ZOOM Production ("we", "us", "our") collects, uses, shares, and protects personal data when you visit our website, contact us, request an offer, or book our wedding videography and photography services.

We operate wedding photography and videography services (including event coverage, editing, drone services, and related wedding documentation) across Kosovo, Albania, Macedonia, Switzerland, Germany, Italy, Greece, and other European destinations. We are committed to processing personal data transparently and in line with applicable privacy laws, including the GDPR where relevant.

2. Information We Collect

We collect information you provide directly, information generated through our services, and limited technical information collected automatically when you use our website.

3. How We Collect Information

We collect personal data through:

• Website forms (questionnaire/booking form with 6 steps)
• Email communications
• WhatsApp messaging
• Cookies (language preference cookie)
• Session storage (temporary form session data, expires after 1 hour)
• Automatic technical collection (IP address, browser and device data)

4. Legal Bases for Processing

Where the GDPR applies, we rely on one or more of the following legal bases:

• Performance of a contract — to prepare offers, manage bookings, deliver photography/videography services, and provide support.
• Legitimate interests — to operate and improve our website, prevent abuse, maintain service quality, and communicate about your inquiry.
• Consent — where required (e.g., optional marketing messages, certain cookie choices, or portfolio/social media use when agreed).
• Legal obligations — to comply with applicable laws (e.g., record keeping where required).

5. How We Use Your Information

We use personal data for the following purposes:

• Creating personalized wedding service quotes and offers
• Processing and managing bookings and scheduling
• Communicating about events, quotes, services, and logistics
• Sending offer emails with pricing details and confirmations
• Customer support and service delivery (including editing and deliverables)
• Marketing communications (with an opt-out option)
• Website functionality (language detection based on IP location and saved preferences)
• Improving our services and website experience

We do not use your data for automated decision-making that produces legal or similarly significant effects.

6. Data Sharing and Third-Party Services

We share personal data only when necessary to operate our services, communicate with you, or comply with the law. We do not sell personal data.

7. Data Storage and Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures include secure authentication, access controls, and standard security practices appropriate for the nature of the data.

• Primary data storage is in a Supabase cloud database
• Session storage for form progress expires after 1 hour
• Language preference cookie ("locale") may be stored for up to 1 year

No internet transmission or storage system can be guaranteed 100% secure. If you believe your information has been compromised, please contact us immediately.

8. Cookies and Tracking Technologies

We use limited cookies and similar technologies primarily to provide essential website functionality and language preferences.

• Language preference cookie ("locale") — remembers your selected language (typical retention up to 1 year).
• Session storage — stores temporary multi-step form progress and expires after approximately 1 hour.

Depending on your location, we may display a cookie banner to collect consent where required. You can usually manage cookies through your browser settings. Blocking certain cookies may affect site functionality (for example, language persistence).

9. Data Retention

We keep personal data only as long as necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law.

• Inquiries and quotes: typically retained for a reasonable period to follow up and maintain records (for example, up to 24 months).
• Bookings and service delivery: retained for the duration of the relationship and for a reasonable period afterward for record-keeping and support.
• Event media: retained as needed to deliver edits and final files, plus a reasonable archival period for client access and backup (details may also be specified in your booking agreement).
• Technical logs and security data: retained for a limited period for security and troubleshooting.

When data is no longer needed, we delete it or anonymize it in accordance with our retention practices.

10. International Operations and Data Transfers

We operate across multiple countries and may use service providers that process data in different jurisdictions (including within and outside the EEA/UK). When international transfers are involved and the GDPR applies, we use appropriate safeguards where required, such as contractual protections and recognized transfer mechanisms.

If you would like more information about the safeguards used for a specific transfer, contact us at info@zoomproduction.info.

11. Your Rights

Depending on your location and applicable law (including the GDPR), you may have the right to:

• Request access to your personal data
• Request correction (rectification) of inaccurate or incomplete data
• Request deletion of your data (where applicable)
• Object to or request restriction of certain processing
• Request data portability (where applicable)
• Withdraw consent at any time (where processing is based on consent)
• Opt out of marketing communications at any time

Për të ushtruar të drejtat tuaja, përfshirë kërkesën për fshirje të të dhënave, kontaktoni me ne në info@zoomproduction.info. Ne mund të na duhet të verifikojmë identitetin tuaj për të mbrojtur të dhënat tuaja.

Për të kërkuar fshirjen e të dhënave tuaja, ju lutem dërgoni një email në info@zoomproduction.info me temën 'Kërkesë për Fshirje të të Dhënave' dhe përfshini emrin tuaj, adresën e email-it dhe numrin e telefonit (nëse është e zbatueshme) që të mund të identifikojmë dhe fshijmë informacionin tuaj nga sistemet tona. Ne do ta përpunojmë kërkesën tuaj brenda 30 ditëve dhe do të konfirmojmë pasi të dhënat tuaja janë fshirë.

Ju gjithashtu mund të keni të drejtë të depozitoni ankesë me autoritetin lokal të mbrojtjes së të dhënave, veçanërisht nëse ndodheni në EEA/MB.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. Updates will be posted on this page and the "Last Updated" date will be revised accordingly.

13. Contact Us

If you have any questions, requests, or concerns about this Privacy Policy or how we process personal data, please contact us: