Privacy
Privacy policy
This notice explains how data is processed when you visit the website or prepare a voluntary enquiry. The enquiry form has no lead database and makes no automated decisions.
1. Controller
Ninanii Productions – Anina Rehl, Carrer de s'Illot, 13, 07400 Alcúdia, Illes Balears, Spain. Email: info@ninanii-productions.com. Phone: +34 645 413 021.
2. Hosting and delivery
The website is delivered by Vercel Inc., USA. Technically necessary connection data is processed to deliver the site securely and reliably. The legal basis is Article 6(1)(f) GDPR. Vercel documents appropriate safeguards for international transfers.
3. Reach and performance analytics
Vercel Web Analytics and Speed Insights are disabled by default and load only after your activation. The legal basis is your consent under Article 6(1)(a) GDPR and applicable ePrivacy law. You may change the preference for the future at any time.
Checking analytics preference …
Without a stored opt-in, analytics remain disabled. The preference is stored locally in your browser only.
4. Enquiries by email
Name, email, date, location, preferred service and optional message initially remain in your browser memory. Ninanii Productions and relevant email services receive them only when you send the prepared message in your email app. The legal basis is Article 6(1)(b) GDPR.
5. External scheduling via Calendly
The Calendly link takes you to an external page operated by Calendly, LLC in the United States only after your deliberate selection. Calendly may then process your IP address, device and browser data and the scheduling details you enter. For appointment scheduling, Calendly processes this data under a data processing arrangement. Calendly identifies the EU-U.S. Data Privacy Framework and Standard Contractual Clauses as appropriate safeguards depending on the transfer; this is not a blanket assurance for every individual processing operation. You can contact us by email instead.
6. Enquiries by WhatsApp
WhatsApp opens only after your conscious choice. WhatsApp Ireland Limited processes data under its own terms. Use email instead if you prefer not to use WhatsApp. Ninanii Productions processes your message under Article 6(1)(b) GDPR.
7. External videos
External video content loads only after explicit consent. The provider then receives data such as your IP address and device or usage information. The legal basis is your consent under Article 6(1)(a) GDPR and applicable ePrivacy law.
8. Server logs and CMS
Technically required logs support troubleshooting, abuse prevention and operational security under Article 6(1)(f) GDPR. The protected CMS processes only necessary administrator account, revision, media and audit data. Enquiry fields are not sent to the CMS.
9. Recipients and international transfers
Recipients are, only where necessary, Vercel, your chosen email or communications services, WhatsApp when selected, Calendly, LLC after deliberate external navigation, the configured video provider after consent and Supabase, Inc. for CMS authentication, database and private media storage. Calendly and Supabase publish information about data processing and transfer safeguards; depending on the processing, relevant mechanisms include Data Privacy Frameworks or Standard Contractual Clauses. These notices are not a blanket compliance assurance. Enquiry data is not sold.
10. Retention
The form draft remains only until you reload or close the page. Sent enquiries are retained only as long as communication, contract, legal obligations or claims require. Unneeded CMS accounts, private media and identifiers are deleted or anonymised.
11. Voluntary provision and automated decisions
Providing enquiry data is voluntary. Required fields only support a meaningful handover text. There is no solely automated decision under Article 22 GDPR and no profiling.
12. Your rights
Subject to the GDPR, you may request access, correction, deletion, restriction, portability and object to processing. Consent can be withdrawn for the future at any time.
13. Right to object under Article 21 GDPR
You may object to processing based on Article 6(1)(f) GDPR for reasons arising from your particular situation. Analytics consent can be withdrawn directly on this page.
14. Right to lodge a complaint
You may complain to a data protection authority. The Agencia Española de Protección de Datos (AEPD) is one relevant supervisory authority; you may also contact the authority at your habitual residence or workplace.
15. Security
The website uses encrypted transmission. Data flows are limited to the stated purposes and external media load only after consent. The CMS is available only to invited administrators protected by a second factor.
16. Privacy contact
Send privacy questions or rights requests to info@ninanii-productions.com, or by post to Ninanii Productions – Anina Rehl, Carrer de s'Illot, 13, 07400 Alcúdia, Illes Balears, Spain.
17. Provider information and safeguards
The following resources explain data categories, retention, transfer safeguards and complaint routes:
- Vercel Web Analytics – privacy and data points
- Vercel Speed Insights – privacy and data points
- Vercel – data processing and transfer safeguards
- Google / YouTube – privacy policy
- Google – international data transfer frameworks
- WhatsApp – EEA privacy policy
- Supabase – privacy policy
- Supabase – data processing addendum
- Resend – privacy policy
- Resend – data processing and transfer safeguards
- Calendly – privacy notice
- Calendly – data processing and transfer safeguards
- German data protection authorities
- AEPD Spain – complaint information
18. Updates and governing version
This policy is updated when functions, providers or legal requirements change. The German version is authoritative; English and Spanish versions are accessible translations.
Last updated: 26 July 2026