Privacy Policy

Last updated — March 2026

YULE VOLK is committed to protecting your personal data and respecting your privacy in accordance with the EU General Data Protection Regulation (GDPR) and applicable national laws.

01. Information We Collect

We collect only the information necessary to deliver our services and communicate with you. This falls into three categories:

Personal Information

Full name, email address, telephone number, and billing address provided during enquiry or booking.

Usage Data

IP address, browser type, pages visited, referral source, and session duration collected automatically via our website.

02. How We Use Your Information

Processing and fulfilling your booking and service enquiries

  • Sending project-related communications, contracts, and invoices

  • Improving our website and tailoring the user experience

  • Complying with legal and financial obligations

  • Portfolio use: only with explicit written consent from the client

  • We never sell, rent, or trade your personal data to third parties

03. Data Storage & Security

Your data is stored on secured servers within the European Economic Area. We employ industry-standard encryption (TLS/SSL) for all data transmissions and access-controlled environments for stored data. Project files are retained for a period of 6 months post-delivery, after which they are permanently deleted from our systems unless a longer retention period is agreed.

  • Servers located within the EEA

  • End-to-end TLS/SSL encryption for all transmissions

  • Role-based access control — only key personnel access client data

  • Regular security audits conducted by our hosting provider

Payment Information

Transaction details processed securely via our payment provider (Stripe). We do not store card details on our servers.

04. Cookies Policy

Our website uses cookies to enhance your browsing experience and gather anonymous analytics. We use strictly necessary, functional, and analytical cookies only. We do not use advertising or tracking cookies.

  • Strictly necessary: Session management and security — these cannot be disabled

  • Functional: Remembering your preferences across sessions

  • Analytical: Anonymous traffic analysis via privacy-compliant tools (no Google Analytics)

You may manage or withdraw cookie consent at any time via our cookie preference panel accessible from the website footer.

05. Your Data Protection Rights

Under GDPR, you hold significant rights regarding your personal data. You may exercise any of the following at no charge by contacting us at yulevolk.yv@gmail.com:

  • Right of Access: Obtain a copy of the personal data we hold about you

  • Right to Rectification: Request correction of inaccurate or incomplete data

  • Right to Erasure: Request deletion of your personal data ('right to be forgotten')

  • Right to Restrict Processing: Limit how we use your data in certain circumstances

  • Right to Data Portability: Receive your data in a structured, machine-readable format

  • Right to Object: Object to processing based on legitimate interests

We will respond to all verified requests within 30 days. You also have the right to lodge a complaint with the relevant supervisory authority (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

06. Third-Party Links

Our website may contain links to third-party platforms including Instagram, Vimeo, and our payment processor. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites. We encourage you to review the privacy policies of any third-party services you access via our website.

07. Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. Specifically:

  • Client contact and booking data: retained for 3 years after last engagement

  • Financial records (invoices, payments): retained for 10 years per German commercial law (HGB)

  • Project files: deleted 6 months post-delivery unless otherwise agreed

  • Website analytics data: anonymised after 12 months

08. Changes to the Privacy Policy

We reserve the right to update this Privacy Policy periodically to reflect changes in legal requirements or our data practices. The date of the most recent revision will always be displayed at the top of this page. We encourage you to review this policy regularly. Continued use of our services following any update constitutes acceptance of the revised policy.

For significant changes, we will notify active clients via email prior to the update taking effect.