Privacy Policy.
How we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (EU 2016/679).
1. Data Controller
The data controller responsible for personal data on this site is:
Florian Maurer — EXO Visual Media
Blossenberg 12, 39030 Ahrntal (BZ), Italy
Email: info@exovisualmedia.com
2. What Data We Collect
Contact Form Submissions
When you use our contact form, we collect the name, email address, phone number (optional), company (optional), and any information you include in your message. This data is used solely to respond to your inquiry. The form is processed by Formspree (Formspree Inc., USA), which forwards your submission to us by email.
Server Logs
Our hosting provider automatically logs standard web-server information (IP address, browser type, referring page, timestamp). This is used for security and diagnostics only.
Cookies
We use strictly necessary cookies for core site functionality, and optional cookies for analytics and embedded media (e.g. YouTube). See the Cookie Policy for details. You can manage your preferences anytime via the footer link.
3. Legal Basis for Processing
- Contract / pre-contract (Art. 6(1)(b) GDPR): to respond to inquiries and provide services you request.
- Legitimate interest (Art. 6(1)(f) GDPR): for site security, log analysis, and service improvement.
- Consent (Art. 6(1)(a) GDPR): for non-essential cookies and marketing communications.
- Legal obligation (Art. 6(1)(c) GDPR): for tax records and regulatory retention.
4. How Long We Keep Your Data
Contact form submissions are kept as long as needed to respond to your request and for a reasonable period afterward (typically up to 24 months) unless you become a client, in which case commercial and tax law retention periods apply. Server logs are rotated within 30 days.
5. Who We Share Your Data With
We do not sell your data. We only share it with processors strictly necessary to operate the site:
- Our hosting provider (for server log purposes).
- Formspree Inc. (USA) — for processing contact form submissions.
- Our email provider (to receive your messages).
All processors are bound by data-protection agreements.
6. International Transfers
Where any processor is located outside the EU/EEA, transfers are only made to countries with an adequacy decision, or under Standard Contractual Clauses approved by the European Commission.
7. Your Rights Under GDPR
You have the right to:
- Access the personal data we hold about you (Art. 15).
- Request correction of inaccurate data (Art. 16).
- Request erasure of your data ("right to be forgotten", Art. 17).
- Restrict or object to processing (Art. 18, 21).
- Data portability (Art. 20).
- Withdraw consent at any time where processing is based on consent.
- Lodge a complaint with a supervisory authority (in Italy: Garante per la Protezione dei Dati Personali).
To exercise any of these rights, contact us at info@exovisualmedia.com. We will respond within 30 days.
8. Security
We take appropriate technical and organizational measures to protect your data against unauthorized access, loss, or disclosure, including TLS encryption for all data in transit.
9. Changes to This Policy
We may update this policy to reflect changes to our practices or legal requirements. The "last updated" date below will indicate when the policy was last revised. Material changes will be communicated via the site.
Last updated: April 2026.