GRIGORYEV
//

Privacy Policy

This Policy describes what personal data Grigoryev films processes when you use grigoryevfilms.com, on what legal grounds, for what purposes and how data subject rights are exercised. It is prepared on the basis of the General Data Protection Regulation (GDPR) No 2016/679 and the Personal Data Processing Law of the Republic of Latvia.

Last updated
2026-07-14
Data controller
Aleksejs Grigorjevs (self-employed, personal brand Grigoryev films)

Definitions

Personal data

Any information relating to an identified or identifiable natural person.

Processing

Any operation performed on personal data: collection, storage, use, transmission, deletion, etc.

Client

A natural person — a data subject who can be identified directly or indirectly.

Data controller

Aleksejs Grigorjevs, a self-employed person operating under the personal brand Grigoryev films.

Legitimate interest

The interest of Grigoryev films in providing video production and photography services, handling enquiries and ensuring the security of the website.

Categories of processed data

Only data voluntarily provided by the client through the contact form or other channels is processed via the website.

  • Name;
  • Phone number;
  • Email address;
  • Message or project description;
  • Technical information required for anti-spam protection (IP address, timestamp);
  • Submission date and time;
  • The page from which the enquiry was sent;
  • Selected interface language.

What is NOT collected via the website

  • Personal identification numbers;
  • Date of birth;
  • Payment card and banking details;
  • Health data;
  • Special categories of data under Article 9 GDPR;
  • Data used for profiling or automated decision-making;
  • Analytics or advertising cookies.

Legal grounds

  • Responding to the client's request prior to entering into a contract (Art. 6(1)(b) GDPR);
  • Performance of a contract (Art. 6(1)(b) GDPR);
  • Compliance with legal obligations (Art. 6(1)(c) GDPR);
  • Legitimate interests of the controller: communication with prospective clients, website security, defence of legal claims (Art. 6(1)(f) GDPR);
  • The client's consent, where consent is the applicable basis (Art. 6(1)(a) GDPR).

Purposes of processing

  • Responding to enquiries submitted through the contact form, email, phone, WhatsApp or Telegram;
  • Preparing offers and cost estimates;
  • Entering into and performing service contracts;
  • Organising shoots and communication with the client;
  • Complying with legal obligations;
  • Protecting the form from spam and ensuring website security;
  • Establishing, exercising or defending legal claims.

Recipients of data

The following service providers may process data as part of website operation and message delivery:

  • The website hosting provider (Apache/PHP hosting);
  • The mail server mail.grigoryevfilms.com serving the info@grigoryevfilms.com mailbox;
  • Google LLC — as Gmail provider for a backup copy of form submissions sent to grigoryev.films@gmail.com;
  • YouTube LLC and Vimeo Inc. — when the embedded video players on portfolio pages are played.

Transfers outside the EEA

The use of Gmail (Google LLC) and embedded YouTube/Vimeo players may result in transfers of data outside the European Economic Area. Such transfers rely on the mechanisms implemented by the respective providers, including standard contractual clauses and adequacy decisions of the European Commission.

Retention period

Personal data is retained only for the time required to fulfil the purposes of processing, contractual and legal obligations, and to defend legal claims.

Data protection

Grigoryev films applies reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction: HTTPS connection, restricted access to the mailbox, storage of SMTP credentials outside the public web root, anti-spam and header-injection protection for the contact form.

No data transmission or storage system can guarantee absolute security, but reasonable measures are taken to reduce risks.

Client's rights

The client has the right to:

  • Request information about the processing of their data;
  • Obtain access to their data;
  • Request rectification of inaccurate data;
  • Request erasure in cases provided by law;
  • Request restriction of processing;
  • Object to processing based on legitimate interest;
  • Withdraw consent;
  • Exercise the right to data portability where applicable;
  • Lodge a complaint with the supervisory authority — the Data State Inspectorate of the Republic of Latvia (Datu valsts inspekcija).

Contact and updates

To exercise rights or ask any question about data processing: info@grigoryevfilms.com.

This Policy may be updated when the website's operation, the set of services used, or applicable law changes. The current version is always available at /privacy-policy.