Skip to content
§ I / IPrivacy

Privacy Policy

Last updated: June 2026

This policy explains how ALN Media Group handles personal data when you use this website, send an inquiry, book a call, buy or rent a film, subscribe for updates, or interact with campaign measurement tools.

1.Controller

ADAM NUREK ALN FILM PRODUCTION, trading publicly as ALN Media Group, NIP/VAT: PL7773194814, REGON: 522106830, registered address: Sosnowa 44, 62-025 Siekierki Wielkie, Poland; production and editing base: Poznań, Poland. Contact: adam@alnmediagroup.com, +48 502 213 130.

For GDPR matters, use adam@alnmediagroup.com. No data protection officer is appointed unless a future legal assessment requires one.

2.Data we process

Inquiry and quote data: name, email, phone or preferred channel, company, project type, budget, timeline, message content, and any files or context you choose to provide.

Booking and notification data: email address, city, meeting details, and update preferences.

Newsletter and editorial subscription data: email address, locale, signup source, consent text/version, and unsubscribe preference.

Film rental or purchase data: Stripe checkout status, film title, rental window, access-token metadata, and payment status. We do not store full card numbers.

Technical data: IP-derived security signals, browser/device metadata, server logs, consent preferences, and anti-spam results.

Optional analytics and marketing data: page views, campaign source, conversion events, and pixel identifiers only after the relevant consent is granted.

3.Purposes and legal bases

We process inquiries, quotes, bookings, and film access to take steps before entering a contract, perform a contract, and answer business requests.

We send newsletter or editorial email updates only with consent. You can unsubscribe or withdraw that consent at any time.

We process security logs, rate limits, and bot checks for legitimate interest in protecting the website and services.

We use non-essential analytics, advertising pixels, remarketing, and social embeds only with consent where required. You can change or withdraw that consent through Cookie settings in the footer.

Where local law gives you an opt-out right for sale, sharing, or targeted advertising, marketing pixels are treated as opt-in/opt-out controlled advertising technology.

Providing inquiry, booking, checkout, or notification data is voluntary, but without the requested contact or transaction details we may be unable to answer, quote, book, or deliver access.

We do not use website forms for solely automated decisions that produce legal or similarly significant effects.

4.Vendors and transfers

Current or planned vendors may include Cloudflare, Resend, Cal.com or Calendly, Stripe, Mux, Vimeo, YouTube, xAI for quote estimation, Google, Meta, LinkedIn, TikTok, X, and social embed providers.

Some vendors may process data outside the EEA, UK, Switzerland, or your home jurisdiction. Where applicable, we rely on vendor data-processing terms, standard contractual clauses, adequacy decisions, or equivalent transfer mechanisms.

5.Cookies, consent, and campaign measurement

Essential storage is used to run the site, remember privacy choices, protect forms, and deliver paid or gated content.

Analytics and campaign pixels are disabled by default. If you accept them, the site may load Google Analytics/Ads or Tag Manager, Meta Pixel, LinkedIn Insight Tag, TikTok Pixel, X Pixel, or Cloudflare Web Analytics depending on configured campaign accounts.

We honor a browser Global Privacy Control signal by disabling marketing pixels. Sensitive watch pages and checkout confirmation URLs are excluded from ad-pixel pageview tracking.

6.Retention

Inquiry records are usually retained for up to 24 months unless they become part of an active client, accounting, legal, or production record.

Accounting, contracts, invoices, payment, and film-access records are retained for the periods required by tax, civil, consumer, and business-record laws.

Consent records and server logs are retained only as long as needed for compliance, security, debugging, or aggregate measurement.

7.Your rights

Under GDPR, you may request access, correction, deletion, restriction, portability, objection, and withdrawal of consent.

California and other US residents may have rights to know, access, delete, correct, opt out of sale/share/targeted advertising, and limit use of sensitive personal information where applicable.

To exercise rights, email adam@alnmediagroup.com. EU users may also complain to the Polish Data Protection Authority (UODO): uodo.gov.pl.

8.Security

We use HTTPS, Cloudflare protection, rate limiting, scoped server-side secrets, and operational access controls. No website can guarantee absolute security, but we design the stack to minimize unnecessary personal-data exposure.