Privacy Policy
Last updated: May 2026
1. General Information
We take the protection of personal data seriously. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, contact us, or work with us as a client, partner, supplier, freelancer, or service provider.
This website and our services are operated in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and applicable German digital services and cookie regulations.
2. Responsible Party / Data Controller
The responsible party for data processing on this website is:
Wimesa Media Agency
Owner: Morten Wolter
Wannseestr. 6
14482 Potsdam
Germany
Phone: +49 176 73001006
Email: wolter@wimesa.com
Website: www.wimesa.com
VAT ID: DE426058195
3. What We Do
Wimesa Media Agency is a media, branding, and content creation business. We provide services such as corporate identity, brand development, website content, video production, social media content, poster and campaign design, photography, audio and podcast production, and creative communication concepts.
In connection with these services, we may process personal data from website visitors, clients, potential clients, business partners, suppliers, freelancers, and people appearing in media content, photos, videos, interviews, or other creative material.
4. Personal Data We May Process
Depending on how you interact with us, we may process the following types of personal data:
Name
Company name
Email address
Phone number
Postal address
Website or social media profile
Project information
Communication content
Billing and payment information
Photos, videos, audio recordings, interviews, or other media material
Brand, campaign, or business information provided by clients
Technical website data such as IP address, browser type, device information, date and time of access, and visited pages
We only process personal data when there is a lawful basis for doing so.
5. Website Access and Server Log Files
When you visit our website, technical data may automatically be collected by the website hosting provider. This can include:
IP address
Date and time of access
Browser type and version
Operating system
Referrer URL
Pages visited
Amount of data transferred
Technical status information
This data is processed to ensure the technical operation, security, and stability of the website.
Legal basis: Art. 6(1)(f) GDPR, legitimate interest in operating a secure and functional website.
6. Contact by Email, Phone, or Contact Form
If you contact us by email, phone, contact form, or social media, we process the information you provide in order to respond to your request, prepare offers, discuss projects, or communicate with you.
This may include your name, email address, phone number, company name, project details, and the content of your message.
Legal basis:
Art. 6(1)(b) GDPR, if the communication relates to a contract or pre-contractual request.
Art. 6(1)(f) GDPR, if there is a legitimate business interest in responding to your inquiry.
7. Client Projects and Creative Services
When we work with clients, we may process personal data as part of creative and production work. This may include:
Corporate identity projects
Branding and design projects
Website content and text production
Video and photo production
Audio and podcast production
Social media content creation
Poster, campaign, and marketing material
Interviews and editorial content
Client communication and project management
Invoices, contracts, and payment information
We process this data to plan, create, deliver, and manage creative and media services.
Legal basis:
Art. 6(1)(b) GDPR, performance of a contract or pre-contractual steps.
Art. 6(1)(f) GDPR, legitimate interest in professional project management and client communication.
Art. 6(1)(a) GDPR, consent, where consent is required, for example for certain photo, video, audio, or testimonial use.
8. Photos, Videos, Audio, and Media Material
As a media and content creation business, we may produce or process photos, videos, audio recordings, interviews, portraits, behind-the-scenes material, social media content, or campaign material.
If identifiable individuals appear in such material, we process this data only where there is a legal basis, such as consent, contractual permission, legitimate interest, or another applicable legal permission.
We do not publish identifiable client material, portraits, interviews, testimonials, or sensitive project content without permission, contractual agreement, or another valid legal basis.
Legal basis:
Art. 6(1)(a) GDPR, consent.
Art. 6(1)(b) GDPR, contract.
Art. 6(1)(f) GDPR, legitimate interest in creating and presenting media and creative work, where legally appropriate.
9. Portfolio, References, and Case Studies
We may show selected work, references, client projects, or case studies on our website, social media, presentations, or marketing material.
Identifiable personal data, client names, logos, testimonials, images, videos, or project details are only published where we have permission, a contractual right, or another valid legal basis.
Legal basis:
Art. 6(1)(a) GDPR, consent.
Art. 6(1)(b) GDPR, contract.
Art. 6(1)(f) GDPR, legitimate interest in presenting our work, where legally appropriate.
10. Business Partners, Freelancers, and Suppliers
We may process personal data from freelancers, suppliers, creative collaborators, production partners, consultants, and other business partners.
This may include name, email address, phone number, company information, contract data, project communication, billing details, and payment information.
Legal basis:
Art. 6(1)(b) GDPR, contract or pre-contractual communication.
Art. 6(1)(f) GDPR, legitimate interest in managing business relationships and production workflows.
Art. 6(1)(c) GDPR, legal obligations, for example tax and accounting requirements.
11. Invoices, Accounting, and Legal Obligations
We process billing, invoice, payment, and accounting data to comply with legal obligations under German commercial and tax law.
This may include names, addresses, company information, VAT ID, invoice numbers, payment details, and contract information.
Legal basis:
Art. 6(1)(c) GDPR, legal obligation.
Art. 6(1)(b) GDPR, contract performance.
12. Cookies and Similar Technologies
Our website may use cookies or similar technologies. Some cookies are technically necessary for the website to function. Other cookies, such as analytics, marketing, tracking, or embedded third-party cookies, are only used where legally allowed and, where required, only after consent.
You can manage your cookie preferences through the cookie settings on the website, if available.
Legal basis:
Art. 6(1)(f) GDPR for technically necessary cookies.
Art. 6(1)(a) GDPR for non-essential cookies, analytics, marketing, or tracking cookies, where consent is required.
13. Website Hosting
Our website may be hosted by an external hosting provider. The hosting provider processes technical data required to operate the website securely and reliably.
Hosting provider:
[Add hosting provider, for example Squarespace]
Provider address:
[Add provider address or link to provider privacy information]
Legal basis:
Art. 6(1)(f) GDPR, legitimate interest in secure and reliable website hosting.
Art. 6(1)(b) GDPR, if hosting is required to provide requested services.
14. Analytics and Website Statistics
We may use website analytics to understand how visitors use our website and to improve our services, content, and website performance.
Analytics tools may collect information such as visited pages, time spent on the website, device type, browser, approximate location, and technical usage data.
Analytics provider:
[Add provider, for example Squarespace Analytics, Google Analytics, or write “No external analytics currently used.”]
Where required, analytics tools are only used with your consent.
Legal basis:
Art. 6(1)(a) GDPR, consent.
Art. 6(1)(f) GDPR, legitimate interest, where analytics are privacy-friendly and legally permitted without consent.
15. Embedded Content and Third-Party Services
Our website may include embedded content or links from third-party providers, such as:
YouTube or Vimeo videos
Google Maps
Instagram or other social media content
Online booking tools
Newsletter tools
Fonts, design tools, or external media players
When you interact with embedded content, the third-party provider may process personal data such as your IP address, browser information, device data, or usage behavior.
We only use such services where they are technically necessary, legally permitted, or based on your consent.
Legal basis:
Art. 6(1)(a) GDPR, consent, where required.
Art. 6(1)(f) GDPR, legitimate interest in presenting professional website content and media, where legally appropriate.
16. Social Media
We may maintain profiles on social media platforms to present our work, communicate with users, and share content.
If you interact with us through social media, the respective platform may process your personal data according to its own privacy policy. We may process your profile name, messages, comments, likes, shares, and other interaction data to communicate with you and manage our online presence.
Legal basis:
Art. 6(1)(f) GDPR, legitimate interest in communication, marketing, and public presentation of our services.
Art. 6(1)(a) GDPR, consent, where required.
17. Data Sharing
We do not sell personal data.
We may share personal data only where necessary for our business operations, legal obligations, or project delivery. Recipients may include:
Hosting providers
Email providers
IT service providers
Accounting and tax advisors
Payment providers or banks
Freelancers and production partners
Creative collaborators
Legal advisors
Public authorities, where legally required
Where necessary, we use data processing agreements with service providers.
18. International Data Transfers
Some service providers may process data outside the European Union or European Economic Area. Where this happens, we ensure that appropriate safeguards are in place, such as EU Standard Contractual Clauses or other legally recognized transfer mechanisms.
19. Data Retention
We store personal data only as long as necessary for the purpose for which it was collected, or as long as required by law.
Business communication and project data may be stored for the duration of the client relationship and for a reasonable period afterwards.
Invoices, contracts, and accounting documents are stored according to German legal retention periods.
Media material may be stored for project, archive, documentation, or portfolio purposes, where legally permitted.
Data processed based on consent is deleted or restricted if consent is withdrawn, unless another legal basis applies.
20. Your Rights
Under the GDPR, you have the following rights:
Right of access to your personal data
Right to correction of inaccurate data
Right to deletion of your data
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time
Right to lodge a complaint with a data protection authority
To exercise your rights, you can contact us at:
wolter@wimesa.com
21. Right to Withdraw Consent
If processing is based on your consent, you can withdraw your consent at any time with effect for the future. The lawfulness of processing before withdrawal remains unaffected.
22. Right to Object
If we process personal data based on legitimate interest under Art. 6(1)(f) GDPR, you have the right to object to this processing for reasons arising from your particular situation.
If personal data is processed for direct marketing, you have the right to object at any time.
23. Data Security
We use appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration, or disclosure.
However, internet-based communication can have security risks. Complete protection against access by third parties cannot be guaranteed.
24. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our website, services, tools, legal requirements, or business operations.
The current version is available on this website.