Privacy

This statement explains which personal data Skymotion processes, why, how long we keep it and what your rights are.

Who we are

Skymotion (aerial cinematography, the Netherlands; Chamber of Commerce no. 72162600) is the controller for personal data processed through this website. Privacy questions or requests: [email protected].

What we process, why and on what basis

• Contact and quotes — what you send us via the contact form, email, phone or WhatsApp (name, contact details, production company, your question, location and schedule of a shoot). Form requests are stored in our protected admin area and forwarded to us by email; to prevent abuse we briefly count requests per visitor using a non-identifying code — your IP address is not stored. Purpose: answering your request and preparing or carrying out a quote or job. Legal basis: preparing and performing a contract.
• Airfield bookings (invited clients only) — name, company, email address, phone number, requested date, purpose and number of people. Purpose: handling, confirming and scheduling the booking. Legal basis: performing a contract.
• Logging in to the protected areas (Airfield and admin) — your email address and a one-time login code. Purpose: giving access only to the right people. Legal basis: legitimate interest (security).
• Visitor statistics via Google Analytics 4 — only after you click "Accept"; IP addresses are truncated. Purpose: understanding how the site is used. Legal basis: your consent, which you can withdraw at any time.
• Anonymous visitor counts via Cloudflare Web Analytics — no cookies, nothing stored on your device and no fingerprint or IP address to recognise you. We only see totals, such as visits per page, country and device type. Legal basis: legitimate interest (a well-functioning website).
• Technical data — such as IP address, browser and time, processed by our hosting and security provider to deliver the site and protect it against abuse. Legal basis: legitimate interest (a secure, working website).

What we don't do

No ad tracking, no remarketing, no profiling, and no selling or sharing of data with third parties for marketing.

How long we keep data

• Contact and quotes without a job: up to 2 years after the last contact.
• Job and invoice records: 7 years (statutory tax retention).
• Airfield bookings: up to 2 years after the booking date.
• Visitor statistics: up to 14 months.
• Technical and login data: as short as needed for security, usually days to weeks.

Who we share data with

We use a few service providers that process data only on our instructions: a hosting and security provider (including storage and the protected login), an email service for confirmation emails and forwarding form requests (EU servers), a calendar service for bookings, Google Analytics (only with your consent) and the video platforms YouTube and Vimeo for playing videos. These parties are bound to security and confidentiality.

Some of these providers are based outside the European Union, including in the United States. Transfers only take place with the safeguards required by the GDPR, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

Videos

Videos are embedded via youtube-nocookie.com and Vimeo. Only when you play a video may the platform set its own cookies and process data under its own privacy policy.

Cookies

We only use analytics cookies from Google Analytics, and only with your consent. We store your choice itself in your browser (localStorage) for 12 months. You can change it at any time via "Cookies" in the footer.

Your rights

You have the right to access, correct and delete your data, to restrict processing, to data portability and to object to processing based on legitimate interest. You can withdraw consent at any time. Send your request to [email protected]; we respond within one month.

Not happy with how we handle your data? You can lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Security

We protect data with appropriate measures, such as an encrypted connection (HTTPS), protected login with one-time codes and restricted access to admin areas.