Article I · § 1–6
Privacy Policy (GDPR & CCPA)
NarrativePointMedia, registered at Zabel-Krüger-Damm 13, 13469 Waidmannslust, Germany (“NarrativePointMedia,” “we,” “us”), is the controller of personal data collected through narrativepointmedia.com and related correspondence. We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and — for California residents — the California Consumer Privacy Act (CCPA) as amended by the CPRA.
§ 1 Data we collect. When you send an inquiry, sign an agreement, or pay an invoice, we may collect your name, email address, telephone number, organization, project brief, billing details, and correspondence history. Technical logs may include IP address, browser type, and pages visited. We do not knowingly collect data from children under 16.
§ 2 Purposes and legal bases. Inquiry data is processed to respond to your request and prepare a proposal (Art. 6(1)(b) GDPR — pre-contractual measures). Contract data is processed to deliver commissioned copywriting and retain records (Art. 6(1)(b)). Invoices and tax records are kept to comply with German retention law (Art. 6(1)(c)). Optional analytics run only with consent (Art. 6(1)(a)) and protect our legitimate interest in improving the site (Art. 6(1)(f)).
§ 3 Sharing and transfers. We never sell personal information — a commitment that also satisfies CCPA’s prohibition on sale and share. Data is shared only with essential processors: secure hosting in the European Union, our email provider, and Stripe for payment processing, each bound by data-processing agreements. If a processor outside the EEA is ever engaged, transfers rely on EU Standard Contractual Clauses with appropriate safeguards.
§ 4 Retention. Inquiry correspondence is retained for up to 24 months after the last contact. Contract and invoice records are kept for 10 years as required by § 147 German Fiscal Code (AO). You may request earlier deletion where no statutory duty applies.
§ 5 Your rights. You may request access, rectification, erasure, restriction, and portability of your data, and you may object to processing based on legitimate interests. Where processing rests on consent, you may withdraw it at any time without affecting prior processing. You may lodge a complaint with a supervisory authority — for us, the Berlin Commissioner for Data Protection and Freedom of Information. CCPA residents additionally have the right to know, delete, correct, and opt out of sale/share, and will not be discriminated against for exercising these rights. California residents may designate an authorized agent for requests.
§ 6 Contact. All privacy requests go to [email protected] or by post to NarrativePointMedia, Zabel-Krüger-Damm 13, 13469 Waidmannslust, Germany. We answer within one month.