Privacy Policy

Last updated: 10 October 2026

1. Data Controller

The controller responsible for the processing of personal data on this website is:

Pınar Küpeli
[Full postal address]
[Postal code, City, Germany]

Email: pinarkupeli@gmail.com
Telephone: +49 162 8150649

2. General Information

This website is a personal professional portfolio presenting film art department and production design work.

I take the protection of personal data seriously and process personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR).

This Privacy Policy explains what information may be processed when you visit this website, why it is processed, and what rights you have regarding your personal data.

3. Website Hosting

This website is built and hosted using Squarespace.

When you visit the website, Squarespace may process technical information necessary to deliver, secure, and maintain the website. Depending on the website configuration, this information may include:

  • IP address

  • Date and time of access

  • Pages and files requested

  • Browser type and version

  • Operating system and device information

  • Referring website information

  • Technical logs and error information

This information may be processed to ensure the security, stability, and proper functioning of the website.

The legal basis is Article 6(1)(f) GDPR, where processing is necessary for legitimate interests in operating and securing the website, provided those interests are not overridden by the rights and freedoms of the individuals concerned.

Service provider: Squarespace, Inc. and/or the relevant Squarespace contracting entity. The exact contracting entity, applicable processing arrangements, and data storage locations should be verified against the current Squarespace account terms.

For further information, please consult the Squarespace Privacy Policy.

4. Website Analytics

This website uses website analytics to understand how visitors interact with its content and to improve the presentation and usability of the portfolio.

The analytics service currently needs to be confirmed. It may include Squarespace Analytics and, if separately configured, Google Analytics or another third-party analytics service.

Depending on the service and configuration, analytics may process information such as:

  • Pages visited and navigation patterns

  • Visit duration and interaction data

  • Browser, device, and approximate location information

  • IP address or other online identifiers

  • Referral sources and technical information

Analytics data is used to understand website traffic and improve the website. It is not intended to identify individual visitors directly.

Where analytics involves non-essential cookies or access to information stored on a visitor's device that requires consent under applicable law, the relevant technologies will be used only after the required consent has been obtained.

Where consent is the legal basis, processing is based on Article 6(1)(a) GDPR and, where applicable, Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG). Consent may be withdrawn at any time.

If analytics processing is based on another lawful basis, the specific service, purpose, and legal basis must be established and disclosed accordingly.

The retention period, recipients, and any international data transfers depend on the analytics service and its configuration.

To verify before publication: Confirm whether analytics means Squarespace Analytics alone or includes a separate Google Analytics integration. Update this section to identify the actual service and its applicable retention and transfer arrangements.

5. Cookies and Similar Technologies

Squarespace and other services enabled on this website may use cookies or similar technologies.

Cookies and similar technologies may be used for purposes including:

  • Essential website functionality and security

  • Remembering privacy and cookie preferences

  • Website analytics

  • Additional functionality provided by third-party services, if enabled

Technologies that are strictly necessary for the requested website functionality may be used where permitted by law.

Non-essential analytics or other technologies requiring consent will be activated only after the necessary consent has been obtained. You may withdraw or change your consent through the website's cookie settings, where available.

You can also manage cookies through your browser settings. Blocking certain cookies may affect website functionality.

The exact cookies, providers, purposes, and retention periods depend on the technologies currently enabled on this website. These should be verified using the Squarespace cookie and privacy settings before publication.

6. Contact by Email or Telephone

There is no contact form on this website.

If you contact me directly by email or telephone, I process the information you voluntarily provide, which may include your name, contact details, and the contents of your enquiry.

This information is used to respond to your enquiry and, where relevant, to discuss potential professional collaborations or projects.

The legal basis is Article 6(1)(f) GDPR for general enquiries, where applicable, or Article 6(1)(b) GDPR when the communication concerns steps taken at your request before entering into a contract or the performance of a contract.

Personal data is retained only for as long as necessary to handle the enquiry and any resulting professional or legal obligations. Statutory retention requirements remain unaffected.

7. External Links

This website contains links to external platforms, including professional profiles, film-industry platforms, and social media websites.

These links are ordinary external links. No embedded social media feeds, video players, or other third-party content are intentionally integrated into the website, based on the current website configuration.

When you click an external link, you leave this website and access the external provider's website. That provider may process personal data in accordance with its own privacy policy.

I do not control the data processing practices of external providers. Please consult their respective privacy policies for further information.

The mere presence of an ordinary external link does not, by itself, mean that the external provider receives your personal data before you click it.

8. Recipients and International Data Transfers

Personal data may be processed by Squarespace and, where applicable, analytics providers or other technical service providers involved in operating this website.

Where service providers process personal data on my behalf, the applicable data protection requirements and any required data processing agreements apply.

Some service providers may process personal data outside the European Economic Area. Where personal data is transferred to a third country, the transfer must comply with the requirements of the GDPR, including an applicable adequacy decision or appropriate safeguards where required.

The actual recipients, locations, and safeguards depend on the services enabled on this website and must be verified against their current documentation.

9. Data Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by law.

Technical logs, analytics information, and correspondence may have different retention periods depending on the relevant service and purpose.

The applicable retention periods for Squarespace Analytics and any additional analytics service should be verified and specified where required.

10. Your Rights Under the GDPR

Subject to the applicable legal requirements, you have the following rights regarding your personal data:

  • Right of access: To request access to personal data concerning you.

  • Right to rectification: To request the correction of inaccurate or incomplete data.

  • Right to erasure: To request the deletion of your personal data where the legal requirements are met.

  • Right to restriction: To request restriction of processing in the circumstances provided for by law.

  • Right to data portability: To receive certain personal data in a structured, commonly used, and machine-readable format.

  • Right to object: To object to processing based on legitimate interests where the applicable requirements are met.

  • Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise these rights, contact me using the details provided in Section 1.

11. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.

You may contact the supervisory authority responsible for your habitual residence, place of work, or the location of the alleged infringement, as applicable.

12. Changes to This Privacy Policy

This Privacy Policy may be updated to reflect changes to the website, the services used, or applicable legal requirements.

The current version will be made available on this website.