Back to dreamfilms.it

Legal

Privacy Policy

Last updated: 23 October 2026

This policy explains how personal data is processed when you visit dreamfilms.it and its related pages (including Experience and the case study pages), in accordance with Regulation (EU) 2016/679 (GDPR), Italian Legislative Decree 196/2003 as amended and the Italian Data Protection Authority’s guidelines on cookies and other tracking tools.

Data controller

Dream Films di Filippo Bellisola
Verona, Italy
VAT no. 04688200239
Email: info@dreamfilms.it

For any privacy-related request you can write to the email address above. A data protection officer has not been appointed, as it is not required for this activity.

What data is processed

This website presents our video productions. It has no user accounts. The data processed is:

  • Browsing data: technical logs generated by the web server (IP address, browser and device type, operating system, pages requested, date and time, referring page).
  • Visit statistics: aggregated counts of visits collected with Umami, a privacy-friendly analytics tool that uses no cookies, does not store IP addresses and does not identify or follow individual visitors (see “Statistics” below).
  • Application forms: the application forms on the Experience page do not send anything to our server. They only prepare an email in your own email app, which you then decide whether to send.
  • Emails you send us: if you write to info@dreamfilms.it, your address, name (if given) and message are handled in our email account.

Purposes and legal basis

  • Operating and securing the website (server logs): legitimate interest, Art. 6(1)(f) GDPR.
  • Aggregated visit statistics, to understand which pages work: legitimate interest, Art. 6(1)(f) GDPR. No cookies are used and no consent is required.
  • Answering your emails and applications about productions, collaborations or quotes: pre-contractual steps taken at your request, Art. 6(1)(b) GDPR.

Statistics

Visit statistics are collected with Umami (umami.is). Umami does not set cookies, does not store IP addresses and does not create profiles: each visit is turned into anonymous, aggregated figures (pages viewed, country, device type, referring website). No data is shared with advertising networks.

Content loaded from other services

Some parts of the website are delivered by external providers. When your browser loads them, these providers receive your IP address and basic technical data:

  • Cloudinary: delivery of images and videos.
  • YouTube (Google): video thumbnails are loaded from YouTube’s image servers. Videos are embedded in YouTube’s privacy-enhanced mode (youtube-nocookie.com) and are loaded only when you click play; from that moment YouTube’s own privacy policy applies.
  • Microlink (microlink.io) and TikTok: used to fetch preview images of some social media videos in the portfolio.
  • Google Drive: some case study videos open on Google Drive only when you click them.

All fonts are served directly from this website: no external font service is used. Links to Instagram, TikTok and other websites lead to services with their own privacy policies.

Cookies and browser storage

This website does not use profiling, marketing or analytics cookies, so no cookie banner is required. To work properly it only stores small technical items in your browser:

  • Session storage: remembers that you unlocked the password-protected Experience or case study pages, until you close the browser.

These items are not used to identify you. You can delete them at any time from your browser settings. YouTube may set its own cookies only after you choose to play a video.

Recipients and transfers

Data is handled by the providers needed to run the website: the web hosting provider (server and logs), Umami (statistics), Cloudinary, Google/YouTube, Microlink and TikTok as described above. They act as processors or as independent controllers for their own services. Data is not sold or shared for marketing.

Some of these providers may process data outside the European Economic Area, for example in the United States. Such transfers rely on the EU-U.S. Data Privacy Framework or on the standard contractual clauses adopted by the European Commission.

Data retention

  • Server logs: usually up to 90 days, then deleted automatically.
  • Visit statistics: kept only as anonymous aggregated figures.
  • Email correspondence: for as long as needed to handle your request, or longer where required by tax and accounting obligations.

Your rights

Under Articles 15 to 22 GDPR you can ask to access your data, correct it, erase it, restrict or object to its processing, and receive it in a portable format. To exercise these rights write to info@dreamfilms.it.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it).

Automated decision-making

No automated decision-making or profiling takes place.

Changes

This policy may be updated when the website changes. The “Last updated” date at the top shows the latest revision.