Privacy Policy

last updated: 8 october 2026

Who I am

This site is run by Vinny Mikelinskas (vinny.mp4), a filmmaker and photographer based in Stockholm, Sweden. I'm the data controller for the personal data described here. For anything privacy-related, email workwith@vinnyfilms.com, use the contact form on the front page or send a DM to @vinny.mp4 on Instagram.

The short version

• The only personal data I collect is what you type into the contact form.
• No advertising or tracking cookies, and your data is never sold or used for marketing.
• Visits are counted with Vercel Web Analytics, which works without cookies.

Contact form

When you send the form, I receive your name, email address and message. I use them to reply, talk about your project and, if we work together, plan the job. The legal basis is my legitimate interest in answering enquiries and, where a job follows, taking steps towards a contract with you (GDPR Art. 6(1)(f) and 6(1)(b)).

The form is delivered by FormSubmit (formsubmit.co), which acts as my processor and forwards the submission by email to workwith@vinnyfilms.com. FormSubmit processes technical data such as your IP address when you send the form and may handle it outside the EU/EEA. You can always email me directly instead.

I keep messages for as long as we're in touch about the project and for up to 24 months after, unless you ask me to delete them sooner. If an enquiry turns into paid work, invoices and related records are kept for seven years, as the Swedish Bookkeeping Act (bokföringslagen) requires.

Hosting

The site is hosted by Vercel Inc. To deliver pages and keep the site secure, Vercel processes technical data such as your IP address, browser type and the pages you request. Vercel acts as my processor. Data may be processed outside the EU/EEA, including in the United States, under the EU Standard Contractual Clauses and the EU-US Data Privacy Framework.

Analytics

I use Vercel Web Analytics to see how many people visit and which pages they view. It sets no cookies and doesn't follow you across other websites. Visitors are counted with a hash of the request that is discarded after 24 hours, so you can't be identified. The legal basis is my legitimate interest in understanding how the site is used.

Fonts

Fonts are loaded from Google Fonts. When a page loads, your browser connects to Google's servers, which means Google receives your IP address.

Cookies and local storage

This site sets no cookies. When you click accept or decline in the cookie notice, that choice is saved in your browser's local storage (key vinny-cookie-consent) so you aren't asked again. You can change it any time with the cookie settings link in the footer, or clear it in your browser.

Videos, photos and Instagram

All videos and photos on this site are hosted here, so nothing is embedded from Instagram or other platforms. When you follow a link to Instagram, Instagram's own privacy policy applies.

Your rights

Under the GDPR you can ask for a copy of the personal data I hold about you, have it corrected or deleted, restrict or object to how I use it, and get it in a portable format. Get in touch through the contact form or Instagram and I'll reply within one month.

You can also complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se.

Changes

If anything changes in how I handle data, I'll update this page and the date at the top.