1. Data Controller
 

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

CreatorWave Productions Ltd.
Patriarchiou Grigoriou 15
5290 Paralimni, Cyprus
 

Company registration number: HE488429
 

Email: hello@creatorwaveagency.com
 

2. General Information on Data Processing
 

We process the personal data of our users only insofar as this is necessary to provide a functional website as well as our content and services. As a rule, personal data is processed only with the consent of the data subject, or in cases where obtaining prior consent is not possible for practical reasons and the processing is permitted by law.
 

3. Access to Our Website
 

Each time our website is accessed, our system automatically collects data and information from the accessing device. The following data is collected: browser type and version, the operating system used, the date and time of access, the previously visited website (referrer), and the (shortened) IP address.

This data is stored in the log files of our system or that of our hosting provider. This data is not stored together with any other personal data of the user.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free presentation and the security of our website.
 

4. Hosting via Wix
 

Our website is operated via the Wix platform. The provider is Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel, with further offices in the USA and Europe, among other locations. Wix provides the technical infrastructure for operating our website and, in this context, processes the data generated when the website is accessed (in particular access and log data as well as technically necessary cookies).

Further information on data processing by Wix can be found in Wix's privacy policy at: https://www.wix.com/about/privacy

The legal basis for the use of Wix is Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient operation of our website). A data processing agreement (Data Processing Addendum) pursuant to Art. 28 GDPR is in place with Wix.
 

5. Data Transfers to Third Countries
 

When using Wix, personal data may be transferred to third countries outside the European Union or the European Economic Area (in particular to the USA and Israel).

For Israel, an adequacy decision of the European Commission exists, meaning that an adequate level of data protection is recognized. For data transfers to the USA, Wix relies, according to its own information, on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR) together with supplementary protective measures. Details can be found in the Wix privacy policy linked above.
 

6. Application and Contact Form
 

Our website offers a form through which interested parties can apply to us or get in touch with us. When you use this form, we process the data you enter, in particular:

• Name or chosen name

• Social media handle

• Email address [adjust if necessary]

• The message you submit, or information about yourself and your current situation

We use this data solely to process your application or inquiry and to contact you.

The legal basis for the processing is Art. 6(1)(b) GDPR (steps taken to enter into a contractual or working relationship) as well as Art. 6(1)(f) GDPR (our legitimate interest in processing your inquiry).

The data submitted via the form is additionally processed in connection with hosting via Wix (see sections 4 and 5).

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. If no collaboration comes about, we will delete your data no later than [e.g. 6 months] after the inquiry has been conclusively processed, unless statutory retention obligations require otherwise.
 

7. Disclosure of Data

Your personal data will only be transferred to third parties insofar as this is necessary to process your inquiry or you have expressly consented to it. Where we engage service providers, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.

8. Your Rights

As a data subject, you have the following rights:

• Access (Art. 15 GDPR) to the personal data we process

• Rectification (Art. 16 GDPR) of inaccurate data

• Erasure (Art. 17 GDPR)

• Restriction of processing (Art. 18 GDPR)

• Data portability (Art. 20 GDPR)

• Objection to processing (Art. 21 GDPR)

• Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)

To exercise your rights, an informal message to the contact details provided above is sufficient.

9. Right to Lodge a Complaint with a Supervisory Authority
 

Without prejudice to any other legal remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your place of residence. The supervisory authority responsible for us is the Office of the Commissioner for Personal Data Protection, Cyprus (www.dataprotection.gov.cy).

10. Data Security
 

We take appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse. Data transmission on our website is encrypted via TLS/SSL.

11. Validity and Changes to This Privacy Policy
 

This privacy policy is currently valid and is dated 07/2026. As our website develops further or due to changes in legal requirements, it may become necessary to amend this privacy policy.