Privacy Policy
- Who we are
- Scope of this Policy
- The website itself: no cookies, no analytics
- Personal data we collect
- Photographs, sensitive data and other people
- Purposes and legal bases
- Use of artificial-intelligence services
- Who we share data with
- International transfers
- How long we keep data
- Security
- Your rights
- Portfolio and publication
- Marketing messages
- Children
- Data-breach notification
- Changes to this Policy
- Contact and complaints
1. Who we are
Kinovita is a personal video-production service that assembles photographs supplied by a client into a short documentary film about a person's life. This Policy is issued by the data controller:
Guzel Molochnikova, trading as Kinovita
Registered business in Israel — Osek Patur (VAT-exempt sole trader). The business registration number appears on every receipt we issue and is provided on request.
HaMapal 42, Yokneam Illit, Israel
Email: [email protected]
WhatsApp / phone: +972 55 949 4756
References to “we”, “us” and “Kinovita” mean the above. References to “you” mean any person who visits this website, contacts us, or orders a film.
2. Scope of this Policy
This Policy explains what personal data we collect, why, with whom we share it, and what rights you have. It covers two distinct situations:
- Visiting kinovita.com — where we collect almost nothing (see section 3);
- Ordering and producing a film — where you deliberately entrust us with photographs and personal stories, which is where the substance of this Policy applies.
We process personal data in accordance with the Israeli Protection of Privacy Law, 5741–1981 (as amended, including Amendment 13) and the Protection of Privacy Regulations (Data Security), 5777–2017. Where you are located in the European Economic Area or the United Kingdom, we also apply the General Data Protection Regulation (EU) 2016/679 and the UK GDPR.
3. The website itself: no cookies, no analytics
We want to be precise about this, because most privacy policies are vague where they should be concrete.
- kinovita.com sets no cookies of its own.
- We run no analytics — no Google Analytics, no Meta Pixel, no session recording, no heat-mapping.
- There are no contact forms. Every button on the site opens WhatsApp or your email client. Nothing is submitted to us through the site.
- We build no advertising profiles and we do not sell, rent or trade personal data. Ever.
Two technical exceptions, which we disclose rather than hide:
- Google Fonts. The site loads typefaces from Google's servers. To deliver a font, Google necessarily receives your IP address and basic browser information. This is processed by Google LLC / Google Ireland Limited under their own privacy terms.
- Hosting logs. Our hosting provider may automatically record standard server logs (IP address, time of request, page requested, browser type) for security and reliability. We do not use these logs to identify individual visitors.
4. Personal data we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Contact details | Your name, phone number, WhatsApp profile name and photo, email address | You, when you contact us |
| Correspondence | The content of WhatsApp and email exchanges, including voice messages | You |
| Order materials | Photographs; names, dates, places and life events of the person the film is about; family relationships; text, captions and audio you supply; music preferences | You |
| Order and payment records | Order details, agreed price, dates, proof of payment and receipts | You and your bank / payment service |
We do not collect or store payment card numbers. Payment is made outside this website through the method agreed with you, and we see only confirmation that a payment was made.
5. Photographs, sensitive data and other people
This is the heart of our service and deserves plain language.
A photograph of an identifiable person is personal data. A family archive spanning decades may also reveal — directly or by implication — health conditions, religious observance, ethnic origin, political affiliation or family circumstances. Under Israeli law such material may constitute sensitive information, and under Article 9 of the GDPR some of it may fall into special categories of personal data. We treat all order materials as sensitive by default, regardless of what they happen to show.
Photographs of other people. The photographs you send us will normally show people other than yourself — parents, grandparents, children, relatives and friends, some of whom may be deceased. We rely on you to have the right to share them. By sending materials to us you confirm that you are entitled to do so and that, where required, the people depicted (or those responsible for them) do not object. If someone depicted in a film contacts us and objects, please see section 12 — we will deal with the request seriously.
Where a film concerns a person who has died, we handle their images and life story with the same care and confidentiality as those of a living person.
6. Purposes and legal bases
| Purpose | Legal basis (GDPR Art. 6 / 9) |
|---|---|
| Discussing your enquiry, quoting, and agreeing an order | Steps taken at your request prior to entering a contract — Art. 6(1)(b) |
| Producing, revising and delivering the film | Performance of our contract with you — Art. 6(1)(b) |
| Processing photographs that may reveal special-category data | Your explicit consent — Art. 9(2)(a). You give this consent by choosing to send us the materials for this stated purpose, and you may withdraw it at any time |
| Keeping accounting and tax records | Compliance with a legal obligation under Israeli tax law — Art. 6(1)(c) |
| Keeping a record of correspondence to defend or establish legal claims | Our legitimate interests — Art. 6(1)(f) |
| Showing a completed film as a work sample | Your separate, specific consent — Art. 6(1)(a). Never assumed (see section 13) |
| Sending you occasional news or offers | Your consent — Art. 6(1)(a), and Amendment 40 to the Israeli Communications Law |
Where processing relies on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal, and if you withdraw consent for the processing necessary to produce your film, we will not be able to complete the order.
7. Use of artificial-intelligence services
Part of our craft is bringing still photographs into gentle motion. This is done with third-party artificial-intelligence video-generation services. To do it, your photographs are uploaded to those services' servers, which may be located outside Israel and outside the European Economic Area.
What this means for you:
- We upload only the photographs actually needed for the film, and we do not attach names or other identifying details to those uploads.
- Each provider operates under its own terms and privacy policy, over which we have no control.
- You may ask us at any time, before or during production, which specific services are being used for your order, and we will tell you.
AI processing is an inseparable part of this service. Bringing photographs into motion is what the film is made of — it cannot be produced any other way. We set this out here so that you can decide with full knowledge before ordering. If you do not want your photographs processed in this way, please do not place an order.
8. Who we share data with
We share personal data only with the following categories of recipients, and only as far as necessary:
| Recipient | What they receive | Why |
|---|---|---|
| Meta Platforms (WhatsApp) | Correspondence and any files you send through WhatsApp; message metadata | It is the channel you use to reach us. Message content is end-to-end encrypted in transit; metadata is not |
| Google (Google Drive / Google Workspace) | Photographs, project files and the finished film | Receiving large files, storage during production, and delivering the film to you |
| AI video-generation providers | Individual photographs | Animating still frames (see section 7) |
| Our hosting provider | Standard server logs | Serving this website |
| Accountant, tax authorities, banks | Order and payment records — no photographs | Legal and accounting obligations |
| Legal advisers, courts | Only what is strictly necessary | Only if required to establish, exercise or defend legal claims |
Editing itself is carried out on our own equipment. We employ no staff and use no freelancers who would have access to your materials. We do not share personal data with advertisers, data brokers or social networks for their own purposes.
9. International transfers
We are established in Israel, which the European Commission has recognised as providing an adequate level of data protection. Personal data therefore moves from the EEA to us on the basis of that adequacy decision.
Some of the service providers listed in section 8 process data in the United States or in other countries. Where such a transfer is not covered by an adequacy decision, we rely on the provider's standard contractual clauses or equivalent safeguards, and — for the AI processing described in section 7 — on your explicit consent given with knowledge of the possible risks, in accordance with Article 49(1)(a) of the GDPR and the Israeli Protection of Privacy (Transfer of Data Abroad) Regulations, 5761–2001.
10. How long we keep data
| What | How long |
|---|---|
| Photographs and working project files | 1 month after delivery of the film — enough to cover the revision period — then deleted |
| The finished film | 1 month after delivery, then deleted, unless you ask us in writing to keep it longer |
| WhatsApp and email correspondence | Up to 3 years, to have a record of what was agreed |
| Order, invoice and payment records | 7 years, as required by Israeli tax and bookkeeping rules |
| Films used as work samples with your consent | Until you withdraw consent |
Download your film immediately and keep your own backup. We are a film studio, not an archive service. One month after delivery your photographs and your film are deleted from our storage, and after that we will not be able to send you another copy. This is not a formality — please do it on the day you receive the link.
You may ask us to delete your materials earlier than the periods above, and we will do so unless we are legally required to keep a record — see section 12.
11. Security
We apply security measures appropriate to the sensitivity of what you entrust to us and to the requirements of the Protection of Privacy Regulations (Data Security), 5777–2017:
- Materials are stored in access-controlled cloud storage and on encrypted devices.
- Accounts used for the service are protected by strong, unique passwords and two-factor authentication.
- Access is limited to the person producing your film. No third party is given browsing access to your archive.
- Sharing links to finished films are private and unlisted, and are revoked after the retention period.
- Materials are deleted from working storage at the end of the retention period.
No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. What we can guarantee is that we will tell you promptly if something goes wrong (see section 16).
12. Your rights
Under Israeli law, you have the right to inspect information held about you in a database (section 13 of the Protection of Privacy Law) and to request that information which is incorrect, incomplete, unclear or out of date be corrected or deleted (section 14).
If you are in the EEA or the UK, you additionally have the right to: access your data; have it rectified; have it erased; restrict its processing; object to processing based on legitimate interests; receive your data in a portable format; and withdraw consent at any time.
In practice, this means you can write to us at [email protected] and ask us to send you what we hold, correct it, or delete it. We will respond within 30 days. We do not charge for this. We may ask you to confirm your identity so that we do not hand a family archive to the wrong person.
If you are a person depicted in materials sent to us by someone else and you object to that processing, please contact us. We will act on the request as far as we lawfully can, and where we cannot act unilaterally we will tell you why.
13. Portfolio and publication
Your film is private. We do not publish it, show it, or use any part of it as a work sample unless you have given us separate, explicit permission for that specific film. Permission to produce a film is not permission to show it.
If you do give permission, you may withdraw it at any time by writing to [email protected]. We will remove the material from our own channels promptly. Where the material has already been shared or re-posted by others, we will do what we reasonably can, but we cannot guarantee removal from platforms outside our control.
14. Marketing messages
We do not send bulk marketing. If we ever send you news or an offer, it will be because you asked us to, in line with Amendment 40 to the Israeli Communications (Telecommunications and Broadcasts) Law, 5742–1982. Every such message will identify us and give you a simple way to stop receiving them; you may also simply reply “stop” on WhatsApp. Messages about an order you have actually placed are service messages, not marketing, and will continue while the order is live.
15. Children
Our service is directed at adults. We do not knowingly enter into a contract with anyone under 18. Photographs of children will often appear in a family film; we rely on you, as the adult placing the order, to have the authority to provide them. If you believe a child's data has reached us in a way it should not have, write to [email protected] and we will delete it.
16. Data-breach notification
If a security incident occurs that affects your personal data and is likely to result in a risk to your rights, we will notify you without undue delay and describe plainly what happened, what data was involved, and what we are doing about it. Where the law requires it, we will also notify the Israeli Privacy Protection Authority and, for data subjects in the EEA, the relevant supervisory authority within 72 hours of becoming aware of the breach.
17. Changes to this Policy
We may update this Policy as our service or the law changes. The version in force is always the one published here, with its date at the top. If a change materially affects how we handle data belonging to a client with an active order, we will tell that client directly rather than rely on them noticing the update.
18. Contact and complaints
For any question about this Policy, or to exercise any of your rights, contact us first — it is usually the fastest route to a resolution:
Email: [email protected]
WhatsApp: +972 55 949 4756
Post: Kinovita, HaMapal 42, Yokneam Illit, Israel
If you are not satisfied with our response, you may complain to the Israeli Privacy Protection Authority (gov.il — Privacy Protection Authority). If you are in the EEA or the UK, you may also complain to the data-protection supervisory authority of your country of residence.
This Policy is published in English, Russian and Hebrew. In the event of any discrepancy, the Hebrew version prevails for clients resident in Israel, and the English version prevails for all other clients.
See also our Terms of Service.