Privacy statement.

How Berjawi Moesli handles personal data. Version September 2026.

1. Who is responsible

Berjawi Moesli is responsible for the personal data described here (the “controller” under the General Data Protection Regulation, GDPR). Berjawi Moesli is a trade name of the business of Yara Berjawi, registered with the Dutch Chamber of Commerce (KvK) under number 71802096, Van Mierisstraat 46, 2526 NS Den Haag, the Netherlands.

Questions about your data go to yara@berjawimoesli.com or cornel@berjawimoesli.com. We’re a studio of two, so we don’t have a data protection officer; Yara and Cornel answer themselves.

2. In short

  • This website has no analytics, no advertising and sets no cookies.
  • What you send us through the website reaches Yara and Cornel by email. We use it to answer you and, if we work together, to run the project.
  • We never sell personal data or pass it on for anyone else’s marketing.

3. Visiting the website

Our host, Vercel, processes technical data to deliver the pages and keep the site secure: your IP address, browser type, the page you asked for and the time. We don’t use this data to identify visitors.

The site remembers your language choice in your browser’s local storage. It stays on your device and is never sent to us. Fonts and the showreel come from our own server, so loading a page doesn’t contact Google, YouTube or any other third party. Links to YouTube, LinkedIn and client websites take you to those sites, where their own privacy policies apply.

Legal basis: our legitimate interest in running a secure website (article 6(1)(f) GDPR).

4. Contacting us and the questionnaire

The project form asks for your name, company, email address, budget range and what you want to make. The questionnaire asks about your situation, your company (name, industry, size and who decides) and your email address, plus anything you choose to add. It suggests an approach based on your answers. That’s the only automated step: Yara or Cornel read every enquiry themselves.

Your message is sent to us by email through our mail provider, Infomaniak. The website doesn’t store it. To stop spam, the form keeps your IP address in memory for a short time; it isn’t written anywhere. If sending fails, the site opens your own mail app with the message ready, and it reaches us like any other email.

We use your details to answer you, to prepare a call or proposal and, if you asked for it, the mini health check of your online presence. Legal basis: steps you ask us to take before a possible agreement (article 6(1)(b) GDPR) and our legitimate interest in answering business enquiries (article 6(1)(f)). By ticking “Yes, Berjawi Moesli may email me” you agree that we email you about your enquiry. You can withdraw that at any time.

5. Clients, freelancers and crew

When we work together, we keep the business contact details of the people we deal with, our correspondence, quotes, invoices and project files. The same goes for freelancers and crew we book: contact details, rates and invoices. We need this to carry out the agreement (article 6(1)(b) GDPR) and to meet our bookkeeping and tax obligations (article 6(1)(c)).

6. People in front of the camera

When we film or photograph people we cast or interview, we record their image and voice, and keep their name, contact details and signed release. We use the recordings only as the release allows. Legal basis: the release or the agreement with that person (article 6(1)(a) or (b) GDPR).

When a client brings its own employees or other people in front of our camera, the client is responsible for their data and we process it on the client’s behalf, as set out in our terms and conditions.

7. Companies we approach

Now and then we contact people at companies we’d like to work with. For that we keep names, roles and business contact details from public sources such as company websites and LinkedIn, plus notes on our contact. Legal basis: our legitimate interest in finding new clients (article 6(1)(f) GDPR). When we first write to you, we say where we found your details. Ask us to stop and we stop and delete your details, keeping only your email address on a do-not-contact list so we don’t write to you again.

8. Who else sees your data

Yara and Cornel, and beyond the two of us only those who need it for a specific task:

  • freelancers and crew working on your project, bound by confidentiality;
  • the providers of the software we run the studio on: website hosting (Vercel), email (Infomaniak), our client administration and invoicing system, file storage, and the AI assistants we use for drafting. They process data only on our instructions, under a processing agreement;
  • our accountant and the authorities, where the law requires it.

9. Outside the EU

Some of these providers are based in Switzerland or the United States. Switzerland has an adequacy decision from the European Commission. For the United States we rely on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

10. How long we keep it

  • Enquiries and contacts that don’t lead to a project: up to 24 months after our last contact, or sooner if you ask.
  • Contact details and correspondence from client projects: while we work together and up to 2 years after.
  • Invoices and bookkeeping: 7 years, as Dutch tax law requires.
  • Films, photos, raw footage and releases: in our archive, for our portfolio and later edits, within what the releases and our agreement with the client allow.

11. Security

The website only runs over an encrypted connection (HTTPS). We limit access to personal data to the people named in section 8 and take appropriate technical and organisational measures against loss and misuse.

12. Your rights

You can ask to see, correct or delete your data, to limit what we do with it, or to receive it in a common file format. You can object to anything we do on the basis of our legitimate interest, and withdraw consent at any time. Email us; we answer within one month and may ask you to confirm who you are.

If you think we handle your data wrongly, tell us first. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or to the data protection authority where you live or work. In Switzerland that’s the Federal Data Protection and Information Commissioner (FDPIC), and the Swiss Federal Act on Data Protection gives you comparable rights.

13. Changes

We update this statement when our work or our tools change. The version on this page applies; the date at the top says when it last changed.