Back to home
Back to home

Legal

Privacy Policy

How we handle personal data on theroughcrew.com, in line with the EU General Data Protection Regulation (GDPR).

Last updated: November 2026

1. Controller

The controller responsible for data processing on this website is:
Eyal Navon, trading as The Rough Crew
Schauinslandstr. 14, 79224 Umkirch, Germany
Email:

2. General Information on Data Processing

We only process personal data where we have a legal basis to do so, in particular your consent (Art. 6 (1)(a) GDPR), the performance of a contract or steps taken at your request prior to entering into a contract (Art. 6 (1)(b) GDPR), or our legitimate interests, provided these are not overridden by your interests or fundamental rights (Art. 6 (1)(f) GDPR).

3. Hosting and Server Log Files

This website is hosted by Checkdomain GmbH, Germany, on our behalf. Each time you access this website, the hosting provider's server automatically collects information in server log files, which your browser transmits to us. This includes: IP address, date and time of the request, browser type and version, operating system, referrer URL, and the amount of data transferred.

This data is processed to ensure the stable, secure, and reliable operation of the website (Art. 6 (1)(f) GDPR, legitimate interest) and is not merged with other data sources. Log files are stored for a limited period, only as long as necessary for these security purposes, and are then deleted or anonymised.

4. Cookies

This website does not currently use analytics, tracking, or marketing cookies. Should this change in the future — for example, by adding web analytics — we will update this Privacy Policy and, where legally required, obtain your consent beforehand.

5. Application Form

When you submit an application via our application form, we collect the information you provide: first name, last name, email address, a link to your portfolio or showreel, and, optionally, a free-text message.

We use this data to process your application and to correspond with you about it. The legal basis is Art. 6 (1)(b) GDPR (steps taken at your request prior to entering into a contract). We do not share this data with third parties, other than the email service we use to receive and store our correspondence. We do not use your data for automated decision-making or profiling.

We retain application data for as long as necessary to process your application and any resulting correspondence, and delete it afterwards unless a longer retention is required by law or you enroll in the course, in which case data relevant to that contract is retained accordingly.

6. Future Course Enrollment and Payment

Should you enroll in a paid course, we will need to process additional personal data as necessary to fulfil that contract, such as billing details and data related to payment processing. Should we introduce a payment processor or learning platform that processes personal data on our behalf, we will update this Privacy Policy accordingly before any such processing begins.

7. Fonts

The fonts used on this website (Gasoek One, Space Grotesk) are self-hosted on our own server. No connection is made to Google or any other third-party font provider when you visit this website, and no data about you is transmitted to such providers for this purpose.

8. Data Security

This website uses SSL/TLS encryption to protect the transmission of data between your browser and our server. We take appropriate technical and organisational measures to protect your data against loss, misuse, or unauthorised access.

9. Your Rights

Under the GDPR, you have the right to:

  • request access to the personal data we hold about you (Art. 15 GDPR);
  • request rectification of inaccurate data (Art. 16 GDPR);
  • request erasure of your data (Art. 17 GDPR);
  • request restriction of processing (Art. 18 GDPR);
  • receive your data in a structured, machine-readable format (Art. 20 GDPR); and
  • object to processing based on legitimate interests (Art. 21 GDPR).

Where processing is based on your consent, you may withdraw that consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI Baden-Württemberg).

10. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes to our website or legal requirements. The current version is always available on this page.

11. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us: .