Privacy policy

Privacy policy

This policy explains how we process your personal data. It follows the EU General Data Protection Regulation (GDPR), the revised Swiss Federal Act on Data Protection (revFADP) and, for visitors from the United States, California consumer privacy law (CCPA/CPRA).

1. Controller

The controller for data processing on this website is Kern Operations LLC, operator of the brand “42 Takes”.

2. Point of contact for Switzerland and the EU

The operator of this website is Kern Operations LLC, based in the United States. For Switzerland and the European Union, Swiss Techies GmbH is your point of contact. You can send data protection requests there or at any time through our contact form; we treat them as a request to the controller. Where a representative in the EU is required under Art. 27 GDPR, we will appoint one and update this policy.

3. Which data we process

a) Contact form. When you use the form on this website, we process the data you enter: name, email address, message and, if you provide them, phone number and website. Purpose: answering your request and preparing a proposal for your film. Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual steps) and our legitimate interest in answering under lit. f; for Switzerland Art. 31 revFADP.

b) Server log files. When you open this website, technical access data is processed automatically (IP address, date and time, page requested, browser type, referrer). Purpose: secure and stable operation and defence against attacks. Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest).

c) Cookies and tracking. This website sets no analytics, marketing or tracking cookies and uses no analytics services. A cookie banner is therefore not required. The only exception is the spam protection of the contact form (see d).

d) Cloudflare Turnstile (spam protection). To protect the contact form against automated abuse we use “Cloudflare Turnstile” by Cloudflare, Inc. It is only loaded when you start using the form, not when you merely view the page. Turnstile checks technical signals (including IP address and browser signals) to tell whether an entry comes from a person, without advertising tracking and without persistent cookies. Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in a working, spam-free form).

e) Fonts, films and scripts. Fonts, films and scripts are served from our own server. Merely viewing the pages does not load anything from third-party servers and does not pass your IP address to third parties.

f) Hosting and email delivery. The website is hosted with Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, with data centres in the EU among other places). Cloudflare processes the access data named under b on our behalf. The message you send through the contact form is delivered to our mailbox by the email service Resend (Resend, Inc., USA). Legal basis: Art. 6 para. 1 lit. f GDPR.

4. Recipients and processors

Your data is passed only to service providers that support us in providing the website and handling your request (hosting and spam protection by Cloudflare, email delivery by Resend). They are bound by contract to confidentiality and to process data only on our instructions. Your data is not sold. Production partners for voice, music or 3D only receive the content of a film project, not your contact data, unless this is necessary for the project.

5. Transfers to third countries (USA)

The controller is based in the United States, and hosting, spam protection and email delivery may transfer data to the United States. Transfers rely on the Standard Contractual Clauses of the European Commission or on the EU-U.S. and Swiss-U.S. Data Privacy Framework where the provider is certified. For Switzerland the corresponding safeguards under the revFADP apply.

6. Storage period

We keep requests sent through the contact form as long as needed to handle your request and a possible business relationship, and delete them afterwards unless statutory retention duties require otherwise. Server log data is kept only briefly for security purposes.

7. Your rights (EU/GDPR and Switzerland/revFADP)

You have the right to access the data processed about you and to rectification, erasure, restriction of processing, data portability and objection to processing. You may withdraw consent at any time with effect for the future. To exercise these rights, write to us through our contact form. You may also lodge a complaint with a supervisory authority: in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), in the EU with the data protection authority of your country of residence.

8. Notice for users in the United States (CCPA/CPRA)

If you are a resident of California, you have the right to know which personal information we collect, to have it corrected or deleted, and to opt out of its sale or sharing. We do not sell personal information and do not share it with third parties for payment (“Do Not Sell or Share”). You will not be discriminated against for exercising your rights. Send requests through our contact form.

9. Automated decisions

No automated decision-making or profiling with legal effect takes place.

10. Data security

The website is delivered exclusively over encrypted connections (HTTPS/TLS). We take appropriate technical and organisational measures to protect your data.

11. Changes

We update this policy when the law or our processing changes. The version published on this page applies.

Last updated: 5 October 2026