Privacy Notice

Last updated 23 August 2026.

Data controller

This site, ghiathalmhitawi.com, is run by Ghiath Al Mhitawi, who is the data controller for the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR. Contact: ghiath.mh@gmail.com.

What this site does automatically

This is a static site: pages, text and images, with no account system, no forms, no newsletter sign-up and no analytics or advertising trackers of any kind. On a normal page visit, this site itself does not set any cookies and does not store any personal data.

Your web browser still sends your IP address and basic request details (browser type, page requested, timestamp) to whichever host serves these files, as happens with any website — that is ordinary server operation, not something this site configures, and it is processed under the hosting provider's own legitimate interest in running and securing its service (Art. 6(1)(f) GDPR), typically for a short retention period.

Film trailers — Vimeo and YouTube

Film pages can include an embedded trailer hosted on Vimeo or YouTube. That embed is not loaded automatically: you see a still image with a play button first, and the trailer's video player, along with any cookies Vimeo or YouTube set, only loads after you click play. Clicking play is your consent to that one action (Art. 6(1)(a) GDPR).

Once you click play on any trailer, this site remembers that choice in your browser's local storage so you aren't asked again on future visits from the same device. That one stored flag contains no personal data beyond "yes/once", and storing it doesn't itself require consent, since it's strictly necessary to honour the choice you already made. You can clear it at any time below, or by clearing your browser's site data for this domain.

Vimeo and YouTube (operated by Google) are independent data controllers for whatever they collect once their player loads. See Vimeo's privacy policy and Google's privacy policy. Both may process data outside the UK/EEA under their own transfer safeguards.

Other links

This site links out to Facebook, Instagram and IMDb. Following one of those links takes you to a separate site with its own privacy practices, outside this notice's scope.

Your rights

Under the GDPR and UK GDPR, you have the right to:

  • ask what personal data is held about you, and get a copy (access);
  • have inaccurate data corrected (rectification);
  • ask for data to be deleted (erasure);
  • restrict or object to processing;
  • withdraw consent at any time, for example by using the button above — this doesn't affect processing that already happened before you withdrew it;
  • lodge a complaint with a supervisory authority — the UK's Information Commissioner's Office (ico.org.uk) or your local EU data protection authority.

For anything about this site itself, contact ghiath.mh@gmail.com. For data Vimeo or YouTube hold about you after you've played a trailer, contact them directly using the links above.

Changes to this notice

If what this site does changes, for example a contact form or analytics gets added later, this page will be updated and the date at the top revised accordingly.