Information Clause

In accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as "GDPR"), we inform you that:

The Data Controller is Outset Films sp. z o.o., located at Filtrowa 68/114, 02-057 Warsaw, hereinafter referred to as the "Controller".

The Controller hereby informs that it has not appointed a Data Protection Officer (DPO) and is independently fulfilling the obligations related to the processing of personal data. The Controller can be contacted in writing at the address provided above.

Purposes and legal bases for processing: Your personal data will be processed for the following purposes, based on the indicated legal grounds:

For the purpose of providing casting services and future casting services by the Controller and cooperating entities or those entrusted with data (other acting agencies, film producers) - based on Article 6(1)(a) of the GDPR,
For telephone or email contact regarding the provision of services, i.e., castings conducted by the Controller - based on Article 6(1)(a) of the GDPR,
For selecting the appropriate performer for a role in a film production based on the recording made and the image provided during the casting - based on Article 6(1)(a) of the GDPR,
To enter into or perform a contract with you due to the necessity of data processing for the performance of the contract – based on Article 6(1)(b) of the GDPR,
For record-keeping and settlements, and to fulfill other obligations under tax law - based on Article 6(1)(c) of the GDPR,
For sending newsletters - based on Article 6(1)(a) of the GDPR,
For archival and analytical purposes - based on Article 6(1)(f) of the GDPR, i.e., on the basis of the Controller's legitimate interest,
To ensure security and property protection through conducted monitoring, which is a legally justified interest pursued by the Controller – based on Article 6(1)(f) of the GDPR,
For evidentiary purposes being the realization of the Controller's legally justified interest in ensuring continuous and uninterrupted operation and protection against various types of allegations and claims, pursuit of claims, and defense against claims - based on Article 6(1)(f) of the GDPR,
For internal administrative purposes of the Data Controller, related to managing contact with you, as the realization of the Controller's legally justified interest – based on Article 6(1)(f) of the GDPR,
For direct marketing targeted at you, which is a legally justified interest of the Controller - based on Article 6(1)(f) of the GDPR.

Right to object

You have the right to withdraw your consent at any time, although withdrawal will not affect the lawfulness of processing based on consent before its withdrawal. You also have the right to object to the processing of your data on the basis of the Data Controller's legally justified interests. The Controller will cease processing your data for these purposes unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

Data retention period Your data will be stored:

Until the withdrawal of your consent or the request to cease processing personal data, including the image, or the request to delete the personal data processed by you, or until the purpose of processing is achieved - in relation to personal data processed based on consent,
Until you object to profiling,
For the duration of the contract and until the expiration of claims arising from or related to the contract, in accordance with applicable laws,
Until the expiration of data retention obligations arising from legal provisions (archival, tax, accounting purposes),
Until data becomes outdated or loses its usefulness – in relation to data processed for analytical purposes, cookies, etc.

Data recipients

We may disclose your personal data to the following recipients: entities with whom or on whose behalf we provide services to the extent necessary and with whom we cooperate in film projects, payroll and accounting services, invoice issuing company, legal firm, postal and courier services, insurance company, contractors, and clients who will receive your data to the extent necessary to enable communication with you, other services providing IT system maintenance and hosting, electronic mail service provider, cloud service provider, company management system service provider, mailing service (newsletter) or SMS dispatch (telephone service), or payment system provider. We may also be required to disclose your data to private and public entities based on legal provisions.

Transfer to third countries As we use services from external providers of various services such as Facebook, Google, Microsoft, etc., your data may be transferred to third countries, such as the United States. However, they will be transferred only to those recipients who have joined the Privacy Shield, which ensures adequate protection of your data.

Rights of data subjects

You have the right to access the content of your data, receive copies thereof, and the right to rectification, erasure (if you believe there are no grounds for us to process these data, you may request their deletion), restriction of processing, the right to data portability, the right to object, the right to withdraw consent at any time, which will not affect the lawfulness of processing based on consent before its withdrawal;

Right to lodge a complaint

You have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of personal data infringes the provisions of the GDPR;

Requirement to provide data and consequences of not providing Providing personal data is voluntary, but providing some data may be necessary to perform a casting service, enter into a contract for participation in a film production, perform a service, handle a complaint, refund money, issue an invoice, or settle tax. The consequence of not providing these data will be the non-performance of the aforementioned activities.

Profiling

As part of the Administrator's activities, we profile your data. Profiling is the automated processing of your data for analytics and selection of the appropriate Performer for a film role based on their characteristics. Each data owner has the right to object to profiling. We do not use profiling for making automated decisions. The consequence of profiling will be the selection of a specific person to participate in a film production conducted by the Administrator.