PRIVACY NOTICE

 

1.    INTRODUCTION

 

This Privacy Notice sets out how Keo Films Limited (“we”/”us”) uses and protects any information that you give us. We are committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified, then you can be assured that it will only be used in accordance with this Privacy Notice.

 

2.   ABOUT US

Our contact and registration details are as follows:

Company Name: KEO Films Limited

Country of Registration: England and Wales

Company Number: 13505776

Registered Office: 33-34 Rathbone Place, W1T 1JN, London

Tel: +44 0208 995 3936

Email: keo@keofilms.com

 

This Privacy Notice does not apply if you are a current or past employee, worker or contractor of ours. In that case, our Internal Privacy Notice will be applicable.

 

3.   WHAT WE COLLECT

We may collect the following information:

  • name and job title;
  • contact information including email address;
  • demographic information such as postcodes;
  • details about you, if you are applying to and ultimately taking part in a programme;
  • details about you, if you have sent us an application for a job or speculative work;
  • details about you, if you are supplying us with services;
  • your image; and/or
  • any other personal information you choose to disclose to us or we capture in the course of our relationship with you.

 

4.   HOW WE USE YOUR INFORMATION

a.     Purpose; to answer your queries or complaints.
Personal information used; your name and contact details submitted.

Lawful basis; we have a legitimate interest to answer your query or complaint and improve the services we provide or to otherwise contact you in the course of our relationship with you.

b.      Purpose; direct marketing on a specific programme where you have opted to receive communications from us.

Personal information used; your name and email address you have registered on the site with.

Lawful basis; consent. We will always ask you to agree before using this information and you may withdraw your consent at any time by contacting us via our contact details in section 15 below.

c.       Purpose; applications for a job or speculative work.

Personal information used; all the CV/career information you have sent or disclosed to us, or we may obtain from other sources (e.g., referees, social media, etc).

Lawful basis; we have a legitimate interest to consider you for work and future opportunities.

d.      Purpose; applications to be on a programme, taking part, or contributing to a programme.

Personal information used; this will include contact details, and any information you choose to disclose to us, including information on your race, ethnicity, your physical and mental health, sexual orientation, and information relating to any criminal offences. If you choose to take part in a programme, this may also include other personal information (such as details of your education, employment and lifestyle and information on social media about you). This information may be necessary for research and to decide if you are suitable for the programme. You do not need to provide this information, but please be aware that if you do not, you may be unable to take part in the programme. If the applicant is a child, this will include the contact details of the parent or guardian.

Lawful basis; depending on where we are in the application and production process, this may be based on your consent, the legitimate interests of us or third parties (such as co-producers, the commissioner, broadcasters, distributors of the programme) to make and exploit the programme and keep proper records, for the fulfilment of our contractual obligations to you or so that we and the third parties referred to above can comply with our legal obligations.

e.       Purpose; to provide services to us.

Personal information used; this will include your name, contact details, VAT No and bank account details.

Lawful basis; to comply with our obligations under our contract with you (e.g. to make payment to you for your services). We also have a legitimate interest to consider you for further work opportunities.

 

Where you have given us your consent to use your personal information in a particular manner, you have the right to withdraw this consent at any time, which you may do by contacting us as described in section 15 below.  We will generally only ask for your consent for direct marketing.

Please note however that the withdrawal of your consent will not affect any use of the data made before you withdrew your consent, and we may still be entitled to hold and process the relevant personal information to the extent that we are entitled to do so on bases other than your consent.

 

5.   CHANGE OF PURPOSE

a.     We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

b.     If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

c.     Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

 

6.   WHERE WE COLLECT YOUR PERSONAL INFORMATION FROM

We will collect personal information from a number of sources. These include the following (list is not exhaustive):

  • Directly from you, for example, when you contact us, meet us face to face or complete electronic and/or paper forms we provide to you.
  • From our website (see section 7.e. below).
  • Where you apply to work or participate on a program:
    • from publicly available sources (e.g., social media platforms).
    • from other sources that you give us permission to access (e.g., medical health checks, criminal offences data) from your referees.

7.   WHO WE SHARE YOUR PERSONAL INFORMATION WITH:

a.     Where you apply to be on a programme or participate in a programme:

  • other companies that may be involved in the making of the programme, which will include co-producers, broadcasters and distributors;
  • if the programme is distributed, then to the extent your personal information is included in a programme, that information will be disclosed worldwide, publicly as part of the programme; and
  • to the Creative Diversity Network for Diamond diversity research (see section 9.c.).

b.    Service providers and advisors such as companies that support our IT, help us analyse the data we hold, provide us with legal or financial advice and generally help us deliver our services.

c.    The Government or our regulators where we are required to do so by law or to assist with their investigations.

d.    Police and law enforcement to assist with the investigation and prevention of crime.

e.    Our website logs various information about visitors, including internet protocol (IP) addresses, browser type, internet service provider (ISP) information, referring / exit pages and date / time stamp and we may use this information:

  • to analyse trends, administer the website, track your movement around the website and gather broad demographic information. However, we do not link this information to personally identifiable information;
  • for Google Analytics which sets cookies to collect information about how visitors use our website. We use the information to compile reports and to help us improve the website.  For more information about how we use cookies and tracking information in an anonymous form, please see our Cookie Policy; and
  • to provide third parties with aggregate statistical information and analytics about users of our products and services but we will make sure no one can be identified from this information before we disclose it.

 

8.   TRANSFERRING YOUR PERSONAL INFORMATION INTERNATIONALLY

The personal information we collect about you is not transferred to or stored in countries outside of the UK or European Union except as set out in this section:

  • if your personal information is included in a programme, that programme may be made available worldwide;
  • our directors and/or other individuals working for us may in limited circumstances access personal information outside of the UK and European Union if they are abroad. If they do so they will be using our security measures and will be subject to their arrangements with us which are subject to English Law and the same legal protections that would apply to accessing personal data within the UK;
  • in limited circumstances the people to whom we may disclose personal information as mentioned in section 7 above may be located outside of the UK and European Union.  In these cases, we will impose any legally required protections to the personal information as required by law before it is disclosed; and
  • if you require more details on the arrangements for any of the above then please contact us using the details in section 15 below.

 

9.   RETENTION, UPDATING AND REMOVAL OF YOUR PERSONAL INFORMATION

a.    We will not transfer your information to, or store it, outside of the European Economic Area except as expressly stated in this notice.

b.    If you are taking part in a programme, to determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data, whether we can achieve those purposes through other means, and the applicable legal requirements. Usually, the personal data will be used for the duration of a programme life cycle – including distribution of the programme to the broadcaster and distributor.

c.    If you are taking part in a programme that is commissioned by a UK broadcaster, you may be asked to participate in a diversity initiative ‘Diamond’, via a system called Silvermouse. It is possible to opt out of this at request. For more information on Diamond and Silvermouse and on how your data is managed by Diamond, please visit https://creativediversitynetwork.com/diamond/.

d.    If you have applied to work for us, we may keep your CV for approximately 12 months and consider you for future work. We will keep candidate information until the end of the recruitment process or for a further 12 months to consider you for other roles that become available. Those engaged by us will have their personal data kept in accordance with our Internal Privacy Notice.

e.    If you have applied to be on a programme, we will keep your application until the end of the casting process.  If you are unsuccessful, your application will be securely destroyed unless we have asked for your permission to keep your details to consider you for the next series. If you are selected to contribute on a programme 9.b. above will apply.

f.    It is important to ensure that the personal information we hold about you is accurate and up-to-date, and you should let us know if anything changes, for example if you move position or work for a different organisation or change your phone number or email address. You can contact us using the details in section 15 and, where appropriate, we will update the relevant personal information for you.

g.    We will notify you and any applicable regulator of a breach of our obligations under data protection laws, where we are legally required to do so.

 

10.    SECURITY

We are committed to ensuring that your information is secure and have numerous security measures in place to protect the loss, misuse and alteration of information under our control, such as passwords and firewalls. We cannot, however, guarantee that these measures are, or will remain, adequate. We do, however, take data security very seriously and will use all reasonable endeavours to protect the integrity and security of the personal information we collect about you.

 

11.     YOUR RIGHTS IN RELATION TO YOUR PERSONAL INFORMATION

a.    You have the following rights in relation to your personal information:

  • the right to be informed about how your personal information is being used;
  • the right to access the personal information we hold about you;
  • the right to request the correction of inaccurate personal information we hold about you;
  • the right to request the erasure of your personal data in certain limited circumstances;
  • the right to restrict processing of your personal information where certain requirements are met;
  • the right to object to the processing of your personal information;
  • the right to request that we transfer elements of your data either to you or another service provider; and
  • the right to object to certain automated decision making processes using your personal information.

b.   You should note that some of these rights may not apply as they may have specific requirements and exemptions which apply to them, or they may not apply to personal information recorded and stored by us.  For example, we do not use automated decision making in relation to your personal data.  However, some rights have no conditions attached, so your right to object to processing for direct marketing are absolute rights. This Privacy Notice sets out a general summary of your legal rights in respect of personal information and you can find more information about your legal rights on the Information Commissioner’s website https://ico.org.uk/your-data-matters/.

c.    To exercise any of the above rights, or if you have any questions or concerns relating to your rights, please contact us by using the details set out in section 15 below.

d.   If you make a complaint about our handling of your personal information, it will be dealt with in accordance with our complaints handling procedure. In the first instance it will be reviewed by our operations team who will respond to you within 28 days. If you are dissatisfied with this response you may request that your complaint is escalated, in which case it will be passed to a senior person in our business. This senior person will review your complaint and the initial response and provide a further response within 28 days of your request to escalate the matter.

e.   If you are unhappy with the way we are using your personal information you can also complain to the UK Information Commissioner’s Office. Please see https://ico.org.uk/make-a-complaint/ for more information. We are here to help and encourage you to contact us first to resolve your complaint.

f.    You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

g.    We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

h.    We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

 

12.    DIRECT MARKETING

We will only send you emails on a specific programme where you have opted to receive communications from us. You can let us know at any time that you do not wish to receive these messages by contacting us using the details set out in section 15 below or by clicking on the unsubscribe link in any marketing messages we send to you.

 

13.    LINKS TO THIRD PARTY SITES

Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit so that you can understand how they treat your personal data.

 

14.    CHANGES TO THIS PRIVACY NOTICE

We reserve the right to alter this Privacy Notice at any time. Such alterations will be posted on the website by us. Such changes will come into effect three business days after posting. Should you object to any alteration, please contact us as described in section 15.

 

15.     CONTACTING US

If you need to contact us about this Privacy Notice or any matters relating to the personal information we hold on you, you can write to us at KEO Films Limited, 101 St. John Street, London, EC1M 4AS or email us at keo@keofilms.com.

 

Last updated August 2023