GDPR Policy for Gathering Personal Data

Introduction

This GDPR policy outlines the practices and procedures of Entertainment Mafia regarding the collection, use, storage, and protection of personal data in compliance with the General Data Protection Regulation (GDPR). We are committed to safeguarding the privacy of our customers, employees, and partners.

Data Collection

Types of Data Collected

We may collect the following types of personal data:

  • Contact Information: Name, email address, phone number, and postal address, at times National Insurance Number and passport copies 
  • Payment Information: Banking details as supplied on invoices by you so we can send payments. We will never ask for debit or credit card information. 
  • Demographic Information: Age, gender, and date of birth.
  • Performance Information regarding your skills and appearance for casting purposes 

Methods of Data Collection

Personal data may be collected through various methods, including:

  • Online Forms: Registration, subscription, and contact forms on our website.
  • Transactions: Payment of your invoices 
  • Cookies and Tracking Technologies: Automated collection through cookies and other ethical tracking technologies.

Legal Basis for Processing

We process personal data based on the following legal grounds:

  • Consent: Where the individual has given clear consent for us to process their personal data for a specific purpose.
  • Contract: Processing is necessary for a contract we have with the individual, or because they have asked us to take specific steps before entering into a contract.
  • Legal Obligation: Processing is necessary to comply with the law.
  • Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.

Use of Personal Data

We use personal data for the following purposes:

  • Service Delivery: Providing you with accurate bookings and castings, event management, and customer support.
  • Communication: Sending newsletters, updates, and promotional materials, provided the individual has consented to receive such communications.
  • Personalization: Tailoring content and advertisements to individual preferences.
  • Analytics: Conducting analysis and research to improve our services and user experience.
  • Upload Photo, video and stage name upload to websites and brochures 
  • Compliance: Fulfilling our legal obligations and protecting our rights.

Data Sharing and Disclosure

We do not sell or rent personal data to third parties. We may share personal data with:

  • Service Providers: Trusted third parties who assist us in operating our business, such as payment processors, marketing agencies, and IT service providers.
  • Legal Authorities: When required by law or to protect our legal rights.

Data Security

We implement appropriate technical and organizational measures to protect personal data from unauthorized access, disclosure, alteration, and destruction. These measures include:

  • Encryption: Secure encryption of sensitive data during transmission and storage.
  • Access Controls: Restricting access to personal data to authorized personnel only.
  • Regular Audits: Conducting regular security audits and assessments.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. When personal data is no longer needed, we will securely delete or anonymize it.

Individual Rights

Individuals have the following rights regarding their personal data:

  • Access: The right to request access to their personal data.
  • Rectification: The right to request correction of inaccurate or incomplete data.
  • Erasure: The right to request deletion of their personal data under certain conditions.
  • Restriction: The right to request restriction of processing of their personal data.
  • Data Portability: The right to receive a copy of their personal data in a structured, commonly used, and machine-readable format.
  • Objection: The right to object to the processing of their personal data.
  • Withdrawal of Consent: The right to withdraw consent at any time, where consent was the basis for processing.

Contact Information

If you have any questions or concerns about this GDPR policy or wish to exercise any of your rights, please contact us at:

Entertainment Mafia
45 Silverstream House

Fitzroy Street

London

Fitzrovia 

W1T 6EB

+44 2038355205

themafia@entertainmentmafia.co.uk

Changes to this Policy

We may update this GDPR policy from time to time. Any changes will be posted on our website, and where appropriate, notified to you by email. This policy was last updated on [Date].

By using our services, you acknowledge that you have read and understood this GDPR policy. Thank you for trusting us with your personal data.

Entertainment Mafia