Our website and its owners take a proactive approach to user privacy and ensure the necessary steps are taken to protect the privacy of its users throughout their visiting experience. This website complies with all UK national laws and EU and requirements for user privacy.
What are cookies?
Cookies are small files saved to the user’s computer’s hard drive that track, save and store information about the user’s interactions and usage of the website. This allows the website, through its server to provide the users with a tailored experience within this website.
Should users wish to deny the use and saving of cookies from this website onto their computer’s hard drive, they should take necessary steps within their web browser’s security settings to block all cookies from this website and its external serving vendors.
Whilst using our website or services, you may be required to provide personal information (name, email). We will use this information to administer our website, and client databases. Further, by providing telephone and email details, you consent to Top Hat Productions contacting you using that method.
We (do not) use this information to send marketing material. When you send us your contact details we store this within our own e-mail system and website so that we are able to respond to you. We do not share this information with anyone else.
We will ensure that all personal information supplied is held securely in accordance with the General Data Protection Regulation (EU) 2016/679, as adopted into law of the United Kingdom in the Data Protection Act 2018. You have the right at any time to request a copy of the personal information we hold on you. Should you wish to receive a copy of this, or would like to be removed from our database, please contact us at Top Hat Productions, Lincoln House Studios, Lincoln House, 296-302 High Holborn, London, WC1V 7JH.
Information collection and use
Top Hat Productions collects information in two possible ways:
a. When you directly give it to us (“Directly Provided Data”)
When you communicate with us, you may choose to voluntarily give us certain information – for example, by filling in text boxes or completing registration forms. All this information requires a direct action by you at that time in order for us to receive it.
b. When you give us permission to obtain from other accounts (“User Authorised Data”)
Depending on your settings or the privacy policies for other online services, you may give us permission to obtain information from your account with those other services. For example, this can be via social media or by choosing to send us your location data when accessing our website from your smartphone.
Who we share information with?
Top Hat Productions will not sell or rent your personally identifiable information, gathered as a result of filling out the site contact form, or any form of contact with us, to anyone.
Top Hat Productions shares your personal information for very limited reasons and in limited circumstances as follows:
Compliance with laws. We may collect, use, retain, and share your information if we have a good faith and belief that it is reasonably necessary to: (a) respond to legal process or to government requests; (b) enforce our agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of our clients, or others.
How long do we keep your data for?
Top Hat Productions will not retain your personal information longer than necessary. We will hold onto the information you provide either while your account is in existence, or as needed to be able to provide the Services to you, or (in the case of any contact you may have with our Customer Care team) for as long as is necessary to provide a support-related service.
If legally required or if it is reasonably necessary to meet regulatory requirements, resolve disputes, prevent fraud and abuse, or enforce our Terms and Conditions, we may also retain some of your information for a limited period of time as required, even after it is no longer needed to provide the Services to you.
You can choose how we use your data
We understand that you trust us with your personal information and we are committed to ensuring you can manage the privacy and security of your personal information yourself.
With respect to the information relating to you that ends up in our possession, and recognising that it is your choice to provide us with your personally identifiable information, we commit to giving you the ability to do all of the following:
You can verify the details you have submitted to Top Hat Productions by contacting email@example.com. Our security procedures mean that we may request proof of identity before we reveal information, including your e-mail address and possibly your address.
You can also contact us by the same method to change, correct, update or delete your personal information controlled by Top Hat Productions regarding your profile at any time. Please note though that, if you have shared any information with others through social media channels, that information may remain visible, even if your account is deleted.
You can request a readable copy of the personal data we hold on you at any time. To do this, please contact us firstname.lastname@example.org.
Please note, we are constantly reviewing how we process and protect data as the GDPR comes into force (25th May 2018). Therefore, changes to our policy may occur at any time. We will endeavour to publicise any changes.
Contributor privacy notice
Like most businesses, we hold and process a wide range of information, some of which relates to individuals who we engage to take part in our productions. Top Hat Productions is committed to being transparent about how it collects and uses that data and to meeting its data protection obligations under the GDPR (General Data Protection Regulations).
This Privacy Notice explains the type of information we process, why we are processing it and how that processing may affect you.
notice focuses on individuals who we are speaking to about potentially taking part in one of our productions, as well as those who actually take part in our productions. It also covers information on those who have previously taken part in our productions.
This Privacy Notice is set out in this document and the Supplementary Information attached to this document. In the Supplementary Information, we explain what we mean by “personal data”, “processing”, “sensitive personal data” and other terms used in the notice.
Personal Data- what we hold and why we process it?
We process data for the purposes of our business including for development and production of programmes, broadcasting, distribution and marketing of those programmes.
The Supplementary Information provides more specific information on these purposes, on the type of data that may be processed and on the grounds on which we process data. See Legal grounds for processing personal data and further information on the data we process and our purposes.
Where the data comes from and who gets to see it?
Some of the personal data that we process about you comes from you. For example, your name, age and email address, mobile number. Other personal data about you is generated in the course of you taking part in the production.
If you are under 18 years of age we will need your parent/guardian’s permission before you provide us with any personal information.
Your personal data may be seen internally by relevant people working on the production. We may also pass your data outside the organisation, for example for distribution and marketing purposes and also to relevant bodies such as the Commissioning broadcaster.
Further information on this is provided in the Supplementary Information. See Where the data comes from and Who gets to see your data?
How long do we keep Personal Data?
We do not keep your personal data for any specific period but will not keep it for longer than is necessary for our purposes.
In general, if you are chosen to work on a production we will keep your personal data for so long as you take part in a production and for a period afterwards. If you are not chosen to take part in the programme we will only retain your personal data for a short period of time after our discussions have ended.
See Retaining your personal data – more information in the Supplementary Information.
Transfers of Personal Data outside the EEA
We may transfer your personal data outside the EEA to processors in the US or to other jurisdictions to perform our business.
Further information on these transfers and the measures taken to safeguard your data are set out in the Supplementary Information under Transfers of personal data outside the EEA – more information.
Your data rights
You have a right to make a subject access request to receive information about the data that we process about you.
Further information on this and your other rights is in the Supplementary Information under Access to your personal data and other rights. We also explain how to make a complaint about our processing of your data.
In processing your personal data, we act as a data controller. Our contact details are as follows: Darren Kemp, Managing Director, Top Hat Productions, e: email@example.com, Lincoln House Studios, Lincoln House, 296-302 High Holborn, London, WC1V 7JH.
Status of this notice
This notice does not form part of your contract and does not create contractual rights or obligations. This Policy was last updated on 25th May 2018. It should be regarded as a living document that may be amended by us at any time, to ensure our ongoing compliance with The General Data Protection Regulations and the UK’s Data Protection Act 2018.
Contributor Privacy Notice- Supplementary Information
What is “Personal Data” and “Processing”
“Personal data” is information relating to you (or from which you may be identified) which is processed by automatic means or which is (or is intended to be) part of a structured manual filing system. It includes not only facts about you, but also intentions and opinions about you.
Data “processed automatically” includes information held on, or used on, a computer, laptop, mobile phone or similar device. It covers data derived from equipment such as access passes within a building, data on use of vehicles and sound and image data such as CCTV. It also covers video, audio and images captured as part of a production.
"Processing" means doing anything with the data, for example, it includes collecting it, holding it, disclosing it and deleting it.
Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, health, sexual orientation, sex life, trade union membership and genetic and biometric data are subject to special protection and considered by EU privacy law to be “special category data”.
References in this Contributor Privacy Notice to “work” or “services” (and similar expressions) include any arrangement we may have under which an individual provides us services in relation to a production. We use the word “you” to refer to anyone within the scope of this notice.
References to “Programmes” or “Productions” includes the development of the programme, the programme itself and/or series you have applied for, or been approached to appear in; and any re-edited, re-voiced, re-formatted, updated or compilation, or any other versions thereof, or further series or spin-off’s and/or other content.
Legal grounds for processing Personal Data
Under data protection law, there are various grounds on which we can rely when processing your personal data. In some contexts more than one ground applies. We have summarised these grounds as Legal obligation, Legitimate Interests, To Perform the Contract and Consent and outline what these terms mean in the following table.
Processing Special Category Data
If we process sensitive personal data about you (which includes medical information, political opinions, sexual orientation), as well as ensuring that one of the grounds for processing mentioned above applies, we will make sure that one or more of the grounds for processing sensitive personal/special category data applies. In outline, these include:
· Where you have given explicit consent to the processing of your personal data;
· Processing relating to data about you that you have made public (e.g. if you tell us you are ill);
· Processing being necessary for the purpose of establishing, making or defending legal claims;
· Processing being necessary for provision of health care or treatment, medical diagnosis, and assessment of your working capacity;
· Processing for equality and diversity purposes to the extent permitted by law.
Further information on the data we process and purposes
More specific information on the reasons we process your personal data and examples of the data and the grounds on which we process data, are in the table below.
The examples in the table cannot, of course, be exhaustive. For example, we may also require criminal background checks for certain roles (for example those working with minors or vulnerable adults) and for contributors to certain programs in development and production, or we may ask you to self-declare any criminal convictions or offences. If we require these checks we rely on the legal basis that is it is necessary to comply with statutory or regulatory requirements and obligations, and we are entitled to carry out a criminal records check in order to satisfy ourselves that there is nothing in your criminal convictions history which makes you unsuitable for the program. On occasions we may ask for your explicit Consent to such checks. Where we require criminal background checks the company has in place an appropriate policy document and safeguards, which we are required by law to have.
Where we need to ask you about sensitive information, e.g. criminal convictions, your health information, you do not need to provide this information to us. However, if you do not, you may be unable to take part in the program.
Please note that owing to the fact that you may be appearing in one of our programmes, on some occasions we or third parties will rely upon exemptions to data protection rules in relation to journalistic freedom, the right to artistic expression or more generally, the right to freedom of expression (as mentioned in article 85 of the General Data Protection Regulation and in the UK’s Data Protection Bill section on the exemption for ‘journalistic, academic, artistic or literary purposes)’.
Where data comes from?
When you apply to be in one of our productions, and/or participate in one of our productions, the initial data about you that we process is likely to come from you, but we may also require references and information from third parties and carry out background checks.
For example, we will collect data from The Disclosure & Barring Service in respect of criminal convictions and offences.
Who gets to see your data and where it is held?
Internal use: Your personal data may be disclosed within Top Hat Productions to our employees and staff working on your production. It may also be shared with the Company’s Business Affairs Team and any of our staff involved in commercial exploitation, finance (if appropriate), Health and Safety and Insurance.
Data will be stored in a range of different places, including on your application record, in management systems and on other IT systems (including email).
External use: We will only disclose your personal data outside the company if disclosure is consistent with a ground for processing on which we rely and doing so is lawful and fair to you. We may disclose your data if it is necessary for our legitimate interests as an organisation, or for the legitimate interests of a third party (but we will not do this if these interests are over-ridden by your interests and rights in particular to privacy).
Specific circumstances in which your personal data may be disclosed include:
· Disclosure of aggregated and anonymised diversity data to relevant regulators as part of a formal request;
· If you have an on-screen role, disclosure of footage, images, or audio recordings of you as part of the broadcasting, distribution and marketing of the production. Or, where you have an on-screen or off-screen role, to allow us to credit your role on the programme. Or, sharing your data on our website.
· When complying with our obligations under any applicable laws.
· Disclosure to Co-Producers, Distributors, Agents, Commissioning Broadcasters, Investors, Insurers, IT system suppliers, Travel and Medical Service Providers (including any psychiatrists, psychologists and Counsellors who are advising us on contributor suitability for the programme).
Any Companies or Organisations and/or individuals with whom we share your Data will be required to comply with current Data Protection laws.
Your Data will not be subject to any automated decision making processes.
How do we protect your Data?
The company takes the security of your data seriously. We have internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our staff and relevant third parties in the proper performance of their duties.
Retaining your Personal Data - more information
Although there is no specific period for which we will keep your personal data, we will not keep it for longer than is necessary for our purposes. In general, we will keep your personal data until the show has been produced and for a period afterwards. In considering how long to keep it, we will take into account its relevance to our business and your participation either as a record or in the event of a legal claim.
Personal data relating to contributors applications (if not successful) will normally be deleted after 12 months. If your application is successful, and your data is only useful for a short period (for example, CCTV images), we may delete it. Some data, such as production footage itself and credit information, will be kept indefinitely for as long as the Programme is being broadcast, distributed and/or exploited, as we have an ongoing legitimate interest in retaining the product.
Where we cannot specify a date for the destruction of your personal data, we will review our retention periods annually.
Transfers of Personal Data outside of the EEA -- more information
In connection with our business and for production, broadcasting, distribution, administrative, management, marketing and legal purposes, we may transfer your personal data outside the EEA to data processors in the US or to other jurisdictions in which we are established or where we have 3rd party service providers or business relationships. We will ensure that any transfer is lawful and that there are appropriate security arrangements and safeguards to protect your data.
Access to your Personal Data and other rights
We try to be as open as we reasonably can about your personal data that we process. If you would like specific information, please ask us.
You have a legal right to make a “subject access request”. If you exercise this right and we hold personal data about you, we are required to provide you with information, within a month, including:
· Giving you a description and copy of the personal data we hold on you
· Telling you why we are processing it.
If you make a subject access request and there is any question about who you are, we may require you to provide information so that we can satisfy ourselves as to your identity.
As well as your subject access rights, you may have a legal right to have your personal data rectified or erased, to object to its processing or to have its processing restricted.
If you have provided us with data about yourself you have the right to be given the data in machine readable format for transmitting to another data controller. This only applies if the ground for processing is Consent.
If we have relied on consent as a ground for processing, you may withdraw consent at any time – though if you do so that will not affect the lawfulness of what we have done before you withdraw consent.
If you have complaints relating to our processing of your personal data, you should raise these with your key contact at the production in the first instance.
You may also raise complaints with your statutory regulator, which in the UK is the Information Commissions Officer.