This document encompasses an overview concerning the processing of your personal data in the course of processing your request, application, if applicable your participation in the casting process or production. It also contains information concerning your rights pursuant to data protection law.
Who is responsible for the processing of my data?
UFA SHOW & FACTUAL GmbH, Siegburger Straße 215, 50679 Köln, Germany (“UFA“) is data controller according to data protection law.
Data protection officer (“DPO”) of UFA is Bertelsmann SE & Co. KGaA (Group Data Privacy). I may contact the DPO by mail to UFA under the address stated above or via email to datenschutz.usf@ufa.de in each case with the addition “To the Data Protection Officer”.
What kind of personal data is being processed?
UFA processes personal data provided by myself in my request, my application, the casting process and/or subsequent production. Additionally, UFA may process personal data legitimately provided by third parties (e. g. agencies, insurance companies) and encompassed in publicly available sources (e. g. press, media, social media, internet).
Relevant personal data are primarily my name, my contact details, my qualities, and characteristics relevant for the production (e. g. age, occupation) as well as pictures, videos provided by myself encompassing myself, contract data, data concerning my financial situation/insolvency, insurance data as well as communication data (e. g. email). Moreover, pictures and videos encompassing myself created during the casting/production and transcripts thereof are processed by UFA.
All my personal data collectively hereinafter referred to as “data”.
What is the purpose and the legal basis for processing the data?
In general, processing of my data occurs solely for the purposes for which I provided the data respectively for which they were collected. These purposes include processing of my request or application, in the course of the casting process, including conducting a selection process, initiating and performing contacts (including staff lists, building security and handling prices, if applicable), creation, exploitation, promotion and commercialization of the production, media coverage about the production, myself and my participation in said production; moreover the fulfilment of legal obligations, the proof of chain of title, e. g. in case of third-party intervention and the fulfilment of possible contractual claims of authors. Additionally, for purpose of presenting the business activities to third parties. Legal basis for this processing is Art. 6 (1) b, c and f General Data Protection Regulation (“GDPR”)). As far as the processing is based on legitimate interests, the processing safeguards invests of processors in the production. Such interest outweighs my own rights in my data. Data processing may also be based on special laws (e. g. law on protection of copyrights of artists (KUrhG)).
If special categories of data (Art. 9 GDPR) are processed Art. 9 (2) a and e, 6 (1) a, c and f GDPR form the legal basis.
If I agreed to the processing of my data, my data will be processed in line with my consent given. This applies e.g. if I agreed to my data are being processed and stored in the Casting or Ticketing Database to address me as potential candidate or viewer for other productions or if I agreed to receive newsletters and promotion (e. g. special offers) for participants or viewers. In this case my consent forms the basis of the processing of my data (Art. 6 (1) a GDPR).
Who will receive my data?
My data will be transferred for the above purposes to the commissioning broadcaster/streamer and third parties assigned by the latter to commercialize and exploit the production (Art. 6 (1) b and f GDPR). For handling of prices (if applicable) my data may transferred to financial service providers, or in case of tangible prices the manufacturer/vendor or carrier of the price (Art. 6 (1) b und f GDPR). Moreover, my data may be transferred to the press and other media for media coverage (Art. 6 (1) b and f of the GDPR).
If I chose communication via WhatsApp the terms and conditions of WhatsApp Ireland and WhatsApp Inc. apply. According thereto WhatsApp obtains access e.g. to my mobile number, mobile numbers stored on my mobile device and my user behaviour. You may find further information relating thereto under https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy. Such terms and conditions are outside UFA’s sphere of influence. Hence, UFA shall not be liable for any damages resulting out of or in connection with use of WhatsApp. I am free to contact UFA by other means (e. g. email).
To some extent UFA engages third party service providers (e. g. data centres, mailing processor, casting agencies) for the fulfilment of certain tasks. These third parties are in general engaged as data processor who are processing data following UFAs instructions. Such data processors are obliged to comply with data protection law, UFA’s instructions and confidentiality obligations. E. g. UFA currently engages M.K. Advision LTD for technical Online-Casting-Services and Mailjet SAS for the transmission of newsletters, marketing SMS and emails.
Are my data being transferred to third countries?
My data may be transferred to third countries outside the EU/EEA (“third country”), if required for pre-contractual measures, performance of the contract or in my interest (e. g. shooting abroad, hotel and travel arrangements); moreover, if required for initiating, performing or defending legal claims (e. g. legal reporting obligation, entry and exit conditions) (Art. 49 (1) b and c GDPR).
Any other transfer to third countries occurs solely, if the adequate data protection is such third country is safeguarded by appropriate guarantees, respective resolution of the EU Commission (e. g. for Israel and Switzerland). A copy of the relevant guarantee will be provided by UFA upon request.
For how long are my data being stored?
Data storage occurs as long as necessary for the purposes specified, possibly also beyond the statutory time limits for storage (e. g. according to the commercial code (HGB), tax code (AbgabenO)) and protection. Longer storage requirements apply, e. g. to enable UFA to proof rights to broadcast and otherwise commercialise the production (e. g. 70 years following death of the author), unless there is no longer a legitimate interest to proof of chain of title.
What rights do I have with regard to my data?
I have the right to request information from UFA with regard my data stored by UFA (Art. 15 GDPR). Additionally, the right request correction or update (Art. 16 GDPR), deletion (Art. 17 GDPR), blocking (Art. 18 GDPR) of my data and to object based on my special situation to the data processing based on legitimate interests (Art. 21 GDPR) or to request a copy of my data (Art. 20 GDPR). If the processing of my data is based on my consent pursuant to data protection law, I can revoke such consent any time with effect for the future (Art. 7 GDPR). The revocation of my consent pursuant to data protection law does not affect the admissibility of the processing of my data prior to my revocation. Moreover, my revocation does not affect future processing of my data, if such processing occurs on the basis of a contract or any other legal provision. I have the right to lodge a complaint against the processing of my data with a supervisory authority for data protection.
The rights stated above exist within their respective legal scopes.
Am I obliged to provide data?
Data which is marked with “*” is compulsory information. If I do not provide such data my request, application or potential participation in the production may not be possible or only partially possible.
Version dated February 2024