PRIVACY POLICY
This privacy policy explains how we use the data we collect about customers, potential customers and customers' children when:
This Privacy Policy doesn't apply to after-school clubs, where the school policies apply instead.
The policy is designed to be compliant with the terms of the GDPR, introduced in May 2018. We may update our Privacy Policy from time to time, also considering the ongoing discussions regarding GDPR best practices. We will notify you of any changes by posting the new Data Policy on this page. You are advised to review this Data Policy periodically for any changes. Changes to this Data Policy are effective when they are posted on this page.
Within the framework of this policy, we commit to the following principles:
What data do we collect?
Candy Film collects the following data:
1. Personal data
How do we collect your personal data?
You voluntarily provide your personal data we collect and process when you:
How do we use your personal data?
Candy Film collects your data so that we can:
Candy Film will not sell your data to third parties.
We are required to communicate and share via email your information to the tutors who will lead your activity. We give your name, your child's name and age, your home address and sometimes your phone number and/or your email address, and other necessary information to run the activity booked. All our staff respect the Candy Film Privacy Policy.
How do we store your data?
While no website can guarantee security, we have implemented appropriate administrative, technical, and physical security procedures to help protect the personal information you provide to us. Candy Film securely stores your data on cloud-data systems required for the operation of the business, only user-accessible by Candy Film authorised employees for permitted business functions.
In line with the GDPR, Candy Film will undertake checks and seek assurances that any external providers or processors are GDPR compliant and demonstrate a responsible attitude towards Data Protections and Privacy.
We may also keep additional records, such as paper consent forms. These may be scanned and stored digitally on our secure business server.
Marketing
Candy Film might occasionally send you information about products and services of ours that we think you might like. These include newsletters, promotions and other information that may be of interest to our community, by email, telephone and postal letters. These communications will be limited to relevant activities, and will not be used to promote unrelated products or services. All recipients will have the chance to opt out at any time and we will respect their preferences.
If you no longer wish to be contacted for marketing purposes, please email us at [email protected] and inform us that you would like to no longer receive marketing emails.
Cookies
Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. When you visit our websites, we may collect information from you automatically through cookies or similar technology. We uses cookies in a range of ways to improve your experience on our website, including:
Users are advised that if they wish to deny the use and saving of cookies from this website on to their computers hard drive they should take necessary steps within their web browsers security settings to block all cookies from this website and its external serving vendors. However, in a few cases, some of our website features may not function as a result.
Our website uses tracking software to monitor its visitors to better understand how they use it. This software is provided by Google Analytics which uses cookies to track visitor usage. The software will save a cookie to your computer’s hard drive in order to track and monitor your engagement and usage of the website, but will not store, save or collect personal information.
You can read Google’s privacy policy here for further information http://www.google.com/privacy.html.
2. Video/photographic/audio data
We also collect and process video/photographic/audio recordings featuring customers' children. This is in line with our core activities as a provider of children’s filmmaking or photographic activities.
Data acquisition
We acquire this data through the course of our activities, with participants capturing their images, voice and likenesses as a direct consequence of their participation.
Data processing
Data is captured onto storage drives (e.g. SD cards) using equipment such as camcorders or photo cameras and then transferred onto password protected computers and hard drives. This process takes place offline and is only undertaken by authorised personnel, who receive training in managing these processes.
Often, this work is undertaken by Candy Film ‘Contractors’, using the company and SD cards equipment. Each Contractor is approved by the Candy Film management and receives specific training/briefings regarding confidentiality and appropriate use of material.
With image/voice/likeness data, which may refer to video footage, audio recordings or photographs, we process (“edit”) the data to form complete creative products (“works”). These works are then typically stored by us as their own entities, along with any composite parts, such as unedited video footage.
Storage
The footage is stored only for the necessary time in order to complete ("edit") the works, then is deleted.
We store the final videos ("works") on an external Processor (Vimeo), as well as offline on computers and hard drives. These are all password protected and encrypted by default. We only use processors who are both reputable and assure of their compliance with the GDPR.
Publishing and consent
We will publish the works and share them with customers or potential customers, both on DVDs and online using the relevant external Processors, through a private page protected by password (on Vimeo) or using a web transfer service (Filemail), without using customers' email in the transfer to avoid unnecessary sharing of personal data. We only use processors which are both reputable and assure of their compliance with the GDPR.
We will ask you in advance Image Release Consent to publish the video/photographic/audio data featuring your child more widely as demonstrations of our activities and as a record of our creative work, for instance on our website, social media channels, our YouTube channel. We can ask your consent through a paper or a digital consent form.
For how long we will store your data?
We store data for 5 years in order to comply with business and tax regulations. Customers are able to request a copy of any data at any point. After 5 years customers have the right to request erasure. Any data relating to child safeguarding will not be erased in order to ensure compliance with child safeguarding regulations.
What are your data protection rights?
We only collect and store your personal data with your consent, which is given at the time of supplying your data to us.
Candy Film would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
- You can choose to remove your consent for us to keep and use your personal data at any time and we will respect your preferences.
- You have the right to request us for copies of your personal data.
- You have the right to request that Candy Film corrects any information you believe is inaccurate or incomplete.
- You have the right to request that we erase your personal data, under certain conditions. In the case of potential customers, we will erase your data entirely. Where a customer has a booking record with us, we will only keep details of the booking (including customers' names, emails and home addresses) for our business and tax records. This will apply for a period of up to 5 years, in order to comply with other regulations, after which the data will be erased. Where data is relevant to any Safeguarding or Child Protection issues, this will not be eligible for erasure and we may need to share this data with other appropriate agencies as required.
- You have the right to request that we restrict the processing of your personal data, under certain conditions.
- You have the right to object to Candy Film’s processing of your personal data, under certain conditions.
How to contact us
If you have any questions about Candy Film’s privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please contact us at our email: [email protected]. We will reply to you within one month.
- potential customers approach us for information about our services
- customers make a booking
- or customers's children participate in our activities.
This Privacy Policy doesn't apply to after-school clubs, where the school policies apply instead.
The policy is designed to be compliant with the terms of the GDPR, introduced in May 2018. We may update our Privacy Policy from time to time, also considering the ongoing discussions regarding GDPR best practices. We will notify you of any changes by posting the new Data Policy on this page. You are advised to review this Data Policy periodically for any changes. Changes to this Data Policy are effective when they are posted on this page.
Within the framework of this policy, we commit to the following principles:
- We only collect and store data essential to running our core business activities for no longer than is necessary
- We do not buy or resell your data from or to data merchants
- We only use your data in the manners described within this policy
- We periodically review the data we hold, and delete/anonymise anything we don’t need
- We act to keep all your data safe and secure
- We don’t share it with anybody beyond the scope of this policy
- Where we send marketing communications, these will be about our services and opportunities you may be interested in as an existing or potential customer
- We will always respect your preferences and we will always give you the opportunity to opt out of any communications.
What data do we collect?
Candy Film collects the following data:
- Personal identification data (name, email address, phone number, home address) and other personal information relevant to the service we offer (children's name and age);
- Video/photographic/audio recordings featuring customers’ children.
1. Personal data
How do we collect your personal data?
You voluntarily provide your personal data we collect and process when you:
- submit an inquiry about our services or require a booking through our website (online chat, enquiry form, contact form), via email or over the phone;
- Use or view our website via your browser’s cookies.
How do we use your personal data?
Candy Film collects your data so that we can:
- Communicate with you about your inquiry or booking;
- Process your booking;
- Keep internal records;
- Occasionally send you with special offers on activities we think you might like (by email or phone).
- Customise the website according to your interests through cookies.
Candy Film will not sell your data to third parties.
We are required to communicate and share via email your information to the tutors who will lead your activity. We give your name, your child's name and age, your home address and sometimes your phone number and/or your email address, and other necessary information to run the activity booked. All our staff respect the Candy Film Privacy Policy.
How do we store your data?
While no website can guarantee security, we have implemented appropriate administrative, technical, and physical security procedures to help protect the personal information you provide to us. Candy Film securely stores your data on cloud-data systems required for the operation of the business, only user-accessible by Candy Film authorised employees for permitted business functions.
In line with the GDPR, Candy Film will undertake checks and seek assurances that any external providers or processors are GDPR compliant and demonstrate a responsible attitude towards Data Protections and Privacy.
We may also keep additional records, such as paper consent forms. These may be scanned and stored digitally on our secure business server.
Marketing
Candy Film might occasionally send you information about products and services of ours that we think you might like. These include newsletters, promotions and other information that may be of interest to our community, by email, telephone and postal letters. These communications will be limited to relevant activities, and will not be used to promote unrelated products or services. All recipients will have the chance to opt out at any time and we will respect their preferences.
If you no longer wish to be contacted for marketing purposes, please email us at [email protected] and inform us that you would like to no longer receive marketing emails.
Cookies
Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. When you visit our websites, we may collect information from you automatically through cookies or similar technology. We uses cookies in a range of ways to improve your experience on our website, including:
- Keeping you signed in
- Understanding how you use our website
Users are advised that if they wish to deny the use and saving of cookies from this website on to their computers hard drive they should take necessary steps within their web browsers security settings to block all cookies from this website and its external serving vendors. However, in a few cases, some of our website features may not function as a result.
Our website uses tracking software to monitor its visitors to better understand how they use it. This software is provided by Google Analytics which uses cookies to track visitor usage. The software will save a cookie to your computer’s hard drive in order to track and monitor your engagement and usage of the website, but will not store, save or collect personal information.
You can read Google’s privacy policy here for further information http://www.google.com/privacy.html.
2. Video/photographic/audio data
We also collect and process video/photographic/audio recordings featuring customers' children. This is in line with our core activities as a provider of children’s filmmaking or photographic activities.
Data acquisition
We acquire this data through the course of our activities, with participants capturing their images, voice and likenesses as a direct consequence of their participation.
Data processing
Data is captured onto storage drives (e.g. SD cards) using equipment such as camcorders or photo cameras and then transferred onto password protected computers and hard drives. This process takes place offline and is only undertaken by authorised personnel, who receive training in managing these processes.
Often, this work is undertaken by Candy Film ‘Contractors’, using the company and SD cards equipment. Each Contractor is approved by the Candy Film management and receives specific training/briefings regarding confidentiality and appropriate use of material.
With image/voice/likeness data, which may refer to video footage, audio recordings or photographs, we process (“edit”) the data to form complete creative products (“works”). These works are then typically stored by us as their own entities, along with any composite parts, such as unedited video footage.
Storage
The footage is stored only for the necessary time in order to complete ("edit") the works, then is deleted.
We store the final videos ("works") on an external Processor (Vimeo), as well as offline on computers and hard drives. These are all password protected and encrypted by default. We only use processors who are both reputable and assure of their compliance with the GDPR.
Publishing and consent
We will publish the works and share them with customers or potential customers, both on DVDs and online using the relevant external Processors, through a private page protected by password (on Vimeo) or using a web transfer service (Filemail), without using customers' email in the transfer to avoid unnecessary sharing of personal data. We only use processors which are both reputable and assure of their compliance with the GDPR.
We will ask you in advance Image Release Consent to publish the video/photographic/audio data featuring your child more widely as demonstrations of our activities and as a record of our creative work, for instance on our website, social media channels, our YouTube channel. We can ask your consent through a paper or a digital consent form.
For how long we will store your data?
We store data for 5 years in order to comply with business and tax regulations. Customers are able to request a copy of any data at any point. After 5 years customers have the right to request erasure. Any data relating to child safeguarding will not be erased in order to ensure compliance with child safeguarding regulations.
What are your data protection rights?
We only collect and store your personal data with your consent, which is given at the time of supplying your data to us.
Candy Film would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
- You can choose to remove your consent for us to keep and use your personal data at any time and we will respect your preferences.
- You have the right to request us for copies of your personal data.
- You have the right to request that Candy Film corrects any information you believe is inaccurate or incomplete.
- You have the right to request that we erase your personal data, under certain conditions. In the case of potential customers, we will erase your data entirely. Where a customer has a booking record with us, we will only keep details of the booking (including customers' names, emails and home addresses) for our business and tax records. This will apply for a period of up to 5 years, in order to comply with other regulations, after which the data will be erased. Where data is relevant to any Safeguarding or Child Protection issues, this will not be eligible for erasure and we may need to share this data with other appropriate agencies as required.
- You have the right to request that we restrict the processing of your personal data, under certain conditions.
- You have the right to object to Candy Film’s processing of your personal data, under certain conditions.
How to contact us
If you have any questions about Candy Film’s privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please contact us at our email: [email protected]. We will reply to you within one month.