DRAMA REPUBLIC’S PRIVACY POLICY

 

In this policy Drama Republic Limited whose registered office and principal office is at 11-15 Emerald Street London WC1N 3QL (“DR” or “we”) inform you about how we collect, use and disclose personal data from and about you, through this website www.dramarepublic.com and any of our associated mobile sites, apps, interactive services such as Instagram and Twitter (“DR Services”). This Privacy Policy does not cover any applications you make to take part in any television programmes we produce and/or our recruitment processes as these are subject to separate privacy policies.

 

What and who this Privacy Policy covers?

Drama Republic Limited is the data controller of the personal data (e.g. information that identifies a specific person, such as full name or email address) we collect from and about you through the DR Services.  This Privacy Policy and our Cookie Policy applies to all users, including both those who use DR Services without being registered or having subscribed and those who have registered with or subscribed to a DR Service.  DR Services are for a general audience, are not targeted at children, and do not knowingly collect personal data from children under 16 years of age.

 

What kind of personal data do we collect about you?

We might collect data from and about you when you (i) submit questions or material to us, (ii) register on this site or (iii) e-mail us. 

 

DR may collect:

 

Registration data:          information you submit to register for a DR Service (if made available by DR), for example to create an account, post comments, receive a newsletter. This data may include, for example, name, surname, email address, gender, country, postcode and age.

 

Public data and posts    comments or content that you post on DR Services (e.g. on DR’s Twitter or Instagram account) and personal data about you that accompanies those posts or content, which may include a name, user name, comments, likes, status, profile information and picture. Public information and posts are always public, which means they are available to everyone and may be displayed in search results on external search engines.

 

Data from social media: if you access or log-in to a DR Service through a social media service or connect a DR Service to a social media service, the data we collect may also include your user ID and/or user name associated with that social media service, any information or content you have permitted the social media service to share with us, such as your profile picture, email address or friends lists, and any personal data you have made public in connection with that social media service. When you access DR Services through social media services or when you connect a DR Service to social media services, you are authorizing DR to collect, store, and use such personal data and content in accordance with this Privacy Policy.

 

Activity data:                 when you access and interact with DR Services, we may collect certain information about those visits. For example, in order to permit your connection to DR Services, our servers receive and record information about your computer, device and browser, including potentially your IP address, browser type, and other software or hardware information. If you access DR Services from a mobile or other device, we may collect a unique device identifier assigned to that device, geolocation data, or other transactional information for that device. Cookies and other tracking technologies (such as browser cookies, pixels, beacons, and Adobe Flash technology commonly called Flash cookies) may also be collected. These technologies may be used to collect and store information about your usage of DR Services, such as pages you have visited, the video and other content you have viewed, search queries you have run and advertisements you have seen (see our Cookie Policy).

 

Information from Other Sources: we may supplement the information we collect with information from other sources, such as publicly available information about your online and offline activity from social media services and commercially available sources.

 

Information from you: if you supply us with your contact information or any other information as part of any customer support we provide you with or if you make a complaint or enquiry or provide other feedback to DR we will collect that too.

 

We do not collect:

 

Sensitive Information: We ask that you do not send us, and you do not disclose, any sensitive personal data (such as national insurance numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, criminal background or trade union membership) on or through DR Services.

 

Linked Services

DR Services may also be linked to sites, including social media sites, operated by unaffiliated companies (such as broadcaster, distributor sites) and may carry advertisements or offer content, functionality, games, newsletters, contests or applications developed and maintained by unaffiliated companies. DR is not responsible for the privacy practices of unaffiliated companies, and once you leave DR Services or click an advertisement you should check the applicable privacy policy of the other service.

 

How do we use your personal data?

The main reason why we collect data about you is to provide you with DR Services and to allow you to interact with those services.  In addition, with your prior consent, we can send you offers, promotions and marketing communications, also based on your personal preferences and habits.

 

We use the personal data we collect from and about you to:

a)     provide DR Services and features to you;

b)     measure, analyze and improve those DR Services and features;

c)      improve your experience with both online and off-line DR Services by delivering content you may find relevant and interesting;

d)     allow you to comment on content, and participate online;

e)     provide you with customer support and to respond to inquiries;

f)       protect the rights of DR and others. There may be situations where DR has a good faith belief that processing is necessary in order to: (i) protect, enforce, or defend the legal rights, privacy, safety, or property of DR, our DR affiliates or their employees, agents, contractors, licensors and suppliers (including enforcement of our agreements and our terms of use); (ii) protect the safety, privacy, and security of users of DR Services or members of the public; (iii) protect DR, as well as other third parties involved, such as DR suppliers, against fraud or for risk management purposes;

g)     comply with applicable laws or legal process and/or respond to requests from public and government authorities;

h)     complete a corporate transaction, such as a proposed or actual reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of DR business, assets or stock (including in connection with any bankruptcy or similar proceedings). For example, if DR is involved in a merger or transfer of all or a material part of its business, DR may disclose and transfer your personal data to the party or parties involved in the transaction as part of that transaction;

i)       allow social sharing functionality; if you log in with or connect a social media service account with DR Services, we may share your user name, picture, and likes, as well as your activities and comments with other DR Services users and with your friends associated with your social media service. We may also share the same personal data with the social media service provider;

j)       with your prior consent, send you (via email, SMS, telephone, chat and social media) offers, promotions and other marketing communications regarding DR Services, other services/products of DR and/or DR affiliates, such as contests or other promotions arranged together with a third party or DR affiliate that may be hosted on DR Services or on DR affiliate or third party’s service;

k)      with your prior consent, send to you marketing communications customized to your interests and needs by means of the channels of communication set out under letter j) above.

We may use anonymised information or information that no longer identifies you personally, even indirectly (e.g. statistics) for any purpose or share it with third parties.

 

On what basis do we use your personal data

Your personal data is mainly collected in order to provide you with DR Services.

Your personal data is also necessarily collected to comply with legal obligations or to pursue the legitimate interests of DR.  If you don’t provide the data we won’t be able to offer you DR Services.  When your personal data is collected for marketing purposes, you have the option not to provide DR with your personal data.

 

Who can access to your personal data?

The security of your data is a priority for us. We have implemented adequate administrative, technical and physical measures designed to safeguard your personal data against loss, theft and unauthorised use, disclosure or modification.

 

We may share your personal data to the following categories of recipients located within the European Union or outside of the European Union in compliance with and within the limits of this policy:

 

a)        third party service providers entrusted with processing activities and duly appointed as processors when required by applicable laws e.g. cloud service providers, other entities of the group, providers of services instrumental to or supporting DR Service including for companies that provide IT services, experts, consultants, lawyers and companies resulting from possible mergers, demergers, or other transformations;

b)        DR affiliates (such as broadcasters and distributors) in their capacity as data controllers or data processors;

c)        business partners after your prior consent, DR may share your personal data with business partners operating in the sectors named within that specific consent to permit them to send you marketing communications; and

d)        competent authorities in order to comply with applicable laws and regulations.

 

How do we process your personal data?

We might share your personal data with: (i) service providers; (ii) our affiliated companies; and (iii) national authorities, when allowed by the applicable laws.

 

We process your personal data through both electronic and manual means. It is protected by adequate security measures, taking into account the state of art, the costs of implementation and the nature, scope, context and purpose of processing as well as the risk to the rights and freedoms of individuals. In particular, we use appropriate administrative, technical, personnel and physical measures to safeguard personal data of yours in DR’s possession against loss, theft and unauthorised use, disclosure or modification.

 

Is your personal data transferred abroad?

Your personal data might be transferred to other countries within or outside the European Economic Area. We always make sure that appropriate and suitable safeguards compliant with applicable laws are in place to protect your personal data. Your personal data may be transferred to other countries (including countries other than where you are based that have a different data protection regime than the one existing in the country where you are based). If you are located in the European Economic Area (EEA), this may include countries outside of the EEA and in particular the United States. We have adopted appropriate safeguards to protect your personal data regardless of where it resides.

 

What are your rights with regard to your personal data

You have a number of rights with regard to your personal data and these include the right to access, complete, update, amend and delete your personal data.

 

You have the right to:

a)        obtain confirmation as to whether or not your personal data exists and to be informed of its content and source, verify its accuracy and request its rectification, update or amendment;

b)        request the deletion, anonymisation or restriction of the processing of your personal data processed in breach of applicable law;

c)        object to or request the limiting of the processing, in all cases, of your personal data for legitimate reasons;

d)        receive an electronic copy of your personal data, if you would like to port the personal data, which you have provided to us, to yourself or to a different provider (data portability), when the personal data is processed by automatic means and the processing is either (i) based upon your consent or (ii) necessary for the provision of DR Service; and

e)        lodge a complaint with the relevant data protection regulatory authority.

 

You may send your request to DR registered office (details above). In your request, please include your email address, name, address, and telephone number and specify clearly which information you would like to access, change, update, suppress, or delete.

 

Remember that even after you cancel your registration (if applicable) or if you ask us to delete your personal data, copies of that information from your registration may remain viewable in some circumstances where, for example, you have shared information with social media or other services or, for example, when retention of copies is necessary to comply with legal obligation or legal defence. Because of the nature of caching technology, your registration may not be instantly inaccessible to others. We may also retain backups of your personal data on our servers for some time after cancellation or your request for deletion, to comply with applicable law.

 

Where your personal data is used for marketing purposes you may revoke your consent for:

 

•      receiving electronic communications from us. If you no longer want to receive future marketing-related emails from us you may opt-out of receiving them by following the unsubscribe instructions in our communications or write to DR registered office (details above). If you do opt out of receiving further marketing communications DR may continue to send you administrative communications related to the provision of DR Services.

•      our sharing of your personal information with DR affiliates or business partners for their marketing purposes. If you would prefer that we do not share your personal information in the future with DR affiliates and/or business partners for their direct marketing purposes, you may opt-out of this sharing by sending a request to DR registered office (details above).  

 

Retention period applying to your personal data

The personal data we collect is retained for only for the period necessary to fulfil the purposes for which that data is collected and at the end of such period your personal data will be either cancelled, anonymised or aggregated.

 

Updates to this Privacy Policy

We may modify or update this Privacy Policy at any time in order to comply with applicable law. We will notify you of any changes.

 

How can I contact you with regard to the processing of my personal data?

You can contact us at the following email informationofficer@dramarepublic.com

 

Effective Date: May 2018